$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143240.roa File: AS143240.roa (raw, json) Hash identifier: uKO5OGfsILtNSeldw1G6XKi1/JMWad4UU8wbfKQmf5w= Subject key identifier: 6C:A7:8C:B2:3B:0C:19:72:A2:C1:0D:35:01:6E:30:66:01:34:14:72 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4250B058E0FA83425E43631A8D7F707119BEF08A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143240.roa Signing time: Wed 04 Mar 2026 06:05:26 +0000 ROA not before: Wed 04 Mar 2026 06:00:26 +0000 ROA not after: Wed 03 Mar 2027 06:05:26 +0000 asID: 143240 IP address blocks: 240a:a24e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:50:b0:58:e0:fa:83:42:5e:43:63:1a:8d:7f:70:71:19:be:f0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:26 2026 GMT Not After : Mar 3 06:05:26 2027 GMT Subject: CN=6CA78CB23B0C1972A2C10D35016E306601341472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:cc:37:ab:44:c7:a4:43:a0:8f:d5:5b:09: 57:30:19:99:07:74:f1:77:7a:6f:70:40:e9:07:c8: b6:70:a0:d2:12:e9:c8:14:98:d6:7d:c7:f4:54:02: 6c:46:fe:74:9b:2b:a6:78:b0:2f:83:c9:d5:e3:89: df:36:0f:1e:a0:17:49:2e:7e:e8:e4:ce:ea:f4:a7: 99:2a:7d:9b:5e:eb:22:13:75:01:07:77:90:3b:e8: ff:5f:d7:b7:c9:67:e3:33:b2:6f:b7:fc:63:58:8d: 5c:52:9c:f8:6a:ca:6d:50:51:90:c2:a1:0d:f9:73: a0:70:9c:fe:2d:52:d9:9b:d4:f6:3b:0e:07:29:f2: 2a:51:b6:42:0f:68:22:7e:cb:79:ae:1f:22:9f:72: 9a:73:31:02:89:e0:76:f8:17:5e:65:bf:2c:e5:fb: 05:af:bf:56:e1:c7:d4:80:54:53:27:bb:6a:28:68: da:cb:47:74:1e:fe:73:68:eb:bc:87:2b:bd:09:c5: cc:25:7a:8f:2b:9b:32:7b:43:c0:c5:e8:d5:26:58: c3:0f:d6:36:02:de:41:80:cf:f1:47:3e:ca:38:31: f4:bc:95:6c:f8:d3:e3:e3:37:98:d9:fd:b1:86:80: f7:ad:5f:8a:35:f9:9b:3b:c8:e4:8a:dc:75:7a:5a: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A7:8C:B2:3B:0C:19:72:A2:C1:0D:35:01:6E:30:66:01:34:14:72 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143240.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a24e::/32 Signature Algorithm: sha256WithRSAEncryption 8d:01:10:df:05:8c:76:c2:ca:e9:a5:8e:3c:f7:a6:99:d8:b4: 20:5f:f0:f0:12:13:01:e6:2b:66:ca:0c:4d:ef:3b:6c:ce:d6: 34:6b:1a:e1:fe:41:cf:f3:ea:a1:3c:d5:34:16:75:71:65:f3: c2:b7:f6:96:f1:ea:65:fb:1a:10:c6:f4:f5:1f:16:e3:08:4b: a0:f1:24:fb:24:84:63:8f:ea:0e:db:36:59:c2:5f:64:21:39: b4:af:0b:54:53:04:2f:db:27:e2:50:5a:8d:a6:17:f7:49:c7: 8a:22:fc:bc:9b:79:8a:2d:e7:f0:52:36:87:b5:eb:1f:bc:49: bf:b5:b9:ea:f6:45:ea:63:45:49:14:33:e3:1b:19:d5:66:75: 9c:54:a1:08:f2:dd:3d:ee:86:87:82:32:ae:a2:25:04:d2:4f: ac:fb:78:d1:d4:c7:ef:0b:7d:5e:81:f5:e4:2a:da:8b:b2:b8: 83:0d:58:08:1b:be:70:27:de:30:7f:1d:fb:ae:e5:fd:95:30: ff:6d:31:d5:07:a0:be:d6:ce:ff:da:f4:c4:2d:9a:1f:37:be: 16:81:86:f6:4e:54:ef:b8:bb:0c:34:df:e7:4e:95:7f:94:4e: 8d:bc:36:7d:11:fc:b9:3c:a9:24:65:a1:36:67:1e:b7:c4:fc: 03:f0:a6:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQlCwWOD6g0JeQ2MajX9wcRm+8IowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyNloX DTI3MDMwMzA2MDUyNlowMzExMC8GA1UEAxMoNkNBNzhDQjIzQjBDMTk3MkEyQzEw RDM1MDE2RTMwNjYwMTM0MTQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK00zDerRMekQ6CP1VsJVzAZmQd08Xd6b3BA6QfItnCg0hLpyBSY1n3H9FQC bEb+dJsrpniwL4PJ1eOJ3zYPHqAXSS5+6OTO6vSnmSp9m17rIhN1AQd3kDvo/1/X t8ln4zOyb7f8Y1iNXFKc+GrKbVBRkMKhDflzoHCc/i1S2ZvU9jsOBynyKlG2Qg9o In7Lea4fIp9ymnMxAongdvgXXmW/LOX7Ba+/VuHH1IBUUye7aiho2stHdB7+c2jr vIcrvQnFzCV6jyubMntDwMXo1SZYww/WNgLeQYDP8Uc+yjgx9LyVbPjT4+M3mNn9 sYaA961fijX5mzvI5IrcdXpaR4UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRsp4yy OwwZcqLBDTUBbjBmATQUcjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ok4wDQYJKoZIhvcNAQELBQADggEBAI0BEN8FjHbCyumljjz3ppnYtCBf8PASEwHm K2bKDE3vO2zO1jRrGuH+Qc/z6qE81TQWdXFl88K39pbx6mX7GhDG9PUfFuMIS6Dx JPskhGOP6g7bNlnCX2QhObSvC1RTBC/bJ+JQWo2mF/dJx4oi/LybeYot5/BSNoe1 6x+8Sb+1uer2RepjRUkUM+MbGdVmdZxUoQjy3T3uhoeCMq6iJQTST6z7eNHUx+8L fV6B9eQq2ouyuIMNWAgbvnAn3jB/Hfuu5f2VMP9tMdUHoL7Wzv/a9MQtmh83vhaB hvZOVO+4uww03+dOlX+UTo28Nn0R/Lk8qSRloTZnHrfE/APwpmA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:49 2026 by rpki-client