$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143248.roa File: AS143248.roa (raw, json) Hash identifier: B0NJ2GZgzSdRNgJDFEG4addAxycNq5D/GZ1uz29dlmU= Subject key identifier: 0E:AF:EB:15:83:81:2E:40:F1:14:CC:43:D9:12:DF:03:AA:B4:90:50 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 496AEF2728D30CC713300A2F9BFA8FE5D04CE8FD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143248.roa Signing time: Wed 04 Mar 2026 06:05:58 +0000 ROA not before: Wed 04 Mar 2026 06:00:58 +0000 ROA not after: Wed 03 Mar 2027 06:05:58 +0000 asID: 143248 IP address blocks: 240a:a256::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6a:ef:27:28:d3:0c:c7:13:30:0a:2f:9b:fa:8f:e5:d0:4c:e8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:58 2026 GMT Not After : Mar 3 06:05:58 2027 GMT Subject: CN=0EAFEB1583812E40F114CC43D912DF03AAB49050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:25:9d:cf:c0:e4:48:d9:e6:e8:41:ab:04:3b: c0:da:73:56:24:56:44:17:9e:93:a8:82:7c:6e:e8: 13:4d:c8:11:24:bb:12:b3:84:80:fd:55:fb:6a:03: aa:cd:ba:21:6a:88:35:2a:f5:4e:ce:c7:0b:0e:ee: f5:1b:63:84:04:66:d0:c6:d6:7b:19:a5:4c:c3:d8: 04:8a:3f:bb:fa:63:bf:01:3c:20:5c:37:7a:11:3f: b3:ac:63:6e:d5:f7:75:4e:fc:f5:1e:0f:de:44:a5: 37:32:18:ae:d0:f8:7a:4a:13:32:4d:d6:c4:d9:14: 98:4d:8a:ef:1c:96:e3:f3:5d:44:7d:b2:4e:e0:57: 0a:d9:62:72:58:c0:de:3a:87:51:72:44:97:9b:9b: e7:95:13:79:ce:dc:88:ac:ec:24:a0:0a:66:02:ba: 24:af:66:53:05:7c:70:62:2e:8d:ff:14:18:d8:2d: 8d:2b:c6:24:53:49:cd:46:79:26:9a:54:b5:91:dd: b5:e8:f2:72:b4:f9:80:3e:d7:d6:08:76:22:70:93: c6:d1:2b:ba:a1:3b:16:f2:0e:7c:54:43:c2:13:e3: d0:c6:c9:61:4b:05:4e:5a:71:27:17:d6:d6:b5:6c: 92:b4:73:e2:2c:eb:9f:12:31:0c:8e:40:8b:a5:11: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AF:EB:15:83:81:2E:40:F1:14:CC:43:D9:12:DF:03:AA:B4:90:50 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143248.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a256::/32 Signature Algorithm: sha256WithRSAEncryption 27:1a:4b:06:a2:b1:41:16:cd:85:f0:39:26:3c:58:49:3b:b8: d5:e9:b2:7b:75:12:aa:59:da:ea:41:6c:f1:e6:a5:00:2c:ff: 27:af:80:bf:e3:1e:c7:ba:8e:c1:b3:05:12:35:98:4d:3c:6d: 5b:a5:06:0b:be:8b:9a:df:23:75:c2:4c:0d:43:ab:07:19:55: 75:b9:a7:c2:28:4d:93:57:f5:07:a2:fc:95:03:fd:90:95:a8: d7:7a:ba:24:3b:5d:15:b4:73:f6:4c:c0:56:c9:39:64:03:43: 72:02:d1:cf:3b:12:7c:c9:b7:60:7a:58:3b:c0:30:c4:c2:88: e0:e3:aa:c1:57:24:87:93:eb:36:e6:91:db:c5:c5:bb:fc:3b: e9:2d:f9:65:54:8c:75:67:96:ad:43:54:63:96:0d:ba:68:80: 57:c7:3d:44:79:8e:3b:90:40:1f:99:d6:60:eb:f4:e5:c3:cf: 72:e2:66:e7:b7:1d:26:c1:7d:83:82:12:86:39:9b:e4:94:e9: 55:01:c9:ca:0f:3c:e5:f0:39:45:23:c4:3e:b3:19:d4:c5:a8: 8a:36:5d:a6:c0:4e:66:ab:86:1a:94:f5:c6:b3:cb:2a:43:0e: fb:b5:ab:e5:17:37:69:5e:9d:9f:f4:79:ed:d7:51:86:1c:24: a0:86:af:05 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSWrvJyjTDMcTMAovm/qP5dBM6P0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1OFoX DTI3MDMwMzA2MDU1OFowMzExMC8GA1UEAxMoMEVBRkVCMTU4MzgxMkU0MEYxMTRD QzQzRDkxMkRGMDNBQUI0OTA1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMlnc/A5EjZ5uhBqwQ7wNpzViRWRBeek6iCfG7oE03IESS7ErOEgP1V+2oD qs26IWqINSr1Ts7HCw7u9RtjhARm0MbWexmlTMPYBIo/u/pjvwE8IFw3ehE/s6xj btX3dU789R4P3kSlNzIYrtD4ekoTMk3WxNkUmE2K7xyW4/NdRH2yTuBXCtlicljA 3jqHUXJEl5ub55UTec7ciKzsJKAKZgK6JK9mUwV8cGIujf8UGNgtjSvGJFNJzUZ5 JppUtZHdtejycrT5gD7X1gh2InCTxtEruqE7FvIOfFRDwhPj0MbJYUsFTlpxJxfW 1rVskrRz4izrnxIxDI5Ai6URtJUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQOr+sV g4EuQPEUzEPZEt8DqrSQUDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK olYwDQYJKoZIhvcNAQELBQADggEBACcaSwaisUEWzYXwOSY8WEk7uNXpsnt1EqpZ 2upBbPHmpQAs/yevgL/jHse6jsGzBRI1mE08bVulBgu+i5rfI3XCTA1DqwcZVXW5 p8IoTZNX9Qei/JUD/ZCVqNd6uiQ7XRW0c/ZMwFbJOWQDQ3IC0c87EnzJt2B6WDvA MMTCiODjqsFXJIeT6zbmkdvFxbv8O+kt+WVUjHVnlq1DVGOWDbpogFfHPUR5jjuQ QB+Z1mDr9OXDz3LiZue3HSbBfYOCEoY5m+SU6VUBycoPPOXwOUUjxD6zGdTFqIo2 XabATmarhhqU9cazyypDDvu1q+UXN2lenZ/0ee3XUYYcJKCGrwU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:49 2026 by rpki-client