$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143351.roa File: AS143351.roa (raw, json) Hash identifier: yXmXh9aSkRI+w8plR0K04iijbVNlSr+TPsq8M8hHuKk= Subject key identifier: 89:09:16:BC:60:37:39:AE:53:8D:83:5A:61:94:64:2F:47:7C:D4:0E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5AC1538909D45413BDD320072FDFC2A07E93BE45 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143351.roa Signing time: Wed 04 Mar 2026 06:06:01 +0000 ROA not before: Wed 04 Mar 2026 06:01:01 +0000 ROA not after: Wed 03 Mar 2027 06:06:01 +0000 asID: 143351 IP address blocks: 240a:a2bd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c1:53:89:09:d4:54:13:bd:d3:20:07:2f:df:c2:a0:7e:93:be:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:01 2026 GMT Not After : Mar 3 06:06:01 2027 GMT Subject: CN=890916BC603739AE538D835A6194642F477CD40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:7e:a7:3f:e2:8f:44:ee:0a:51:ed:ac:30: 3a:09:c9:2b:7c:bf:5e:89:67:26:a0:d9:5a:3d:0a: 8d:10:7d:f3:5f:2c:fa:e9:69:a7:3e:29:06:07:e5: e2:f3:fa:36:ee:56:dc:5d:2b:0c:9f:1e:b1:72:69: 0b:f2:61:35:ff:ca:7e:89:00:89:72:c0:ae:73:4d: a5:c4:9d:98:80:ee:68:49:96:a2:2d:ef:64:4e:49: c7:c3:8e:76:9f:a8:c3:b3:ed:78:39:1f:ed:6b:19: e0:67:e4:e6:f2:88:1f:f7:c2:4c:a9:13:c1:fb:50: 73:03:87:f2:ce:a3:66:2b:b9:80:d0:40:2a:ff:75: 6c:08:3a:4d:14:f3:d6:83:76:a9:5d:9b:8a:88:ef: 80:44:e1:5e:c5:58:3a:1d:c9:24:ac:fa:fc:a8:a5: a2:61:32:02:2d:fd:e5:ba:bb:ee:30:f1:a2:8d:cf: 9a:5c:d9:7e:5d:f0:d2:95:5c:f4:e4:94:4d:f3:25: 59:5c:50:57:a1:fd:19:18:6e:55:27:b8:88:42:cf: 09:40:d5:4b:fb:15:75:58:7d:dd:87:ae:c2:5e:d1: ca:9a:a2:5a:41:3b:43:fd:c8:5f:58:63:1e:bc:e9: 88:eb:91:db:93:7e:9a:ed:66:4b:2c:91:5c:c9:1e: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:16:BC:60:37:39:AE:53:8D:83:5A:61:94:64:2F:47:7C:D4:0E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143351.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2bd::/32 Signature Algorithm: sha256WithRSAEncryption 74:12:90:73:6a:b7:fa:05:d2:b2:d0:f4:fb:8f:58:75:11:ae: 19:d4:59:3d:14:86:59:d0:1b:d7:23:17:d7:2f:2c:b3:1a:33: bb:c8:3c:fd:da:fa:0f:51:a8:98:7e:f4:d9:a8:ee:22:c4:a5: 9f:a5:b9:94:02:a8:de:19:95:6e:ab:88:ed:9a:88:9a:a4:8b: 3e:af:aa:81:04:d7:61:28:3c:d1:ab:7e:41:37:68:0d:7d:68: d1:8d:b7:44:30:a5:ed:d8:12:4b:15:9c:5d:63:99:dc:6f:21: 77:99:3f:40:f4:39:a1:0a:ed:58:43:13:73:ad:af:af:48:7d: 9e:23:29:68:28:3b:ed:17:4a:08:25:a0:29:9f:b9:89:af:23: f6:3e:ad:b6:57:2d:39:0b:35:e8:ff:cc:65:47:57:fc:7f:ff: 6c:c4:df:4b:cb:86:8e:28:bb:e1:e8:89:f8:70:f0:de:93:12: 08:b1:bd:fd:64:45:50:14:ca:a8:f6:2e:6d:e5:ad:08:e6:b2: ab:72:9b:4c:04:12:9b:e1:dd:b2:aa:73:b8:4b:f9:a3:83:96: 47:5a:23:e6:33:cd:2e:91:be:8f:45:f8:87:b7:91:90:6f:a2: 28:02:4d:b3:39:97:41:ad:1a:27:cd:76:35:c0:b5:61:02:bd: c8:1c:d7:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWsFTiQnUVBO90yAHL9/CoH6TvkUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwMVoX DTI3MDMwMzA2MDYwMVowMzExMC8GA1UEAxMoODkwOTE2QkM2MDM3MzlBRTUzOEQ4 MzVBNjE5NDY0MkY0NzdDRDQwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALg8fqc/4o9E7gpR7awwOgnJK3y/XolnJqDZWj0KjRB9818s+ulppz4pBgfl 4vP6Nu5W3F0rDJ8esXJpC/JhNf/KfokAiXLArnNNpcSdmIDuaEmWoi3vZE5Jx8OO dp+ow7PteDkf7WsZ4Gfk5vKIH/fCTKkTwftQcwOH8s6jZiu5gNBAKv91bAg6TRTz 1oN2qV2biojvgEThXsVYOh3JJKz6/KilomEyAi395bq77jDxoo3PmlzZfl3w0pVc 9OSUTfMlWVxQV6H9GRhuVSe4iELPCUDVS/sVdVh93Yeuwl7RypqiWkE7Q/3IX1hj HrzpiOuR25N+mu1mSyyRXMkej60CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSJCRa8 YDc5rlONg1phlGQvR3zUDjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK or0wDQYJKoZIhvcNAQELBQADggEBAHQSkHNqt/oF0rLQ9PuPWHURrhnUWT0UhlnQ G9cjF9cvLLMaM7vIPP3a+g9RqJh+9Nmo7iLEpZ+luZQCqN4ZlW6riO2aiJqkiz6v qoEE12EoPNGrfkE3aA19aNGNt0Qwpe3YEksVnF1jmdxvIXeZP0D0OaEK7VhDE3Ot r69IfZ4jKWgoO+0XSggloCmfuYmvI/Y+rbZXLTkLNej/zGVHV/x//2zE30vLho4o u+Hoifhw8N6TEgixvf1kRVAUyqj2Lm3lrQjmsqtym0wEEpvh3bKqc7hL+aODlkda I+YzzS6Rvo9F+Ie3kZBvoigCTbM5l0GtGifNdjXAtWECvcgc11s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:46 2026 by rpki-client