$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143312.roa File: AS143312.roa (raw, json) Hash identifier: hqQA1oADx05xl3DV/U0QW1wjA6uC4mAdfIj9Syr/63Q= Subject key identifier: D9:1B:99:3F:BA:FB:7B:EB:58:A5:6E:7D:39:42:35:14:4D:84:12:7E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4BFA89635C6B99BF59018E4991D17EC69384B734 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143312.roa Signing time: Wed 04 Mar 2026 06:06:26 +0000 ROA not before: Wed 04 Mar 2026 06:01:26 +0000 ROA not after: Wed 03 Mar 2027 06:06:26 +0000 asID: 143312 IP address blocks: 240a:a296::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fa:89:63:5c:6b:99:bf:59:01:8e:49:91:d1:7e:c6:93:84:b7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:26 2026 GMT Not After : Mar 3 06:06:26 2027 GMT Subject: CN=D91B993FBAFB7BEB58A56E7D394235144D84127E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:27:18:0e:68:5d:32:cb:c0:60:24:37:63: 79:cf:c7:ed:19:9c:39:2f:29:a9:b9:20:22:e7:09: 4e:28:83:31:ef:9b:b2:44:29:bf:78:e7:4c:99:0b: 29:4b:5d:c9:da:56:3c:5e:76:73:4c:6f:f4:09:cf: 8e:b8:34:26:46:a0:d7:77:db:c3:38:e3:48:0c:d3: dc:00:cd:69:3e:a7:67:99:b2:59:a7:c8:86:4f:71: e0:c5:b0:cf:47:6c:57:02:28:ce:eb:99:1b:8f:50: 30:64:85:03:5f:4e:50:b1:4b:56:9b:dd:a5:77:5d: 1e:3d:48:88:21:40:1c:f3:3d:09:28:2a:7c:ab:13: ac:9a:73:18:a5:52:53:b0:3a:61:a3:80:7f:43:cf: d7:5c:3a:13:03:33:51:8a:0b:db:a9:12:27:dc:eb: 44:29:28:af:7f:b6:25:28:77:22:2a:98:e6:81:90: c5:9c:c3:63:c8:27:5d:92:da:7e:6a:e1:23:c4:3d: 8b:c4:90:a1:c4:86:3f:17:41:83:09:f4:6d:44:d4: 6c:49:64:04:b6:8e:f6:12:a7:2c:3a:dd:1c:4e:d8: 79:9c:b0:93:e7:31:e1:2f:53:33:78:e7:15:97:b8: e8:df:47:57:e7:e8:3a:00:85:48:c4:ab:23:85:15: 2b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1B:99:3F:BA:FB:7B:EB:58:A5:6E:7D:39:42:35:14:4D:84:12:7E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143312.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a296::/32 Signature Algorithm: sha256WithRSAEncryption 70:2d:d4:eb:2b:28:aa:54:61:40:37:34:9a:89:70:f6:2f:83: ef:cd:de:09:5a:4f:33:08:63:97:6d:41:f5:1c:af:b3:1d:5f: 0a:f4:41:35:9c:c9:19:5a:bc:33:73:bc:c8:ca:e7:f3:18:03: 70:63:b5:4c:bf:03:03:03:94:08:f4:b9:94:a0:97:c9:6f:dc: c1:32:0c:82:22:ed:9b:65:4c:a1:bf:76:8f:b4:82:33:c3:11: 01:54:e4:51:5d:8c:43:20:8e:8c:77:8f:26:ee:88:cb:af:82: 96:32:63:1b:20:69:5e:1c:a0:20:2f:d2:3a:b7:91:87:5c:58: fe:b7:fe:27:de:36:4c:55:2d:17:aa:ea:48:c7:4d:af:89:c0: 3d:1e:72:2b:13:0c:a5:88:74:87:cd:15:89:0b:35:47:e7:ad: 4d:bf:4e:53:63:db:2d:fc:46:17:dd:b6:41:52:e3:9c:dc:79: c3:31:36:cc:73:73:c1:10:b4:b3:77:88:01:d8:9c:9e:1c:4c: 6d:7e:25:5f:92:18:98:d3:01:79:aa:94:11:bc:cc:1f:52:b2: 87:52:14:09:bc:fc:59:c8:e8:0a:7c:55:7f:6a:29:27:87:0c: 68:da:5d:85:ed:72:27:35:2c:09:f0:a7:32:2b:8a:94:09:43: 19:1a:07:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS/qJY1xrmb9ZAY5JkdF+xpOEtzQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyNloX DTI3MDMwMzA2MDYyNlowMzExMC8GA1UEAxMoRDkxQjk5M0ZCQUZCN0JFQjU4QTU2 RTdEMzk0MjM1MTQ0RDg0MTI3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/HJxgOaF0yy8BgJDdjec/H7RmcOS8pqbkgIucJTiiDMe+bskQpv3jnTJkL KUtdydpWPF52c0xv9AnPjrg0Jkag13fbwzjjSAzT3ADNaT6nZ5myWafIhk9x4MWw z0dsVwIozuuZG49QMGSFA19OULFLVpvdpXddHj1IiCFAHPM9CSgqfKsTrJpzGKVS U7A6YaOAf0PP11w6EwMzUYoL26kSJ9zrRCkor3+2JSh3IiqY5oGQxZzDY8gnXZLa fmrhI8Q9i8SQocSGPxdBgwn0bUTUbElkBLaO9hKnLDrdHE7YeZywk+cx4S9TM3jn FZe46N9HV+foOgCFSMSrI4UVKx0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTZG5k/ uvt761ilbn05QjUUTYQSfjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK opYwDQYJKoZIhvcNAQELBQADggEBAHAt1OsrKKpUYUA3NJqJcPYvg+/N3glaTzMI Y5dtQfUcr7MdXwr0QTWcyRlavDNzvMjK5/MYA3BjtUy/AwMDlAj0uZSgl8lv3MEy DIIi7ZtlTKG/do+0gjPDEQFU5FFdjEMgjox3jybuiMuvgpYyYxsgaV4coCAv0jq3 kYdcWP63/ifeNkxVLReq6kjHTa+JwD0ecisTDKWIdIfNFYkLNUfnrU2/TlNj2y38 RhfdtkFS45zcecMxNsxzc8EQtLN3iAHYnJ4cTG1+JV+SGJjTAXmqlBG8zB9SsodS FAm8/FnI6Ap8VX9qKSeHDGjaXYXtcic1LAnwpzIripQJQxkaB3U= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:34 2026 by rpki-client