$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143237.roa File: AS143237.roa (raw, json) Hash identifier: RZAn1Tazzt6Nr/bxqNQsat6dEbJ5MQOlxNL0gm5Qi90= Subject key identifier: 69:F8:97:B5:04:BB:15:96:2D:27:F8:EF:E4:C0:3A:5F:CB:86:CD:6E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1AA02757397B7540F7AA43154182BBECD40A4890 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143237.roa Signing time: Wed 04 Mar 2026 06:06:46 +0000 ROA not before: Wed 04 Mar 2026 06:01:46 +0000 ROA not after: Wed 03 Mar 2027 06:06:46 +0000 asID: 143237 IP address blocks: 240a:a24b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a0:27:57:39:7b:75:40:f7:aa:43:15:41:82:bb:ec:d4:0a:48:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:46 2026 GMT Not After : Mar 3 06:06:46 2027 GMT Subject: CN=69F897B504BB15962D27F8EFE4C03A5FCB86CD6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:12:a3:36:3e:02:bd:6e:8a:94:a5:c6:0a: 7e:f9:99:d0:18:a4:a3:e0:80:81:a1:0c:43:43:19: d7:d8:10:33:e6:f8:8d:34:0f:44:94:0b:32:53:d3: ca:f5:2d:62:3a:b1:dc:14:38:71:d0:16:af:9d:69: 2a:af:75:34:2b:27:98:06:4a:37:da:64:43:89:ad: f4:47:f0:29:c7:fd:10:2c:96:40:8d:1f:42:8d:6b: 83:7e:0e:fe:79:c9:77:bc:ef:9f:eb:c3:19:c7:29: ec:5f:ca:89:3f:22:71:60:5d:bf:32:58:be:47:d0: 3b:84:b5:e3:c4:4c:c4:e2:ef:c9:49:3d:45:4b:e4: 9e:b3:a2:fb:6c:aa:8e:08:4a:24:24:a2:23:5f:d3: f5:77:ec:92:76:c1:59:f9:30:84:7d:5b:5a:ea:d8: 35:6b:cf:bd:1c:2d:e0:ab:e7:b7:55:12:3a:a0:9d: ef:bd:08:0d:12:3b:a5:5d:89:9d:4e:37:21:c2:f5: e2:9b:12:79:23:4a:85:4d:1c:49:de:10:ca:93:f8: fc:fe:fb:34:8b:63:20:7f:88:f9:2f:c5:8d:22:fb: 92:9b:53:09:5a:e3:1a:70:98:07:31:71:41:78:5e: 04:4b:33:3e:af:e2:6b:bd:8a:cd:9b:72:66:97:cc: 59:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F8:97:B5:04:BB:15:96:2D:27:F8:EF:E4:C0:3A:5F:CB:86:CD:6E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a24b::/32 Signature Algorithm: sha256WithRSAEncryption 8c:8b:e6:9d:a7:e6:ea:c8:89:16:94:d5:f0:da:98:20:1e:72: 1b:e0:20:7d:fd:99:65:89:a0:8c:7d:7c:f1:9a:1c:11:93:4e: 08:b1:ae:e4:79:03:3f:58:22:2f:2d:38:32:60:a2:56:cb:e8: ce:7c:cc:50:82:ed:5b:87:c4:10:b9:f9:d9:a6:cd:a7:1d:42: b5:c9:ea:21:b8:57:85:05:24:ae:d8:f4:d9:be:b0:ba:91:5c: f3:6e:d3:f9:28:86:73:fb:60:2b:71:c7:43:5b:48:a1:4e:94: ee:2f:24:e6:56:d1:9d:96:23:06:50:cf:cf:38:c0:f4:99:15: 2f:95:43:70:f7:9a:71:f8:12:c0:ad:7f:60:b6:ca:56:b7:39: 0a:0d:49:aa:ae:08:62:af:35:a8:bf:46:f8:ac:40:f9:a6:76: 96:d7:d1:49:7a:fe:02:de:cc:9e:4f:2a:39:45:57:a1:82:ad: 9b:d5:f8:d0:39:76:a0:ea:02:3b:ce:dd:85:c4:38:a6:90:20: 8a:dc:c9:1f:fa:8b:c3:71:a3:15:d5:ef:e6:40:45:43:5f:54: 93:49:8b:ea:6f:c5:a7:9e:7f:f6:0e:21:0f:f6:71:d4:e7:58: 14:c8:62:70:2f:65:dc:b2:7e:5e:0e:1f:4c:61:62:dc:ab:05: 15:94:ae:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGqAnVzl7dUD3qkMVQYK77NQKSJAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0NloX DTI3MDMwMzA2MDY0NlowMzExMC8GA1UEAxMoNjlGODk3QjUwNEJCMTU5NjJEMjdG OEVGRTRDMDNBNUZDQjg2Q0Q2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXPEqM2PgK9boqUpcYKfvmZ0Biko+CAgaEMQ0MZ19gQM+b4jTQPRJQLMlPT yvUtYjqx3BQ4cdAWr51pKq91NCsnmAZKN9pkQ4mt9EfwKcf9ECyWQI0fQo1rg34O /nnJd7zvn+vDGccp7F/KiT8icWBdvzJYvkfQO4S148RMxOLvyUk9RUvknrOi+2yq jghKJCSiI1/T9XfsknbBWfkwhH1bWurYNWvPvRwt4Kvnt1USOqCd770IDRI7pV2J nU43IcL14psSeSNKhU0cSd4QypP4/P77NItjIH+I+S/FjSL7kptTCVrjGnCYBzFx QXheBEszPq/ia72KzZtyZpfMWRsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRp+Je1 BLsVli0n+O/kwDpfy4bNbjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK okswDQYJKoZIhvcNAQELBQADggEBAIyL5p2n5urIiRaU1fDamCAechvgIH39mWWJ oIx9fPGaHBGTTgixruR5Az9YIi8tODJgolbL6M58zFCC7VuHxBC5+dmmzacdQrXJ 6iG4V4UFJK7Y9Nm+sLqRXPNu0/kohnP7YCtxx0NbSKFOlO4vJOZW0Z2WIwZQz884 wPSZFS+VQ3D3mnH4EsCtf2C2yla3OQoNSaquCGKvNai/RvisQPmmdpbX0Ul6/gLe zJ5PKjlFV6GCrZvV+NA5dqDqAjvO3YXEOKaQIIrcyR/6i8NxoxXV7+ZARUNfVJNJ i+pvxaeef/YOIQ/2cdTnWBTIYnAvZdyyfl4OH0xhYtyrBRWUrvw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:30 2026 by rpki-client