$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143281.roa File: AS143281.roa (raw, json) Hash identifier: P7w8xiBaIgR4A3nH3IGBy4Qs+pRIGHBrgkTBjczGPq8= Subject key identifier: C4:CF:52:A1:C2:0C:E7:4A:4E:BE:66:04:54:76:35:D2:0B:10:E4:7F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 72F192AEF08BE5ACC5607F0E4BEB843F0D2A2632 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143281.roa Signing time: Wed 04 Mar 2026 06:05:52 +0000 ROA not before: Wed 04 Mar 2026 06:00:52 +0000 ROA not after: Wed 03 Mar 2027 06:05:52 +0000 asID: 143281 IP address blocks: 240a:a277::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f1:92:ae:f0:8b:e5:ac:c5:60:7f:0e:4b:eb:84:3f:0d:2a:26:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:52 2026 GMT Not After : Mar 3 06:05:52 2027 GMT Subject: CN=C4CF52A1C20CE74A4EBE6604547635D20B10E47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:db:84:88:d1:cb:3f:3d:53:2e:67:43:22: b8:e2:c9:8c:37:48:0e:64:4c:37:fe:4b:3f:71:95: a8:88:33:e3:21:40:fc:aa:bd:07:7b:b4:88:35:f2: 37:50:23:6f:c2:4b:39:ce:43:a9:78:44:5c:50:b2: a8:73:5d:80:72:ed:08:05:c9:4e:38:e6:a8:ad:fe: 51:9f:97:67:5d:0b:ae:28:2f:87:b2:67:b4:89:c6: 5f:9f:62:09:5e:97:2c:1f:ce:62:e3:d9:a6:a3:6c: e2:f7:53:45:35:0e:b1:a6:50:60:1d:f1:2b:00:46: 86:29:e3:c8:93:f1:c6:81:6c:a8:e4:1b:63:5a:74: 69:a2:d9:a9:a3:f5:d6:5c:41:a9:a1:88:05:05:4f: 5b:81:7e:ba:b2:79:e8:59:73:0c:4f:b2:c0:71:37: ef:c1:84:be:e5:d3:bf:02:81:27:af:fe:a3:4f:d4: 5c:f5:ec:2c:2e:8a:58:ae:2f:12:f1:ed:a4:79:84: 55:c8:65:09:05:ab:16:48:e7:83:a5:23:19:bb:56: 95:45:26:6e:0b:98:37:99:c1:9c:3b:34:06:c4:a3: 80:fe:95:3e:a5:dc:fc:b1:e7:f3:c5:9a:ab:b1:14: 8c:96:f3:87:4f:3b:33:a1:c9:80:aa:bf:6a:08:15: 37:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CF:52:A1:C2:0C:E7:4A:4E:BE:66:04:54:76:35:D2:0B:10:E4:7F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a277::/32 Signature Algorithm: sha256WithRSAEncryption c6:ed:f6:7a:68:19:78:88:69:43:b9:2d:cb:cd:61:4a:27:a6: d1:92:1d:af:13:e9:62:e2:2e:c2:8a:cd:5e:aa:56:04:db:aa: f8:6c:e2:80:a9:6e:f6:39:aa:1a:72:57:64:0c:da:90:9f:75: bb:6b:70:23:63:ab:02:b5:1c:12:43:67:de:c3:b0:cb:7b:bf: 52:62:fd:bc:cc:4a:c8:c3:ee:37:7e:2b:bb:c2:f3:6d:3e:de: 98:01:8c:89:07:1b:5f:ff:7c:7a:3f:31:e7:68:b1:cc:e2:ec: 05:bb:c3:93:bd:7f:d0:24:b3:04:5f:a0:89:36:b7:15:f1:ea: 11:5f:d5:e4:bd:97:7e:4a:46:04:60:66:f1:b1:f6:25:c6:9b: ff:11:0a:57:45:ef:28:86:fb:47:a5:36:1b:09:17:f1:d8:dc: dc:b9:94:02:31:e9:b4:46:f7:6a:d5:0d:4b:e0:60:94:94:26: e6:d6:c6:04:17:0c:d5:ce:ac:d1:81:37:bd:8f:75:fc:8d:fb: 13:d5:23:ed:6a:ad:f4:95:ab:6a:9a:28:cf:33:f0:5d:d1:98: ed:77:16:a2:79:ea:d6:22:f6:09:a2:b9:34:ed:e2:93:e2:4b: 4b:56:f6:76:b9:f7:3c:e9:f2:c8:63:d4:35:dc:1a:92:fe:08: b5:dd:29:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcvGSrvCL5azFYH8OS+uEPw0qJjIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1MloX DTI3MDMwMzA2MDU1MlowMzExMC8GA1UEAxMoQzRDRjUyQTFDMjBDRTc0QTRFQkU2 NjA0NTQ3NjM1RDIwQjEwRTQ3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmm24SI0cs/PVMuZ0MiuOLJjDdIDmRMN/5LP3GVqIgz4yFA/Kq9B3u0iDXy N1Ajb8JLOc5DqXhEXFCyqHNdgHLtCAXJTjjmqK3+UZ+XZ10Lrigvh7JntInGX59i CV6XLB/OYuPZpqNs4vdTRTUOsaZQYB3xKwBGhinjyJPxxoFsqOQbY1p0aaLZqaP1 1lxBqaGIBQVPW4F+urJ56FlzDE+ywHE378GEvuXTvwKBJ6/+o0/UXPXsLC6KWK4v EvHtpHmEVchlCQWrFkjng6UjGbtWlUUmbguYN5nBnDs0BsSjgP6VPqXc/LHn88Wa q7EUjJbzh087M6HJgKq/aggVN+8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTEz1Kh wgznSk6+ZgRUdjXSCxDkfzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oncwDQYJKoZIhvcNAQELBQADggEBAMbt9npoGXiIaUO5LcvNYUonptGSHa8T6WLi LsKKzV6qVgTbqvhs4oCpbvY5qhpyV2QM2pCfdbtrcCNjqwK1HBJDZ97DsMt7v1Ji /bzMSsjD7jd+K7vC820+3pgBjIkHG1//fHo/Medosczi7AW7w5O9f9AkswRfoIk2 txXx6hFf1eS9l35KRgRgZvGx9iXGm/8RCldF7yiG+0elNhsJF/HY3Ny5lAIx6bRG 92rVDUvgYJSUJubWxgQXDNXOrNGBN72PdfyN+xPVI+1qrfSVq2qaKM8z8F3RmO13 FqJ56tYi9gmiuTTt4pPiS0tW9na59zzp8shj1DXcGpL+CLXdKXU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:25 2026 by rpki-client