$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143256.roa File: AS143256.roa (raw, json) Hash identifier: W/6e+8D+eELC+tkRdncrwEhJwImn0/pW73Bd+1VPD9E= Subject key identifier: 37:68:7B:A2:A4:E8:83:AF:79:47:6E:21:FF:19:51:B0:F3:61:32:AC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2CE7C446F62B5485EC53DA375CD22747E0DF8A0F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143256.roa Signing time: Wed 04 Mar 2026 06:07:56 +0000 ROA not before: Wed 04 Mar 2026 06:02:56 +0000 ROA not after: Wed 03 Mar 2027 06:07:56 +0000 asID: 143256 IP address blocks: 240a:a25e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e7:c4:46:f6:2b:54:85:ec:53:da:37:5c:d2:27:47:e0:df:8a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:56 2026 GMT Not After : Mar 3 06:07:56 2027 GMT Subject: CN=37687BA2A4E883AF79476E21FF1951B0F36132AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:fe:7e:18:7e:1d:f2:55:e9:bf:bb:ef:2e: d3:33:68:f0:4b:c9:65:88:db:ea:9d:83:67:5c:4f: 47:4f:e1:ba:74:5a:35:17:66:d7:e2:da:79:28:89: fb:b7:4e:84:52:6d:48:12:78:1d:aa:05:5b:b2:04: 08:71:db:01:f2:19:9a:cb:f0:ef:7f:3a:3c:2a:91: 80:11:8a:d4:8f:57:5f:cb:90:3f:7f:24:d5:ae:6c: d6:c1:35:d1:84:27:e7:f9:52:3c:d0:bc:dd:ca:a0: 22:2d:b0:b0:93:16:1c:a4:61:fa:0d:c0:59:00:18: 7d:c3:47:a5:ad:2a:5d:a3:72:ef:f1:95:80:31:48: 18:fd:30:12:39:2a:eb:e5:55:02:8f:f9:e8:fa:cc: fe:46:f3:bd:47:d3:61:c9:d1:50:fe:69:b9:b5:57: 4e:c6:ec:57:fc:f3:9b:c7:75:27:4f:16:10:39:49: 50:d1:01:68:ef:c8:91:6f:e8:7b:22:ad:f1:15:6b: 49:f9:66:8b:f7:48:d6:95:58:ee:b1:69:24:e7:b5: fd:eb:32:71:54:ba:28:9e:4c:ba:f8:80:fe:ae:ef: 36:c7:2c:ba:43:31:b5:98:13:04:3d:34:e5:c5:7a: 79:b9:4a:23:a0:94:1b:35:a8:e7:6f:eb:30:ad:77: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:68:7B:A2:A4:E8:83:AF:79:47:6E:21:FF:19:51:B0:F3:61:32:AC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143256.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a25e::/32 Signature Algorithm: sha256WithRSAEncryption 49:28:9c:9f:6f:7d:74:10:a9:da:c5:03:3c:51:cf:91:d4:24: fe:0f:c1:46:4e:83:c8:b1:18:e6:99:3d:3c:9a:1d:b4:8b:1d: df:c9:47:14:02:b8:62:a7:2f:0a:c4:a3:6e:fc:ce:5e:55:ad: ac:b9:26:47:6b:3b:b2:dd:ee:ac:67:01:4a:9b:da:f3:f4:9b: d6:1f:ce:07:8d:f2:30:04:64:79:c7:3f:35:36:f0:6a:7e:ea: 93:ad:fb:c9:44:67:22:a4:0a:cd:f0:a7:48:46:00:2b:17:d7: 69:7e:e9:28:fe:72:70:c1:5f:e3:0c:f7:68:f9:85:b8:d2:ef: 99:a5:97:06:e5:3d:0d:83:9c:b2:69:fe:11:4e:66:d4:7b:10: ac:a0:71:be:30:94:40:f2:43:d7:d3:db:43:2e:27:45:90:d6: 74:79:7f:52:d5:5e:17:39:9f:9e:f4:d4:a6:37:73:cb:53:e2: 97:7c:a2:44:cc:97:ce:32:ba:6b:9b:7e:5d:a2:6f:e1:df:5b: 5d:54:fe:d2:b6:d5:cd:48:54:9e:e8:92:5f:1d:67:63:b6:29: 33:83:ca:9c:86:73:04:fa:1d:e0:0c:46:9f:be:6d:91:31:69: ab:98:c6:ae:b7:6b:46:44:e3:38:e4:c0:68:9c:d8:84:cf:43: 56:c9:e1:86 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULOfERvYrVIXsU9o3XNInR+Dfig8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1NloX DTI3MDMwMzA2MDc1NlowMzExMC8GA1UEAxMoMzc2ODdCQTJBNEU4ODNBRjc5NDc2 RTIxRkYxOTUxQjBGMzYxMzJBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTd/n4Yfh3yVem/u+8u0zNo8EvJZYjb6p2DZ1xPR0/hunRaNRdm1+LaeSiJ +7dOhFJtSBJ4HaoFW7IECHHbAfIZmsvw7386PCqRgBGK1I9XX8uQP38k1a5s1sE1 0YQn5/lSPNC83cqgIi2wsJMWHKRh+g3AWQAYfcNHpa0qXaNy7/GVgDFIGP0wEjkq 6+VVAo/56PrM/kbzvUfTYcnRUP5pubVXTsbsV/zzm8d1J08WEDlJUNEBaO/IkW/o eyKt8RVrSflmi/dI1pVY7rFpJOe1/esycVS6KJ5MuviA/q7vNscsukMxtZgTBD00 5cV6eblKI6CUGzWo52/rMK13/skCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ3aHui pOiDr3lHbiH/GVGw82EyrDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ol4wDQYJKoZIhvcNAQELBQADggEBAEkonJ9vfXQQqdrFAzxRz5HUJP4PwUZOg8ix GOaZPTyaHbSLHd/JRxQCuGKnLwrEo278zl5Vray5JkdrO7Ld7qxnAUqb2vP0m9Yf zgeN8jAEZHnHPzU28Gp+6pOt+8lEZyKkCs3wp0hGACsX12l+6Sj+cnDBX+MM92j5 hbjS75mllwblPQ2DnLJp/hFOZtR7EKygcb4wlEDyQ9fT20MuJ0WQ1nR5f1LVXhc5 n5701KY3c8tT4pd8okTMl84yumubfl2ib+HfW11U/tK21c1IVJ7okl8dZ2O2KTOD ypyGcwT6HeAMRp++bZExaauYxq63a0ZE4zjkwGic2ITPQ1bJ4YY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:26 2026 by rpki-client