$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143282.roa File: AS143282.roa (raw, json) Hash identifier: 6Z3FjjkqR4tvnrgVlMlXE5n5avDzDJ34iLgp2dbJtgs= Subject key identifier: 03:A8:EA:30:24:14:2B:14:EF:36:EC:EE:0F:41:41:2D:5D:24:D2:3E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C23F03D7DD0D43E42A646CCC1C2494BDD3D6A2F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143282.roa Signing time: Wed 04 Mar 2026 06:07:17 +0000 ROA not before: Wed 04 Mar 2026 06:02:17 +0000 ROA not after: Wed 03 Mar 2027 06:07:17 +0000 asID: 143282 IP address blocks: 240a:a278::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:23:f0:3d:7d:d0:d4:3e:42:a6:46:cc:c1:c2:49:4b:dd:3d:6a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:17 2026 GMT Not After : Mar 3 06:07:17 2027 GMT Subject: CN=03A8EA3024142B14EF36ECEE0F41412D5D24D23E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:df:94:93:d7:af:d2:36:62:6b:82:f0:0a: 24:58:07:41:15:0b:c1:23:87:f5:4c:0a:d0:1e:ad: 75:51:8f:92:66:b0:17:7f:5a:17:c5:cd:a1:3d:30: 99:eb:63:ff:b6:70:e7:83:e2:9d:e3:f1:2c:5a:4b: 32:ac:e0:1e:20:01:65:c1:68:ca:d4:46:e9:7c:d1: 74:47:39:14:13:f8:65:8e:15:ef:33:11:81:62:cc: 9a:c4:5c:b1:cf:78:3d:15:a8:66:40:64:a9:fd:b1: 17:00:d0:6e:e2:cd:ea:49:3f:50:5b:00:5f:2d:3f: 6e:0b:e8:c3:e5:32:a6:f4:bb:1e:70:d0:68:65:83: aa:69:ec:64:bb:0d:2d:12:8e:f1:f0:3a:65:ae:19: 20:72:65:87:82:a4:9b:d7:82:fb:00:09:3c:2d:52: 65:1b:95:95:31:1d:11:6b:75:5a:e0:99:aa:92:cd: cd:87:2a:c8:2a:14:23:3f:96:28:84:b8:08:3c:09: 51:25:e0:00:5c:0d:38:e1:83:36:51:2c:04:54:ac: 03:fe:7f:4a:e6:79:a2:38:a3:6b:23:b8:1d:5b:48: 66:66:d2:5d:8c:5e:d7:f4:4f:71:31:ca:ac:12:1e: 7c:75:2f:52:e5:b5:81:1c:58:47:eb:1f:e5:68:20: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A8:EA:30:24:14:2B:14:EF:36:EC:EE:0F:41:41:2D:5D:24:D2:3E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143282.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a278::/32 Signature Algorithm: sha256WithRSAEncryption 29:da:ab:fe:81:a4:cf:14:fe:bf:63:d4:82:16:77:b8:65:1d: 38:8a:7c:8b:0d:cd:3c:db:02:eb:68:a6:30:bc:17:64:ea:50: 43:50:10:4d:cd:66:87:ac:91:35:96:85:e2:b2:51:f0:4f:19: 83:7c:d9:20:53:c1:9e:e6:45:e5:59:cb:41:47:f1:44:f5:af: 3a:78:f3:e2:55:8e:52:00:5a:02:4f:1b:97:f1:dd:9b:78:ef: 1b:17:9d:cc:5b:e9:b9:7b:a7:55:87:6f:f2:ee:3c:89:73:78: 59:0d:0b:32:2f:c2:60:13:54:41:ec:b0:94:8d:30:86:b3:48: ca:4c:9f:93:3d:eb:66:99:86:62:e3:90:a1:a5:f5:9d:fd:1e: b6:52:e6:c9:1c:6e:d7:7f:af:8f:d0:25:96:58:a4:95:31:dc: ef:a3:fa:5b:8c:7f:b7:b2:01:55:85:82:dc:7c:c0:a1:a2:7a: be:15:6b:c5:06:a4:f6:4b:e2:66:04:0a:f5:d6:97:98:6a:a8: e5:31:6c:ff:4f:59:00:ce:f8:23:00:d3:29:9e:ee:7b:ee:16: ad:a0:16:1c:b7:7d:f6:18:ac:c9:70:27:90:dc:94:7d:5b:f3: 7b:ac:cd:82:f5:48:e7:86:4b:f3:38:77:38:ad:b9:75:ea:d3: 44:c3:39:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfCPwPX3Q1D5CpkbMwcJJS909ai8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxN1oX DTI3MDMwMzA2MDcxN1owMzExMC8GA1UEAxMoMDNBOEVBMzAyNDE0MkIxNEVGMzZF Q0VFMEY0MTQxMkQ1RDI0RDIzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALa435ST16/SNmJrgvAKJFgHQRULwSOH9UwK0B6tdVGPkmawF39aF8XNoT0w metj/7Zw54PinePxLFpLMqzgHiABZcFoytRG6XzRdEc5FBP4ZY4V7zMRgWLMmsRc sc94PRWoZkBkqf2xFwDQbuLN6kk/UFsAXy0/bgvow+UypvS7HnDQaGWDqmnsZLsN LRKO8fA6Za4ZIHJlh4Kkm9eC+wAJPC1SZRuVlTEdEWt1WuCZqpLNzYcqyCoUIz+W KIS4CDwJUSXgAFwNOOGDNlEsBFSsA/5/SuZ5ojijayO4HVtIZmbSXYxe1/RPcTHK rBIefHUvUuW1gRxYR+sf5WggfWUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQDqOow JBQrFO827O4PQUEtXSTSPjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ongwDQYJKoZIhvcNAQELBQADggEBACnaq/6BpM8U/r9j1IIWd7hlHTiKfIsNzTzb AutopjC8F2TqUENQEE3NZoeskTWWheKyUfBPGYN82SBTwZ7mReVZy0FH8UT1rzp4 8+JVjlIAWgJPG5fx3Zt47xsXncxb6bl7p1WHb/LuPIlzeFkNCzIvwmATVEHssJSN MIazSMpMn5M962aZhmLjkKGl9Z39HrZS5skcbtd/r4/QJZZYpJUx3O+j+luMf7ey AVWFgtx8wKGier4Va8UGpPZL4mYECvXWl5hqqOUxbP9PWQDO+CMA0yme7nvuFq2g Fhy3ffYYrMlwJ5DclH1b83uszYL1SOeGS/M4dzituXXq00TDOUI= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:35 2026 by rpki-client