$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143224.roa File: AS143224.roa (raw, json) Hash identifier: 66psssxl85Cr5VZq7U/U2dpmi0N/Zp7qJkHiR8BW2cg= Subject key identifier: F5:63:A5:55:B9:9B:C9:31:46:44:7A:EA:4A:E4:5C:51:69:25:87:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4603F01A4DCD6A16E040B3AEF1AA24ED389D8FC0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143224.roa Signing time: Wed 04 Mar 2026 06:06:25 +0000 ROA not before: Wed 04 Mar 2026 06:01:25 +0000 ROA not after: Wed 03 Mar 2027 06:06:25 +0000 asID: 143224 IP address blocks: 240a:a23e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:03:f0:1a:4d:cd:6a:16:e0:40:b3:ae:f1:aa:24:ed:38:9d:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:25 2026 GMT Not After : Mar 3 06:06:25 2027 GMT Subject: CN=F563A555B99BC93146447AEA4AE45C5169258727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:11:24:02:3a:6a:8b:07:26:63:51:21:8c: 6e:e5:e0:a9:f1:dc:a8:57:1e:78:47:26:07:68:1a: 05:6f:16:3f:d2:3c:c2:bd:c7:c8:02:8c:1c:e1:45: 78:d5:3d:41:5f:8d:15:4c:d3:47:a2:a5:98:82:1e: 1e:64:18:44:2d:75:83:2d:cc:be:2e:cc:ac:fb:4a: 6d:e8:e3:55:f9:b7:4b:f2:dd:26:be:4b:e0:7c:fd: ae:16:07:9c:bf:d8:a7:97:bd:57:b8:df:bf:f0:32: 1f:a0:b0:d5:0b:ad:85:d9:36:a8:39:03:81:57:99: 0a:c4:29:e5:38:1d:fa:bc:6c:8a:c4:d6:ba:55:a0: c9:6e:f8:b4:59:42:fc:3f:82:7d:10:27:a5:4f:48: 0b:87:57:77:7b:2a:9b:8f:84:74:71:83:73:74:cf: 24:6f:fd:f4:6c:00:84:20:eb:f1:c7:1e:67:82:8d: f5:8e:29:01:63:21:2b:9a:72:de:5e:48:d3:1b:8f: 68:5f:0b:b5:06:eb:cf:8b:52:2e:24:da:25:24:88: 5d:d0:ca:ac:87:aa:77:a1:d7:29:f3:78:aa:81:20: 76:55:21:09:3d:e1:e9:1f:a1:93:dc:a6:98:af:28: 66:da:ba:79:10:c1:17:e5:36:23:6f:e5:14:ed:95: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:63:A5:55:B9:9B:C9:31:46:44:7A:EA:4A:E4:5C:51:69:25:87:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143224.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a23e::/32 Signature Algorithm: sha256WithRSAEncryption 41:59:51:75:03:3b:47:4e:4a:1d:80:36:e1:7f:55:31:f6:8d: b5:37:87:08:e9:55:39:6c:8d:92:fd:7f:97:40:15:43:18:87: f2:f4:bb:18:b8:69:6d:72:57:fa:36:50:86:51:7a:33:9a:10: d1:b4:48:89:8d:c5:df:b9:c5:43:fa:c9:56:86:ad:75:67:37: 08:b0:56:fd:aa:ca:24:2b:eb:89:82:50:b6:f9:2b:5c:6b:3c: fa:1e:c5:c0:f4:e0:ae:03:c7:98:7f:10:b3:10:8e:a0:3d:53: 2a:00:bb:1d:bf:0a:3b:de:f8:ae:26:a9:1f:30:41:50:b8:a9: 7d:51:60:26:37:31:dc:d1:57:6a:f7:19:8b:6a:f8:a8:2d:52: f1:9a:19:28:1e:9b:9f:b4:0a:66:3a:e4:c0:68:1d:19:62:c4: f9:eb:c6:c9:37:24:59:66:4f:80:63:ea:5c:6e:45:81:2c:8a: 04:65:ee:6f:d3:1b:b6:2b:96:a3:9a:3f:48:1b:66:78:46:c4: ab:32:fd:f6:69:12:1f:06:1e:3a:ef:66:4e:cc:e5:0a:74:10: eb:13:8a:0d:e6:00:04:9d:98:d5:5a:eb:dd:ad:46:10:cc:47: b6:e0:41:82:a4:3a:69:3c:9c:65:a7:32:ab:6f:88:82:e2:2c: c7:9f:63:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURgPwGk3NahbgQLOu8aok7Tidj8AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyNVoX DTI3MDMwMzA2MDYyNVowMzExMC8GA1UEAxMoRjU2M0E1NTVCOTlCQzkzMTQ2NDQ3 QUVBNEFFNDVDNTE2OTI1ODcyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpNESQCOmqLByZjUSGMbuXgqfHcqFceeEcmB2gaBW8WP9I8wr3HyAKMHOFF eNU9QV+NFUzTR6KlmIIeHmQYRC11gy3Mvi7MrPtKbejjVfm3S/LdJr5L4Hz9rhYH nL/Yp5e9V7jfv/AyH6Cw1Quthdk2qDkDgVeZCsQp5Tgd+rxsisTWulWgyW74tFlC /D+CfRAnpU9IC4dXd3sqm4+EdHGDc3TPJG/99GwAhCDr8cceZ4KN9Y4pAWMhK5py 3l5I0xuPaF8LtQbrz4tSLiTaJSSIXdDKrIeqd6HXKfN4qoEgdlUhCT3h6R+hk9ym mK8oZtq6eRDBF+U2I2/lFO2Vop0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT1Y6VV uZvJMUZEeupK5FxRaSWHJzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oj4wDQYJKoZIhvcNAQELBQADggEBAEFZUXUDO0dOSh2ANuF/VTH2jbU3hwjpVTls jZL9f5dAFUMYh/L0uxi4aW1yV/o2UIZRejOaENG0SImNxd+5xUP6yVaGrXVnNwiw Vv2qyiQr64mCULb5K1xrPPoexcD04K4Dx5h/ELMQjqA9UyoAux2/Cjve+K4mqR8w QVC4qX1RYCY3MdzRV2r3GYtq+KgtUvGaGSgem5+0CmY65MBoHRlixPnrxsk3JFlm T4Bj6lxuRYEsigRl7m/TG7YrlqOaP0gbZnhGxKsy/fZpEh8GHjrvZk7M5Qp0EOsT ig3mAASdmNVa692tRhDMR7bgQYKkOmk8nGWnMqtviILiLMefY5M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:54 2026 by rpki-client