$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143320.roa File: AS143320.roa (raw, json) Hash identifier: e43lQQInATARCiBMXlquZphnJ3tQXkhhASOM/h8Sh7Y= Subject key identifier: 5A:FE:54:93:2F:F1:2B:6F:6F:B2:C9:E7:FD:42:3B:F5:BD:10:FE:F2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 36B8B6C5B7A17192EE2601511C573347B66E345F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143320.roa Signing time: Wed 04 Mar 2026 06:07:04 +0000 ROA not before: Wed 04 Mar 2026 06:02:04 +0000 ROA not after: Wed 03 Mar 2027 06:07:04 +0000 asID: 143320 IP address blocks: 240a:a29e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b8:b6:c5:b7:a1:71:92:ee:26:01:51:1c:57:33:47:b6:6e:34:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:04 2026 GMT Not After : Mar 3 06:07:04 2027 GMT Subject: CN=5AFE54932FF12B6F6FB2C9E7FD423BF5BD10FEF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:27:b8:63:74:69:d8:7d:ed:0e:29:3a:18:90: c2:eb:f7:16:19:6f:8e:1c:f3:4d:d6:d7:cd:de:ca: a8:87:46:c5:4e:31:64:64:6c:ce:29:dc:33:7c:59: 9f:f0:0a:ff:d3:ea:18:ad:d1:31:16:ae:97:2f:b6: 1e:0b:94:69:48:8d:6b:14:22:a0:75:90:fc:da:af: a1:42:5e:39:88:a1:d2:61:b9:bc:59:6e:e3:dc:4d: de:60:e8:95:47:21:73:5c:36:2c:ba:5c:49:aa:c3: bf:78:22:4a:5d:eb:77:77:f6:02:71:5e:48:72:03: 22:26:93:9a:72:69:1b:e0:4d:d5:36:a5:43:d5:3d: f6:0f:7f:bf:3b:8c:85:0e:d6:e9:17:74:83:29:02: 66:77:5d:50:ef:3e:02:f7:03:2a:c1:78:56:60:be: 3c:3d:54:ac:06:50:da:e1:03:c1:73:48:cf:5c:18: 58:10:d1:27:c8:5b:46:3d:eb:76:d0:42:f9:f3:26: 4e:42:74:a6:7a:2d:86:3b:2d:49:95:fb:cf:d5:12: ea:16:db:42:09:61:1e:e7:23:86:92:07:7b:7d:87: 66:87:b9:0a:09:e4:9e:24:00:d3:61:b6:e0:e8:1f: 16:fb:cf:36:3b:1f:4e:9a:bb:49:3c:d4:f2:3b:43: 48:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FE:54:93:2F:F1:2B:6F:6F:B2:C9:E7:FD:42:3B:F5:BD:10:FE:F2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143320.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a29e::/32 Signature Algorithm: sha256WithRSAEncryption 24:16:e7:f5:9a:73:80:18:1a:76:87:9a:74:b5:c2:07:7f:05: c8:96:9e:ea:0f:64:6d:db:f5:be:16:32:cd:ce:5f:c0:6b:02: 0f:42:29:8a:a7:10:f7:55:a2:94:4d:d2:6a:85:90:a3:27:9b: 9d:cc:ed:fc:6e:34:29:53:ee:83:0d:fc:f6:86:7a:dc:97:7d: de:08:2e:bb:1b:11:73:25:da:28:95:8b:46:97:04:a1:fa:86: 1a:b1:74:13:25:99:39:b3:3b:e8:21:98:a0:b5:73:5d:f6:30: a7:f7:aa:ac:f1:3b:a2:e5:d3:52:32:bf:40:ea:c8:fd:ce:60: 81:01:b0:d6:f1:c7:33:8b:ab:0b:cb:d2:16:96:da:ee:ae:b3: c1:b4:1f:da:55:71:14:8c:0e:bd:eb:fc:73:0d:ed:91:b8:e6: 8d:0d:65:11:e8:a9:2b:da:34:81:d9:71:12:4a:14:e9:2d:ad: bc:3d:c2:55:5f:db:17:be:65:ed:96:54:41:6b:01:ce:5f:00: 52:a0:72:f5:7e:d7:be:0d:25:32:41:7f:8b:08:02:62:ed:2d: 88:e0:95:bc:a2:83:e6:07:80:71:be:64:4f:32:7f:98:3f:20: cf:68:d5:24:3b:c3:47:71:0c:cb:a6:11:51:65:88:d2:36:77: 36:2a:d8:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNri2xbehcZLuJgFRHFczR7ZuNF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwNFoX DTI3MDMwMzA2MDcwNFowMzExMC8GA1UEAxMoNUFGRTU0OTMyRkYxMkI2RjZGQjJD OUU3RkQ0MjNCRjVCRDEwRkVGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO0nuGN0adh97Q4pOhiQwuv3FhlvjhzzTdbXzd7KqIdGxU4xZGRszincM3xZ n/AK/9PqGK3RMRauly+2HguUaUiNaxQioHWQ/NqvoUJeOYih0mG5vFlu49xN3mDo lUchc1w2LLpcSarDv3giSl3rd3f2AnFeSHIDIiaTmnJpG+BN1TalQ9U99g9/vzuM hQ7W6Rd0gykCZnddUO8+AvcDKsF4VmC+PD1UrAZQ2uEDwXNIz1wYWBDRJ8hbRj3r dtBC+fMmTkJ0pnothjstSZX7z9US6hbbQglhHucjhpIHe32HZoe5CgnkniQA02G2 4OgfFvvPNjsfTpq7STzU8jtDSIMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRa/lST L/Erb2+yyef9Qjv1vRD+8jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK op4wDQYJKoZIhvcNAQELBQADggEBACQW5/Wac4AYGnaHmnS1wgd/BciWnuoPZG3b 9b4WMs3OX8BrAg9CKYqnEPdVopRN0mqFkKMnm53M7fxuNClT7oMN/PaGetyXfd4I LrsbEXMl2iiVi0aXBKH6hhqxdBMlmTmzO+ghmKC1c132MKf3qqzxO6Ll01Iyv0Dq yP3OYIEBsNbxxzOLqwvL0haW2u6us8G0H9pVcRSMDr3r/HMN7ZG45o0NZRHoqSva NIHZcRJKFOktrbw9wlVf2xe+Ze2WVEFrAc5fAFKgcvV+174NJTJBf4sIAmLtLYjg lbyig+YHgHG+ZE8yf5g/IM9o1SQ7w0dxDMumEVFliNI2dzYq2E0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:57 2026 by rpki-client