$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143278.roa File: AS143278.roa (raw, json) Hash identifier: Rwd/SnWsa7AKIYf1foBp3RKvch0izbfcEgYe0XLM6i0= Subject key identifier: 08:FA:EE:53:3E:2E:6C:C9:D5:01:F8:2F:22:6F:5A:A8:93:65:96:30 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 126C76AB7D9489CB605FDEF2A4B4759B7542C6B2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143278.roa Signing time: Wed 04 Mar 2026 06:05:45 +0000 ROA not before: Wed 04 Mar 2026 06:00:45 +0000 ROA not after: Wed 03 Mar 2027 06:05:45 +0000 asID: 143278 IP address blocks: 240a:a274::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6c:76:ab:7d:94:89:cb:60:5f:de:f2:a4:b4:75:9b:75:42:c6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:45 2026 GMT Not After : Mar 3 06:05:45 2027 GMT Subject: CN=08FAEE533E2E6CC9D501F82F226F5AA893659630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:82:49:54:f9:c1:b4:74:19:85:b3:28:24: 3b:9d:c6:db:b9:a5:b9:0c:50:59:ad:87:be:af:18: cd:04:8a:48:55:1f:83:6e:c9:3c:95:61:7e:0f:d4: 8e:a2:d7:43:4e:cc:c9:d2:93:98:07:43:08:e6:57: 4b:86:ed:7e:7a:e1:75:93:cc:72:b4:b9:be:67:0d: e5:d8:17:07:a9:e4:3d:3f:cb:6a:37:d2:4b:ad:c7: 77:de:b8:92:94:2f:4e:47:23:8f:95:82:19:eb:52: dc:9c:7a:29:55:16:e1:04:82:c1:ec:23:d2:0d:97: 99:b5:32:25:78:27:25:3b:77:e0:62:59:03:7c:89: e9:84:e9:7c:25:e4:ef:2b:9b:3f:39:c8:91:7a:73: 49:f6:d9:15:fb:99:74:d8:c0:56:c9:81:49:4d:13: 3b:24:2f:c7:ee:78:79:70:bd:3f:6c:ac:84:51:a8: ea:c9:6b:af:6b:9e:83:ec:86:69:fc:81:93:90:8b: f1:2e:c6:7d:ae:2b:39:84:45:bb:b3:7b:82:91:4c: 5a:73:8b:ff:08:27:05:45:ce:3c:6e:e8:aa:c1:38: 14:ae:c0:46:40:d4:70:4a:ec:5a:06:ce:ce:37:b1: 45:20:21:ed:1c:f0:f2:a3:7d:63:e2:28:10:05:c0: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FA:EE:53:3E:2E:6C:C9:D5:01:F8:2F:22:6F:5A:A8:93:65:96:30 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143278.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a274::/32 Signature Algorithm: sha256WithRSAEncryption 29:5c:eb:29:70:16:99:93:44:b3:51:fa:23:ea:d2:01:61:b1: 14:65:f8:6f:e4:3c:bd:a5:4a:2e:14:90:98:9a:f7:63:8d:b8: 24:8b:01:e8:cb:f1:be:b6:ae:05:39:f7:e5:0c:73:47:80:04: 62:a5:aa:be:3e:67:2e:03:1f:9b:31:76:a4:26:ee:73:7f:d4: fa:20:09:86:37:e9:60:a1:4d:7d:cc:4c:19:62:1e:6c:44:7e: 7e:53:6e:53:07:e9:7d:55:3f:4d:b2:ef:a9:78:f3:d1:fe:96: cf:9d:a4:55:5b:91:70:d2:32:d7:27:6f:b5:52:1f:cf:65:73: e6:c2:00:94:b2:a8:65:4e:68:c4:90:a9:8a:31:ad:67:56:cf: 50:a4:8c:53:96:9b:63:86:56:3c:62:35:a4:82:22:0a:35:a3: 01:3b:c6:7c:7b:19:34:e7:7e:80:66:ec:7e:8b:4f:3a:c2:13: 2d:14:16:90:2e:46:a5:de:0f:78:0c:b9:4b:2b:ce:3e:27:30: ca:5e:f6:36:c8:7b:00:77:22:4f:6b:02:59:e0:38:9b:f2:28: 07:63:c6:29:7f:d3:b1:32:26:07:d0:b8:37:cf:71:ea:87:6e: 6b:ad:2b:47:d6:7e:78:5d:32:c9:ff:f1:29:44:da:35:c5:87: fb:dc:ab:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEmx2q32UictgX97ypLR1m3VCxrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0NVoX DTI3MDMwMzA2MDU0NVowMzExMC8GA1UEAxMoMDhGQUVFNTMzRTJFNkNDOUQ1MDFG ODJGMjI2RjVBQTg5MzY1OTYzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHBgklU+cG0dBmFsygkO53G27mluQxQWa2Hvq8YzQSKSFUfg27JPJVhfg/U jqLXQ07MydKTmAdDCOZXS4btfnrhdZPMcrS5vmcN5dgXB6nkPT/LajfSS63Hd964 kpQvTkcjj5WCGetS3Jx6KVUW4QSCwewj0g2XmbUyJXgnJTt34GJZA3yJ6YTpfCXk 7yubPznIkXpzSfbZFfuZdNjAVsmBSU0TOyQvx+54eXC9P2yshFGo6slrr2ueg+yG afyBk5CL8S7Gfa4rOYRFu7N7gpFMWnOL/wgnBUXOPG7oqsE4FK7ARkDUcErsWgbO zjexRSAh7Rzw8qN9Y+IoEAXAUB0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQI+u5T Pi5sydUB+C8ib1qok2WWMDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK onQwDQYJKoZIhvcNAQELBQADggEBAClc6ylwFpmTRLNR+iPq0gFhsRRl+G/kPL2l Si4UkJia92ONuCSLAejL8b62rgU59+UMc0eABGKlqr4+Zy4DH5sxdqQm7nN/1Pog CYY36WChTX3MTBliHmxEfn5TblMH6X1VP02y76l489H+ls+dpFVbkXDSMtcnb7VS H89lc+bCAJSyqGVOaMSQqYoxrWdWz1CkjFOWm2OGVjxiNaSCIgo1owE7xnx7GTTn foBm7H6LTzrCEy0UFpAuRqXeD3gMuUsrzj4nMMpe9jbIewB3Ik9rAlngOJvyKAdj xil/07EyJgfQuDfPceqHbmutK0fWfnhdMsn/8SlE2jXFh/vcq8A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:32 2026 by rpki-client