$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143300.roa File: AS143300.roa (raw, json) Hash identifier: tRWmctZ26oPsgzOcFFe16wiuUl3eCu9rPkjzWcRX9Fs= Subject key identifier: A6:B0:69:B5:D1:8F:1E:D6:3D:5A:8F:AB:4D:7D:DE:15:00:19:43:E3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64666202190E194C453721EAAB755329E75D92C7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143300.roa Signing time: Wed 04 Mar 2026 06:06:21 +0000 ROA not before: Wed 04 Mar 2026 06:01:21 +0000 ROA not after: Wed 03 Mar 2027 06:06:21 +0000 asID: 143300 IP address blocks: 240a:a28a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:66:62:02:19:0e:19:4c:45:37:21:ea:ab:75:53:29:e7:5d:92:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:21 2026 GMT Not After : Mar 3 06:06:21 2027 GMT Subject: CN=A6B069B5D18F1ED63D5A8FAB4D7DDE15001943E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:2d:73:53:c9:f2:63:fb:27:f5:de:fb:12: 26:7d:32:80:3c:bc:e9:d6:b6:cc:8f:41:d6:d0:dd: ec:65:9e:83:f1:55:d9:e1:55:f7:59:5e:9c:01:88: 8a:aa:c5:21:5b:10:48:af:59:3e:9e:86:82:6e:5b: 6d:c2:06:11:bc:fd:71:6d:53:33:22:0d:9b:bc:fc: 29:d0:8b:8e:cf:95:bd:13:cb:18:6e:43:e6:e5:14: a4:de:69:5e:c0:e8:46:8d:7c:25:fe:64:7f:f8:24: 9e:19:a8:50:48:f9:49:5a:83:6f:f9:d3:c6:79:9d: 02:ee:d7:5a:4c:23:2c:27:f3:8b:5a:dd:23:62:aa: 85:df:ab:8f:ea:15:4e:fc:c8:38:8d:cf:ff:c8:5a: ec:7b:96:c0:14:63:ae:5d:f3:83:ec:9d:6d:4e:27: 68:6d:21:16:9d:ab:e1:9a:7b:a3:89:32:64:44:8b: dc:4d:72:f3:00:f2:90:99:4d:b9:8c:22:df:23:c5: 89:fb:ae:ee:8a:15:93:9b:38:2b:4d:15:10:50:45: d4:9c:7c:1b:0a:5f:00:54:54:81:50:1a:ee:fc:c9: 05:14:70:67:e5:23:01:57:e4:0d:05:f1:65:fe:aa: f4:c6:4e:ff:68:13:c8:aa:61:93:7b:09:1c:cc:e1: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B0:69:B5:D1:8F:1E:D6:3D:5A:8F:AB:4D:7D:DE:15:00:19:43:E3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143300.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a28a::/32 Signature Algorithm: sha256WithRSAEncryption 32:1e:a8:be:b9:e0:24:01:52:85:38:7c:f6:4d:ca:4e:a8:af: 1e:e4:6c:65:ae:21:5f:29:64:cb:af:9f:16:8b:fb:ad:ff:2e: bb:35:de:87:25:c1:f5:51:ee:05:63:9d:21:25:6d:04:80:ef: c4:5b:cd:2b:60:0d:96:62:8a:3b:16:4f:e3:e6:84:d9:05:d8: 93:4e:7e:42:ad:09:13:fc:75:6b:55:6a:eb:7c:4c:c7:a1:51: 85:93:df:06:cd:1f:cb:da:d3:83:0c:b5:ed:46:d8:64:9b:17: bc:35:ae:98:41:2b:0e:bb:3f:4e:80:4b:e3:32:dc:49:96:9e: 17:4d:dc:95:1c:8e:5f:12:6d:17:34:da:ef:e3:82:59:e5:87: d3:ba:49:24:4c:27:e3:70:b6:e4:9f:8d:6e:2c:60:80:62:ef: 1d:5e:1b:a1:0c:5c:68:0c:a6:d3:e4:0f:a0:16:ab:cb:d5:dd: 4f:ea:31:72:82:f4:4a:71:66:bf:1c:58:37:46:fd:9f:27:dc: 36:e7:1e:1e:f8:26:5b:ff:7b:57:98:7e:48:a4:23:65:18:8a: 0e:dd:af:17:91:2b:bc:1c:60:f2:b9:eb:43:57:2f:ad:0f:7e: 1f:e2:84:16:33:07:2d:cd:bc:3b:dc:79:e4:1e:c9:6d:42:3b: 3a:f6:8f:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZGZiAhkOGUxFNyHqq3VTKeddkscwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyMVoX DTI3MDMwMzA2MDYyMVowMzExMC8GA1UEAxMoQTZCMDY5QjVEMThGMUVENjNENUE4 RkFCNEQ3RERFMTUwMDE5NDNFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKpLXNTyfJj+yf13vsSJn0ygDy86da2zI9B1tDd7GWeg/FV2eFV91lenAGI iqrFIVsQSK9ZPp6Ggm5bbcIGEbz9cW1TMyINm7z8KdCLjs+VvRPLGG5D5uUUpN5p XsDoRo18Jf5kf/gknhmoUEj5SVqDb/nTxnmdAu7XWkwjLCfzi1rdI2Kqhd+rj+oV TvzIOI3P/8ha7HuWwBRjrl3zg+ydbU4naG0hFp2r4Zp7o4kyZESL3E1y8wDykJlN uYwi3yPFifuu7ooVk5s4K00VEFBF1Jx8GwpfAFRUgVAa7vzJBRRwZ+UjAVfkDQXx Zf6q9MZO/2gTyKphk3sJHMzhMX8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSmsGm1 0Y8e1j1aj6tNfd4VABlD4zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ooowDQYJKoZIhvcNAQELBQADggEBADIeqL654CQBUoU4fPZNyk6orx7kbGWuIV8p ZMuvnxaL+63/Lrs13oclwfVR7gVjnSElbQSA78RbzStgDZZiijsWT+PmhNkF2JNO fkKtCRP8dWtVaut8TMehUYWT3wbNH8va04MMte1G2GSbF7w1rphBKw67P06AS+My 3EmWnhdN3JUcjl8SbRc02u/jglnlh9O6SSRMJ+NwtuSfjW4sYIBi7x1eG6EMXGgM ptPkD6AWq8vV3U/qMXKC9EpxZr8cWDdG/Z8n3DbnHh74Jlv/e1eYfkikI2UYig7d rxeRK7wcYPK560NXL60Pfh/ihBYzBy3NvDvceeQeyW1COzr2j54= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:38 2026 by rpki-client