$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143250.roa File: AS143250.roa (raw, json) Hash identifier: 9irAuegdnVWrSvaOHSYFApe8o3ubsCJ66hcVTgMtbyY= Subject key identifier: 9E:83:D5:3F:3B:47:14:A8:19:88:67:B0:D6:8A:87:89:BA:02:BC:5B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2B444C56FEAE72ECCA9D55198B5C6454980B61DA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143250.roa Signing time: Wed 04 Mar 2026 06:05:37 +0000 ROA not before: Wed 04 Mar 2026 06:00:37 +0000 ROA not after: Wed 03 Mar 2027 06:05:37 +0000 asID: 143250 IP address blocks: 240a:a258::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:44:4c:56:fe:ae:72:ec:ca:9d:55:19:8b:5c:64:54:98:0b:61:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:37 2026 GMT Not After : Mar 3 06:05:37 2027 GMT Subject: CN=9E83D53F3B4714A8198867B0D68A8789BA02BC5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:30:d2:71:69:2a:3e:f5:ad:4b:d7:51:eb: 75:11:8d:1e:cf:a0:4c:5e:6f:9f:75:03:c1:7c:49: 85:4c:db:6f:b5:f0:ef:aa:06:53:6c:49:cc:2d:92: a4:e6:f0:02:cd:3c:e2:68:d6:ce:75:1f:97:22:b4: 57:4d:5e:9e:a6:d4:0d:d5:33:26:70:12:12:f6:5d: 59:13:8c:79:3d:df:bf:4e:66:79:2b:8c:be:71:91: 8e:7f:78:c4:cc:5b:81:e8:68:95:8c:0b:b3:da:d2: 2c:b4:5f:0c:6e:2a:49:00:95:78:1b:fa:b6:87:70: 9e:5e:c4:bb:c9:1d:91:ae:13:8a:0f:f4:44:fb:aa: 05:2a:9d:8d:86:f3:47:22:71:61:78:88:3d:a0:22: df:ed:85:70:a5:15:45:0d:7f:b7:d1:7c:38:03:3a: 7f:b6:19:5e:6b:e6:74:48:f5:c2:32:3f:55:35:0d: 05:c1:f3:90:9c:83:47:24:6a:38:17:fc:1e:40:9c: 54:41:51:cf:45:38:54:9b:a8:5a:0c:d4:9a:3a:93: 85:ac:14:ad:28:5a:40:fc:23:c3:e8:ad:ba:3c:cb: 6d:56:73:43:9c:8d:fc:76:c4:95:7e:17:eb:4a:34: bf:0f:65:02:5b:11:c6:76:9f:e4:2d:6b:7d:e5:f9: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:83:D5:3F:3B:47:14:A8:19:88:67:B0:D6:8A:87:89:BA:02:BC:5B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143250.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a258::/32 Signature Algorithm: sha256WithRSAEncryption 35:31:ab:1a:cd:c4:88:72:ee:0b:cd:ef:14:1c:4b:f6:63:c8: 8e:3f:d8:98:45:66:80:d9:d8:00:83:10:5c:3d:13:a3:6d:a0: b1:29:62:62:f5:b6:c3:c0:9c:99:57:19:4c:85:dc:49:d1:94: a4:2b:48:7a:67:06:12:75:29:7d:0d:ab:b3:2d:46:7c:06:f2: d7:22:fd:e6:33:ca:21:d3:de:50:84:84:d9:4d:cf:34:83:1e: 0a:92:f5:1a:91:a1:9e:3c:bf:fb:ee:b8:33:af:6b:f6:b3:8e: cd:0e:d7:49:e8:d9:81:1b:01:ef:f4:87:38:4a:e8:a7:89:01: 96:83:b7:2d:9e:4c:39:04:74:b5:0f:2d:fd:67:02:20:66:80: 56:6d:17:c5:bb:8a:55:62:17:e2:ba:23:9e:7b:39:db:e4:69: 94:ed:35:38:a3:fc:32:a9:11:54:60:66:37:19:83:94:68:e5: c2:ac:a0:30:ff:ac:18:eb:8c:3f:84:89:48:0d:3b:75:ef:52: 8e:3c:c1:dd:40:f0:73:17:c9:3f:45:18:54:cd:99:64:1b:15: 1f:a8:8a:35:ad:b3:74:34:9c:90:c7:47:bc:ed:56:86:4b:66: d6:15:5f:4f:0e:79:52:a3:5a:a7:49:8f:7b:b2:d8:8c:e1:00: c0:67:07:f5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUK0RMVv6ucuzKnVUZi1xkVJgLYdowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzN1oX DTI3MDMwMzA2MDUzN1owMzExMC8GA1UEAxMoOUU4M0Q1M0YzQjQ3MTRBODE5ODg2 N0IwRDY4QTg3ODlCQTAyQkM1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMU1MNJxaSo+9a1L11HrdRGNHs+gTF5vn3UDwXxJhUzbb7Xw76oGU2xJzC2S pObwAs084mjWznUflyK0V01enqbUDdUzJnASEvZdWROMeT3fv05meSuMvnGRjn94 xMxbgeholYwLs9rSLLRfDG4qSQCVeBv6todwnl7Eu8kdka4Tig/0RPuqBSqdjYbz RyJxYXiIPaAi3+2FcKUVRQ1/t9F8OAM6f7YZXmvmdEj1wjI/VTUNBcHzkJyDRyRq OBf8HkCcVEFRz0U4VJuoWgzUmjqThawUrShaQPwjw+itujzLbVZzQ5yN/HbElX4X 60o0vw9lAlsRxnaf5C1rfeX5G90CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSeg9U/ O0cUqBmIZ7DWioeJugK8WzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK olgwDQYJKoZIhvcNAQELBQADggEBADUxqxrNxIhy7gvN7xQcS/ZjyI4/2JhFZoDZ 2ACDEFw9E6NtoLEpYmL1tsPAnJlXGUyF3EnRlKQrSHpnBhJ1KX0Nq7MtRnwG8tci /eYzyiHT3lCEhNlNzzSDHgqS9RqRoZ48v/vuuDOva/azjs0O10no2YEbAe/0hzhK 6KeJAZaDty2eTDkEdLUPLf1nAiBmgFZtF8W7ilViF+K6I557OdvkaZTtNTij/DKp EVRgZjcZg5Ro5cKsoDD/rBjrjD+EiUgNO3XvUo48wd1A8HMXyT9FGFTNmWQbFR+o ijWts3Q0nJDHR7ztVoZLZtYVX08OeVKjWqdJj3uy2IzhAMBnB/U= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:15 2026 by rpki-client