$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143302.roa File: AS143302.roa (raw, json) Hash identifier: ckVBX6TKeiKJR1MQr7Pu8f9Ux2a8ucct3g+JBuy3Y68= Subject key identifier: 61:A6:1C:2A:65:28:8B:0E:7A:01:D5:69:70:13:0C:AC:FE:61:0A:B1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30F54CCEB409A8F6504E61C8D8C9EDEF5F242D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143302.roa Signing time: Wed 04 Mar 2026 06:06:13 +0000 ROA not before: Wed 04 Mar 2026 06:01:13 +0000 ROA not after: Wed 03 Mar 2027 06:06:13 +0000 asID: 143302 IP address blocks: 240a:a28c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f5:4c:ce:b4:09:a8:f6:50:4e:61:c8:d8:c9:ed:ef:5f:24:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:13 2026 GMT Not After : Mar 3 06:06:13 2027 GMT Subject: CN=61A61C2A65288B0E7A01D56970130CACFE610AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:28:f8:44:a1:de:00:8e:97:09:05:ac:20: e0:79:06:71:cb:a9:5a:6f:6f:17:dc:3d:1a:97:ce: 77:5b:6e:30:d0:1e:70:46:73:3e:ec:33:32:49:ab: b6:4e:b3:ef:2f:93:02:f9:93:7a:d9:a7:cf:29:9e: e0:49:0b:5d:a1:53:29:e8:7b:71:a6:dc:d9:0f:ed: 45:33:d5:96:dc:2d:e7:1f:c1:bc:12:b2:ff:7b:27: 90:9d:2a:81:f1:b7:4b:8a:f5:02:3a:00:c5:12:9a: 8e:71:d0:c9:0b:54:6b:c5:15:79:03:06:aa:d9:6b: a3:2f:7c:6c:96:bd:c3:c4:58:69:e9:be:fe:5f:ec: 40:e0:98:c9:d9:61:08:56:47:06:02:90:be:7d:6f: fc:f3:23:5f:dc:94:0b:f8:fa:9d:7f:7c:93:ec:9f: bc:f6:35:1d:5b:f3:48:41:b2:97:86:f8:33:26:79: df:28:9e:4c:98:99:c3:d6:63:5a:d2:69:7b:58:e9: 99:d9:ba:9c:97:40:3d:20:12:4e:72:ec:da:8a:9e: b2:3e:03:57:df:fe:90:75:31:33:68:e4:1d:82:39: d3:0b:0f:a6:ef:f0:f5:ca:7d:4a:75:da:08:40:5d: d9:c9:51:34:fb:9c:5c:4a:f3:79:6f:30:32:2b:5d: e5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A6:1C:2A:65:28:8B:0E:7A:01:D5:69:70:13:0C:AC:FE:61:0A:B1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143302.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a28c::/32 Signature Algorithm: sha256WithRSAEncryption 62:d6:7f:97:2a:86:c4:69:21:49:7b:53:e6:56:5d:bb:e7:19: 6f:9a:7b:ae:fd:22:11:fe:3c:1c:bb:e3:6c:50:a1:05:c1:50: dc:ad:4c:4e:52:dc:a0:59:6b:69:73:a8:58:2f:73:78:4b:98: a5:7c:8d:93:d6:e2:e6:43:d5:8f:52:5b:ef:17:5f:3a:0d:64: b8:88:42:13:3d:e9:f6:3d:b7:42:26:45:2d:88:1c:3b:83:77: dc:d8:c9:fa:e0:5f:73:9c:bb:ab:14:62:1c:f7:fa:aa:e9:9c: 08:9f:5f:da:72:9d:a6:76:6d:cc:8d:98:e9:08:9d:f0:65:53: ab:74:c4:01:de:49:42:f3:b1:8a:cf:3f:cf:99:c5:b3:87:d4: d6:91:c5:48:f2:10:15:53:65:d8:96:59:7b:99:50:41:e1:33: 59:f2:0c:b1:a1:d0:67:35:82:24:4e:62:bd:61:f9:16:1c:2d: 3f:42:8c:77:31:a0:2e:73:ea:a0:24:61:17:f9:c8:67:d3:48: 9a:42:3e:60:ab:a2:19:6e:c0:a7:4a:ec:46:e2:13:a2:9a:05: 04:6c:72:ec:be:e0:91:9d:69:d7:39:e5:8b:1c:cb:15:1a:6a: db:7a:c7:53:ff:02:7e:fe:cf:3c:6c:bd:ca:11:5b:39:1f:57: cf:35:10:05 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgITMPVMzrQJqPZQTmHI2Mnt718kLTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDDAxBOTFFNUQ2MTAwMDExMTAvBgNVBAUTKDA1RkM5QzVCODg1 MDZGN0MwRDNGODYyQzg4OTVCRUQ2N0U5RjhFQkEwHhcNMjYwMzA0MDYwMTEzWhcN MjcwMzAzMDYwNjEzWjAzMTEwLwYDVQQDEyg2MUE2MUMyQTY1Mjg4QjBFN0EwMUQ1 Njk3MDEzMENBQ0ZFNjEwQUIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW8o+ESh3gCOlwkFrCDgeQZxy6lab28X3D0al853W24w0B5wRnM+7DMySau2 TrPvL5MC+ZN62afPKZ7gSQtdoVMp6HtxptzZD+1FM9WW3C3nH8G8ErL/eyeQnSqB 8bdLivUCOgDFEpqOcdDJC1RrxRV5Awaq2WujL3xslr3DxFhp6b7+X+xA4JjJ2WEI VkcGApC+fW/88yNf3JQL+Pqdf3yT7J+89jUdW/NIQbKXhvgzJnnfKJ5MmJnD1mNa 0ml7WOmZ2bqcl0A9IBJOcuzaip6yPgNX3/6QdTEzaOQdgjnTCw+m7/D1yn1KddoI QF3ZyVE0+5xcSvN5bzAyK13ljwIDAQABo4IBxTCCAcEwHQYDVR0OBBYEFGGmHCpl KIsOegHVaXATDKz+YQqxMB8GA1UdIwQYMBaAFAX8nFuIUG98DT+GLIiVvtZ+n466 MA4GA1UdDwEB/wQEAwIHgDBjBgNVHR8EXDBaMFigVqBUhlJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wLzA1RkM5QzVCODg1MDZGN0MwRDNGODYy Qzg4OTVCRUQ2N0U5RjhFQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcw AoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0JmeWNXNGhRYjN3TlA0WXNpSlctMW42Zmpy by5jZXIwTgYIKwYBBQUHAQsEQjBAMD4GCCsGAQUFBzALhjJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTQzMzAyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAqi jDANBgkqhkiG9w0BAQsFAAOCAQEAYtZ/lyqGxGkhSXtT5lZdu+cZb5p7rv0iEf48 HLvjbFChBcFQ3K1MTlLcoFlraXOoWC9zeEuYpXyNk9bi5kPVj1Jb7xdfOg1kuIhC Ez3p9j23QiZFLYgcO4N33NjJ+uBfc5y7qxRiHPf6qumcCJ9f2nKdpnZtzI2Y6Qid 8GVTq3TEAd5JQvOxis8/z5nFs4fU1pHFSPIQFVNl2JZZe5lQQeEzWfIMsaHQZzWC JE5ivWH5FhwtP0KMdzGgLnPqoCRhF/nIZ9NImkI+YKuiGW7Ap0rsRuITopoFBGxy 7L7gkZ1p1znlixzLFRpq23rHU/8Cfv7PPGy9yhFbOR9XzzUQBQ== -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:08 2026 by rpki-client