$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143294.roa File: AS143294.roa (raw, json) Hash identifier: O1hwKxoseWA/ldDoHcN2bw+C6avp9DLnvEm++KmwrnE= Subject key identifier: C8:0F:EC:04:9A:94:2D:B8:3E:9E:84:DD:3E:6F:CE:4A:68:11:04:CE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 542506A9B81F9B007471E74D4A69F5DDF5BFF67F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143294.roa Signing time: Wed 04 Mar 2026 06:05:13 +0000 ROA not before: Wed 04 Mar 2026 06:00:13 +0000 ROA not after: Wed 03 Mar 2027 06:05:13 +0000 asID: 143294 IP address blocks: 240a:a284::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:25:06:a9:b8:1f:9b:00:74:71:e7:4d:4a:69:f5:dd:f5:bf:f6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:13 2026 GMT Not After : Mar 3 06:05:13 2027 GMT Subject: CN=C80FEC049A942DB83E9E84DD3E6FCE4A681104CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:80:8b:fc:70:28:e1:78:a7:af:9f:c4:3b: 73:f1:24:30:a8:b0:99:d6:1b:15:22:33:2e:49:2f: 5d:81:64:a9:cd:63:71:e3:73:80:18:13:ae:59:c2: 0e:4a:83:15:8e:8d:80:a2:3c:da:e3:31:0b:2f:b8: cf:93:61:d3:93:db:b1:5d:ff:c0:74:6d:de:c4:b3: f7:7b:d9:b5:d0:51:3a:8e:1b:d6:f1:a4:c2:88:0f: 37:98:7a:d1:90:13:ec:8e:7e:28:ec:1a:c0:8b:fa: e4:8d:35:60:58:3b:9f:dc:54:7c:3d:4a:f5:17:ff: b0:d4:db:e9:1e:fa:58:41:36:79:0f:99:c1:da:72: a6:2c:0e:a3:d9:dd:34:96:5d:dd:4f:9a:d8:55:39: 97:cd:03:17:72:f6:67:cd:16:2e:e5:a3:4c:3d:78: 36:15:04:50:86:43:93:32:b7:24:85:7a:a6:d6:ca: ef:83:46:9e:90:eb:42:c3:83:df:95:94:5b:25:b8: 42:83:2b:81:6f:a2:7c:0f:50:96:32:b0:04:1e:e6: c2:fe:cb:08:ee:ab:00:e5:57:f0:aa:c4:bd:e7:ec: fc:54:ca:ed:8d:33:9f:b5:ee:4b:ec:82:98:af:1e: fa:d6:bd:0d:e0:92:a2:b7:bf:d6:99:6b:9e:ae:b9: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0F:EC:04:9A:94:2D:B8:3E:9E:84:DD:3E:6F:CE:4A:68:11:04:CE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a284::/32 Signature Algorithm: sha256WithRSAEncryption ba:4a:62:cc:c1:0a:3e:5a:65:68:a9:39:ba:35:70:e1:21:3e: 25:7d:a3:9f:a5:2f:3b:26:bd:19:7d:da:98:32:6c:5d:f5:9a: c6:8f:53:0e:70:93:f1:bd:b8:15:cb:c6:d1:31:9f:a3:fe:e2: 32:dc:06:85:36:62:95:23:bc:67:75:4a:48:1c:d3:b5:fe:03: fd:b8:ca:6b:c1:79:4c:63:dd:6b:e1:39:96:4c:67:98:67:f2: e5:98:7b:81:f2:be:8b:4b:47:43:bf:7a:f6:6d:8f:44:40:d3: da:2f:78:2d:f0:03:52:f7:e1:79:0e:2a:aa:8c:cf:d6:36:ea: 7b:05:59:8a:0a:44:9d:6d:52:09:4a:ec:97:a9:9f:34:70:d1: ea:c7:d9:0d:ed:31:4d:3e:13:48:a6:be:88:4e:8c:c3:fa:7b: c8:8a:a6:18:81:6b:16:86:da:4a:af:8d:8b:6a:b1:9d:b7:32: 5a:2b:8f:06:3a:a6:19:99:d4:5a:40:56:d0:0e:7f:67:e7:41: 90:cb:60:48:61:b9:04:8d:7d:36:b2:c7:b4:d8:1e:a4:3b:a1: f5:4d:4f:f1:83:da:25:06:3b:05:b7:ae:81:92:93:9c:f3:e0: cc:81:6f:b3:ec:bd:e5:31:cf:26:22:c0:c8:5c:14:00:c9:73: 25:cd:a0:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVCUGqbgfmwB0cedNSmn13fW/9n8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxM1oX DTI3MDMwMzA2MDUxM1owMzExMC8GA1UEAxMoQzgwRkVDMDQ5QTk0MkRCODNFOUU4 NEREM0U2RkNFNEE2ODExMDRDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKofgIv8cCjheKevn8Q7c/EkMKiwmdYbFSIzLkkvXYFkqc1jceNzgBgTrlnC DkqDFY6NgKI82uMxCy+4z5Nh05PbsV3/wHRt3sSz93vZtdBROo4b1vGkwogPN5h6 0ZAT7I5+KOwawIv65I01YFg7n9xUfD1K9Rf/sNTb6R76WEE2eQ+ZwdpypiwOo9nd NJZd3U+a2FU5l80DF3L2Z80WLuWjTD14NhUEUIZDkzK3JIV6ptbK74NGnpDrQsOD 35WUWyW4QoMrgW+ifA9QljKwBB7mwv7LCO6rAOVX8KrEvefs/FTK7Y0zn7XuS+yC mK8e+ta9DeCSore/1plrnq65ZzUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTID+wE mpQtuD6ehN0+b85KaBEEzjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ooQwDQYJKoZIhvcNAQELBQADggEBALpKYszBCj5aZWipObo1cOEhPiV9o5+lLzsm vRl92pgybF31msaPUw5wk/G9uBXLxtExn6P+4jLcBoU2YpUjvGd1Skgc07X+A/24 ymvBeUxj3WvhOZZMZ5hn8uWYe4HyvotLR0O/evZtj0RA09oveC3wA1L34XkOKqqM z9Y26nsFWYoKRJ1tUglK7JepnzRw0erH2Q3tMU0+E0imvohOjMP6e8iKphiBaxaG 2kqvjYtqsZ23MlorjwY6phmZ1FpAVtAOf2fnQZDLYEhhuQSNfTayx7TYHqQ7ofVN T/GD2iUGOwW3roGSk5zz4MyBb7PsveUxzyYiwMhcFADJcyXNoDw= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:36 2026 by rpki-client