$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143331.roa File: AS143331.roa (raw, json) Hash identifier: Dk4IuXK3EJx+dpaO3QrQ7GCSNQfv0WSXRrXvZTe72XM= Subject key identifier: CD:3C:0E:DC:9F:FA:97:AF:7C:81:45:53:FB:54:47:AF:B6:ED:03:83 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3E828335BC94DF71958C55410CC4BD9F8DAEBCC2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143331.roa Signing time: Wed 04 Mar 2026 06:08:03 +0000 ROA not before: Wed 04 Mar 2026 06:03:03 +0000 ROA not after: Wed 03 Mar 2027 06:08:03 +0000 asID: 143331 IP address blocks: 240a:a2a9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:82:83:35:bc:94:df:71:95:8c:55:41:0c:c4:bd:9f:8d:ae:bc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:03 2026 GMT Not After : Mar 3 06:08:03 2027 GMT Subject: CN=CD3C0EDC9FFA97AF7C814553FB5447AFB6ED0383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:89:9c:39:25:93:e0:3d:09:53:b2:67:1f: 1a:cd:e6:d2:d2:bf:12:ae:63:e0:ee:52:4d:36:68: 14:7d:fd:55:30:63:51:0f:3c:7d:f3:40:03:e6:fd: 28:32:6a:b2:14:14:5c:20:31:41:49:cd:18:90:ca: c5:97:ae:db:d3:d8:d3:b4:60:65:7d:ca:3f:63:b7: 44:2c:1d:70:74:9c:d8:3e:ca:07:96:08:09:bd:e5: 23:34:74:fc:07:92:e8:ce:2d:90:54:29:2c:da:b8: 6f:33:54:97:19:3c:eb:a7:88:70:f9:e9:5a:c3:ee: 14:4c:61:6d:62:5e:05:93:87:25:34:42:c2:7d:af: a2:e8:7b:6c:d3:01:25:9e:40:be:29:8f:21:59:a4: c9:cc:06:47:3e:40:68:17:b6:ba:ba:cd:40:94:b5: cf:6c:af:bd:0d:74:81:85:2a:2f:9f:6f:46:f8:db: 1c:af:53:8b:7d:9c:4c:fb:9f:8a:84:2c:ef:2c:b9: 1f:9c:60:0f:ff:e9:60:cd:c8:9a:e3:e2:06:85:bd: 23:7e:47:bc:af:c6:15:2b:4a:5d:62:e8:11:3f:f3: fd:25:e9:d6:ca:9c:fd:54:b3:98:a2:6f:b7:f8:fc: f0:2f:5f:c5:b8:09:6e:26:8a:d4:6f:18:e7:08:8f: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3C:0E:DC:9F:FA:97:AF:7C:81:45:53:FB:54:47:AF:B6:ED:03:83 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2a9::/32 Signature Algorithm: sha256WithRSAEncryption 1f:b3:95:d5:db:fa:21:b3:9c:89:3c:89:f0:eb:79:c3:24:57: 01:b9:79:72:35:bd:26:9f:da:ae:8b:57:fe:7c:18:c3:be:8b: ab:ea:b0:f1:8a:dd:e1:35:57:41:d1:e9:2d:e4:ee:d0:24:21: f6:7b:4f:2f:29:ca:22:aa:d8:24:62:45:0c:a2:0a:62:c0:ee: d5:dd:09:f1:a4:e4:81:85:bc:24:05:3f:1a:1c:5c:9e:03:5b: b6:27:71:fa:65:9e:5d:b7:61:9c:7a:83:33:da:cc:5b:1f:62: dc:6e:ea:c1:6b:c7:47:26:6c:e0:a3:19:a6:8d:67:13:a8:a6: a6:4b:59:54:95:97:16:74:3a:c4:c3:4d:bb:00:76:89:be:2d: 26:28:06:e3:76:dd:91:d9:3b:4f:aa:04:ac:b4:02:75:a6:f3: dc:7e:39:ec:c3:c9:7c:24:d0:d3:c0:aa:6e:e0:ad:19:12:c9: 35:13:eb:eb:48:ac:11:56:54:d2:63:62:80:79:65:5c:c8:ed: c3:28:9e:93:3d:6c:58:1f:26:b2:48:83:59:5e:fe:4f:b4:71: e4:5e:fa:3e:09:1b:8f:63:fe:02:69:12:e0:26:1d:8f:b6:e0: 86:eb:20:c0:5f:02:f2:cf:ef:05:c3:52:96:2a:be:fa:60:7c: 2e:32:a7:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPoKDNbyU33GVjFVBDMS9n42uvMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwM1oX DTI3MDMwMzA2MDgwM1owMzExMC8GA1UEAxMoQ0QzQzBFREM5RkZBOTdBRjdDODE0 NTUzRkI1NDQ3QUZCNkVEMDM4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhfiZw5JZPgPQlTsmcfGs3m0tK/Eq5j4O5STTZoFH39VTBjUQ88ffNAA+b9 KDJqshQUXCAxQUnNGJDKxZeu29PY07RgZX3KP2O3RCwdcHSc2D7KB5YICb3lIzR0 /AeS6M4tkFQpLNq4bzNUlxk866eIcPnpWsPuFExhbWJeBZOHJTRCwn2vouh7bNMB JZ5AvimPIVmkycwGRz5AaBe2urrNQJS1z2yvvQ10gYUqL59vRvjbHK9Ti32cTPuf ioQs7yy5H5xgD//pYM3ImuPiBoW9I35HvK/GFStKXWLoET/z/SXp1sqc/VSzmKJv t/j88C9fxbgJbiaK1G8Y5wiPDd8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTNPA7c n/qXr3yBRVP7VEevtu0DgzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oqkwDQYJKoZIhvcNAQELBQADggEBAB+zldXb+iGznIk8ifDrecMkVwG5eXI1vSaf 2q6LV/58GMO+i6vqsPGK3eE1V0HR6S3k7tAkIfZ7Ty8pyiKq2CRiRQyiCmLA7tXd CfGk5IGFvCQFPxocXJ4DW7Yncfplnl23YZx6gzPazFsfYtxu6sFrx0cmbOCjGaaN ZxOopqZLWVSVlxZ0OsTDTbsAdom+LSYoBuN23ZHZO0+qBKy0AnWm89x+OezDyXwk 0NPAqm7grRkSyTUT6+tIrBFWVNJjYoB5ZVzI7cMonpM9bFgfJrJIg1le/k+0ceRe +j4JG49j/gJpEuAmHY+24IbrIMBfAvLP7wXDUpYqvvpgfC4ypzg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:09 2026 by rpki-client