$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143266.roa File: AS143266.roa (raw, json) Hash identifier: vauP1gfXmurDmB9RoQYH+OlkVOCCAgbC9EUT2JYPHRw= Subject key identifier: 75:14:39:CD:D5:A5:4C:F7:8C:A4:55:8A:27:42:52:F5:63:7A:A6:1C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 59DF069AF4E908071FF3AF050706011B605C11B8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143266.roa Signing time: Wed 04 Mar 2026 06:05:49 +0000 ROA not before: Wed 04 Mar 2026 06:00:49 +0000 ROA not after: Wed 03 Mar 2027 06:05:49 +0000 asID: 143266 IP address blocks: 240a:a268::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:df:06:9a:f4:e9:08:07:1f:f3:af:05:07:06:01:1b:60:5c:11:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:49 2026 GMT Not After : Mar 3 06:05:49 2027 GMT Subject: CN=751439CDD5A54CF78CA4558A274252F5637AA61C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:47:87:95:79:44:a5:10:c9:5a:87:a6:91: bb:d9:2f:1a:08:36:54:99:7f:f7:a7:f3:b6:b8:75: 47:e8:14:e5:6e:a5:2d:2d:3f:4d:fc:3c:14:38:d8: 8b:64:cf:6f:a3:6c:36:8c:74:9b:f2:7f:60:b7:c2: ba:1c:4c:be:ae:f1:13:97:4b:78:41:c9:c5:8d:2a: af:4e:c2:07:6b:e8:3b:3f:19:a7:58:98:c8:d3:2d: c8:63:16:05:31:9f:d8:c6:52:b5:63:69:05:d3:02: c9:e6:60:f4:e0:ea:7e:82:d2:14:c7:81:71:2f:41: 0e:16:db:ce:f9:3c:22:cf:9d:78:93:01:ec:a6:af: 28:bb:bc:f7:38:65:a9:66:3b:ce:3a:cc:42:38:1c: b5:f3:46:32:b2:e3:d8:37:96:02:a4:33:ba:ea:f2: 40:d2:59:4c:3b:58:2b:88:f1:00:6d:b1:40:7a:df: 90:0e:13:b0:6f:17:25:26:8f:40:11:e8:32:47:d6: 14:3a:52:c8:5e:3e:73:5b:85:bc:11:d9:71:cd:25: d5:0a:8c:6b:0b:91:34:66:38:de:36:36:67:d6:47: aa:e0:06:e7:e4:21:32:ab:9d:ba:b4:1e:f9:33:d5: 36:0c:64:99:4d:3b:1c:0e:ec:f7:34:f4:a3:2e:e0: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:14:39:CD:D5:A5:4C:F7:8C:A4:55:8A:27:42:52:F5:63:7A:A6:1C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143266.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a268::/32 Signature Algorithm: sha256WithRSAEncryption 3f:bc:27:09:fd:cb:32:af:10:ed:a9:82:84:97:b3:b6:0f:d8: e2:f4:a6:62:d3:d0:b6:3d:34:59:44:06:4f:c6:15:86:a9:b2: a4:03:ae:88:ec:71:cb:68:24:c5:15:55:18:5c:f7:57:57:ad: f1:67:f5:99:ed:90:63:a6:06:3f:61:22:4f:d3:41:e8:b9:73: 98:d5:e4:c2:a1:86:c6:31:e7:a1:30:1e:11:0c:35:7a:b6:0d: 81:9a:f6:c9:f2:e5:ed:3e:67:20:b4:64:95:8d:19:88:44:83: 53:e6:cf:ff:3b:fa:50:31:a3:6d:21:1a:e5:4e:c0:f5:31:49: c5:42:58:c4:15:db:ff:1b:c3:68:65:c3:96:f5:e0:0d:ef:ae: a7:05:f2:19:d9:03:d6:e3:e7:a6:84:0b:ab:43:41:fa:00:61: 65:c1:8e:74:c8:cd:0d:24:b7:79:a4:28:b9:01:db:f1:f3:7f: ad:75:de:1f:75:57:6e:20:98:6d:05:df:9c:56:47:08:ce:94: 45:03:f4:8c:40:62:82:25:8c:75:26:6e:08:dc:cf:a6:1e:89: e3:e5:8c:69:27:0e:42:e3:53:91:b0:b9:db:b8:29:1e:f5:a8: 3b:9a:f1:37:1a:1f:ec:46:b5:6b:b6:2d:88:40:1d:35:a1:b6: d6:70:18:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWd8GmvTpCAcf868FBwYBG2BcEbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0OVoX DTI3MDMwMzA2MDU0OVowMzExMC8GA1UEAxMoNzUxNDM5Q0RENUE1NENGNzhDQTQ1 NThBMjc0MjUyRjU2MzdBQTYxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNPR4eVeUSlEMlah6aRu9kvGgg2VJl/96fztrh1R+gU5W6lLS0/Tfw8FDjY i2TPb6NsNox0m/J/YLfCuhxMvq7xE5dLeEHJxY0qr07CB2voOz8Zp1iYyNMtyGMW BTGf2MZStWNpBdMCyeZg9ODqfoLSFMeBcS9BDhbbzvk8Is+deJMB7KavKLu89zhl qWY7zjrMQjgctfNGMrLj2DeWAqQzuuryQNJZTDtYK4jxAG2xQHrfkA4TsG8XJSaP QBHoMkfWFDpSyF4+c1uFvBHZcc0l1QqMawuRNGY43jY2Z9ZHquAG5+QhMqudurQe +TPVNgxkmU07HA7s9zT0oy7g5qsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR1FDnN 1aVM94ykVYonQlL1Y3qmHDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK omgwDQYJKoZIhvcNAQELBQADggEBAD+8Jwn9yzKvEO2pgoSXs7YP2OL0pmLT0LY9 NFlEBk/GFYapsqQDrojscctoJMUVVRhc91dXrfFn9ZntkGOmBj9hIk/TQei5c5jV 5MKhhsYx56EwHhEMNXq2DYGa9sny5e0+ZyC0ZJWNGYhEg1Pmz/87+lAxo20hGuVO wPUxScVCWMQV2/8bw2hlw5b14A3vrqcF8hnZA9bj56aEC6tDQfoAYWXBjnTIzQ0k t3mkKLkB2/Hzf6113h91V24gmG0F35xWRwjOlEUD9IxAYoIljHUmbgjcz6YeiePl jGknDkLjU5Gwudu4KR71qDua8TcaH+xGtWu2LYhAHTWhttZwGD4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:00 2026 by rpki-client