$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143235.roa File: AS143235.roa (raw, json) Hash identifier: JEit3650ZFWOwLUwt0S1Ml0HXgsyRGESIwbyhRHjPlg= Subject key identifier: DC:10:82:E5:0E:66:3B:69:E5:1A:91:8A:59:E9:41:20:F7:F5:15:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 59DB27C5F2BEBA33273CAA642D0F394A10C19C71 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143235.roa Signing time: Wed 04 Mar 2026 06:07:31 +0000 ROA not before: Wed 04 Mar 2026 06:02:31 +0000 ROA not after: Wed 03 Mar 2027 06:07:31 +0000 asID: 143235 IP address blocks: 240a:a249::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:db:27:c5:f2:be:ba:33:27:3c:aa:64:2d:0f:39:4a:10:c1:9c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:31 2026 GMT Not After : Mar 3 06:07:31 2027 GMT Subject: CN=DC1082E50E663B69E51A918A59E94120F7F5154A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:dc:f1:12:f0:8e:8d:fb:f4:21:bc:0b:58: f7:7f:66:37:25:e9:73:52:d9:a3:60:c3:95:d7:27: 94:b9:af:6f:39:84:fe:0d:3c:e2:13:bd:1b:fa:4f: d5:aa:04:77:96:e3:9b:e2:d8:dd:7d:f5:3c:7c:4f: e5:ce:a9:ec:38:a4:48:57:95:38:31:eb:cc:5d:c9: 43:6d:f7:de:ba:49:6b:7e:68:b9:f4:be:89:44:3a: 3a:b8:3b:2a:bc:aa:03:cc:ff:ed:53:8a:98:e2:53: 59:08:1b:71:fa:5d:da:11:98:47:12:24:6b:e0:2a: 18:19:7e:16:3b:26:51:79:0a:f9:b4:df:75:49:da: a2:3f:6a:5d:b9:6e:a6:df:c5:14:f1:93:4a:20:ed: 36:00:2e:94:5e:4f:dc:39:5f:cb:8e:97:16:09:6d: a3:ba:8b:ee:10:dc:79:84:c5:9d:1a:b8:49:80:ef: 3f:d1:db:85:30:5b:ee:6a:1e:0a:11:93:81:bd:7a: cd:5a:75:4a:df:a4:c5:65:61:45:cd:10:da:24:90: bb:c8:4c:ef:45:9f:d2:e7:c8:81:a2:c3:b6:ae:c7: 8c:77:fd:63:4b:c9:82:4c:8e:cf:31:1e:95:55:1f: 9b:fd:d7:77:b8:45:b9:34:b6:33:c1:8c:1b:05:16: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:10:82:E5:0E:66:3B:69:E5:1A:91:8A:59:E9:41:20:F7:F5:15:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a249::/32 Signature Algorithm: sha256WithRSAEncryption 26:09:77:22:6c:da:61:0b:07:30:dd:2e:74:e9:9a:19:cc:80: 49:65:de:b9:e8:a5:7a:e2:a3:0c:28:51:cc:73:58:9f:02:30: 62:29:ef:05:f1:64:8b:9e:20:1c:53:c9:92:bd:6b:e2:61:7c: 4b:93:62:ed:1b:0d:61:69:e2:86:f1:91:2a:7f:b5:34:5d:4a: 5a:e9:2f:33:04:2b:65:a0:b6:27:41:e3:ab:a0:c1:4d:97:0b: 8c:0d:9b:66:3b:0c:df:cf:8b:7d:0f:64:d6:de:35:36:6b:03: 35:e5:b2:41:50:90:c5:40:98:40:88:05:1f:0a:ff:d7:a6:f8: 3d:07:14:99:46:f0:d8:f0:7e:a8:26:88:cf:db:ca:82:5f:d1: 8e:57:0e:b5:fe:fb:3b:54:97:4e:99:32:13:17:67:0c:02:97: 83:e4:fc:58:32:fd:15:ec:de:72:0b:f6:d0:77:f6:c6:1b:b5: a1:68:65:6c:d6:ad:36:73:2e:cf:e4:47:cd:8d:0f:96:13:05: e9:e9:70:ef:4b:19:01:12:04:ef:a3:32:b1:81:63:80:8a:ee: 53:27:c4:bb:cd:23:95:53:58:61:2d:a0:77:d3:d9:fe:e0:c4: c1:ab:57:03:7a:6c:3a:37:f9:56:fe:75:c6:31:a3:e2:2b:88: 10:29:e8:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWdsnxfK+ujMnPKpkLQ85ShDBnHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzMVoX DTI3MDMwMzA2MDczMVowMzExMC8GA1UEAxMoREMxMDgyRTUwRTY2M0I2OUU1MUE5 MThBNTlFOTQxMjBGN0Y1MTU0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbT3PES8I6N+/QhvAtY939mNyXpc1LZo2DDldcnlLmvbzmE/g084hO9G/pP 1aoEd5bjm+LY3X31PHxP5c6p7DikSFeVODHrzF3JQ2333rpJa35oufS+iUQ6Org7 KryqA8z/7VOKmOJTWQgbcfpd2hGYRxIka+AqGBl+FjsmUXkK+bTfdUnaoj9qXblu pt/FFPGTSiDtNgAulF5P3Dlfy46XFglto7qL7hDceYTFnRq4SYDvP9HbhTBb7moe ChGTgb16zVp1St+kxWVhRc0Q2iSQu8hM70Wf0ufIgaLDtq7HjHf9Y0vJgkyOzzEe lVUfm/3Xd7hFuTS2M8GMGwUW9jkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTcEILl DmY7aeUakYpZ6UEg9/UVSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK okkwDQYJKoZIhvcNAQELBQADggEBACYJdyJs2mELBzDdLnTpmhnMgEll3rnopXri owwoUcxzWJ8CMGIp7wXxZIueIBxTyZK9a+JhfEuTYu0bDWFp4obxkSp/tTRdSlrp LzMEK2WgtidB46ugwU2XC4wNm2Y7DN/Pi30PZNbeNTZrAzXlskFQkMVAmECIBR8K /9em+D0HFJlG8NjwfqgmiM/byoJf0Y5XDrX++ztUl06ZMhMXZwwCl4Pk/Fgy/RXs 3nIL9tB39sYbtaFoZWzWrTZzLs/kR82ND5YTBenpcO9LGQESBO+jMrGBY4CK7lMn xLvNI5VTWGEtoHfT2f7gxMGrVwN6bDo3+Vb+dcYxo+IriBAp6ME= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:00 2026 by rpki-client