$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143332.roa File: AS143332.roa (raw, json) Hash identifier: EmJEQpI8VwoEWt6Je7hsMfDsOu7ddF6jtInKA0MdeTo= Subject key identifier: 06:16:E8:AB:BF:53:84:C6:DD:B5:AC:75:B5:E2:ED:A4:BC:73:41:10 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5758474D784D746B6D24EB7CECF38CF8D332CC31 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143332.roa Signing time: Wed 04 Mar 2026 06:05:46 +0000 ROA not before: Wed 04 Mar 2026 06:00:46 +0000 ROA not after: Wed 03 Mar 2027 06:05:46 +0000 asID: 143332 IP address blocks: 240a:a2aa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:58:47:4d:78:4d:74:6b:6d:24:eb:7c:ec:f3:8c:f8:d3:32:cc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:46 2026 GMT Not After : Mar 3 06:05:46 2027 GMT Subject: CN=0616E8ABBF5384C6DDB5AC75B5E2EDA4BC734110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:dd:4d:bf:59:ca:2b:af:e4:e4:94:60:c6: 20:33:b5:b5:6d:63:da:9b:cc:91:be:80:0e:81:d1: 5a:a9:ce:1d:f6:b0:56:57:e5:b1:95:0b:77:af:27: 1a:29:b0:30:43:0e:d4:b7:7c:e2:2e:f1:49:f9:9d: b3:86:b7:3f:83:a6:cd:d9:07:9a:75:55:b3:a0:b7: 7b:85:29:c2:b1:c3:c2:19:53:57:68:0d:da:84:6c: b0:a3:45:4c:47:9a:69:17:82:45:cb:a0:ba:b6:17: bb:12:c9:2f:13:62:f2:5d:a9:5a:cf:c4:a9:73:19: 40:3e:65:b2:c9:24:ab:1a:44:99:6f:ab:48:9f:a7: d4:f2:e8:9d:58:88:b8:03:a5:5d:13:78:02:d7:14: 5a:39:fd:a8:2e:14:95:79:40:df:69:3c:6c:13:ff: a9:45:9b:da:da:d7:25:83:1f:e4:93:c3:14:2b:7a: a5:08:c8:8b:63:d4:f9:fe:7d:69:53:67:48:b7:e0: 1b:ef:2d:82:5d:7c:84:8b:87:9c:4a:71:ec:b1:b2: 61:b7:21:b1:3d:b5:b9:b0:7a:44:c1:79:32:d4:f6: 08:03:a1:2f:98:6d:08:c5:65:95:d2:b0:e4:4d:ab: 2e:67:14:3a:e3:99:58:39:83:7d:16:9a:92:3c:a9: 2b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:16:E8:AB:BF:53:84:C6:DD:B5:AC:75:B5:E2:ED:A4:BC:73:41:10 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2aa::/32 Signature Algorithm: sha256WithRSAEncryption 7d:f5:1f:4a:06:77:5c:56:31:1b:42:5b:01:5c:f2:47:fc:26: 10:b5:f3:23:56:48:19:ab:1e:00:52:fc:22:f2:4b:6e:24:87: 6f:1a:d1:8f:53:da:14:20:e0:6e:13:1d:5d:06:d7:13:9a:75: 78:aa:a7:4a:ff:98:c7:5b:63:1c:10:c1:20:fe:51:de:1c:6a: e0:1a:a7:39:19:38:f2:2a:49:5b:2e:f8:39:02:fd:4e:68:c2: bf:09:4c:dd:1c:42:c8:00:00:0f:bb:fc:c8:5e:e3:70:83:09: d8:5e:a8:f4:1b:5e:c2:fb:4b:04:c5:2b:73:08:07:19:97:d6: 17:7c:f7:fe:e8:80:a1:b0:7f:12:96:a5:64:95:9a:17:9c:dd: b3:fb:76:eb:25:04:fd:6e:f2:46:c7:3a:79:e1:76:14:39:91: 54:dc:96:4a:42:49:90:fd:23:21:5e:7e:86:28:d0:fb:70:68: 0a:71:6f:56:81:6d:ca:26:88:1f:ab:ec:2f:2e:36:3f:4a:4c: 98:9b:d8:20:63:85:bd:91:49:13:57:a2:ca:c0:91:53:03:04: 67:ff:d9:54:aa:c2:ae:24:8f:64:08:7a:dd:16:e1:f9:fe:bd: 46:69:33:cb:e2:f3:87:71:ec:8d:57:c8:27:88:bc:ea:43:64: 62:1a:b0:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUV1hHTXhNdGttJOt87POM+NMyzDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0NloX DTI3MDMwMzA2MDU0NlowMzExMC8GA1UEAxMoMDYxNkU4QUJCRjUzODRDNkREQjVB Qzc1QjVFMkVEQTRCQzczNDExMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKv93U2/Wcorr+TklGDGIDO1tW1j2pvMkb6ADoHRWqnOHfawVlflsZULd68n GimwMEMO1Ld84i7xSfmds4a3P4OmzdkHmnVVs6C3e4UpwrHDwhlTV2gN2oRssKNF TEeaaReCRcugurYXuxLJLxNi8l2pWs/EqXMZQD5lsskkqxpEmW+rSJ+n1PLonViI uAOlXRN4AtcUWjn9qC4UlXlA32k8bBP/qUWb2trXJYMf5JPDFCt6pQjIi2PU+f59 aVNnSLfgG+8tgl18hIuHnEpx7LGyYbchsT21ubB6RMF5MtT2CAOhL5htCMVlldKw 5E2rLmcUOuOZWDmDfRaakjypK50CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQGFuir v1OExt21rHW14u2kvHNBEDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oqowDQYJKoZIhvcNAQELBQADggEBAH31H0oGd1xWMRtCWwFc8kf8JhC18yNWSBmr HgBS/CLyS24kh28a0Y9T2hQg4G4THV0G1xOadXiqp0r/mMdbYxwQwSD+Ud4cauAa pzkZOPIqSVsu+DkC/U5owr8JTN0cQsgAAA+7/Mhe43CDCdheqPQbXsL7SwTFK3MI BxmX1hd89/7ogKGwfxKWpWSVmhec3bP7duslBP1u8kbHOnnhdhQ5kVTclkpCSZD9 IyFefoYo0PtwaApxb1aBbcomiB+r7C8uNj9KTJib2CBjhb2RSRNXosrAkVMDBGf/ 2VSqwq4kj2QIet0W4fn+vUZpM8vi84dx7I1XyCeIvOpDZGIasCk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:28 2026 by rpki-client