$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143354.roa File: AS143354.roa (raw, json) Hash identifier: /EG+Zn4xk3hcANzHVAJVjp/jhmdmZ9hWv6ODe0cjYpk= Subject key identifier: 57:7C:13:D8:E9:38:58:BA:19:52:4A:EA:2E:07:1F:EC:74:DE:20:FA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C596ACF93B32E39BA86D37F38633653F8622C7B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143354.roa Signing time: Wed 04 Mar 2026 06:05:13 +0000 ROA not before: Wed 04 Mar 2026 06:00:13 +0000 ROA not after: Wed 03 Mar 2027 06:05:13 +0000 asID: 143354 IP address blocks: 240a:a2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:59:6a:cf:93:b3:2e:39:ba:86:d3:7f:38:63:36:53:f8:62:2c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:13 2026 GMT Not After : Mar 3 06:05:13 2027 GMT Subject: CN=577C13D8E93858BA19524AEA2E071FEC74DE20FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:96:5b:bc:93:5e:34:f0:df:95:4e:52:5a: e4:16:82:ef:2c:1e:2f:6d:5e:7d:09:b5:5e:40:1f: 7e:42:44:02:af:b8:db:b3:82:99:42:5d:41:ef:56: 45:29:63:82:1d:53:14:9e:2a:0d:b9:bb:9a:10:57: 40:c1:a1:22:8c:3c:57:e0:c8:79:60:29:76:42:bb: 0b:f6:7c:07:45:6f:32:84:c8:b2:c5:3e:69:c0:62: 33:33:7d:19:09:d7:2f:75:61:5d:eb:95:9e:16:03: 25:88:d2:b7:12:36:51:33:8c:d8:62:7b:70:3a:7a: 11:27:dd:b3:13:ee:88:85:90:3a:a7:b0:36:16:81: f0:10:b4:42:b1:a8:0a:16:58:ed:8f:10:db:56:71: 2b:f8:ba:13:61:9d:b3:2f:8d:a1:74:34:94:1b:eb: fb:14:4f:7e:d7:cb:2e:ad:c3:de:b7:1c:36:3f:4b: 88:07:64:db:81:ee:55:c0:4e:6b:d5:eb:a6:32:66: ac:6b:44:c2:23:44:10:b6:40:a6:33:cb:a2:d4:e8: 00:61:4d:55:fc:a7:7f:4e:39:4e:6b:3e:18:65:a7: ea:51:7b:5a:19:b4:c2:e0:c7:37:85:f5:8b:c4:20: a1:f4:ef:6b:1f:53:7d:2c:9c:9a:54:4a:10:f3:3a: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7C:13:D8:E9:38:58:BA:19:52:4A:EA:2E:07:1F:EC:74:DE:20:FA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143354.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2c0::/32 Signature Algorithm: sha256WithRSAEncryption be:1b:88:69:6f:46:b0:50:87:d7:5c:72:40:44:49:e6:cb:0d: f9:98:ae:c4:41:0a:96:2e:bc:c4:03:fa:c2:b4:ad:69:60:3b: 2e:07:54:34:7e:6c:b1:08:b0:0e:59:a2:24:03:0b:c1:d4:0d: 0c:f6:3f:ad:91:70:6e:da:7b:db:63:d4:c8:38:73:e6:cb:1a: 78:72:46:e9:02:57:3d:ca:86:76:60:c1:3b:d9:a4:95:a0:85: 34:09:73:c8:1d:52:10:f3:f7:5e:4f:23:f5:0a:a2:69:7b:e6: 76:05:df:05:65:ea:3a:c3:a6:0e:a7:14:c8:02:eb:e1:1c:a8: ee:2f:7e:2c:5c:22:38:9b:f1:81:77:66:9c:93:1a:67:19:c7: ab:9c:5d:d0:d0:f0:f4:de:f8:09:0f:81:21:e6:ae:45:4f:80: b8:b8:93:11:e0:ae:0e:50:09:45:7a:89:53:4a:32:70:7b:4e: 8c:9a:69:94:dc:26:26:f3:25:80:f6:35:90:ef:0e:22:59:3b: 51:6e:e7:29:b8:6d:8c:df:15:84:36:b8:fd:55:35:29:9e:5b: d3:7b:e3:8f:f6:c7:2e:7b:b0:91:16:f9:be:b3:96:fe:fe:09: c8:08:82:10:de:dc:c4:fd:17:9f:69:ff:1c:9a:d2:ea:8b:ce: 6c:2a:df:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfFlqz5OzLjm6htN/OGM2U/hiLHswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxM1oX DTI3MDMwMzA2MDUxM1owMzExMC8GA1UEAxMoNTc3QzEzRDhFOTM4NThCQTE5NTI0 QUVBMkUwNzFGRUM3NERFMjBGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrcllu8k1408N+VTlJa5BaC7yweL21efQm1XkAffkJEAq+427OCmUJdQe9W RSljgh1TFJ4qDbm7mhBXQMGhIow8V+DIeWApdkK7C/Z8B0VvMoTIssU+acBiMzN9 GQnXL3VhXeuVnhYDJYjStxI2UTOM2GJ7cDp6ESfdsxPuiIWQOqewNhaB8BC0QrGo ChZY7Y8Q21ZxK/i6E2Gdsy+NoXQ0lBvr+xRPftfLLq3D3rccNj9LiAdk24HuVcBO a9XrpjJmrGtEwiNEELZApjPLotToAGFNVfynf045Tms+GGWn6lF7Whm0wuDHN4X1 i8QgofTvax9TfSycmlRKEPM6lQUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRXfBPY 6ThYuhlSSuouBx/sdN4g+jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK osAwDQYJKoZIhvcNAQELBQADggEBAL4biGlvRrBQh9dcckBESebLDfmYrsRBCpYu vMQD+sK0rWlgOy4HVDR+bLEIsA5ZoiQDC8HUDQz2P62RcG7ae9tj1Mg4c+bLGnhy RukCVz3KhnZgwTvZpJWghTQJc8gdUhDz915PI/UKoml75nYF3wVl6jrDpg6nFMgC 6+EcqO4vfixcIjib8YF3ZpyTGmcZx6ucXdDQ8PTe+AkPgSHmrkVPgLi4kxHgrg5Q CUV6iVNKMnB7ToyaaZTcJibzJYD2NZDvDiJZO1Fu5ym4bYzfFYQ2uP1VNSmeW9N7 44/2xy57sJEW+b6zlv7+CcgIghDe3MT9F59p/xya0uqLzmwq39Y= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:32 2026 by rpki-client