$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143233.roa File: AS143233.roa (raw, json) Hash identifier: g+uVjAkUMH4Rrc0TOENn3h7jLGBSRW2vAE5EbyHQsMc= Subject key identifier: 76:0A:E2:32:89:42:61:AD:DB:DE:14:1C:05:4A:FF:C2:44:D7:D1:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3D7DBAB1AFD9028074E30D61445D026189F62079 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143233.roa Signing time: Wed 04 Mar 2026 06:05:43 +0000 ROA not before: Wed 04 Mar 2026 06:00:43 +0000 ROA not after: Wed 03 Mar 2027 06:05:43 +0000 asID: 143233 IP address blocks: 240a:a247::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7d:ba:b1:af:d9:02:80:74:e3:0d:61:44:5d:02:61:89:f6:20:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:43 2026 GMT Not After : Mar 3 06:05:43 2027 GMT Subject: CN=760AE232894261ADDBDE141C054AFFC244D7D1A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:03:2b:00:9c:f1:bc:74:20:2d:2d:67:c0: dd:e1:35:4b:3b:7e:28:44:1f:f4:e9:4e:03:dc:0e: fe:b8:16:2d:3e:13:41:d2:d7:a1:4e:d4:84:b0:e3: 1f:40:f3:f2:2f:a9:b0:a3:ee:0f:cc:43:22:75:6a: e0:a4:cc:9b:72:0b:c8:a9:59:7e:41:f5:73:f7:2a: 5b:2a:53:2e:8b:3e:76:a4:af:cb:e5:ce:66:64:40: e6:cc:57:4f:70:c9:ce:25:21:ea:b9:98:67:be:57: 85:b6:c3:e4:62:28:39:7c:da:64:9c:f0:80:60:41: 63:12:ce:36:2d:dc:fa:85:2e:9d:6b:ff:c0:e9:bc: 53:b1:92:c0:bb:09:d5:4f:2e:8e:5d:34:b7:da:2f: 85:4f:85:2d:91:fe:ba:bb:e4:ac:d8:22:16:6d:d1: 1a:3f:b3:a7:31:73:9c:52:88:99:91:e4:ab:31:ec: 5e:20:42:e3:8f:74:ad:28:87:d3:50:c3:f5:92:32: dc:51:58:65:24:80:3a:d7:c4:6d:8f:a7:28:2c:69: 53:17:9c:89:a2:94:90:eb:a7:77:c5:39:14:5e:62: 32:e3:f6:8a:dd:9b:55:9c:87:28:44:1f:d6:b7:ba: e9:30:82:03:65:08:2b:1a:c7:69:2c:58:b1:bc:75: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0A:E2:32:89:42:61:AD:DB:DE:14:1C:05:4A:FF:C2:44:D7:D1:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a247::/32 Signature Algorithm: sha256WithRSAEncryption d0:9c:68:ab:70:8f:13:e3:d6:e8:1e:a1:fc:31:ea:ad:0f:ed: ff:4e:20:90:89:7c:16:ca:bd:a0:8b:17:db:fe:59:fa:dd:8a: c6:ad:3b:0f:cc:be:7d:f1:d2:1a:ae:7b:af:81:47:23:6a:be: 34:d4:09:89:ed:c5:c4:d2:9b:d6:8b:e7:97:c4:b5:75:b7:17: 6d:54:30:75:bc:4b:ba:9f:ba:b9:ec:9c:ff:fd:1f:cd:53:1b: ef:be:d3:43:a6:0c:48:dc:0b:aa:c2:35:98:56:6f:e9:ad:94: 1d:f0:62:f1:13:b4:5b:02:de:96:09:bc:2c:00:1f:7f:fd:2c: df:be:32:fb:65:94:d5:de:b9:d8:d0:50:8e:eb:af:26:15:6a: a7:76:12:54:30:36:2f:83:a8:4a:ec:9b:fc:85:b4:09:1a:94: 14:32:80:7a:20:ac:e6:64:a8:c7:2f:ae:b2:8d:9c:68:20:30: af:8a:74:d7:25:9d:b6:fa:67:ee:fe:33:d0:d7:35:17:a8:c5: 95:f6:37:6e:86:60:0e:46:d9:3a:2d:e8:50:74:26:7a:1f:92: 71:fa:3b:76:c8:93:81:9d:65:d9:af:84:d5:5b:b1:b5:74:a3: 8d:18:85:f2:49:2c:39:e6:dc:39:01:41:a5:5b:73:fe:b0:6d: a0:6a:9a:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPX26sa/ZAoB04w1hRF0CYYn2IHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0M1oX DTI3MDMwMzA2MDU0M1owMzExMC8GA1UEAxMoNzYwQUUyMzI4OTQyNjFBRERCREUx NDFDMDU0QUZGQzI0NEQ3RDFBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKW8AysAnPG8dCAtLWfA3eE1Szt+KEQf9OlOA9wO/rgWLT4TQdLXoU7UhLDj H0Dz8i+psKPuD8xDInVq4KTMm3ILyKlZfkH1c/cqWypTLos+dqSvy+XOZmRA5sxX T3DJziUh6rmYZ75XhbbD5GIoOXzaZJzwgGBBYxLONi3c+oUunWv/wOm8U7GSwLsJ 1U8ujl00t9ovhU+FLZH+urvkrNgiFm3RGj+zpzFznFKImZHkqzHsXiBC4490rSiH 01DD9ZIy3FFYZSSAOtfEbY+nKCxpUxeciaKUkOund8U5FF5iMuP2it2bVZyHKEQf 1re66TCCA2UIKxrHaSxYsbx1I9ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR2CuIy iUJhrdveFBwFSv/CRNfRozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK okcwDQYJKoZIhvcNAQELBQADggEBANCcaKtwjxPj1ugeofwx6q0P7f9OIJCJfBbK vaCLF9v+WfrdisatOw/Mvn3x0hque6+BRyNqvjTUCYntxcTSm9aL55fEtXW3F21U MHW8S7qfurnsnP/9H81TG+++00OmDEjcC6rCNZhWb+mtlB3wYvETtFsC3pYJvCwA H3/9LN++MvtllNXeudjQUI7rryYVaqd2ElQwNi+DqErsm/yFtAkalBQygHogrOZk qMcvrrKNnGggMK+KdNclnbb6Z+7+M9DXNReoxZX2N26GYA5G2Tot6FB0JnofknH6 O3bIk4GdZdmvhNVbsbV0o40YhfJJLDnm3DkBQaVbc/6wbaBqmpM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:39 2026 by rpki-client