$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143326.roa File: AS143326.roa (raw, json) Hash identifier: LXfmwpqaj3gHb84B+n1OaDHy4DzykhWvsuznxGtNypc= Subject key identifier: 52:76:BB:36:3F:BF:9A:1B:A6:F5:6E:D3:A7:10:D5:EF:43:D2:04:EF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3114229B3C93861A912F6EF24E146110AD8F92CF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143326.roa Signing time: Wed 04 Mar 2026 06:05:54 +0000 ROA not before: Wed 04 Mar 2026 06:00:54 +0000 ROA not after: Wed 03 Mar 2027 06:05:54 +0000 asID: 143326 IP address blocks: 240a:a2a4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:14:22:9b:3c:93:86:1a:91:2f:6e:f2:4e:14:61:10:ad:8f:92:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:54 2026 GMT Not After : Mar 3 06:05:54 2027 GMT Subject: CN=5276BB363FBF9A1BA6F56ED3A710D5EF43D204EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cb:c0:2a:02:00:22:4f:07:0c:2f:05:1b:cc: 34:bc:88:9d:45:39:86:79:cf:06:39:8c:ad:79:d0: 1d:21:35:cf:92:c1:1b:c6:e0:50:23:11:6e:5c:fe: 49:cf:cb:a7:19:1d:ef:c9:a5:fc:80:d3:b0:7e:fb: c7:10:ba:23:af:55:9e:b0:b4:52:87:28:c4:c6:01: d5:56:5e:b3:f5:72:db:5d:9c:a5:ef:9b:41:83:f8: c5:76:b2:66:45:32:a3:2b:2d:ab:f8:db:34:fb:4d: 80:e7:3d:26:df:29:a9:02:ac:e0:0d:50:48:36:d8: 7b:38:55:bf:b7:58:9d:44:a5:9f:41:03:20:49:b7: 95:7f:0f:ca:e5:b1:4d:75:d0:41:f5:3d:6e:e0:ca: 44:8e:cf:dc:e1:84:76:78:88:f1:df:30:62:19:27: b0:d2:5b:27:b6:b4:d4:c4:47:63:e5:e3:e0:cf:32: 33:d0:d4:49:e8:3c:e3:e3:69:ce:6e:dd:d3:92:04: 63:a2:ef:22:67:f5:3c:5c:3a:53:ff:59:d4:39:b0: d0:e2:f1:fb:c9:a6:f9:f9:50:ac:bd:9b:66:5d:ce: 15:07:8a:77:77:d1:4d:65:5c:27:2e:7f:ce:0c:48: ad:bb:9f:01:e7:ae:9d:bc:d9:1e:d5:a7:83:1c:b3: 0d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:76:BB:36:3F:BF:9A:1B:A6:F5:6E:D3:A7:10:D5:EF:43:D2:04:EF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143326.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2a4::/32 Signature Algorithm: sha256WithRSAEncryption 29:92:76:f7:30:68:3d:22:f1:ba:1b:60:da:32:cb:bf:9f:db: e4:c1:be:41:c0:11:a2:ea:a1:04:2c:6e:d2:94:21:fb:71:21: 0e:04:8b:14:ec:65:06:5e:56:56:bf:ea:bb:95:4e:be:ac:d4: 58:8a:75:a0:c4:af:70:91:e2:de:81:50:77:5d:16:31:23:22: 08:1a:12:bd:ce:71:a2:a9:9c:df:62:33:fb:4f:04:ea:ce:b9: 4e:4e:e1:95:33:b7:ea:21:6c:a8:41:9d:9c:74:9d:34:54:83: a7:2b:18:e6:6f:3a:4b:27:5c:24:8b:17:29:8b:43:ad:99:16: 58:90:b4:2c:fa:d6:76:3d:bd:b6:ec:9b:e7:20:3c:b9:e9:b3: 93:3a:82:87:d0:2f:45:ff:6c:cc:6e:10:4e:7e:93:6e:dc:cc: 31:4c:56:ec:1f:94:36:21:88:ea:7c:7e:0d:48:ec:e1:71:03: 2b:d2:86:5e:1e:74:8a:7c:ec:36:e9:39:c5:26:15:ef:06:ce: da:42:40:08:2f:1f:6f:a8:cb:54:e2:0c:21:8d:1e:b2:57:87: 3f:41:79:0b:e7:fb:60:29:ee:df:e0:90:e4:5d:47:07:23:c1: 36:36:00:6a:f5:24:79:03:46:00:df:05:4c:79:bb:7c:b9:8e: ca:31:8b:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMRQimzyThhqRL27yThRhEK2Pks8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1NFoX DTI3MDMwMzA2MDU1NFowMzExMC8GA1UEAxMoNTI3NkJCMzYzRkJGOUExQkE2RjU2 RUQzQTcxMEQ1RUY0M0QyMDRFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANnLwCoCACJPBwwvBRvMNLyInUU5hnnPBjmMrXnQHSE1z5LBG8bgUCMRblz+ Sc/Lpxkd78ml/IDTsH77xxC6I69VnrC0UocoxMYB1VZes/Vy212cpe+bQYP4xXay ZkUyoystq/jbNPtNgOc9Jt8pqQKs4A1QSDbYezhVv7dYnUSln0EDIEm3lX8PyuWx TXXQQfU9buDKRI7P3OGEdniI8d8wYhknsNJbJ7a01MRHY+Xj4M8yM9DUSeg84+Np zm7d05IEY6LvImf1PFw6U/9Z1Dmw0OLx+8mm+flQrL2bZl3OFQeKd3fRTWVcJy5/ zgxIrbufAeeunbzZHtWngxyzDWsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRSdrs2 P7+aG6b1btOnENXvQ9IE7zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oqQwDQYJKoZIhvcNAQELBQADggEBACmSdvcwaD0i8bobYNoyy7+f2+TBvkHAEaLq oQQsbtKUIftxIQ4EixTsZQZeVla/6ruVTr6s1FiKdaDEr3CR4t6BUHddFjEjIgga Er3OcaKpnN9iM/tPBOrOuU5O4ZUzt+ohbKhBnZx0nTRUg6crGOZvOksnXCSLFymL Q62ZFliQtCz61nY9vbbsm+cgPLnps5M6gofQL0X/bMxuEE5+k27czDFMVuwflDYh iOp8fg1I7OFxAyvShl4edIp87DbpOcUmFe8GztpCQAgvH2+oy1TiDCGNHrJXhz9B eQvn+2Ap7t/gkORdRwcjwTY2AGr1JHkDRgDfBUx5u3y5jsoxix4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:44 2026 by rpki-client