$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143244.roa File: AS143244.roa (raw, json) Hash identifier: rbPOKJKVAzmVBFepyZZYiniLchw4936QoMXJQb8beAw= Subject key identifier: 19:18:4B:20:B8:F7:85:BF:CC:BF:44:00:FB:60:30:87:BC:C5:06:10 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0EF6754AB980A206947B6ED276459918B062B51E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143244.roa Signing time: Wed 04 Mar 2026 06:06:55 +0000 ROA not before: Wed 04 Mar 2026 06:01:55 +0000 ROA not after: Wed 03 Mar 2027 06:06:55 +0000 asID: 143244 IP address blocks: 240a:a252::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f6:75:4a:b9:80:a2:06:94:7b:6e:d2:76:45:99:18:b0:62:b5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:55 2026 GMT Not After : Mar 3 06:06:55 2027 GMT Subject: CN=19184B20B8F785BFCCBF4400FB603087BCC50610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:fd:87:c8:30:99:16:bb:1a:d6:48:3b:3e: aa:34:82:31:a8:c2:0b:05:b1:ba:c7:a4:5f:87:fa: 51:bf:a0:6f:5a:3e:74:d3:76:53:7a:fa:1e:1c:39: 8f:e5:d6:a3:3f:95:b7:1d:df:c7:3c:39:ee:81:69: 7c:0e:a0:81:ec:9d:00:8d:13:b8:b0:f5:0b:a5:fb: 7e:ac:de:fa:91:f1:9e:bc:a1:df:87:43:1e:6f:90: 13:bf:7d:e9:7a:b4:99:60:6f:56:98:bc:04:aa:53: fa:73:14:3e:52:7f:7e:68:f7:56:c7:46:6b:5e:41: d3:86:af:e4:f7:23:d6:47:7d:7e:a7:ff:0a:ed:31: c6:8c:ab:ed:61:17:45:ee:09:be:9b:94:45:95:4b: d4:ad:24:d5:87:0e:50:6e:8c:df:a3:61:0c:d5:7e: 07:7a:ec:17:30:3a:05:91:f3:25:c8:d6:0c:30:09: fd:7e:4e:55:7b:38:14:f8:92:cf:40:23:b4:99:e4: 35:bf:6b:65:02:26:9d:a6:17:17:9f:a7:dd:41:3e: 44:d3:da:39:6d:b2:c9:66:70:e2:fc:25:3a:35:f1: 33:a7:9f:f6:8c:99:ad:43:f5:97:71:9e:1b:a6:f5: eb:2f:a4:17:87:c3:43:9e:b5:02:69:91:c3:40:42: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:18:4B:20:B8:F7:85:BF:CC:BF:44:00:FB:60:30:87:BC:C5:06:10 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143244.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a252::/32 Signature Algorithm: sha256WithRSAEncryption 5c:b5:ce:e0:f3:ba:36:bd:cb:7b:70:83:36:33:18:db:fc:b5: 94:1f:5d:70:d7:29:79:16:47:51:34:52:fc:13:d0:54:06:21: fa:02:bf:9f:e7:8a:53:42:a4:30:28:53:87:12:e6:cc:b2:cb: ee:73:58:87:a1:38:1c:eb:39:57:fa:c4:74:3a:67:30:7b:e0: 9e:71:89:dd:67:05:d0:5d:10:ec:57:97:37:0e:9a:35:22:9b: 04:a8:2c:26:81:85:f1:32:82:d2:58:cf:15:f4:3d:ce:df:24: ff:1b:30:bb:36:bb:7c:e9:2c:48:2b:2f:1f:91:4b:7b:b6:20: 2e:c8:36:ea:42:11:7e:3b:c6:f7:d4:ec:0e:73:9e:95:00:d4: f7:07:0a:5d:98:17:ff:b1:7a:25:a2:2b:31:f9:51:2f:bb:55: 94:b8:25:d9:4a:09:9e:20:4a:e7:38:16:5f:7a:56:22:09:db: 47:3e:67:ff:1a:e8:80:1a:86:6d:57:f7:ee:b8:54:16:5f:52: 1a:ae:f8:83:42:74:ed:4a:1f:55:9b:70:f7:4b:31:e0:c9:91: aa:e1:da:c4:0d:d3:77:53:4f:47:c2:5f:c2:b6:5d:b7:0b:60: 41:ff:5e:93:a7:2a:94:77:68:1d:7d:86:93:5d:86:e4:47:db: bb:53:34:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDvZ1SrmAogaUe27SdkWZGLBitR4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1NVoX DTI3MDMwMzA2MDY1NVowMzExMC8GA1UEAxMoMTkxODRCMjBCOEY3ODVCRkNDQkY0 NDAwRkI2MDMwODdCQ0M1MDYxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJg/YfIMJkWuxrWSDs+qjSCMajCCwWxusekX4f6Ub+gb1o+dNN2U3r6Hhw5 j+XWoz+Vtx3fxzw57oFpfA6ggeydAI0TuLD1C6X7fqze+pHxnryh34dDHm+QE799 6Xq0mWBvVpi8BKpT+nMUPlJ/fmj3VsdGa15B04av5Pcj1kd9fqf/Cu0xxoyr7WEX Re4JvpuURZVL1K0k1YcOUG6M36NhDNV+B3rsFzA6BZHzJcjWDDAJ/X5OVXs4FPiS z0AjtJnkNb9rZQImnaYXF5+n3UE+RNPaOW2yyWZw4vwlOjXxM6ef9oyZrUP1l3Ge G6b16y+kF4fDQ561AmmRw0BC5w0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQZGEsg uPeFv8y/RAD7YDCHvMUGEDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK olIwDQYJKoZIhvcNAQELBQADggEBAFy1zuDzuja9y3twgzYzGNv8tZQfXXDXKXkW R1E0UvwT0FQGIfoCv5/nilNCpDAoU4cS5syyy+5zWIehOBzrOVf6xHQ6ZzB74J5x id1nBdBdEOxXlzcOmjUimwSoLCaBhfEygtJYzxX0Pc7fJP8bMLs2u3zpLEgrLx+R S3u2IC7INupCEX47xvfU7A5znpUA1PcHCl2YF/+xeiWiKzH5US+7VZS4JdlKCZ4g Suc4Fl96ViIJ20c+Z/8a6IAahm1X9+64VBZfUhqu+INCdO1KH1WbcPdLMeDJkarh 2sQN03dTT0fCX8K2XbcLYEH/XpOnKpR3aB19hpNdhuRH27tTNLM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:47 2026 by rpki-client