$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143280.roa File: AS143280.roa (raw, json) Hash identifier: fVtGo4wkGO8ZSRgDqZXyvNOOhDA3qZntUxzbps2mHjU= Subject key identifier: D5:11:1F:81:AA:62:04:AA:18:2C:16:44:00:C9:F8:E4:AF:21:74:BA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 026F19A7FD83C6D935C59DFAD49E0919A072A467 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143280.roa Signing time: Wed 04 Mar 2026 06:05:43 +0000 ROA not before: Wed 04 Mar 2026 06:00:43 +0000 ROA not after: Wed 03 Mar 2027 06:05:43 +0000 asID: 143280 IP address blocks: 240a:a276::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6f:19:a7:fd:83:c6:d9:35:c5:9d:fa:d4:9e:09:19:a0:72:a4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:43 2026 GMT Not After : Mar 3 06:05:43 2027 GMT Subject: CN=D5111F81AA6204AA182C164400C9F8E4AF2174BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:1a:9f:7e:15:78:2a:77:1c:54:41:da:ee: 9e:75:2f:da:a4:5a:70:98:2d:51:15:f2:d7:89:ae: e7:45:92:cd:ba:2d:10:e3:e2:52:b8:0f:47:8c:4e: b4:0b:49:b7:db:4e:ff:c9:b5:5e:f2:e0:53:21:fd: f0:1f:ee:d9:71:e0:1b:8a:b7:d2:5f:f7:1d:d2:c1: 76:b0:3e:16:09:77:50:8d:17:fb:2a:54:33:1e:39: 66:e8:7d:00:bb:b8:83:3d:5a:20:43:92:e3:15:0c: c7:4c:6e:64:29:6c:2e:26:15:b1:80:87:fe:31:9e: 82:00:73:aa:05:0c:c0:36:c9:89:3e:55:66:0d:3b: 99:d1:cb:ca:55:e7:11:b2:db:e4:22:4f:ce:55:8d: 6a:d1:e8:2e:8b:f0:3d:ed:79:36:cf:82:53:1d:c5: bd:46:5e:91:79:9a:80:59:b5:82:8e:53:c4:0e:35: 5b:29:a2:d0:ad:23:5a:8b:a8:c7:de:0c:67:de:c7: 44:72:87:f6:b5:11:c9:c3:32:04:21:65:26:2a:ec: 33:b6:60:9e:b9:6f:54:3b:6b:f4:ec:28:35:8b:82: de:cd:e5:19:d2:72:e4:6a:94:ba:1d:21:05:e3:f7: 38:33:f3:02:b3:69:ad:29:76:5b:ae:c3:98:9f:48: df:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:11:1F:81:AA:62:04:AA:18:2C:16:44:00:C9:F8:E4:AF:21:74:BA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143280.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a276::/32 Signature Algorithm: sha256WithRSAEncryption c7:29:6f:73:a5:98:07:b5:0d:a9:ce:61:df:8c:20:d1:24:b3: 5a:d4:0e:31:c9:14:65:61:55:c8:49:84:2f:5b:63:44:75:88: 15:49:3e:df:14:2e:bc:ec:2c:86:1e:76:6e:ea:61:ae:ba:c3: 3a:b6:f7:2d:36:6b:d5:8e:e4:f7:f5:2a:b3:74:e9:df:88:71: 80:38:f9:34:de:ce:6c:01:ce:37:b7:fa:98:42:3e:2e:eb:ff: ec:fd:7b:7c:12:9d:87:6b:1a:2a:02:62:88:1c:84:73:42:18: b9:48:48:72:c4:9f:c3:1a:07:72:6e:78:98:a8:64:5a:9d:84: 69:c0:26:c3:72:5c:8e:1b:93:0e:de:98:84:d2:1c:f3:e5:0f: a8:b9:be:8f:a1:35:ae:d7:a0:b4:ac:1f:eb:f6:86:02:4f:ae: 70:9e:2b:87:3f:05:e2:c3:1b:ef:78:47:bd:d5:ec:79:c7:9e: d7:aa:de:08:93:c4:f8:94:eb:36:df:a5:75:19:87:9b:f5:22: ff:99:f7:c3:68:d1:29:a5:9e:1f:86:e1:c5:27:c7:78:1f:dd: d7:f5:b5:46:a5:3b:91:e1:f3:ca:0b:d5:49:dc:d2:d9:a3:5a: 56:16:f2:f3:83:9e:f0:0d:a7:a2:14:e4:9e:41:cb:9e:e1:66: 2c:82:a7:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAm8Zp/2Dxtk1xZ361J4JGaBypGcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0M1oX DTI3MDMwMzA2MDU0M1owMzExMC8GA1UEAxMoRDUxMTFGODFBQTYyMDRBQTE4MkMx NjQ0MDBDOUY4RTRBRjIxNzRCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxNGp9+FXgqdxxUQdrunnUv2qRacJgtURXy14mu50WSzbotEOPiUrgPR4xO tAtJt9tO/8m1XvLgUyH98B/u2XHgG4q30l/3HdLBdrA+Fgl3UI0X+ypUMx45Zuh9 ALu4gz1aIEOS4xUMx0xuZClsLiYVsYCH/jGeggBzqgUMwDbJiT5VZg07mdHLylXn EbLb5CJPzlWNatHoLovwPe15Ns+CUx3FvUZekXmagFm1go5TxA41Wymi0K0jWouo x94MZ97HRHKH9rURycMyBCFlJirsM7ZgnrlvVDtr9OwoNYuC3s3lGdJy5GqUuh0h BeP3ODPzArNprSl2W67DmJ9I330CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTVER+B qmIEqhgsFkQAyfjkryF0ujAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK onYwDQYJKoZIhvcNAQELBQADggEBAMcpb3OlmAe1DanOYd+MINEks1rUDjHJFGVh VchJhC9bY0R1iBVJPt8ULrzsLIYedm7qYa66wzq29y02a9WO5Pf1KrN06d+IcYA4 +TTezmwBzje3+phCPi7r/+z9e3wSnYdrGioCYogchHNCGLlISHLEn8MaB3JueJio ZFqdhGnAJsNyXI4bkw7emITSHPPlD6i5vo+hNa7XoLSsH+v2hgJPrnCeK4c/BeLD G+94R73V7HnHnteq3giTxPiU6zbfpXUZh5v1Iv+Z98No0Smlnh+G4cUnx3gf3df1 tUalO5Hh88oL1Unc0tmjWlYW8vODnvANp6IU5J5By57hZiyCp54= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:55 2026 by rpki-client