$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143243.roa File: AS143243.roa (raw, json) Hash identifier: uzrY30Jj1Uzme+gJEQgyclQDBrc2v+ltXGrTFuAxr6U= Subject key identifier: C7:8B:D8:42:53:F7:15:36:67:29:E3:F7:93:80:F7:CD:42:6A:54:BA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6258BE505F27B8AFE577EBF6D8FD95E185EF5C8C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143243.roa Signing time: Wed 04 Mar 2026 06:07:49 +0000 ROA not before: Wed 04 Mar 2026 06:02:49 +0000 ROA not after: Wed 03 Mar 2027 06:07:49 +0000 asID: 143243 IP address blocks: 240a:a251::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:58:be:50:5f:27:b8:af:e5:77:eb:f6:d8:fd:95:e1:85:ef:5c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:49 2026 GMT Not After : Mar 3 06:07:49 2027 GMT Subject: CN=C78BD84253F715366729E3F79380F7CD426A54BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:0d:c3:49:91:49:eb:2f:d9:ad:ee:4e:a7: a6:aa:35:c4:64:33:f7:83:89:00:bf:4d:22:55:cf: 81:57:3c:cd:bb:0f:10:bc:bd:8c:8d:b5:e3:fb:85: 0a:e3:9f:f2:52:57:a3:0c:85:de:7e:54:37:82:1b: af:2c:a1:e3:2e:2e:d6:62:da:c2:44:8d:18:ba:07: 1f:d2:42:1a:de:2f:9b:35:13:ae:00:cb:ee:27:da: d2:16:d6:5d:1b:9d:6d:2a:5b:d3:75:d6:a1:71:db: ab:3a:29:0f:6b:de:8d:db:28:c4:f7:e3:22:f7:af: bf:9b:f3:b1:a3:4a:cb:2e:49:4a:46:51:aa:72:7f: cb:11:86:e1:c4:80:2f:4a:93:7c:b5:39:3a:0b:6c: d4:f6:f3:cd:15:f2:a1:5a:e0:a4:a9:b2:17:a0:75: 9e:0d:9d:67:69:82:2e:57:ae:94:a4:7c:ab:a8:67: 34:6a:db:63:6c:ac:0b:a3:3d:53:40:c3:88:fc:af: 06:f4:27:c3:3c:d5:d5:c2:f4:a9:a1:16:bd:0a:fc: 3e:50:24:32:1f:be:8c:55:ef:59:29:29:13:ba:91: 8c:0b:7e:b3:9a:5a:04:7a:d2:94:4a:6c:69:e6:95: a1:70:73:a3:21:62:6a:b8:e3:fa:66:98:03:be:00: d1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8B:D8:42:53:F7:15:36:67:29:E3:F7:93:80:F7:CD:42:6A:54:BA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143243.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a251::/32 Signature Algorithm: sha256WithRSAEncryption 77:07:2d:fc:50:d7:12:63:58:f6:92:46:3d:9a:3a:3e:29:a0: ae:83:f8:52:63:3b:09:40:38:06:dc:9d:48:a4:ad:87:fd:68: 2e:dc:7a:02:d1:0f:2f:15:e8:ea:62:82:73:f0:54:5b:27:c7: 45:0e:d4:44:20:6e:ba:b0:2d:ae:c5:98:33:c2:b0:02:00:d5: 76:5a:8c:b7:72:86:ed:e6:b2:56:9b:c4:98:1f:01:d4:50:fd: 70:2c:81:23:2e:dc:c3:8d:85:cb:b3:2c:2e:e8:f6:7e:ca:ea: af:ff:73:5e:fa:b0:0d:fb:28:69:51:41:78:d7:76:07:6e:1c: 8b:94:e3:ee:cc:fb:46:38:3d:a6:a9:22:6f:55:6f:ac:80:9c: 8a:24:41:a9:55:25:23:4e:3d:2d:d2:a6:a9:09:df:42:40:84: 4f:b9:1c:d2:44:5b:8e:ac:19:51:b8:07:75:af:07:f1:37:96: 32:bd:42:82:d6:8b:37:54:99:3e:55:a5:ce:7d:23:df:11:93: 9e:66:34:ae:fb:95:d9:6e:21:ba:fe:d4:06:69:09:4f:1a:01: 1b:bc:50:44:4b:8f:2e:88:aa:58:6f:5b:9e:67:bb:a7:c6:e1: 5d:34:00:00:56:46:3d:c5:26:a3:d4:91:c0:ee:ed:ab:22:b5: 81:eb:da:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYli+UF8nuK/ld+v22P2V4YXvXIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0OVoX DTI3MDMwMzA2MDc0OVowMzExMC8GA1UEAxMoQzc4QkQ4NDI1M0Y3MTUzNjY3MjlF M0Y3OTM4MEY3Q0Q0MjZBNTRCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALChDcNJkUnrL9mt7k6npqo1xGQz94OJAL9NIlXPgVc8zbsPELy9jI214/uF CuOf8lJXowyF3n5UN4Ibryyh4y4u1mLawkSNGLoHH9JCGt4vmzUTrgDL7ifa0hbW XRudbSpb03XWoXHbqzopD2vejdsoxPfjIvevv5vzsaNKyy5JSkZRqnJ/yxGG4cSA L0qTfLU5Ogts1PbzzRXyoVrgpKmyF6B1ng2dZ2mCLleulKR8q6hnNGrbY2ysC6M9 U0DDiPyvBvQnwzzV1cL0qaEWvQr8PlAkMh++jFXvWSkpE7qRjAt+s5paBHrSlEps aeaVoXBzoyFiarjj+maYA74A0dMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTHi9hC U/cVNmcp4/eTgPfNQmpUujAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK olEwDQYJKoZIhvcNAQELBQADggEBAHcHLfxQ1xJjWPaSRj2aOj4poK6D+FJjOwlA OAbcnUikrYf9aC7cegLRDy8V6OpignPwVFsnx0UO1EQgbrqwLa7FmDPCsAIA1XZa jLdyhu3mslabxJgfAdRQ/XAsgSMu3MONhcuzLC7o9n7K6q//c176sA37KGlRQXjX dgduHIuU4+7M+0Y4PaapIm9Vb6yAnIokQalVJSNOPS3SpqkJ30JAhE+5HNJEW46s GVG4B3WvB/E3ljK9QoLWizdUmT5Vpc59I98Rk55mNK77ldluIbr+1AZpCU8aARu8 UERLjy6IqlhvW55nu6fG4V00AABWRj3FJqPUkcDu7asitYHr2lk= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:32 2026 by rpki-client