$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143263.roa File: AS143263.roa (raw, json) Hash identifier: 57qJpYvgoFoIY5aZtv7w7fh9gn+tPwmG6XjhNS8St8Y= Subject key identifier: 56:2A:56:57:05:B4:36:AA:21:9D:AC:5A:60:F9:F1:E2:5B:75:10:F2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 501C5EA5B6830E6764DD144C660714F0F941FE78 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143263.roa Signing time: Wed 04 Mar 2026 06:06:27 +0000 ROA not before: Wed 04 Mar 2026 06:01:27 +0000 ROA not after: Wed 03 Mar 2027 06:06:27 +0000 asID: 143263 IP address blocks: 240a:a265::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1c:5e:a5:b6:83:0e:67:64:dd:14:4c:66:07:14:f0:f9:41:fe:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:27 2026 GMT Not After : Mar 3 06:06:27 2027 GMT Subject: CN=562A565705B436AA219DAC5A60F9F1E25B7510F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b5:8e:b1:6f:35:c0:d5:69:4b:43:e7:10:73: 64:70:75:37:0b:38:23:4a:43:55:06:7d:f3:4b:23: d3:3e:2b:60:7a:30:ff:98:c3:0a:72:c5:21:2a:5c: ba:b2:0d:22:9b:65:00:7e:58:28:b9:6f:0e:62:7e: 69:76:65:a0:0b:d8:75:51:76:a7:57:a4:75:ff:ee: 33:aa:e7:11:a4:04:e6:83:12:93:42:62:f5:35:01: b5:c5:f4:47:82:cb:d2:d6:9c:10:48:fd:c8:8f:02: 39:ca:31:50:66:2a:4a:c2:c1:7b:90:b9:1d:f0:10: 4d:16:9d:a9:73:1e:32:69:73:d6:43:31:cf:8b:cd: d0:26:cb:e5:2b:c4:8e:b4:47:98:4a:0e:4f:f0:d0: 0a:c6:08:b3:0e:82:13:8b:34:9b:9d:b6:35:94:4c: a8:7e:49:77:2d:ad:6d:1e:c0:9f:12:f5:04:4b:d9: c9:d4:d4:80:af:bc:1a:15:9f:b7:f7:b0:a9:4a:3b: f5:02:02:f5:9a:29:e2:d6:1f:3c:2c:dd:5d:d9:52: e4:6d:ed:c8:b5:2f:79:c3:0a:22:1e:1b:d3:c3:6d: ed:16:1b:45:83:d3:a9:2c:30:32:7f:05:51:a1:32: 62:16:cf:e9:6b:47:1e:1c:18:49:60:59:d9:59:23: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2A:56:57:05:B4:36:AA:21:9D:AC:5A:60:F9:F1:E2:5B:75:10:F2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143263.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a265::/32 Signature Algorithm: sha256WithRSAEncryption c2:e1:29:a0:25:6c:86:ec:ed:b4:c1:db:bc:29:d4:d0:ff:bc: bd:06:47:40:8c:99:7a:b6:cf:22:31:28:ba:13:23:2f:af:aa: 25:24:d8:d8:55:26:e0:6e:27:e9:f1:bc:37:4a:2a:0d:9c:be: 62:21:da:92:0e:59:b9:9a:1f:93:c7:33:35:04:17:0d:55:b0: 9b:30:19:10:db:a4:03:79:a0:4c:f0:4a:fa:b9:12:f3:55:88: 9d:ec:94:8f:32:4c:53:f5:4d:49:c1:78:73:d3:1b:ad:a2:42: 26:ef:77:eb:fb:bd:24:3b:49:94:c7:b9:74:5d:ef:3b:56:75: 19:cc:be:6a:45:16:86:1d:6d:33:91:0a:71:5a:6c:d5:60:0d: 13:fc:ed:81:34:83:bb:cf:dc:b0:33:d8:13:55:3a:26:5c:ed: da:b5:fc:4c:a1:14:1a:f2:cd:5d:6d:d6:e6:d5:c6:3d:08:1e: 47:71:56:ac:4a:87:d7:0a:5a:4c:a5:ba:ed:76:46:c9:5f:42: 2b:73:cc:74:b7:53:12:d4:b6:ac:61:01:7e:04:db:0d:2d:f2: cb:4d:48:71:aa:98:2c:98:ab:67:29:8f:be:ba:7f:a4:47:2f: 1b:41:00:85:0d:0e:98:fc:b8:8a:4a:11:f9:0c:6e:1d:57:c8: af:d4:ac:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUBxepbaDDmdk3RRMZgcU8PlB/ngwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyN1oX DTI3MDMwMzA2MDYyN1owMzExMC8GA1UEAxMoNTYyQTU2NTcwNUI0MzZBQTIxOURB QzVBNjBGOUYxRTI1Qjc1MTBGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJG1jrFvNcDVaUtD5xBzZHB1Nws4I0pDVQZ980sj0z4rYHow/5jDCnLFISpc urINIptlAH5YKLlvDmJ+aXZloAvYdVF2p1ekdf/uM6rnEaQE5oMSk0Ji9TUBtcX0 R4LL0tacEEj9yI8COcoxUGYqSsLBe5C5HfAQTRadqXMeMmlz1kMxz4vN0CbL5SvE jrRHmEoOT/DQCsYIsw6CE4s0m522NZRMqH5Jdy2tbR7AnxL1BEvZydTUgK+8GhWf t/ewqUo79QIC9Zop4tYfPCzdXdlS5G3tyLUvecMKIh4b08Nt7RYbRYPTqSwwMn8F UaEyYhbP6WtHHhwYSWBZ2Vkj1T0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRWKlZX BbQ2qiGdrFpg+fHiW3UQ8jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK omUwDQYJKoZIhvcNAQELBQADggEBAMLhKaAlbIbs7bTB27wp1ND/vL0GR0CMmXq2 zyIxKLoTIy+vqiUk2NhVJuBuJ+nxvDdKKg2cvmIh2pIOWbmaH5PHMzUEFw1VsJsw GRDbpAN5oEzwSvq5EvNViJ3slI8yTFP1TUnBeHPTG62iQibvd+v7vSQ7SZTHuXRd 7ztWdRnMvmpFFoYdbTORCnFabNVgDRP87YE0g7vP3LAz2BNVOiZc7dq1/EyhFBry zV1t1ubVxj0IHkdxVqxKh9cKWkyluu12RslfQitzzHS3UxLUtqxhAX4E2w0t8stN SHGqmCyYq2cpj766f6RHLxtBAIUNDpj8uIpKEfkMbh1XyK/UrPk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:42 2026 by rpki-client