$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa File: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (raw, json) Hash identifier: 9XCeQLluoR2uKtqbugdFvG6PNdEYhFaEYsf2M+QnJWo= Subject key identifier: BD:AC:54:8F:34:10:32:B7:FC:2D:94:2D:8C:55:4F:76:8E:9D:5A:E9 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 0952A0DBD48E11C49D8FD2FAC6829AD2078FD8E6 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa Signing time: Sun 27 Oct 2024 05:00:00 +0000 ROA not before: Sun 27 Oct 2024 04:55:00 +0000 ROA not after: Mon 27 Oct 2025 05:00:00 +0000 asID: 396303 IP address blocks: 2406:4440:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:52:a0:db:d4:8e:11:c4:9d:8f:d2:fa:c6:82:9a:d2:07:8f:d8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Oct 27 04:55:00 2024 GMT Not After : Oct 27 05:00:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:f0:c8:63:07:22:2f:3e:f4:cd:23:18:d8: 52:01:19:0d:e9:4a:34:e4:3e:69:f6:d1:84:90:5f: d2:7c:8d:1a:03:13:74:5d:eb:ac:d4:f8:9f:e7:3c: 63:56:b2:ab:23:9b:9f:bd:42:b8:bd:88:c1:fe:8e: e5:54:4e:ae:fa:bd:b2:45:71:8d:79:1e:85:b3:c8: 3c:20:b6:2d:b0:ff:19:c4:0a:3a:9b:1d:3a:6b:db: 92:0c:d1:e5:9b:93:0a:1d:f0:11:ac:fc:e8:28:5d: 12:e6:4e:f6:1f:ec:b4:4b:bf:89:0d:fa:48:48:df: 36:46:d8:52:ca:23:2f:4d:a7:37:5a:ab:c0:f6:44: 7f:46:ff:97:66:a9:6d:1b:8d:2b:13:a7:ad:e1:62: 63:82:ae:7d:c8:1d:04:4d:7c:fd:69:e2:b8:cd:90: 5c:d9:16:f9:5f:b9:6a:e8:86:b7:cc:d9:21:0a:47: e8:a4:2a:95:4f:45:67:95:b1:ea:6e:1d:60:8a:80: d5:21:d6:7a:5e:ef:d0:ba:c6:25:5a:22:1d:4f:9a: 76:67:ae:c4:d8:c1:4f:a3:da:ff:6d:a6:53:2a:b7: c0:ef:1e:9f:89:b9:6f:95:80:46:cd:a8:7b:16:59: d5:85:b1:2e:15:30:56:b5:c6:c0:77:44:ae:eb:9c: 2c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AC:54:8F:34:10:32:B7:FC:2D:94:2D:8C:55:4F:76:8E:9D:5A:E9 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:60::/44 Signature Algorithm: sha256WithRSAEncryption 6c:06:dc:ba:27:05:ae:b3:d5:f2:41:a9:ae:b2:64:8f:71:5c: 34:ed:95:d2:3b:18:7b:08:2a:1a:33:e9:33:a8:3e:fc:44:7b: 9d:cc:7e:19:25:5c:d3:10:9e:7a:0f:34:06:d9:00:4b:83:d7: de:4f:05:cf:ea:e6:d0:43:2c:2c:bb:d4:44:8d:a4:cb:7f:8a: 2d:92:e5:51:14:08:9e:87:f9:a7:ac:bc:72:a5:80:f6:c3:17: 5b:3c:f9:98:3f:ce:b1:37:28:68:0c:0c:21:ab:4b:00:1c:3a: b1:fb:c7:1c:06:fb:28:46:65:fa:77:ee:37:40:09:31:f9:c6: 80:66:8e:1d:b2:ed:b7:00:86:13:dc:56:53:1a:af:9a:cb:3a: 8c:cb:6f:a0:18:c2:09:56:32:87:09:9f:77:8b:3e:98:07:da: 62:51:78:76:a9:56:60:e9:02:2d:cf:dc:74:4d:a9:7e:71:d3: ab:88:37:af:85:ee:d5:8b:4f:cc:12:67:49:75:02:f2:78:b4: f0:d5:69:ff:0f:5c:d1:91:46:ad:da:a7:d9:97:2c:43:dd:69: 2d:cb:e3:2a:54:f4:29:a9:79:07:59:38:d4:92:c7:4d:4e:0a: 0d:14:23:e4:17:ed:f2:13:5f:ba:0a:57:d4:e4:e1:b5:6c:65: 14:b3:77:cb -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUCVKg29SOEcSdj9L6xoKa0geP2OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNDEwMjcwNDU1MDBaFw0yNTEwMjcwNTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTFDOUYwQzg2MzA3MjIyRjNF RjRDRDIzMThEODUyMDExOTBERTk0QTM0RTQzRTY5RjZEMTg0OTA1RkQyN0M4RDFB MDMxMzc0NURFQkFDRDRGODlGRTczQzYzNTZCMkFCMjM5QjlGQkQ0MkI4QkQ4OEMx RkU4RUU1NTQ0RUFFRkFCREIyNDU3MThENzkxRTg1QjNDODNDMjBCNjJEQjBGRjE5 QzQwQTNBOUIxRDNBNkJEQjkyMENEMUU1OUI5MzBBMURGMDExQUNGQ0U4Mjg1RDEy RTY0RUY2MUZFQ0I0NEJCRjg5MERGQTQ4NDhERjM2NDZEODUyQ0EyMzJGNERBNzM3 NUFBQkMwRjY0NDdGNDZGRjk3NjZBOTZEMUI4RDJCMTNBN0FERTE2MjYzODJBRTdE QzgxRDA0NEQ3Q0ZENjlFMkI4Q0Q5MDVDRDkxNkY5NUZCOTZBRTg4NkI3Q0NEOTIx MEE0N0U4QTQyQTk1NEY0NTY3OTVCMUVBNkUxRDYwOEE4MEQ1MjFENjdBNUVFRkQw QkFDNjI1NUEyMjFENEY5QTc2NjdBRUM0RDhDMTRGQTNEQUZGNkRBNjUzMkFCN0Mw RUYxRTlGODlCOTZGOTU4MDQ2Q0RBODdCMTY1OUQ1ODVCMTJFMTUzMDU2QjVDNkMw Nzc0NEFFRUI5QzJDM0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAocnwyGMHIi8+9M0jGNhSARkN6Uo05D5p9tGEkF/SfI0aAxN0Xeus 1Pif5zxjVrKrI5ufvUK4vYjB/o7lVE6u+r2yRXGNeR6Fs8g8ILYtsP8ZxAo6mx06 a9uSDNHlm5MKHfARrPzoKF0S5k72H+y0S7+JDfpISN82RthSyiMvTac3WqvA9kR/ Rv+XZqltG40rE6et4WJjgq59yB0ETXz9aeK4zZBc2Rb5X7lq6Ia3zNkhCkfopCqV T0VnlbHqbh1gioDVIdZ6Xu/QusYlWiIdT5p2Z67E2MFPo9r/baZTKrfA7x6fiblv lYBGzah7FlnVhbEuFTBWtcbAd0Su65wsOwIDAQABo4IB7TCCAekwHQYDVR0OBBYE FL2sVI80EDK3/C2ULYxVT3aOnVrpMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBgwYI KwYBBQUHAQsEdzB1MHMGCCsGAQUFBzALhmdyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTM2MzAzYTNhMmYz NDM0MmQzNDM0MjAzZDNlMjAzMzM5MzYzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkBkRAAGAw DQYJKoZIhvcNAQELBQADggEBAGwG3LonBa6z1fJBqa6yZI9xXDTtldI7GHsIKhoz 6TOoPvxEe53MfhklXNMQnnoPNAbZAEuD195PBc/q5tBDLCy71ESNpMt/ii2S5VEU CJ6H+aesvHKlgPbDF1s8+Zg/zrE3KGgMDCGrSwAcOrH7xxwG+yhGZfp37jdACTH5 xoBmjh2y7bcAhhPcVlMar5rLOozLb6AYwglWMocJn3eLPpgH2mJReHapVmDpAi3P 3HRNqX5x06uIN6+F7tWLT8wSZ0l1AvJ4tPDVaf8PXNGRRq3ap9mXLEPdaS3L4ypU 9CmpeQdZONSSx01OCg0UI+QX7fITX7oKV9Tk4bVsZRSzd8s= -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:29 2025 by rpki-client