$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143262.roa File: AS143262.roa (raw, json) Hash identifier: fDYX19pkwj6l25+oyrg95QXuWoggshjaqO6T2YTg7vU= Subject key identifier: 08:E5:0D:B8:3D:16:7D:9A:65:EE:88:5C:A8:F1:A8:AF:FD:CC:D7:49 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 77D6731013405063F83CF642E694604D3589F78B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143262.roa Signing time: Wed 04 Mar 2026 06:07:08 +0000 ROA not before: Wed 04 Mar 2026 06:02:08 +0000 ROA not after: Wed 03 Mar 2027 06:07:08 +0000 asID: 143262 IP address blocks: 240a:a264::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d6:73:10:13:40:50:63:f8:3c:f6:42:e6:94:60:4d:35:89:f7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:08 2026 GMT Not After : Mar 3 06:07:08 2027 GMT Subject: CN=08E50DB83D167D9A65EE885CA8F1A8AFFDCCD749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c3:57:21:55:2f:57:4d:36:59:af:5a:60:0e: f3:3c:bc:6c:c4:be:58:67:fe:cc:60:68:98:74:4d: 6b:ff:d5:be:b4:31:b7:27:54:2c:7e:54:67:ea:5d: b8:d0:88:88:48:9b:a7:08:25:78:97:43:4b:2f:2d: e8:62:78:7c:e3:bf:05:f1:b6:57:36:d3:75:58:01: d0:8b:4d:7f:8d:1d:81:6f:e6:e2:82:b7:37:71:b0: 33:ee:db:1c:91:be:b5:99:bf:57:c1:98:cd:73:58: 3d:02:39:8d:ed:59:89:a0:18:68:8d:ae:d0:50:d8: 97:ca:b5:c9:bd:eb:56:aa:14:65:af:83:39:d9:0b: 44:dc:60:b8:7a:a8:b7:e0:19:25:78:01:77:69:53: 35:0c:d2:ed:e9:ae:2e:00:ca:04:fe:b2:b8:ea:36: ed:40:4d:75:4d:cf:96:0e:f4:01:c6:63:a9:c4:58: 0e:c4:48:52:a7:ab:7e:8a:fb:4b:1b:61:27:16:aa: fc:dc:8c:11:af:25:9d:35:d1:0c:1d:33:b3:1a:39: c6:dc:25:37:76:08:20:ab:ee:77:cd:74:2d:6b:b9: d9:9d:73:18:f8:90:3a:94:df:50:16:e6:31:1d:ef: b3:88:eb:fe:74:56:78:cd:63:ea:23:50:af:0e:d7: 8f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E5:0D:B8:3D:16:7D:9A:65:EE:88:5C:A8:F1:A8:AF:FD:CC:D7:49 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143262.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a264::/32 Signature Algorithm: sha256WithRSAEncryption c6:b5:66:45:82:12:fb:7d:eb:89:71:b2:ad:81:07:d4:08:f0: f2:25:dd:53:06:88:c8:43:35:19:38:f9:ef:0a:45:52:6d:eb: 1d:bd:79:48:8a:d1:3d:0e:1e:d1:a5:19:fb:fc:aa:41:4c:c5: 87:7e:48:86:e6:25:c9:7e:9b:10:67:f7:4d:5b:88:7a:6c:3c: 31:67:ec:09:b6:52:b8:39:42:fc:37:77:e4:33:7c:e5:f2:6e: 1c:a7:f7:e0:59:fa:f6:97:6f:10:e0:4c:74:14:72:bf:52:e1: 9c:a9:42:6c:22:9d:4e:3e:99:4b:cb:36:25:d2:19:e1:7a:18: 86:60:eb:61:ed:77:32:cf:80:1d:88:08:23:5c:f6:3d:f1:22: 6a:97:e4:3b:58:37:d2:a3:d8:d4:5c:e9:3e:2f:5c:74:34:25: 67:88:50:c5:8f:56:c5:fd:83:00:27:45:46:3c:72:85:1a:2c: ff:d4:d9:50:76:52:b3:cb:bb:3d:1b:b0:fe:2b:24:a5:50:a5: 09:69:58:e2:e7:e1:3e:dc:d6:31:db:9c:d3:a6:35:18:49:0d: 35:76:34:07:10:77:3f:d9:94:67:19:7c:0a:e4:25:ec:08:01: f4:46:14:ca:59:35:51:3a:b1:8e:a2:d4:18:c7:a0:10:3c:81: e2:f5:df:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUd9ZzEBNAUGP4PPZC5pRgTTWJ94swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwOFoX DTI3MDMwMzA2MDcwOFowMzExMC8GA1UEAxMoMDhFNTBEQjgzRDE2N0Q5QTY1RUU4 ODVDQThGMUE4QUZGRENDRDc0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPnDVyFVL1dNNlmvWmAO8zy8bMS+WGf+zGBomHRNa//VvrQxtydULH5UZ+pd uNCIiEibpwgleJdDSy8t6GJ4fOO/BfG2VzbTdVgB0ItNf40dgW/m4oK3N3GwM+7b HJG+tZm/V8GYzXNYPQI5je1ZiaAYaI2u0FDYl8q1yb3rVqoUZa+DOdkLRNxguHqo t+AZJXgBd2lTNQzS7emuLgDKBP6yuOo27UBNdU3Plg70AcZjqcRYDsRIUqerfor7 SxthJxaq/NyMEa8lnTXRDB0zsxo5xtwlN3YIIKvud810LWu52Z1zGPiQOpTfUBbm MR3vs4jr/nRWeM1j6iNQrw7Xj0UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQI5Q24 PRZ9mmXuiFyo8aiv/czXSTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK omQwDQYJKoZIhvcNAQELBQADggEBAMa1ZkWCEvt964lxsq2BB9QI8PIl3VMGiMhD NRk4+e8KRVJt6x29eUiK0T0OHtGlGfv8qkFMxYd+SIbmJcl+mxBn901biHpsPDFn 7Am2Urg5Qvw3d+QzfOXybhyn9+BZ+vaXbxDgTHQUcr9S4ZypQmwinU4+mUvLNiXS GeF6GIZg62HtdzLPgB2ICCNc9j3xImqX5DtYN9Kj2NRc6T4vXHQ0JWeIUMWPVsX9 gwAnRUY8coUaLP/U2VB2UrPLuz0bsP4rJKVQpQlpWOLn4T7c1jHbnNOmNRhJDTV2 NAcQdz/ZlGcZfArkJewIAfRGFMpZNVE6sY6i1BjHoBA8geL13xE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:29 2026 by rpki-client