$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143289.roa File: AS143289.roa (raw, json) Hash identifier: 3LPw5TTMcftRaP3zzkY6blM5yEbpRthJ6M7+FwMNBKk= Subject key identifier: 25:BD:A6:8E:F1:AF:64:E2:87:69:AB:B3:AA:F5:D3:97:FB:16:38:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 374F5BD824F9D921D19F0A40B02424C72706C496 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143289.roa Signing time: Wed 04 Mar 2026 06:06:35 +0000 ROA not before: Wed 04 Mar 2026 06:01:35 +0000 ROA not after: Wed 03 Mar 2027 06:06:35 +0000 asID: 143289 IP address blocks: 240a:a27f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4f:5b:d8:24:f9:d9:21:d1:9f:0a:40:b0:24:24:c7:27:06:c4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:35 2026 GMT Not After : Mar 3 06:06:35 2027 GMT Subject: CN=25BDA68EF1AF64E28769ABB3AAF5D397FB163848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:d0:f8:a7:57:5e:93:2f:fc:1a:5f:d3:20: af:e5:10:0d:6a:d3:ae:52:2d:b9:9e:26:86:1e:55: 2b:33:08:69:4a:2e:b4:f5:22:cb:77:54:24:70:fc: 75:9b:95:8f:21:c7:aa:3f:dc:6f:c9:2b:89:ce:f1: 52:8d:bc:57:db:92:d9:d6:39:d7:a7:f3:d9:6e:95: e0:b6:7c:b3:2c:72:9c:39:cc:8e:22:2e:46:fa:7f: 06:ca:a1:cb:61:c6:93:e5:35:a7:b7:eb:9b:e2:8e: df:18:d2:e7:db:ed:c2:90:6c:bf:62:83:a9:83:0f: c0:ee:69:14:25:7e:69:4a:24:12:13:95:f6:6d:c2: 08:ff:db:96:e9:68:c5:52:d4:e0:7c:09:b5:7a:e9: 85:db:a6:fe:5c:d9:d4:e0:10:4f:b5:8a:ab:0a:e0: 7c:30:05:02:40:73:60:d3:65:f6:69:9b:fe:c5:a3: 1d:8d:7d:c1:20:df:03:b2:7b:09:c1:0e:3c:7c:54: 8c:81:7c:30:d6:37:24:62:42:58:85:46:24:5a:f6: 6e:81:d8:5d:00:e7:99:d8:a4:b3:d9:e4:21:75:47: 10:eb:0f:35:57:8c:68:1b:65:a6:22:f5:89:a4:93: 50:55:f2:d1:05:ed:bb:a1:02:63:bb:ff:45:7c:fa: a6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BD:A6:8E:F1:AF:64:E2:87:69:AB:B3:AA:F5:D3:97:FB:16:38:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143289.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a27f::/32 Signature Algorithm: sha256WithRSAEncryption 33:84:b0:93:b4:01:d8:8d:51:48:0a:d6:a8:41:cf:12:24:91: d9:8f:b9:5a:4f:2b:61:15:b4:09:9e:3a:bd:97:0b:b1:65:e1: 3b:79:1d:a0:ed:2e:48:7c:23:5e:88:d5:53:8e:c0:82:df:9b: 41:32:2d:41:02:a3:aa:17:0a:80:23:70:eb:70:55:5a:c3:de: 10:14:5f:65:da:8d:1b:ae:13:51:53:e2:8e:37:09:4d:25:d4: e4:41:bc:1c:b2:86:e6:03:d8:c1:27:ef:c0:97:b6:0c:98:c9: f3:43:f9:9b:ed:81:ef:92:cb:b6:24:12:57:38:c7:b2:c6:fe: 7e:00:9d:94:96:44:99:a3:b8:c1:62:7e:10:95:b5:38:b6:5c: a4:1a:46:6e:13:15:fd:fa:d2:c1:92:d4:2a:88:4f:be:8e:45: aa:b4:b5:34:f0:f4:f7:4b:f6:15:e5:1b:c9:b3:00:e4:e8:03: d2:c1:dc:72:a9:07:26:20:af:a9:00:df:bd:ba:2b:e4:86:06: 31:eb:19:60:5a:00:b2:ce:18:71:8a:60:ab:41:0e:a5:d3:1c: 1c:69:19:6e:fc:1a:6e:1a:10:bc:26:6f:54:af:07:6a:cc:38: 17:e0:e1:74:3f:16:09:a4:dc:5d:6a:8c:c1:c3:98:60:10:c9: 37:8e:cf:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN09b2CT52SHRnwpAsCQkxycGxJYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzNVoX DTI3MDMwMzA2MDYzNVowMzExMC8GA1UEAxMoMjVCREE2OEVGMUFGNjRFMjg3NjlB QkIzQUFGNUQzOTdGQjE2Mzg0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJWk0PinV16TL/waX9Mgr+UQDWrTrlItuZ4mhh5VKzMIaUoutPUiy3dUJHD8 dZuVjyHHqj/cb8kric7xUo28V9uS2dY516fz2W6V4LZ8syxynDnMjiIuRvp/Bsqh y2HGk+U1p7frm+KO3xjS59vtwpBsv2KDqYMPwO5pFCV+aUokEhOV9m3CCP/blulo xVLU4HwJtXrphdum/lzZ1OAQT7WKqwrgfDAFAkBzYNNl9mmb/sWjHY19wSDfA7J7 CcEOPHxUjIF8MNY3JGJCWIVGJFr2boHYXQDnmdiks9nkIXVHEOsPNVeMaBtlpiL1 iaSTUFXy0QXtu6ECY7v/RXz6pikCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQlvaaO 8a9k4odpq7Oq9dOX+xY4SDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK on8wDQYJKoZIhvcNAQELBQADggEBADOEsJO0AdiNUUgK1qhBzxIkkdmPuVpPK2EV tAmeOr2XC7Fl4Tt5HaDtLkh8I16I1VOOwILfm0EyLUECo6oXCoAjcOtwVVrD3hAU X2XajRuuE1FT4o43CU0l1ORBvByyhuYD2MEn78CXtgyYyfND+Zvtge+Sy7YkElc4 x7LG/n4AnZSWRJmjuMFifhCVtTi2XKQaRm4TFf360sGS1CqIT76ORaq0tTTw9PdL 9hXlG8mzAOToA9LB3HKpByYgr6kA3726K+SGBjHrGWBaALLOGHGKYKtBDqXTHBxp GW78Gm4aELwmb1SvB2rMOBfg4XQ/Fgmk3F1qjMHDmGAQyTeOz6g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:01 2026 by rpki-client