$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143275.roa File: AS143275.roa (raw, json) Hash identifier: De2PPSy6m/BDoP4zXAp5IGEPMwItz7qFVEp9rbQ/nWs= Subject key identifier: B1:2F:60:69:28:84:0F:9C:F8:B7:D8:51:A1:FC:BF:D6:6D:7B:EE:81 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4BE294FB923828478A5BDE9A1011E1F20653A4BA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143275.roa Signing time: Wed 04 Mar 2026 06:06:29 +0000 ROA not before: Wed 04 Mar 2026 06:01:29 +0000 ROA not after: Wed 03 Mar 2027 06:06:29 +0000 asID: 143275 IP address blocks: 240a:a271::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e2:94:fb:92:38:28:47:8a:5b:de:9a:10:11:e1:f2:06:53:a4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:29 2026 GMT Not After : Mar 3 06:06:29 2027 GMT Subject: CN=B12F606928840F9CF8B7D851A1FCBFD66D7BEE81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:28:e7:85:41:3e:90:b0:c1:90:b0:b1:b6: ae:32:65:19:d7:d2:a8:68:4c:5c:c8:ab:ed:45:8e: ee:9e:ac:53:26:74:0d:22:58:69:ec:7c:c7:4e:57: c5:9c:5d:7c:fd:1e:de:a7:cd:73:59:34:2b:b2:5e: 77:30:f6:c7:56:56:fa:2b:e8:9c:46:04:0e:d2:b0: 02:04:08:d8:f5:32:dd:0d:b6:3b:45:2b:a6:3b:19: 04:3e:65:14:df:3d:13:18:fe:46:78:39:3d:7d:a3: e4:33:a1:0b:4f:ac:78:a0:30:42:a2:99:fa:f5:92: 7b:d8:99:8d:83:c8:41:8b:bb:99:e0:96:03:f1:c3: ce:ac:ed:d7:5a:61:b0:c0:81:55:b9:8b:d6:21:5b: 0e:10:5b:b1:8e:c8:e5:65:2d:44:af:38:ff:22:ac: 3d:96:87:d7:9a:c5:f1:c5:d1:46:66:e5:19:7b:23: 02:db:c4:a2:36:2f:8b:0d:12:45:a8:65:8c:5c:a0: d1:40:aa:91:fc:20:99:74:8d:6a:0e:f8:2a:fa:bc: f1:9f:4a:83:25:7a:c2:d0:3a:8e:57:7f:14:d0:36: 09:7e:b4:4a:f7:ab:a4:47:94:9c:22:dd:5a:51:0f: 46:cc:f8:d5:99:63:6b:83:c0:30:04:4c:12:c2:17: c3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2F:60:69:28:84:0F:9C:F8:B7:D8:51:A1:FC:BF:D6:6D:7B:EE:81 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143275.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a271::/32 Signature Algorithm: sha256WithRSAEncryption a4:48:c0:22:26:a1:41:7b:74:f6:78:87:1e:65:e5:8a:44:a0: 42:ea:f9:19:1a:33:5d:e9:e5:33:59:59:b0:fa:56:3f:54:1c: 05:9f:5a:8e:24:d0:46:16:c6:c0:13:4a:80:5e:1a:4f:b5:24: 94:1f:91:d2:84:a2:57:c4:17:71:c2:f6:7e:7a:af:d5:09:bb: 61:d5:ba:66:50:c1:28:dc:1b:f1:9f:32:95:e7:ff:d1:4e:0f: 87:b2:86:4a:1a:00:ad:ea:32:7a:4e:e4:c8:9b:6d:3e:44:cf: 2e:ca:ef:cb:21:e9:83:2e:49:2f:48:7f:71:65:77:3e:15:1f: e5:7e:fa:c2:d2:29:78:ba:e1:c2:7a:bb:90:81:fa:f5:e9:e5: cb:39:c6:9b:9d:ee:11:cf:af:c4:ad:d6:9d:2e:0d:81:95:57: 87:2f:5e:5e:6e:0a:23:5d:70:77:52:23:10:be:95:b7:97:fd: cf:64:a1:31:b9:5a:61:27:ae:11:1c:d5:71:88:f7:f6:68:bc: cb:e9:97:95:46:8f:d0:fd:84:dd:df:56:ea:33:af:13:6c:66: ef:d3:39:40:f5:f9:11:33:ee:2e:6a:b8:b4:70:1f:a7:26:21: 5b:90:37:ff:36:66:8a:25:08:bd:c8:63:74:df:57:f8:1c:b3: 39:82:35:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS+KU+5I4KEeKW96aEBHh8gZTpLowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyOVoX DTI3MDMwMzA2MDYyOVowMzExMC8GA1UEAxMoQjEyRjYwNjkyODg0MEY5Q0Y4QjdE ODUxQTFGQ0JGRDY2RDdCRUU4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANg/KOeFQT6QsMGQsLG2rjJlGdfSqGhMXMir7UWO7p6sUyZ0DSJYaex8x05X xZxdfP0e3qfNc1k0K7JedzD2x1ZW+ivonEYEDtKwAgQI2PUy3Q22O0UrpjsZBD5l FN89Exj+Rng5PX2j5DOhC0+seKAwQqKZ+vWSe9iZjYPIQYu7meCWA/HDzqzt11ph sMCBVbmL1iFbDhBbsY7I5WUtRK84/yKsPZaH15rF8cXRRmblGXsjAtvEojYviw0S RahljFyg0UCqkfwgmXSNag74Kvq88Z9KgyV6wtA6jld/FNA2CX60SverpEeUnCLd WlEPRsz41Zlja4PAMARMEsIXw70CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSxL2Bp KIQPnPi32FGh/L/WbXvugTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK onEwDQYJKoZIhvcNAQELBQADggEBAKRIwCImoUF7dPZ4hx5l5YpEoELq+RkaM13p 5TNZWbD6Vj9UHAWfWo4k0EYWxsATSoBeGk+1JJQfkdKEolfEF3HC9n56r9UJu2HV umZQwSjcG/GfMpXn/9FOD4eyhkoaAK3qMnpO5MibbT5Ezy7K78sh6YMuSS9If3Fl dz4VH+V++sLSKXi64cJ6u5CB+vXp5cs5xpud7hHPr8St1p0uDYGVV4cvXl5uCiNd cHdSIxC+lbeX/c9koTG5WmEnrhEc1XGI9/ZovMvpl5VGj9D9hN3fVuozrxNsZu/T OUD1+REz7i5quLRwH6cmIVuQN/82ZoolCL3IY3TfV/gcszmCNas= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:35 2026 by rpki-client