$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143352.roa File: AS143352.roa (raw, json) Hash identifier: XGiqLx4GiIRNGwMV4V42fbTUCE8TCP7xKYw2r2zpcnM= Subject key identifier: 22:99:4A:74:BF:81:2B:C4:5F:73:7A:14:AB:87:43:5A:4F:3F:39:ED Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6B5290D387BF41DF19ED6F8F649CB03486FC8115 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143352.roa Signing time: Wed 04 Mar 2026 06:06:05 +0000 ROA not before: Wed 04 Mar 2026 06:01:05 +0000 ROA not after: Wed 03 Mar 2027 06:06:05 +0000 asID: 143352 IP address blocks: 240a:a2be::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:52:90:d3:87:bf:41:df:19:ed:6f:8f:64:9c:b0:34:86:fc:81:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:05 2026 GMT Not After : Mar 3 06:06:05 2027 GMT Subject: CN=22994A74BF812BC45F737A14AB87435A4F3F39ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:21:b0:73:ec:8b:f7:0e:82:34:89:7b:a4: 33:80:f1:17:36:0d:dc:ba:78:86:3e:ea:62:23:5e: 7a:43:a5:0a:2e:07:2e:db:8c:75:9f:25:64:3e:55: 9d:2b:e2:7c:d8:40:c5:38:c7:40:0f:c0:92:99:73: 09:95:fc:b8:a0:50:17:80:8c:a9:8a:e8:a3:dc:13: 89:9f:30:59:ff:32:66:14:c8:3d:0c:6f:87:54:d1: d2:1e:1a:e9:99:26:5d:03:6a:d6:dc:7a:0d:67:ee: 5f:08:6b:59:92:be:b9:27:c4:f9:e4:a4:28:c8:f4: 9a:c2:92:87:6a:d7:ba:40:b9:51:8c:c9:5d:5c:a6: d1:f3:75:fb:0a:8e:54:39:c2:a6:90:ab:7a:ce:08: 33:9b:6c:7c:90:c0:e7:39:d3:b6:d0:32:93:8e:03: 3d:3e:1b:35:b4:1a:ff:63:66:70:4e:42:96:a7:6a: 79:93:a5:44:62:aa:93:4c:79:f6:9c:fe:25:89:bb: 9a:36:f1:6b:30:66:8a:3d:5f:2c:93:72:df:fe:e3: 9c:15:65:c4:6d:fc:0e:08:ab:6f:91:f6:64:37:7c: 55:52:8c:11:9e:f3:69:6d:6c:9d:0a:ac:6b:13:72: 15:51:fe:68:50:5c:57:6d:7f:92:d6:c0:5a:d8:6e: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:99:4A:74:BF:81:2B:C4:5F:73:7A:14:AB:87:43:5A:4F:3F:39:ED X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2be::/32 Signature Algorithm: sha256WithRSAEncryption 87:bd:6c:90:bb:48:f9:9c:3d:a8:33:5e:26:8f:c7:6c:06:4e: d4:36:e8:23:03:48:3e:54:ec:5f:07:0f:5a:a9:e9:1f:d4:1e: 6a:cd:11:25:3d:40:2f:8a:30:13:41:fb:50:e8:2f:01:52:5f: 0c:43:ed:e6:b1:f7:82:7a:b5:23:a7:8e:53:2e:45:8d:ff:4b: 01:0f:87:19:16:4a:ea:98:3a:05:b4:c6:1a:cf:5f:5e:ca:de: c0:87:2a:bf:06:ac:bf:94:c9:d5:9e:a3:41:05:fa:7b:1b:25: 0a:f4:da:20:9c:d1:11:5b:69:96:5c:94:3f:de:5a:09:80:2a: 29:0e:0c:eb:b5:36:c8:33:5d:ca:49:a6:0a:0b:05:aa:0a:1f: f9:da:b2:ef:c8:20:ea:69:43:54:e9:c9:e4:bf:3d:d7:56:a9: f2:a3:b9:1c:7a:36:f6:e4:ca:5d:7b:99:67:cf:1c:17:e2:73: 10:08:64:4b:b3:33:89:18:d3:d7:a7:26:93:6a:29:1f:c2:00: e5:9f:a1:f4:a0:65:25:d6:ce:fb:15:01:8d:b4:99:32:87:99: 49:db:de:76:df:66:08:24:58:ab:e4:dd:a3:91:48:7f:b7:28: 9c:66:4e:95:50:49:22:d2:8b:f3:c6:29:06:d7:89:24:25:de: 30:6e:e3:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa1KQ04e/Qd8Z7W+PZJywNIb8gRUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwNVoX DTI3MDMwMzA2MDYwNVowMzExMC8GA1UEAxMoMjI5OTRBNzRCRjgxMkJDNDVGNzM3 QTE0QUI4NzQzNUE0RjNGMzlFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJzIbBz7Iv3DoI0iXukM4DxFzYN3Lp4hj7qYiNeekOlCi4HLtuMdZ8lZD5V nSvifNhAxTjHQA/AkplzCZX8uKBQF4CMqYroo9wTiZ8wWf8yZhTIPQxvh1TR0h4a 6ZkmXQNq1tx6DWfuXwhrWZK+uSfE+eSkKMj0msKSh2rXukC5UYzJXVym0fN1+wqO VDnCppCres4IM5tsfJDA5znTttAyk44DPT4bNbQa/2NmcE5ClqdqeZOlRGKqk0x5 9pz+JYm7mjbxazBmij1fLJNy3/7jnBVlxG38Dgirb5H2ZDd8VVKMEZ7zaW1snQqs axNyFVH+aFBcV21/ktbAWthuUGECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQimUp0 v4ErxF9zehSrh0NaTz857TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM1Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK or4wDQYJKoZIhvcNAQELBQADggEBAIe9bJC7SPmcPagzXiaPx2wGTtQ26CMDSD5U 7F8HD1qp6R/UHmrNESU9QC+KMBNB+1DoLwFSXwxD7eax94J6tSOnjlMuRY3/SwEP hxkWSuqYOgW0xhrPX17K3sCHKr8GrL+UydWeo0EF+nsbJQr02iCc0RFbaZZclD/e WgmAKikODOu1NsgzXcpJpgoLBaoKH/nasu/IIOppQ1TpyeS/PddWqfKjuRx6Nvbk yl17mWfPHBficxAIZEuzM4kY09enJpNqKR/CAOWfofSgZSXWzvsVAY20mTKHmUnb 3nbfZggkWKvk3aORSH+3KJxmTpVQSSLSi/PGKQbXiSQl3jBu4zM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:33 2026 by rpki-client