$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143353.roa File: AS143353.roa (raw, json) Hash identifier: PrsYBSXmsI/PCgmfnIQFxT6IY0JzJoJHyWRrhEqugUI= Subject key identifier: A4:C7:1E:C1:C7:47:7C:14:89:3A:4F:24:38:15:B4:DD:33:C3:9B:D1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5321425C1BFD714D1A9333386A863BBBC9048BA0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143353.roa Signing time: Wed 04 Mar 2026 06:06:02 +0000 ROA not before: Wed 04 Mar 2026 06:01:02 +0000 ROA not after: Wed 03 Mar 2027 06:06:02 +0000 asID: 143353 IP address blocks: 240a:a2bf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:21:42:5c:1b:fd:71:4d:1a:93:33:38:6a:86:3b:bb:c9:04:8b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:02 2026 GMT Not After : Mar 3 06:06:02 2027 GMT Subject: CN=A4C71EC1C7477C14893A4F243815B4DD33C39BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:bf:33:63:e9:e0:95:7a:ea:d8:4d:12:33: b6:83:01:46:74:ec:44:c0:af:fa:62:b8:2e:b0:67: c3:8b:3a:2c:79:b4:09:8a:5c:2a:19:62:11:01:97: bb:72:9a:b0:1c:80:59:dd:da:c5:e6:22:25:72:61: 2c:9d:11:38:39:69:7d:84:9e:99:44:69:7a:e0:df: 25:bf:60:4c:81:69:75:d6:dc:8d:15:a9:70:d9:65: df:ae:ad:37:ed:de:f7:42:c8:79:5a:cf:6a:53:4a: 8a:5a:74:f1:01:ba:37:af:b4:1e:1f:c7:9a:91:38: f7:96:8b:bd:b9:b4:b8:92:58:6a:d0:f4:0a:27:d2: 08:59:05:d9:73:9e:75:01:66:81:64:17:4a:f5:99: aa:47:31:7a:03:1b:15:6e:b0:fa:ab:22:8e:36:77: af:70:8c:bb:57:ff:86:d6:dd:e7:85:77:e4:5c:5b: 2f:56:05:0e:58:98:5b:e0:87:69:ab:a7:0c:68:85: 8f:cf:86:92:62:17:fd:69:7f:fc:2e:39:86:57:c2: 08:f3:d9:ed:6d:e8:1d:d1:39:c8:b5:a0:b6:b4:e3: 18:50:c4:55:79:93:98:39:e8:84:4e:80:0a:f8:d9: 3c:98:84:7c:aa:d3:a7:c0:9b:6d:47:1c:0f:e1:8b: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:1E:C1:C7:47:7C:14:89:3A:4F:24:38:15:B4:DD:33:C3:9B:D1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143353.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2bf::/32 Signature Algorithm: sha256WithRSAEncryption 1a:de:49:1e:b5:54:8b:04:ba:f9:57:a4:f9:d0:9f:0e:62:a9: ab:85:25:65:f4:e9:cc:09:e8:ea:a2:94:1a:8a:c1:f2:fb:b4: 0c:5a:05:cb:da:ce:8f:00:61:6a:c3:a2:a9:1c:57:50:3d:fe: f6:b3:3c:9c:2c:17:9c:24:b8:d4:ea:2a:3f:d2:8a:17:51:2c: e6:86:3c:f5:fb:a4:6a:42:5e:c0:7e:7b:07:66:ae:cc:91:a7: 91:9a:93:e0:6e:36:fd:13:91:79:16:c8:34:d3:fd:a4:98:6f: 15:fb:c3:0d:ca:7f:92:55:2e:d8:12:78:6a:d0:c3:b9:81:9f: b2:c6:00:06:f6:89:8f:9a:d3:a4:40:a6:4f:fe:5b:7b:44:cb: ee:81:1c:7c:a9:6e:7c:7e:53:46:02:74:cd:af:d3:60:12:f1: 2a:78:e1:63:69:93:03:d4:7d:6f:10:86:b2:a1:61:59:0e:bf: a1:03:2c:e3:64:cc:a7:2c:23:91:8a:c5:8c:7a:39:58:41:ab: f6:87:e9:9b:68:ea:a5:c4:30:95:b9:66:8b:21:f2:40:4e:25: dc:3a:07:8a:ca:a8:d6:c5:2a:76:df:2a:9c:91:d6:90:a1:2b: dc:11:86:2c:b4:ea:14:f0:49:6d:ee:bf:92:fa:cd:96:1d:77: 19:ec:54:ba -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUyFCXBv9cU0akzM4aoY7u8kEi6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwMloX DTI3MDMwMzA2MDYwMlowMzExMC8GA1UEAxMoQTRDNzFFQzFDNzQ3N0MxNDg5M0E0 RjI0MzgxNUI0REQzM0MzOUJEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJNevzNj6eCVeurYTRIztoMBRnTsRMCv+mK4LrBnw4s6LHm0CYpcKhliEQGX u3KasByAWd3axeYiJXJhLJ0RODlpfYSemURpeuDfJb9gTIFpddbcjRWpcNll366t N+3e90LIeVrPalNKilp08QG6N6+0Hh/HmpE495aLvbm0uJJYatD0CifSCFkF2XOe dQFmgWQXSvWZqkcxegMbFW6w+qsijjZ3r3CMu1f/htbd54V35FxbL1YFDliYW+CH aaunDGiFj8+GkmIX/Wl//C45hlfCCPPZ7W3oHdE5yLWgtrTjGFDEVXmTmDnohE6A CvjZPJiEfKrTp8CbbUccD+GL7AECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSkxx7B x0d8FIk6TyQ4FbTdM8Ob0TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK or8wDQYJKoZIhvcNAQELBQADggEBABreSR61VIsEuvlXpPnQnw5iqauFJWX06cwJ 6OqilBqKwfL7tAxaBcvazo8AYWrDoqkcV1A9/vazPJwsF5wkuNTqKj/SihdRLOaG PPX7pGpCXsB+ewdmrsyRp5Gak+BuNv0TkXkWyDTT/aSYbxX7ww3Kf5JVLtgSeGrQ w7mBn7LGAAb2iY+a06RApk/+W3tEy+6BHHypbnx+U0YCdM2v02AS8Sp44WNpkwPU fW8QhrKhYVkOv6EDLONkzKcsI5GKxYx6OVhBq/aH6Zto6qXEMJW5Zosh8kBOJdw6 B4rKqNbFKnbfKpyR1pChK9wRhiy06hTwSW3uv5L6zZYddxnsVLo= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:35 2026 by rpki-client