$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143238.roa File: AS143238.roa (raw, json) Hash identifier: u1I5BXTIaQ7wHzbJgKWJ6t3Qus544VLyKe0UiFOs1cM= Subject key identifier: E0:30:69:B6:18:3C:5F:08:C3:27:84:65:FD:28:C1:DE:1A:12:FC:22 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 336417056A3B704228C251017D04F5D1A8073920 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143238.roa Signing time: Wed 04 Mar 2026 06:05:23 +0000 ROA not before: Wed 04 Mar 2026 06:00:23 +0000 ROA not after: Wed 03 Mar 2027 06:05:23 +0000 asID: 143238 IP address blocks: 240a:a24c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:64:17:05:6a:3b:70:42:28:c2:51:01:7d:04:f5:d1:a8:07:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:23 2026 GMT Not After : Mar 3 06:05:23 2027 GMT Subject: CN=E03069B6183C5F08C3278465FD28C1DE1A12FC22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:58:e8:25:8c:8b:97:36:8c:4f:05:d7:16:73: fc:00:7a:98:ea:50:cb:0c:65:a2:31:8c:6a:b1:58: dd:28:66:49:93:74:f7:33:7b:da:91:10:da:76:2c: 96:53:c7:49:df:ae:22:c8:24:f8:7d:7f:af:57:f4: 7a:e5:d8:ff:b9:d7:76:cd:69:da:73:e3:e7:38:2d: 5d:7f:1a:ae:32:ef:3d:23:ad:cb:59:d5:6f:c9:15: a5:12:0b:76:83:08:b0:c8:d8:7b:fa:c0:fb:6d:35: 52:c6:e2:a9:3b:b1:48:66:04:e3:1c:8e:1e:8c:5e: f8:2e:ce:25:01:6e:30:84:5e:46:1a:f7:e2:9a:30: 41:c3:d5:2d:9d:c4:51:e9:3a:4f:9d:1c:60:38:15: fb:14:6c:b3:81:a7:56:b5:e0:f2:e3:42:30:ce:ec: 04:9e:14:f7:2e:65:a4:83:a1:97:b8:d0:d3:7a:c7: 2b:7a:da:46:c0:a3:c7:09:0d:e2:09:d2:8e:63:2f: cc:a4:8e:18:9b:a3:51:a5:86:00:e0:3c:78:b6:2d: ab:9f:94:de:1e:76:77:63:8d:2f:aa:01:99:f5:d0: b3:f8:a0:ff:0c:64:e9:d1:ad:6e:b9:af:40:59:48: f4:c3:95:fd:7e:42:ab:dd:5a:5c:d8:47:c9:50:12: a1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:30:69:B6:18:3C:5F:08:C3:27:84:65:FD:28:C1:DE:1A:12:FC:22 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a24c::/32 Signature Algorithm: sha256WithRSAEncryption 4c:df:62:37:17:4c:4e:d9:03:e6:0f:08:57:9d:f6:f3:cc:db: 84:2e:f4:6e:bc:42:72:e3:80:87:5b:ad:e6:7b:14:1f:30:77: b4:ff:ef:7f:ef:bb:07:ba:d8:b1:b3:1a:24:0c:01:3e:96:96: d2:ac:b4:9b:c1:98:56:42:d2:77:26:53:3a:3e:2f:e0:d7:2b: 3e:5a:4e:02:77:dd:d9:eb:9c:64:1a:40:ea:9c:02:50:04:0a: a1:ed:0e:f9:ba:65:c2:e1:76:f6:38:8b:72:cd:a5:66:09:38: 35:cb:ab:cf:ae:0a:9b:30:92:69:1a:b7:7f:2e:39:5e:33:0e: a4:02:7b:8f:77:ca:6a:04:e9:96:ed:c7:36:22:ea:1a:f2:d3: 9a:53:b4:4a:d9:fc:88:58:e0:91:e6:99:be:4e:00:a7:c7:ab: df:e5:84:59:65:39:5c:5a:6a:1d:75:ab:c5:44:29:7d:a3:eb: 37:45:90:af:98:fb:38:55:91:3e:bb:9f:7e:98:19:3a:a6:ba: cc:94:d8:ba:81:23:a6:8d:e8:62:f3:a6:c5:d9:e7:9c:49:d6: e0:ab:69:46:71:3e:57:c2:f5:0a:74:78:2c:5a:58:4c:30:29: 8d:0a:df:a8:a0:1d:9c:1b:dc:af:3c:9d:f0:10:d6:50:9f:84: f3:1d:28:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM2QXBWo7cEIowlEBfQT10agHOSAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyM1oX DTI3MDMwMzA2MDUyM1owMzExMC8GA1UEAxMoRTAzMDY5QjYxODNDNUYwOEMzMjc4 NDY1RkQyOEMxREUxQTEyRkMyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOtY6CWMi5c2jE8F1xZz/AB6mOpQywxlojGMarFY3ShmSZN09zN72pEQ2nYs llPHSd+uIsgk+H1/r1f0euXY/7nXds1p2nPj5zgtXX8arjLvPSOty1nVb8kVpRIL doMIsMjYe/rA+201UsbiqTuxSGYE4xyOHoxe+C7OJQFuMIReRhr34powQcPVLZ3E Uek6T50cYDgV+xRss4GnVrXg8uNCMM7sBJ4U9y5lpIOhl7jQ03rHK3raRsCjxwkN 4gnSjmMvzKSOGJujUaWGAOA8eLYtq5+U3h52d2ONL6oBmfXQs/ig/wxk6dGtbrmv QFlI9MOV/X5Cq91aXNhHyVASoR8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTgMGm2 GDxfCMMnhGX9KMHeGhL8IjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK okwwDQYJKoZIhvcNAQELBQADggEBAEzfYjcXTE7ZA+YPCFed9vPM24Qu9G68QnLj gIdbreZ7FB8wd7T/73/vuwe62LGzGiQMAT6WltKstJvBmFZC0ncmUzo+L+DXKz5a TgJ33dnrnGQaQOqcAlAECqHtDvm6ZcLhdvY4i3LNpWYJODXLq8+uCpswkmkat38u OV4zDqQCe493ymoE6ZbtxzYi6hry05pTtErZ/IhY4JHmmb5OAKfHq9/lhFllOVxa ah11q8VEKX2j6zdFkK+Y+zhVkT67n36YGTqmusyU2LqBI6aN6GLzpsXZ55xJ1uCr aUZxPlfC9Qp0eCxaWEwwKY0K36igHZwb3K88nfAQ1lCfhPMdKPg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:49 2026 by rpki-client