$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143053.roa File: AS143053.roa (raw, json) Hash identifier: 0edG1qFGFawwxJUPpkn7cw7qqS0bwyN5V4zdSDgLV2s= Subject key identifier: A3:51:87:25:2C:07:E5:DF:CE:A1:50:E3:45:D1:35:E4:30:69:A4:1A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 23361401AB9284659CA20F178744824786993CE4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143053.roa Signing time: Wed 04 Mar 2026 06:06:51 +0000 ROA not before: Wed 04 Mar 2026 06:01:51 +0000 ROA not after: Wed 03 Mar 2027 06:06:51 +0000 asID: 143053 IP address blocks: 240a:a193::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:36:14:01:ab:92:84:65:9c:a2:0f:17:87:44:82:47:86:99:3c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:51 2026 GMT Not After : Mar 3 06:06:51 2027 GMT Subject: CN=A35187252C07E5DFCEA150E345D135E43069A41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:d2:68:12:eb:70:2e:49:55:78:ca:87:42: fb:c9:b9:90:25:e4:06:70:03:f8:c1:b7:ed:fd:1d: a0:72:17:de:5b:7b:5b:e6:28:22:fc:50:40:e2:c7: 92:0c:aa:9b:b5:f0:95:48:2c:9b:2c:4f:86:eb:d3: 82:b1:ac:ef:e7:b4:60:ab:c3:b4:51:bc:48:a2:dc: 29:2c:03:98:68:38:66:78:78:d8:f5:41:a1:6f:89: 50:0e:75:70:18:fc:f5:0f:dc:2d:08:7f:4d:97:5a: 8f:83:d8:90:9f:6c:17:ee:4d:a3:6a:8e:a6:40:1f: b2:fb:24:10:89:f8:9a:98:bb:84:12:bd:95:96:be: bd:22:f9:5a:46:f4:c3:bf:d0:04:21:36:b8:9c:91: 4e:83:11:90:67:49:23:f0:ba:3a:a9:1b:ef:9d:77: c0:eb:c7:94:e1:18:aa:4d:93:12:2a:01:6b:39:09: db:8b:17:76:47:61:76:1a:17:a8:c7:36:ef:84:1a: a9:ca:18:97:5c:3c:cf:19:09:7d:e6:5a:e2:c6:c3: a0:af:31:36:8a:80:b8:b2:60:0c:24:90:8b:a7:65: 82:0d:d6:91:97:4d:bb:a1:e6:d3:96:bc:14:dd:ef: 1f:38:4a:af:ef:d4:8e:c6:20:f4:8c:71:a8:96:69: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:87:25:2C:07:E5:DF:CE:A1:50:E3:45:D1:35:E4:30:69:A4:1A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143053.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a193::/32 Signature Algorithm: sha256WithRSAEncryption 64:19:e0:5a:06:63:4e:0e:88:4a:63:b8:da:a0:1e:1e:c0:bf: 37:a0:70:63:68:04:e7:42:8e:cb:a1:d4:6c:ab:71:3a:94:d8: e9:0c:ca:7e:fe:53:98:3e:ff:8d:68:49:1f:15:d1:84:de:02: ca:39:64:c6:f5:fa:46:b7:09:f5:8d:e9:e8:21:29:e2:7d:e3: fd:21:e2:4e:aa:e8:46:85:f4:d7:3f:02:d0:8f:48:5b:3c:0b: 08:d6:b3:34:1f:65:bc:1a:cd:88:08:bd:2f:e5:b4:27:d4:e9: 1b:c5:07:0b:4e:b6:34:fc:5e:8d:46:08:dd:d9:92:f8:b3:8f: 5b:8d:32:10:f2:d0:23:dd:11:69:a0:d7:96:39:45:1f:e8:9f: d9:45:1f:55:86:ab:b5:f7:d0:e9:d7:e3:55:06:1b:3a:92:5a: 7c:08:1b:24:0e:90:7a:0d:c2:ad:cf:c3:54:85:1b:e0:7b:2c: 89:5d:78:62:9c:08:a5:c6:05:39:14:ac:06:16:c0:46:6e:bf: 61:f1:32:29:1d:f9:ff:97:0c:c5:1c:d5:0d:29:e3:0e:73:d7: 3a:75:e1:69:33:fc:dd:89:b4:8d:b9:71:1d:ab:96:3e:f1:83: 56:b7:a2:45:16:8c:43:cb:e0:d4:44:8e:cd:cc:4b:db:5d:ed: e3:13:21:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIzYUAauShGWcog8Xh0SCR4aZPOQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1MVoX DTI3MDMwMzA2MDY1MVowMzExMC8GA1UEAxMoQTM1MTg3MjUyQzA3RTVERkNFQTE1 MEUzNDVEMTM1RTQzMDY5QTQxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlj0mgS63AuSVV4yodC+8m5kCXkBnAD+MG37f0doHIX3lt7W+YoIvxQQOLH kgyqm7XwlUgsmyxPhuvTgrGs7+e0YKvDtFG8SKLcKSwDmGg4Znh42PVBoW+JUA51 cBj89Q/cLQh/TZdaj4PYkJ9sF+5No2qOpkAfsvskEIn4mpi7hBK9lZa+vSL5Wkb0 w7/QBCE2uJyRToMRkGdJI/C6Oqkb7513wOvHlOEYqk2TEioBazkJ24sXdkdhdhoX qMc274QaqcoYl1w8zxkJfeZa4sbDoK8xNoqAuLJgDCSQi6dlgg3WkZdNu6Hm05a8 FN3vHzhKr+/UjsYg9IxxqJZpD1sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSjUYcl LAfl386hUONF0TXkMGmkGjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oZMwDQYJKoZIhvcNAQELBQADggEBAGQZ4FoGY04OiEpjuNqgHh7AvzegcGNoBOdC jsuh1GyrcTqU2OkMyn7+U5g+/41oSR8V0YTeAso5ZMb1+ka3CfWN6eghKeJ94/0h 4k6q6EaF9Nc/AtCPSFs8CwjWszQfZbwazYgIvS/ltCfU6RvFBwtOtjT8Xo1GCN3Z kvizj1uNMhDy0CPdEWmg15Y5RR/on9lFH1WGq7X30OnX41UGGzqSWnwIGyQOkHoN wq3Pw1SFG+B7LIldeGKcCKXGBTkUrAYWwEZuv2HxMikd+f+XDMUc1Q0p4w5z1zp1 4Wkz/N2JtI25cR2rlj7xg1a3okUWjEPL4NREjs3MS9td7eMTIcA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:05 2026 by rpki-client