$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143232.roa File: AS143232.roa (raw, json) Hash identifier: 10Zqa6TCDAQ0HQZrWQjdUjebAUOdKALCVpLMtJq6fQU= Subject key identifier: 6F:07:B3:21:57:AC:08:97:3F:FC:AD:E8:A1:FC:95:88:5F:1D:13:56 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 591C2C2D9469690031CD5F778F39AACBC8FCCF02 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143232.roa Signing time: Wed 04 Mar 2026 06:05:08 +0000 ROA not before: Wed 04 Mar 2026 06:00:08 +0000 ROA not after: Wed 03 Mar 2027 06:05:08 +0000 asID: 143232 IP address blocks: 240a:a246::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1c:2c:2d:94:69:69:00:31:cd:5f:77:8f:39:aa:cb:c8:fc:cf:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:08 2026 GMT Not After : Mar 3 06:05:08 2027 GMT Subject: CN=6F07B32157AC08973FFCADE8A1FC95885F1D1356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:40:e6:0f:4e:99:50:d6:50:06:27:94:bb: 23:ea:ec:36:fb:9e:e2:bd:9e:bf:8c:e8:d0:be:85: 13:56:2a:b3:58:ec:e8:56:2f:24:93:2b:c6:c4:56: 66:75:2b:09:5e:35:e6:c5:d3:2e:06:3b:14:36:ab: b7:95:d1:1c:5b:48:6a:bd:25:63:a8:a7:26:13:66: 10:5c:1d:14:78:0c:50:5f:a5:95:3a:a9:1c:46:ed: ca:83:b1:59:73:ac:fa:11:95:d3:7e:d6:8b:03:04: e0:ad:1c:96:13:bc:fc:92:f8:00:ce:c3:72:52:88: 68:a0:ab:4e:eb:1f:42:48:6b:91:df:6b:1d:71:66: 97:52:de:a8:0a:c2:3f:45:c5:f4:93:a7:8f:04:6d: 7f:b8:1d:dd:e1:47:76:a0:fd:a8:61:77:21:5b:61: 05:df:e9:42:7e:d4:72:9f:c1:8d:a2:2c:5e:a1:8d: 9f:42:d4:cf:56:bb:53:aa:2e:19:a2:64:09:50:9e: a2:79:d5:27:1d:97:47:24:6b:12:91:5e:ac:8c:2f: fa:e2:35:8e:2e:23:ff:a9:34:db:64:e8:b6:25:34: 5c:5b:1b:0d:62:94:98:72:2a:e5:ae:19:4a:33:16: 48:91:fb:74:45:4d:8b:4f:b8:a3:27:93:a3:01:4a: ea:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:07:B3:21:57:AC:08:97:3F:FC:AD:E8:A1:FC:95:88:5F:1D:13:56 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a246::/32 Signature Algorithm: sha256WithRSAEncryption 3b:4f:41:a7:e0:2a:b8:f3:cc:57:56:91:37:4a:ca:ce:d6:e9: 74:64:0e:1b:b8:dc:26:e3:26:64:2c:27:de:c2:87:0c:e4:73: b4:ff:b9:86:80:6d:6e:10:74:7e:21:ae:ef:3f:d3:cf:6f:02: ff:92:f8:e5:db:14:67:c6:e7:91:ba:fb:b6:f1:da:3c:84:bd: ed:76:bc:7d:c0:07:cc:ed:b3:84:27:7b:2e:9d:02:ba:c4:84: bf:0f:52:29:26:dd:4d:60:c8:dc:8a:2f:b7:32:35:35:34:a8: 46:db:d7:b6:02:1e:50:1e:5b:27:dd:3c:22:f0:5b:3e:d0:40: 3e:53:23:11:85:69:7a:52:2d:09:6c:5f:7b:7c:bf:bf:73:81: a3:84:4a:64:05:dd:52:bd:ee:83:a8:d0:a4:dc:b0:d8:c7:8e: dc:d8:e0:bc:2b:b1:7e:c9:d2:64:40:ff:80:9d:cf:52:26:4c: d3:a4:d1:e6:f2:ae:00:1c:fd:a1:5d:4f:69:b5:71:91:48:81: c1:2b:d9:30:ba:46:b0:13:8a:ca:71:f1:bf:34:87:2a:97:bd: 72:43:47:05:6e:7a:05:c4:99:38:1e:99:ce:c7:52:1b:f7:4f: 54:ef:20:d3:97:e6:95:2a:70:95:5f:30:76:3b:c3:a5:ee:cb: db:eb:fc:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWRwsLZRpaQAxzV93jzmqy8j8zwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAwOFoX DTI3MDMwMzA2MDUwOFowMzExMC8GA1UEAxMoNkYwN0IzMjE1N0FDMDg5NzNGRkNB REU4QTFGQzk1ODg1RjFEMTM1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/kQOYPTplQ1lAGJ5S7I+rsNvue4r2ev4zo0L6FE1Yqs1js6FYvJJMrxsRW ZnUrCV415sXTLgY7FDart5XRHFtIar0lY6inJhNmEFwdFHgMUF+llTqpHEbtyoOx WXOs+hGV037WiwME4K0clhO8/JL4AM7DclKIaKCrTusfQkhrkd9rHXFml1LeqArC P0XF9JOnjwRtf7gd3eFHdqD9qGF3IVthBd/pQn7Ucp/BjaIsXqGNn0LUz1a7U6ou GaJkCVCeonnVJx2XRyRrEpFerIwv+uI1ji4j/6k022TotiU0XFsbDWKUmHIq5a4Z SjMWSJH7dEVNi0+4oyeTowFK6pMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRvB7Mh V6wIlz/8reih/JWIXx0TVjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK okYwDQYJKoZIhvcNAQELBQADggEBADtPQafgKrjzzFdWkTdKys7W6XRkDhu43Cbj JmQsJ97Chwzkc7T/uYaAbW4QdH4hru8/089vAv+S+OXbFGfG55G6+7bx2jyEve12 vH3AB8zts4Qney6dArrEhL8PUikm3U1gyNyKL7cyNTU0qEbb17YCHlAeWyfdPCLw Wz7QQD5TIxGFaXpSLQlsX3t8v79zgaOESmQF3VK97oOo0KTcsNjHjtzY4LwrsX7J 0mRA/4Cdz1ImTNOk0ebyrgAc/aFdT2m1cZFIgcEr2TC6RrATispx8b80hyqXvXJD RwVuegXEmTgemc7HUhv3T1TvINOX5pUqcJVfMHY7w6Xuy9vr/AI= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:12 2026 by rpki-client