$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143339.roa File: AS143339.roa (raw, json) Hash identifier: pDNmSNYy1eZu/GypbsjNd4lzay/R9q9xt880Pk84eT8= Subject key identifier: D2:95:71:E4:03:4F:30:B6:AC:65:B9:7B:3B:19:31:D1:16:91:11:41 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7CEBFFE3507D6761DB53FA7076CA36CB59B92DA1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143339.roa Signing time: Wed 04 Mar 2026 06:08:01 +0000 ROA not before: Wed 04 Mar 2026 06:03:01 +0000 ROA not after: Wed 03 Mar 2027 06:08:01 +0000 asID: 143339 IP address blocks: 240a:a2b1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:eb:ff:e3:50:7d:67:61:db:53:fa:70:76:ca:36:cb:59:b9:2d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:01 2026 GMT Not After : Mar 3 06:08:01 2027 GMT Subject: CN=D29571E4034F30B6AC65B97B3B1931D116911141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:28:6b:6c:0f:50:73:02:e3:0a:5c:cf:c6: d2:d3:57:38:18:76:c2:57:eb:ab:bb:64:f4:43:47: ad:a6:d1:b6:76:aa:0f:7f:b6:e7:83:5c:23:5d:74: 70:39:b8:36:02:35:c3:8b:a6:19:8a:ab:29:2a:25: b3:3b:90:4f:06:48:a5:64:e0:bc:e2:88:e1:30:82: ae:86:3d:c8:9b:08:49:82:89:ff:8c:b2:62:42:d2: 8b:54:b9:34:9f:60:bc:9e:fa:fa:5a:ff:d7:83:37: 3f:b4:a9:94:6c:60:68:44:22:27:b5:06:03:1f:2a: d9:af:62:f3:09:b1:47:fe:40:86:c5:0c:3b:45:58: e7:47:cc:0f:e5:82:e4:a0:f3:78:9e:5a:06:7b:ae: ce:e1:4b:a1:9e:f5:4c:da:18:e5:a3:4a:a8:b9:be: 58:d2:61:65:88:9a:b4:b0:c8:ab:df:af:ca:3d:ee: 6e:87:33:32:05:64:0a:60:30:2c:f5:55:70:b0:f4: d2:a2:cb:e3:be:28:8a:43:3f:59:dc:c4:eb:cd:7a: 39:5c:8a:0c:2e:15:43:29:98:11:c3:2c:ab:06:5e: 8d:c8:ed:2b:a2:bb:35:3e:87:23:ea:2c:b1:93:7e: 8f:8b:8d:f0:46:18:c7:5f:55:ac:db:74:71:1a:0c: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:95:71:E4:03:4F:30:B6:AC:65:B9:7B:3B:19:31:D1:16:91:11:41 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2b1::/32 Signature Algorithm: sha256WithRSAEncryption 68:bf:bc:75:3f:77:f7:02:c5:f0:35:43:0b:26:3c:29:c8:29: cd:0d:d2:4d:5a:94:17:19:36:64:0f:c7:82:8e:93:61:17:f8: 8e:61:d8:4c:e3:eb:46:49:01:ef:33:e8:8c:4e:11:4a:c6:cb: 8d:61:9d:0f:89:9e:c8:b3:5e:16:db:f3:ee:80:c2:e2:1f:e3: 7d:e1:76:36:44:cc:63:68:77:d5:61:44:d2:6f:07:df:3f:d7: 2f:84:a9:2a:ac:e9:99:13:3d:11:92:6f:d4:a1:16:33:db:6a: bf:5a:43:9b:da:db:9d:84:76:56:97:5a:de:c7:ee:2d:1f:ab: de:89:d2:07:b6:b1:48:99:9e:bc:22:b4:61:5f:a6:cf:66:24: 55:6a:57:bf:22:8f:44:57:42:99:92:da:15:58:42:9e:df:1c: ec:15:61:47:8b:cd:4e:be:c2:00:af:0f:4a:76:fe:ce:84:e9: 93:99:e0:a5:7a:bd:4d:7f:66:a9:3a:75:dd:1d:02:bf:ce:9b: 34:11:7c:85:6e:85:d0:c2:37:a2:35:52:37:d8:a0:28:45:b3: e9:6f:df:3f:69:d3:35:0e:5b:f7:2b:13:16:bd:73:e4:13:1b: fd:71:63:96:8a:02:e6:36:67:ac:26:bb:8c:26:b5:c3:92:60: 56:e6:01:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfOv/41B9Z2HbU/pwdso2y1m5LaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwMVoX DTI3MDMwMzA2MDgwMVowMzExMC8GA1UEAxMoRDI5NTcxRTQwMzRGMzBCNkFDNjVC OTdCM0IxOTMxRDExNjkxMTE0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1zKGtsD1BzAuMKXM/G0tNXOBh2wlfrq7tk9ENHrabRtnaqD3+254NcI110 cDm4NgI1w4umGYqrKSolszuQTwZIpWTgvOKI4TCCroY9yJsISYKJ/4yyYkLSi1S5 NJ9gvJ76+lr/14M3P7SplGxgaEQiJ7UGAx8q2a9i8wmxR/5AhsUMO0VY50fMD+WC 5KDzeJ5aBnuuzuFLoZ71TNoY5aNKqLm+WNJhZYiatLDIq9+vyj3uboczMgVkCmAw LPVVcLD00qLL474oikM/WdzE6816OVyKDC4VQymYEcMsqwZejcjtK6K7NT6HI+os sZN+j4uN8EYYx19VrNt0cRoMWc0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTSlXHk A08wtqxluXs7GTHRFpERQTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK orEwDQYJKoZIhvcNAQELBQADggEBAGi/vHU/d/cCxfA1QwsmPCnIKc0N0k1alBcZ NmQPx4KOk2EX+I5h2Ezj60ZJAe8z6IxOEUrGy41hnQ+JnsizXhbb8+6AwuIf433h djZEzGNod9VhRNJvB98/1y+EqSqs6ZkTPRGSb9ShFjPbar9aQ5va252EdlaXWt7H 7i0fq96J0ge2sUiZnrwitGFfps9mJFVqV78ij0RXQpmS2hVYQp7fHOwVYUeLzU6+ wgCvD0p2/s6E6ZOZ4KV6vU1/Zqk6dd0dAr/OmzQRfIVuhdDCN6I1UjfYoChFs+lv 3z9p0zUOW/crExa9c+QTG/1xY5aKAuY2Z6wmu4wmtcOSYFbmAQ0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:31 2026 by rpki-client