$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143236.roa File: AS143236.roa (raw, json) Hash identifier: XZcN2RulNKBDh5/TdtOMBjkCOQtaB/0sk8goiuMX5eU= Subject key identifier: 4C:F5:B7:D0:E4:AC:40:76:92:D0:51:B4:99:F1:2D:61:3A:AD:DF:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2BA68B5265D09B4841A417DD1ED9D8289839D3D6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143236.roa Signing time: Wed 04 Mar 2026 06:07:46 +0000 ROA not before: Wed 04 Mar 2026 06:02:46 +0000 ROA not after: Wed 03 Mar 2027 06:07:46 +0000 asID: 143236 IP address blocks: 240a:a24a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a6:8b:52:65:d0:9b:48:41:a4:17:dd:1e:d9:d8:28:98:39:d3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:46 2026 GMT Not After : Mar 3 06:07:46 2027 GMT Subject: CN=4CF5B7D0E4AC407692D051B499F12D613AADDF7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:8c:09:f3:50:9d:1a:26:db:07:c6:02:26: 4b:15:7a:df:f1:86:99:c7:df:53:35:3f:b3:5a:e8: 87:e3:c6:4b:df:c4:62:c9:37:13:92:b8:10:c9:05: e4:ff:78:30:9a:e2:24:5d:c7:5f:08:49:d7:7f:41: 0b:28:74:65:20:b5:84:61:c3:a2:10:5c:1e:c5:60: 68:7f:f1:65:6d:6c:6e:03:bd:2a:2a:99:00:f1:41: 9a:cd:9e:71:65:d8:87:9d:78:de:57:28:cc:c4:e2: 64:4e:1a:21:7c:78:2c:c3:50:4d:3c:a2:af:cd:65: 34:f5:4a:0a:e8:2f:0f:72:3f:5d:16:80:8d:3d:1d: fc:ea:f4:03:d5:88:1b:35:be:69:e8:d3:d8:30:5c: 9e:76:1a:dd:06:36:fe:e4:ee:d6:85:55:44:b4:19: 2a:84:3b:4e:81:5c:cd:63:48:a5:44:5f:73:64:07: 7f:e2:ab:dd:57:ef:30:84:2c:5a:71:2a:1a:1e:02: 49:7c:16:b2:2b:87:de:b2:96:ca:4e:c1:a3:8c:01: 5d:5d:ea:1d:4d:c8:ca:14:9f:6d:8d:aa:dc:c1:9f: 4d:f1:7d:2e:74:a7:4c:b2:d3:46:92:5c:82:dd:b8: 30:47:e6:12:f7:dd:78:0e:40:96:02:bc:b6:41:14: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F5:B7:D0:E4:AC:40:76:92:D0:51:B4:99:F1:2D:61:3A:AD:DF:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a24a::/32 Signature Algorithm: sha256WithRSAEncryption a7:f4:47:64:a3:81:7b:ac:67:05:e8:e1:81:78:2c:af:f9:3f: 40:f5:1e:b5:84:d3:57:42:2e:cf:3c:4a:09:13:10:c7:dd:7a: d6:dc:8a:57:b9:43:ec:b1:6a:e9:1f:4d:48:1c:6a:76:a4:0d: 20:93:c6:16:6f:5a:41:10:44:f4:b9:02:d1:f6:75:0d:f2:d6: 59:9d:59:71:57:19:9b:d2:57:6e:9c:2e:75:54:ed:89:df:0f: 29:df:c1:20:56:df:3b:df:b9:3d:b8:ea:e2:f6:96:a4:59:74: b5:4b:e9:f0:36:73:d5:8b:2d:18:38:e6:95:82:b6:36:e9:4a: 31:f5:b8:06:41:f3:13:20:d2:84:e5:e4:3b:5d:49:8c:6d:fa: 09:d4:e6:89:90:8b:a8:ee:62:7f:c9:33:b4:20:8e:bb:1e:8b: da:c7:8f:ef:38:73:3d:27:a1:a3:fc:32:d5:3f:f4:31:53:b2: c5:cb:04:4a:5c:7c:a0:ed:1a:8e:9b:b8:4e:01:b0:6c:27:2c: e3:4a:1d:05:81:a5:66:26:bb:8c:64:e3:7e:d8:97:66:4d:cc: 18:5f:ea:8f:80:c3:f8:be:90:00:ae:98:bd:f7:58:4f:e4:c7: 09:5d:ce:17:f5:33:4e:8d:f5:7a:44:62:4e:46:ce:e8:2e:04: da:68:51:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUK6aLUmXQm0hBpBfdHtnYKJg509YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0NloX DTI3MDMwMzA2MDc0NlowMzExMC8GA1UEAxMoNENGNUI3RDBFNEFDNDA3NjkyRDA1 MUI0OTlGMTJENjEzQUFEREY3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALv3jAnzUJ0aJtsHxgImSxV63/GGmcffUzU/s1roh+PGS9/EYsk3E5K4EMkF 5P94MJriJF3HXwhJ139BCyh0ZSC1hGHDohBcHsVgaH/xZW1sbgO9KiqZAPFBms2e cWXYh5143lcozMTiZE4aIXx4LMNQTTyir81lNPVKCugvD3I/XRaAjT0d/Or0A9WI GzW+aejT2DBcnnYa3QY2/uTu1oVVRLQZKoQ7ToFczWNIpURfc2QHf+Kr3VfvMIQs WnEqGh4CSXwWsiuH3rKWyk7Bo4wBXV3qHU3IyhSfbY2q3MGfTfF9LnSnTLLTRpJc gt24MEfmEvfdeA5AlgK8tkEUn6ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRM9bfQ 5KxAdpLQUbSZ8S1hOq3ffDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK okowDQYJKoZIhvcNAQELBQADggEBAKf0R2SjgXusZwXo4YF4LK/5P0D1HrWE01dC Ls88SgkTEMfdetbcile5Q+yxaukfTUgcanakDSCTxhZvWkEQRPS5AtH2dQ3y1lmd WXFXGZvSV26cLnVU7YnfDynfwSBW3zvfuT246uL2lqRZdLVL6fA2c9WLLRg45pWC tjbpSjH1uAZB8xMg0oTl5DtdSYxt+gnU5omQi6juYn/JM7Qgjrsei9rHj+84cz0n oaP8MtU/9DFTssXLBEpcfKDtGo6buE4BsGwnLONKHQWBpWYmu4xk437Yl2ZNzBhf 6o+Aw/i+kACumL33WE/kxwldzhf1M06N9XpEYk5GzuguBNpoUZA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:04 2026 by rpki-client