$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143341.roa File: AS143341.roa (raw, json) Hash identifier: fq9fJgVYZNqTzOu5EEhL/CZ6k7yM8FO5vhSc7mTcHJs= Subject key identifier: 55:7A:18:55:82:1D:4B:FB:16:B9:67:31:90:E4:BB:0C:CB:0B:00:E3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0ED667344EA00BE968BFCCC36745A1FA27CA2952 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143341.roa Signing time: Wed 04 Mar 2026 06:07:03 +0000 ROA not before: Wed 04 Mar 2026 06:02:03 +0000 ROA not after: Wed 03 Mar 2027 06:07:03 +0000 asID: 143341 IP address blocks: 240a:a2b3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d6:67:34:4e:a0:0b:e9:68:bf:cc:c3:67:45:a1:fa:27:ca:29:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:03 2026 GMT Not After : Mar 3 06:07:03 2027 GMT Subject: CN=557A1855821D4BFB16B9673190E4BB0CCB0B00E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e5:db:bd:74:a5:37:0c:a9:ee:72:80:ea:a7: 4e:4f:02:f4:d2:1d:16:a0:e6:1b:bf:81:37:ec:cc: 0b:b1:ff:e2:8b:69:3a:73:10:d2:c1:59:f1:2f:e6: df:a5:40:15:19:d2:05:56:14:0e:c9:7b:fe:48:7f: b8:81:4b:ad:b0:8c:94:9b:92:48:62:ff:d5:54:87: 7e:e9:b3:35:a4:ca:cc:9c:8b:f1:27:e3:ff:f1:58: 88:9e:75:2c:89:58:c2:e5:e0:0f:28:03:b8:c3:eb: 7e:88:08:1a:cc:af:1f:73:cc:c1:57:6b:20:26:a8: be:5c:c0:d5:b6:bf:a3:88:29:90:f9:71:8e:5b:0a: 5b:fe:2d:70:ef:b0:0e:48:2e:b6:ef:67:24:89:a4: 67:26:f9:d9:2d:1d:62:f8:a6:da:5a:07:7f:76:bb: 49:f0:b9:96:c5:0c:b3:2a:fb:17:f8:c8:18:aa:54: 44:2e:b1:91:e0:6b:9f:6a:ec:66:4a:14:ac:9d:92: 6a:94:0e:8b:de:7e:94:8c:f4:41:e8:bd:2b:16:75: b1:5d:31:36:eb:e1:51:8f:38:d0:05:ae:51:ab:93: cf:c0:da:01:47:f9:83:68:a7:ed:3d:7a:82:4a:b2: 99:70:df:31:30:a3:1e:b6:30:7b:8d:a4:48:44:c6: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7A:18:55:82:1D:4B:FB:16:B9:67:31:90:E4:BB:0C:CB:0B:00:E3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143341.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2b3::/32 Signature Algorithm: sha256WithRSAEncryption 76:13:47:e9:d4:cb:22:35:19:4b:44:8b:2f:88:2c:7d:17:67: 4b:fb:70:45:33:d6:60:16:8c:9e:f1:9a:49:b8:ff:6a:92:d8: dc:14:bd:0a:ca:6c:50:b1:33:d7:69:c9:e2:49:6c:0e:32:26: d6:04:16:54:b0:b1:07:d6:28:75:50:49:2f:23:62:e1:8a:06: 6d:4d:4c:db:df:a9:c2:18:4f:46:01:96:e5:64:f4:af:60:68: 73:76:c5:7b:71:05:ea:09:66:b5:26:ab:2d:6f:d1:5c:4d:0b: fd:da:22:ae:61:e7:45:2d:76:04:b6:fa:34:e6:2a:26:98:ea: 92:4f:ed:18:4c:10:79:7e:f8:5f:f1:f0:3e:d6:1f:dc:ea:1a: 2e:03:63:a7:ab:fc:b5:4d:85:7a:cf:ac:5a:1f:b6:69:4e:cf: b4:87:98:88:c1:0c:34:5f:f9:6e:d3:a9:d3:b5:1b:8e:c7:99: fc:ab:cd:15:a2:14:c3:3b:b9:fd:72:f9:81:c3:4c:45:a5:91: 9e:9d:9a:17:bf:2d:96:3a:d7:75:6a:92:24:17:1d:77:d6:97: 2e:ab:26:34:b2:74:e3:62:25:ee:d8:7f:9f:41:a9:9c:b5:79: 27:9e:3c:51:e8:49:57:1e:c8:23:e7:65:9b:e2:6e:76:a0:12: 06:51:3e:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDtZnNE6gC+lov8zDZ0Wh+ifKKVIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwM1oX DTI3MDMwMzA2MDcwM1owMzExMC8GA1UEAxMoNTU3QTE4NTU4MjFENEJGQjE2Qjk2 NzMxOTBFNEJCMENDQjBCMDBFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDl2710pTcMqe5ygOqnTk8C9NIdFqDmG7+BN+zMC7H/4otpOnMQ0sFZ8S/m 36VAFRnSBVYUDsl7/kh/uIFLrbCMlJuSSGL/1VSHfumzNaTKzJyL8Sfj//FYiJ51 LIlYwuXgDygDuMPrfogIGsyvH3PMwVdrICaovlzA1ba/o4gpkPlxjlsKW/4tcO+w Dkgutu9nJImkZyb52S0dYvim2loHf3a7SfC5lsUMsyr7F/jIGKpURC6xkeBrn2rs ZkoUrJ2SapQOi95+lIz0Qei9KxZ1sV0xNuvhUY840AWuUauTz8DaAUf5g2in7T16 gkqymXDfMTCjHrYwe42kSETGONECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRVehhV gh1L+xa5ZzGQ5LsMywsA4zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK orMwDQYJKoZIhvcNAQELBQADggEBAHYTR+nUyyI1GUtEiy+ILH0XZ0v7cEUz1mAW jJ7xmkm4/2qS2NwUvQrKbFCxM9dpyeJJbA4yJtYEFlSwsQfWKHVQSS8jYuGKBm1N TNvfqcIYT0YBluVk9K9gaHN2xXtxBeoJZrUmqy1v0VxNC/3aIq5h50UtdgS2+jTm KiaY6pJP7RhMEHl++F/x8D7WH9zqGi4DY6er/LVNhXrPrFoftmlOz7SHmIjBDDRf +W7TqdO1G47HmfyrzRWiFMM7uf1y+YHDTEWlkZ6dmhe/LZY613VqkiQXHXfWly6r JjSydONiJe7Yf59BqZy1eSeePFHoSVceyCPnZZvibnagEgZRPv8= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:47 2026 by rpki-client