$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143223.roa File: AS143223.roa (raw, json) Hash identifier: GNrdhhT6XwIi/QmV0F+2CXjIhjinlJ4h2iauEJBTkkw= Subject key identifier: 63:AF:B0:50:38:14:F9:02:34:D7:49:1E:AC:EF:EA:AF:B5:80:68:92 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0AF0CF2AB5C89D10245C31FF1EB842AC9835542E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143223.roa Signing time: Wed 04 Mar 2026 06:06:42 +0000 ROA not before: Wed 04 Mar 2026 06:01:42 +0000 ROA not after: Wed 03 Mar 2027 06:06:42 +0000 asID: 143223 IP address blocks: 240a:a23d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f0:cf:2a:b5:c8:9d:10:24:5c:31:ff:1e:b8:42:ac:98:35:54:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:42 2026 GMT Not After : Mar 3 06:06:42 2027 GMT Subject: CN=63AFB0503814F90234D7491EACEFEAAFB5806892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a1:a1:79:f1:f8:fd:55:39:85:a4:58:51:cf: 6f:09:2f:50:c2:fb:bb:8d:8e:45:b7:02:c7:e9:18: 87:12:3f:ba:66:0d:23:62:27:46:bb:4c:74:a2:91: 20:8d:56:e6:f4:0a:5f:99:56:51:6f:ae:c8:8b:e1: a3:fb:4c:9b:2b:1d:7c:7b:82:6a:30:b6:ab:df:e9: 35:aa:ce:df:e8:f6:80:96:21:ff:57:ee:50:39:46: 43:98:60:31:a9:8f:25:9b:d4:0b:39:ba:f2:e9:7d: e0:cf:f1:5f:a5:19:5a:82:86:c9:e2:56:32:bd:4a: 21:11:62:6c:24:4c:e7:aa:e4:14:ed:99:90:52:d4: 50:56:8c:c6:e8:8b:23:9e:52:c1:e1:45:8e:c8:e0: cc:66:6f:7b:51:6f:a1:79:d3:be:4d:bc:c6:83:0c: f9:e1:31:08:3e:c5:ad:62:b9:c0:87:dc:66:33:90: f2:b5:06:c7:13:ac:dc:15:e2:d0:fa:aa:c5:72:f9: 85:29:62:50:5c:a1:c8:f8:1b:48:27:0d:77:6a:43: 93:1b:31:f0:44:0f:cd:e7:1c:0a:df:1e:52:45:34: 7a:12:d9:4a:27:23:d8:49:aa:09:aa:6d:12:f8:40: 9f:fe:ce:59:e3:cb:14:8a:02:a3:2e:73:4a:f2:81: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AF:B0:50:38:14:F9:02:34:D7:49:1E:AC:EF:EA:AF:B5:80:68:92 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143223.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a23d::/32 Signature Algorithm: sha256WithRSAEncryption ad:a3:bf:01:82:ca:c8:48:7f:c7:7c:d2:a1:c2:87:b7:d4:bb: 74:1f:5d:8e:c1:e5:36:72:28:08:aa:a9:c5:15:9e:a9:7e:e1: 56:01:79:6d:6b:aa:28:54:ba:23:91:5c:a9:ae:c1:b2:91:b1: 4c:20:17:97:8f:72:14:c0:40:04:3b:95:98:f7:74:9c:45:d3: 5a:ef:40:15:9f:f4:f6:a2:3c:91:b6:ec:4f:ad:40:61:0c:1c: 80:78:2f:bf:6e:a6:cb:7e:68:3a:36:71:12:95:fb:56:e5:15: 83:88:01:75:16:f1:ab:e8:51:8b:4d:f1:8d:9a:83:00:c5:ae: 22:b6:ba:45:60:b7:43:cd:34:08:01:18:bc:6a:ce:51:1e:54: 8d:f5:f1:39:41:fe:67:e7:6d:74:1b:da:08:56:da:1f:d4:2d: a7:37:55:3f:45:9e:36:8d:72:1d:f9:c8:5f:d7:37:58:11:0d: 21:96:df:83:f1:b7:43:b0:79:29:da:ca:25:cc:54:36:44:64: ba:79:1f:8d:06:77:81:2f:73:76:0a:a4:94:0d:86:10:a7:ff: fb:40:97:b7:78:af:a8:2c:00:a9:5c:c1:70:e7:66:72:04:3d: fd:4e:ce:dd:dc:6d:c3:20:f4:61:d4:2b:fd:2d:85:94:32:9f: 9e:d7:ed:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCvDPKrXInRAkXDH/HrhCrJg1VC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0MloX DTI3MDMwMzA2MDY0MlowMzExMC8GA1UEAxMoNjNBRkIwNTAzODE0RjkwMjM0RDc0 OTFFQUNFRkVBQUZCNTgwNjg5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6hoXnx+P1VOYWkWFHPbwkvUML7u42ORbcCx+kYhxI/umYNI2InRrtMdKKR II1W5vQKX5lWUW+uyIvho/tMmysdfHuCajC2q9/pNarO3+j2gJYh/1fuUDlGQ5hg MamPJZvUCzm68ul94M/xX6UZWoKGyeJWMr1KIRFibCRM56rkFO2ZkFLUUFaMxuiL I55SweFFjsjgzGZve1FvoXnTvk28xoMM+eExCD7FrWK5wIfcZjOQ8rUGxxOs3BXi 0PqqxXL5hSliUFyhyPgbSCcNd2pDkxsx8EQPzeccCt8eUkU0ehLZSicj2EmqCapt EvhAn/7OWePLFIoCoy5zSvKBSbUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRjr7BQ OBT5AjTXSR6s7+qvtYBokjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oj0wDQYJKoZIhvcNAQELBQADggEBAK2jvwGCyshIf8d80qHCh7fUu3QfXY7B5TZy KAiqqcUVnql+4VYBeW1rqihUuiORXKmuwbKRsUwgF5ePchTAQAQ7lZj3dJxF01rv QBWf9PaiPJG27E+tQGEMHIB4L79upst+aDo2cRKV+1blFYOIAXUW8avoUYtN8Y2a gwDFriK2ukVgt0PNNAgBGLxqzlEeVI318TlB/mfnbXQb2ghW2h/ULac3VT9FnjaN ch35yF/XN1gRDSGW34Pxt0OweSnayiXMVDZEZLp5H40Gd4Evc3YKpJQNhhCn//tA l7d4r6gsAKlcwXDnZnIEPf1Ozt3cbcMg9GHUK/0thZQyn57X7Tk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:04 2026 by rpki-client