$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143257.roa File: AS143257.roa (raw, json) Hash identifier: w+xgNHx50wGeSUIQQB4qCNDgl97jvC0YqPaCcwkFgYE= Subject key identifier: 4C:29:34:DC:92:1D:39:3E:0A:1F:99:65:5A:29:BF:0D:6D:EC:36:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1F083B1CEE1DE6A2D7CCABEEDEBC5F0FEFA81F1A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143257.roa Signing time: Wed 04 Mar 2026 06:07:45 +0000 ROA not before: Wed 04 Mar 2026 06:02:45 +0000 ROA not after: Wed 03 Mar 2027 06:07:45 +0000 asID: 143257 IP address blocks: 240a:a25f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:08:3b:1c:ee:1d:e6:a2:d7:cc:ab:ee:de:bc:5f:0f:ef:a8:1f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:45 2026 GMT Not After : Mar 3 06:07:45 2027 GMT Subject: CN=4C2934DC921D393E0A1F99655A29BF0D6DEC361F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fa:29:83:f1:bf:ae:7c:f7:25:06:fa:f6:94: ba:97:36:1f:02:74:8a:39:20:d4:b3:93:06:3f:b0: f8:25:2e:d5:03:48:ef:64:5d:b7:78:bb:6f:c7:8b: b4:b2:dc:02:74:c5:05:56:fe:36:70:6f:1f:df:66: e4:17:27:51:23:0d:76:2e:1f:ac:45:5a:db:95:aa: 26:6f:be:0f:ef:71:ca:75:8a:e9:e1:30:1b:29:4e: 99:3a:01:da:b4:68:63:7d:4b:0e:f6:fb:8c:a3:bf: d5:6e:5a:48:0c:2d:73:b1:c0:65:d1:50:01:dc:7b: 4d:46:a0:57:93:5a:40:d3:ad:9e:49:0e:46:d6:f7: 0d:7b:78:fa:a8:f2:ff:e7:22:bc:d4:35:7c:74:0e: 59:c3:0d:06:9f:70:2b:d2:31:05:72:b5:04:a8:c1: c3:81:51:00:7d:8a:23:e8:0b:3a:2e:b4:93:a2:5b: e3:7a:44:2d:2e:09:10:73:56:60:57:ff:72:0c:7c: 5d:b8:76:e8:db:17:96:89:73:16:ba:8a:43:ec:b5: c3:e5:af:72:04:d7:30:c1:59:99:88:b7:ac:3f:a9: 25:8a:c5:e0:b5:40:53:1e:13:e2:ac:29:d7:5d:49: 87:d9:fa:d3:2e:8d:79:bc:e2:cf:4b:e6:7b:e8:c1: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:29:34:DC:92:1D:39:3E:0A:1F:99:65:5A:29:BF:0D:6D:EC:36:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a25f::/32 Signature Algorithm: sha256WithRSAEncryption 88:7a:5d:d8:f1:b2:58:9d:24:68:da:dc:6b:1d:35:da:4f:54: e5:0b:a3:e7:20:86:c0:d6:29:76:e3:50:ae:17:62:85:47:87: fe:79:b8:ec:c0:cc:b5:9e:34:a8:8b:42:80:3c:a8:d8:08:93: ef:52:d0:e1:cc:68:08:02:2f:93:91:76:a7:7a:fe:26:a1:86: c4:7a:1d:ea:70:5a:eb:53:20:12:dc:9f:24:ad:49:a7:bd:06: 21:07:b2:75:23:72:35:d0:55:44:56:52:54:5f:40:f6:2e:41: bf:c8:2c:c1:ec:5c:3e:d7:9a:3e:0b:b5:b5:b0:c9:ad:36:ac: 4b:97:e3:9c:6f:14:d2:62:64:4c:22:3d:e4:d2:47:8a:cc:bf: 4b:51:8c:1e:da:7b:01:45:82:f7:e6:d0:44:85:17:16:4f:2a: ff:95:78:b9:5d:16:07:3c:bc:2d:67:bf:5e:c8:cd:45:9e:10: 00:39:cf:89:d1:25:32:9d:7d:da:d9:e7:01:96:8f:18:e6:24: 25:ce:25:c0:0c:49:23:b2:cf:dd:47:cd:9f:99:0e:af:15:dc: 43:bc:db:55:32:ee:90:70:c8:98:07:db:43:8a:d1:3d:9f:08: 7f:9e:cd:31:5e:1e:10:26:e7:20:78:8b:a8:37:4a:ec:15:7b: 05:c0:eb:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHwg7HO4d5qLXzKvu3rxfD++oHxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0NVoX DTI3MDMwMzA2MDc0NVowMzExMC8GA1UEAxMoNEMyOTM0REM5MjFEMzkzRTBBMUY5 OTY1NUEyOUJGMEQ2REVDMzYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI36KYPxv6589yUG+vaUupc2HwJ0ijkg1LOTBj+w+CUu1QNI72Rdt3i7b8eL tLLcAnTFBVb+NnBvH99m5BcnUSMNdi4frEVa25WqJm++D+9xynWK6eEwGylOmToB 2rRoY31LDvb7jKO/1W5aSAwtc7HAZdFQAdx7TUagV5NaQNOtnkkORtb3DXt4+qjy /+civNQ1fHQOWcMNBp9wK9IxBXK1BKjBw4FRAH2KI+gLOi60k6Jb43pELS4JEHNW YFf/cgx8Xbh26NsXlolzFrqKQ+y1w+WvcgTXMMFZmYi3rD+pJYrF4LVAUx4T4qwp 111Jh9n60y6Nebziz0vme+jBRBcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRMKTTc kh05PgofmWVaKb8Nbew2HzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ol8wDQYJKoZIhvcNAQELBQADggEBAIh6XdjxslidJGja3GsdNdpPVOULo+cghsDW KXbjUK4XYoVHh/55uOzAzLWeNKiLQoA8qNgIk+9S0OHMaAgCL5ORdqd6/iahhsR6 HepwWutTIBLcnyStSae9BiEHsnUjcjXQVURWUlRfQPYuQb/ILMHsXD7Xmj4LtbWw ya02rEuX45xvFNJiZEwiPeTSR4rMv0tRjB7aewFFgvfm0ESFFxZPKv+VeLldFgc8 vC1nv17IzUWeEAA5z4nRJTKdfdrZ5wGWjxjmJCXOJcAMSSOyz91HzZ+ZDq8V3EO8 21Uy7pBwyJgH20OK0T2fCH+ezTFeHhAm5yB4i6g3SuwVewXA63Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:33 2026 by rpki-client