$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143212.roa File: AS143212.roa (raw, json) Hash identifier: 0uRyi0TdsgIvzabrmRq8IWSw/VyGJAXyHg1t88tLgv0= Subject key identifier: DB:B7:0E:41:D5:1A:1D:15:AA:C8:67:39:FF:5A:7C:BE:D1:88:C2:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6369FD9B260E11668E3218830BC4457E7240A49C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143212.roa Signing time: Wed 04 Mar 2026 06:07:14 +0000 ROA not before: Wed 04 Mar 2026 06:02:14 +0000 ROA not after: Wed 03 Mar 2027 06:07:14 +0000 asID: 143212 IP address blocks: 240a:a232::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:69:fd:9b:26:0e:11:66:8e:32:18:83:0b:c4:45:7e:72:40:a4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:14 2026 GMT Not After : Mar 3 06:07:14 2027 GMT Subject: CN=DBB70E41D51A1D15AAC86739FF5A7CBED188C2B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:c0:d5:91:e2:7b:d3:65:54:95:02:9b:2d: 85:b2:69:c3:ee:b9:57:4d:3e:66:27:85:ba:28:f9: df:08:e8:a9:f3:0d:f6:64:30:dd:ce:6f:06:2f:85: 7f:1e:be:20:48:e0:6c:08:ab:a8:7c:62:b6:8f:ef: 85:96:fd:1d:d6:64:ab:c1:41:86:a9:ee:ef:7d:45: 83:41:c1:0f:78:64:37:6d:e2:00:36:7c:8a:f2:2f: a6:d9:75:79:2d:04:c1:36:8b:3d:bf:22:82:e8:1d: 2c:23:a0:0b:50:8e:84:d5:b8:d5:43:d1:33:15:bd: 46:d2:d7:6b:12:eb:d9:75:b4:76:90:bc:cc:af:f1: e6:15:c5:bb:9b:b0:bf:87:d4:4e:52:49:ea:64:f0: 41:29:be:a4:56:31:66:04:9b:fd:59:a1:c8:8c:82: 26:81:0a:01:f6:42:bb:e5:6b:1d:1f:f6:5d:a2:4f: 69:5a:c1:f8:e9:1b:b7:56:3b:61:35:f7:80:0a:1f: d2:d3:05:ee:e1:b3:d7:a3:ce:e2:36:a2:66:5f:4c: 1f:47:86:a4:85:c6:41:42:9b:50:5d:db:04:70:df: 92:37:dd:49:f5:fe:0f:2c:18:b3:18:eb:15:85:b3: 30:14:1a:b7:e5:3f:d6:03:27:12:76:c4:b7:d5:75: 64:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B7:0E:41:D5:1A:1D:15:AA:C8:67:39:FF:5A:7C:BE:D1:88:C2:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143212.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a232::/32 Signature Algorithm: sha256WithRSAEncryption cf:ca:8e:c5:65:27:58:4d:a5:ec:c9:1d:61:d8:3c:36:18:06: a1:94:e8:3b:9b:2a:ab:ab:08:dd:07:67:e0:8f:46:d7:6d:cf: db:ed:67:9e:ea:bc:c3:82:09:17:54:0a:4f:2f:fb:59:f6:ce: 4f:76:0e:5f:64:63:34:42:27:da:df:30:fa:e6:6c:d0:71:24: 17:fd:5f:d9:d3:22:58:b0:6e:5c:bc:a2:9a:60:ff:dc:73:e2: 51:8a:41:63:33:a7:81:25:bb:e4:c7:62:39:d5:2e:03:48:ab: 82:62:31:c2:d4:77:97:97:ba:25:e6:ab:7e:3e:9a:c7:cc:1c: ce:9e:34:80:15:1f:19:45:d9:2e:96:80:43:de:fd:f1:be:92: ea:93:4c:50:1d:27:48:d6:bc:bd:4c:7c:e0:5e:c8:40:a3:91: 7d:ff:e4:f7:7c:d2:06:67:d9:4a:07:fb:ed:aa:6b:d5:2c:8b: 97:c3:a0:a6:05:9a:30:48:27:32:d4:17:24:a9:4a:3b:f5:cb: f1:02:1d:ee:6d:c2:e7:6e:f7:c0:fc:0d:7d:9d:b2:c7:2e:70: 0f:c1:8b:c9:f6:fb:0e:c4:d9:27:e1:9e:fe:11:f3:2c:64:0e: ca:51:ad:a0:fd:de:4f:a6:26:7b:25:a0:9b:7e:5c:ae:e1:e2: c6:e9:0d:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUY2n9myYOEWaOMhiDC8RFfnJApJwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxNFoX DTI3MDMwMzA2MDcxNFowMzExMC8GA1UEAxMoREJCNzBFNDFENTFBMUQxNUFBQzg2 NzM5RkY1QTdDQkVEMTg4QzJCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtHwNWR4nvTZVSVApsthbJpw+65V00+ZieFuij53wjoqfMN9mQw3c5vBi+F fx6+IEjgbAirqHxito/vhZb9HdZkq8FBhqnu731Fg0HBD3hkN23iADZ8ivIvptl1 eS0EwTaLPb8igugdLCOgC1COhNW41UPRMxW9RtLXaxLr2XW0dpC8zK/x5hXFu5uw v4fUTlJJ6mTwQSm+pFYxZgSb/VmhyIyCJoEKAfZCu+VrHR/2XaJPaVrB+Okbt1Y7 YTX3gAof0tMF7uGz16PO4jaiZl9MH0eGpIXGQUKbUF3bBHDfkjfdSfX+DywYsxjr FYWzMBQat+U/1gMnEnbEt9V1ZJMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTbtw5B 1RodFarIZzn/Wny+0YjCtDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ojIwDQYJKoZIhvcNAQELBQADggEBAM/KjsVlJ1hNpezJHWHYPDYYBqGU6DubKqur CN0HZ+CPRtdtz9vtZ57qvMOCCRdUCk8v+1n2zk92Dl9kYzRCJ9rfMPrmbNBxJBf9 X9nTIliwbly8oppg/9xz4lGKQWMzp4Elu+THYjnVLgNIq4JiMcLUd5eXuiXmq34+ msfMHM6eNIAVHxlF2S6WgEPe/fG+kuqTTFAdJ0jWvL1MfOBeyECjkX3/5Pd80gZn 2UoH++2qa9Usi5fDoKYFmjBIJzLUFySpSjv1y/ECHe5twudu98D8DX2dsscucA/B i8n2+w7E2Sfhnv4R8yxkDspRraD93k+mJnsloJt+XK7h4sbpDas= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:28 2026 by rpki-client