$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143315.roa File: AS143315.roa (raw, json) Hash identifier: zyABfr2QDzcGV2lRz/xIurmBRm+r+XTxnLWTjZNSog8= Subject key identifier: E0:2F:39:9C:87:73:E3:F3:98:1D:25:DF:6E:5E:D6:58:C0:1E:A2:F7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0971355573F381C6EBB60C9287FF13B503D71647 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143315.roa Signing time: Wed 04 Mar 2026 06:07:14 +0000 ROA not before: Wed 04 Mar 2026 06:02:14 +0000 ROA not after: Wed 03 Mar 2027 06:07:14 +0000 asID: 143315 IP address blocks: 240a:a299::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:71:35:55:73:f3:81:c6:eb:b6:0c:92:87:ff:13:b5:03:d7:16:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:14 2026 GMT Not After : Mar 3 06:07:14 2027 GMT Subject: CN=E02F399C8773E3F3981D25DF6E5ED658C01EA2F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:9b:8c:9e:9c:1a:b1:28:15:ab:61:ea:c1: 96:c6:d4:53:ad:a6:9e:16:01:92:d9:7f:ea:c4:97: cc:1c:1b:a7:81:67:a8:60:2e:01:54:33:ca:28:52: 05:60:16:5b:66:1b:75:2d:10:c4:63:8e:bb:40:a9: a9:65:72:60:18:41:7c:bd:22:75:0b:c3:7b:7a:e6: ae:26:d2:5a:d4:68:32:a2:0c:4d:0c:c8:a6:78:a8: 16:e8:5d:fe:6a:8c:be:c7:8e:f7:07:fa:ee:e4:93: 8f:a3:07:62:7f:45:ee:2e:1d:ab:aa:1a:a1:00:a5: e0:8c:da:75:c3:1f:d0:8b:1e:dc:33:52:48:b8:69: 85:40:e2:67:46:80:c6:dd:88:a2:a8:d9:79:f1:ba: bf:2a:a9:c6:8d:9a:0e:f0:a2:cc:df:5e:a2:13:85: 6d:3b:07:b1:43:61:0a:c9:47:7f:3f:d3:3e:a3:49: 04:f0:bf:8c:f3:fa:08:01:5e:8e:1a:3d:a6:cc:db: 3d:cb:c0:e7:aa:43:cf:b3:d8:b4:a9:1e:5b:9e:5f: 30:f8:60:7c:41:89:88:cf:3d:95:a2:5a:28:0d:e5: 4e:2c:34:0c:68:0e:76:93:82:fb:a2:94:1a:dd:bf: d6:6f:c9:9b:a7:c8:6d:b5:58:d9:94:35:f1:f0:53: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2F:39:9C:87:73:E3:F3:98:1D:25:DF:6E:5E:D6:58:C0:1E:A2:F7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143315.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a299::/32 Signature Algorithm: sha256WithRSAEncryption 30:73:2c:7e:2c:dc:8f:bc:9d:c1:e1:35:26:2e:74:e5:8d:8e: 40:4b:fd:7b:81:cc:d3:e4:7d:02:18:b9:1f:20:27:35:c0:f1: 5d:0b:aa:e9:63:1d:81:a6:c0:7f:b3:14:99:6a:96:fe:d6:2c: 19:69:cf:cb:6b:d6:e4:44:a6:a1:99:22:95:6e:f5:90:6b:b2: ec:88:d6:8c:01:1f:92:fb:a8:6c:6f:04:2d:09:6e:b4:42:5e: 06:47:50:ce:18:cb:96:ea:c1:a6:66:8a:5c:7e:33:ed:52:80: 9c:c9:51:f2:7d:3b:42:5c:3b:d8:e9:c9:ff:0f:0d:64:b5:5c: 23:7a:2a:e1:a1:a5:69:40:bb:66:3f:b9:12:81:4a:0e:15:d0: 85:55:b6:3a:62:dc:93:69:36:fb:00:81:44:ed:c4:eb:7c:4f: 6c:c2:49:03:65:92:70:02:e8:a2:24:23:84:15:73:0e:5c:f6: 3f:9a:29:cd:43:4b:33:93:2f:d2:41:f8:d5:df:a6:7c:0d:1d: 4f:2d:0b:20:71:ce:7d:2a:d2:97:76:4f:fc:0d:ea:1e:11:f1: 42:fd:46:3d:15:2b:85:af:9e:b4:f3:19:3b:73:02:74:d2:5e: a3:8d:9d:8f:fa:f1:f4:dd:75:41:ef:5c:81:5e:25:e7:da:bd: 65:b7:c8:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCXE1VXPzgcbrtgySh/8TtQPXFkcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxNFoX DTI3MDMwMzA2MDcxNFowMzExMC8GA1UEAxMoRTAyRjM5OUM4NzczRTNGMzk4MUQy NURGNkU1RUQ2NThDMDFFQTJGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+am4yenBqxKBWrYerBlsbUU62mnhYBktl/6sSXzBwbp4FnqGAuAVQzyihS BWAWW2YbdS0QxGOOu0CpqWVyYBhBfL0idQvDe3rmribSWtRoMqIMTQzIpnioFuhd /mqMvseO9wf67uSTj6MHYn9F7i4dq6oaoQCl4IzadcMf0Ise3DNSSLhphUDiZ0aA xt2IoqjZefG6vyqpxo2aDvCizN9eohOFbTsHsUNhCslHfz/TPqNJBPC/jPP6CAFe jho9pszbPcvA56pDz7PYtKkeW55fMPhgfEGJiM89laJaKA3lTiw0DGgOdpOC+6KU Gt2/1m/Jm6fIbbVY2ZQ18fBTfckCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTgLzmc h3Pj85gdJd9uXtZYwB6i9zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK opkwDQYJKoZIhvcNAQELBQADggEBADBzLH4s3I+8ncHhNSYudOWNjkBL/XuBzNPk fQIYuR8gJzXA8V0LquljHYGmwH+zFJlqlv7WLBlpz8tr1uREpqGZIpVu9ZBrsuyI 1owBH5L7qGxvBC0JbrRCXgZHUM4Yy5bqwaZmilx+M+1SgJzJUfJ9O0JcO9jpyf8P DWS1XCN6KuGhpWlAu2Y/uRKBSg4V0IVVtjpi3JNpNvsAgUTtxOt8T2zCSQNlknAC 6KIkI4QVcw5c9j+aKc1DSzOTL9JB+NXfpnwNHU8tCyBxzn0q0pd2T/wN6h4R8UL9 Rj0VK4WvnrTzGTtzAnTSXqONnY/68fTddUHvXIFeJefavWW3yK0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:53 2026 by rpki-client