$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143222.roa File: AS143222.roa (raw, json) Hash identifier: YnxWfh14N74VysQruucBhMJSxXs3k5R1AabgdVB2/lo= Subject key identifier: 6A:B7:75:E2:B2:09:7A:D8:7E:1B:D2:C5:83:BB:CE:11:90:91:53:F5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 12FAF007F00002D6AF600B8315C30AF092E67F10 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143222.roa Signing time: Wed 04 Mar 2026 06:05:13 +0000 ROA not before: Wed 04 Mar 2026 06:00:13 +0000 ROA not after: Wed 03 Mar 2027 06:05:13 +0000 asID: 143222 IP address blocks: 240a:a23c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fa:f0:07:f0:00:02:d6:af:60:0b:83:15:c3:0a:f0:92:e6:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:13 2026 GMT Not After : Mar 3 06:05:13 2027 GMT Subject: CN=6AB775E2B2097AD87E1BD2C583BBCE11909153F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:12:11:65:29:de:e7:53:df:ff:d5:71:92: bf:75:3e:21:05:86:11:c8:e1:e1:d3:b7:a0:3d:37: 07:9f:b0:d9:43:e2:32:88:f7:95:8b:d8:9a:5e:3a: bf:95:03:83:4b:55:d2:8e:19:98:ae:fc:47:f1:44: 29:d5:32:74:ab:28:fd:63:aa:5d:06:35:38:e2:d0: 0e:92:e5:2d:2d:b9:98:1d:f9:c2:e7:52:3e:8f:4a: 89:af:ab:7d:32:1d:58:38:21:b5:6b:b8:03:1d:8f: 8b:8b:f9:48:12:8b:6d:5c:64:d4:10:c1:14:ad:36: a6:96:1a:e4:fa:2f:20:d2:cf:c8:8c:14:8b:d6:db: 4a:94:84:1c:6d:51:06:1c:d7:2f:f5:02:f4:1b:bc: c3:09:e9:0c:db:30:96:39:1a:f7:f3:ca:7b:f2:54: 80:e4:ca:88:c1:65:a8:76:2f:1c:0c:80:20:81:04: 85:cd:88:53:7c:54:02:0d:1a:09:b1:62:08:d9:eb: 4a:ad:85:f5:15:7b:f8:00:0b:db:56:4a:05:2c:66: cd:1d:27:38:4f:cd:e7:f3:37:02:70:91:67:c6:14: d1:db:a6:15:79:60:00:95:87:24:7d:45:99:e2:47: ae:5f:ac:33:fc:a7:59:51:95:45:54:7c:c6:8f:80: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B7:75:E2:B2:09:7A:D8:7E:1B:D2:C5:83:BB:CE:11:90:91:53:F5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143222.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a23c::/32 Signature Algorithm: sha256WithRSAEncryption 94:1c:8b:33:72:95:77:4f:43:03:16:53:40:ec:f7:cc:a2:ea: 5d:24:29:44:d6:e9:20:b0:59:93:5c:36:5d:f6:92:5e:fd:e1: 52:9e:b2:3b:aa:36:79:43:84:fc:19:df:19:ba:df:91:28:1a: 99:8d:a3:e5:62:c9:9f:bf:68:7e:5a:38:ea:4c:4e:0f:37:1a: 56:d2:48:f3:79:74:c2:bd:2d:21:85:09:90:1a:b7:b2:16:77: 30:9a:64:10:9a:d2:00:21:85:c2:61:62:dd:0f:80:f4:cc:e5: df:d3:9c:96:37:fd:5d:04:e4:6e:53:9f:c4:21:e6:e8:41:d1: 08:12:2f:db:4b:eb:de:23:8c:3e:57:82:28:04:22:5c:33:d7: de:17:24:16:49:d3:a4:6e:80:a0:db:d2:86:3b:73:b4:87:40: 32:69:85:07:55:15:b3:81:d0:ee:36:e2:ae:33:b1:96:d1:e1: d9:1f:e0:db:44:21:06:f5:92:3a:87:23:30:06:37:c3:6b:d5: db:d8:56:52:63:87:fa:8c:61:b5:79:72:b9:6d:2c:d5:a3:e1: 5d:84:96:e2:6e:8e:e7:8d:c7:64:78:ad:cf:f8:ea:37:84:1b: 98:c8:da:31:82:09:f4:31:3b:1a:65:55:6b:0e:82:6b:da:c1: dd:43:61:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEvrwB/AAAtavYAuDFcMK8JLmfxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxM1oX DTI3MDMwMzA2MDUxM1owMzExMC8GA1UEAxMoNkFCNzc1RTJCMjA5N0FEODdFMUJE MkM1ODNCQkNFMTE5MDkxNTNGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3bEhFlKd7nU9//1XGSv3U+IQWGEcjh4dO3oD03B5+w2UPiMoj3lYvYml46 v5UDg0tV0o4ZmK78R/FEKdUydKso/WOqXQY1OOLQDpLlLS25mB35wudSPo9Kia+r fTIdWDghtWu4Ax2Pi4v5SBKLbVxk1BDBFK02ppYa5PovINLPyIwUi9bbSpSEHG1R BhzXL/UC9Bu8wwnpDNswljka9/PKe/JUgOTKiMFlqHYvHAyAIIEEhc2IU3xUAg0a CbFiCNnrSq2F9RV7+AAL21ZKBSxmzR0nOE/N5/M3AnCRZ8YU0dumFXlgAJWHJH1F meJHrl+sM/ynWVGVRVR8xo+Ak4ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRqt3Xi sgl62H4b0sWDu84RkJFT9TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ojwwDQYJKoZIhvcNAQELBQADggEBAJQcizNylXdPQwMWU0Ds98yi6l0kKUTW6SCw WZNcNl32kl794VKesjuqNnlDhPwZ3xm635EoGpmNo+ViyZ+/aH5aOOpMTg83GlbS SPN5dMK9LSGFCZAat7IWdzCaZBCa0gAhhcJhYt0PgPTM5d/TnJY3/V0E5G5Tn8Qh 5uhB0QgSL9tL694jjD5XgigEIlwz194XJBZJ06RugKDb0oY7c7SHQDJphQdVFbOB 0O424q4zsZbR4dkf4NtEIQb1kjqHIzAGN8Nr1dvYVlJjh/qMYbV5crltLNWj4V2E luJujueNx2R4rc/46jeEG5jI2jGCCfQxOxplVWsOgmvawd1DYSg= -----END CERTIFICATE-----Generated at Sat Mar 28 13:06:13 2026 by rpki-client