$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143357.roa File: AS143357.roa (raw, json) Hash identifier: Ww0YsKO4dDpknXvBREZTvYxAPHHE2tovkMRpkFWzL64= Subject key identifier: 04:E6:AA:85:16:21:A0:44:97:45:1C:27:09:DD:C3:9F:08:75:EF:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0B9BAC921FB4FCB33D672854AEF8A8BA25044DB1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143357.roa Signing time: Wed 04 Mar 2026 06:06:10 +0000 ROA not before: Wed 04 Mar 2026 06:01:10 +0000 ROA not after: Wed 03 Mar 2027 06:06:10 +0000 asID: 143357 IP address blocks: 240a:a2c3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9b:ac:92:1f:b4:fc:b3:3d:67:28:54:ae:f8:a8:ba:25:04:4d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:10 2026 GMT Not After : Mar 3 06:06:10 2027 GMT Subject: CN=04E6AA851621A04497451C2709DDC39F0875EF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b6:96:d2:11:bd:67:e1:a6:15:64:e4:75:81: 4d:18:d6:76:5a:10:00:c6:69:e3:f5:af:d8:13:06: ce:72:62:96:99:53:0f:ab:d3:d7:13:38:60:01:06: 66:c5:9a:8b:0e:80:f6:65:7e:4c:9e:5c:12:31:ab: 91:ef:5f:f7:27:3c:43:7f:8f:12:1a:f2:2d:9d:b3: 31:e6:aa:29:7f:ed:fb:b7:6a:3e:6e:b3:2c:56:37: 91:3f:20:23:54:ed:f6:5c:0c:9a:94:05:e7:0b:6c: 45:05:d8:16:2d:5f:d7:82:ef:b3:6a:d2:10:2b:7d: 79:7a:8c:c3:78:29:79:59:0b:2e:80:3e:e7:6b:5e: 3a:03:84:f5:6f:c4:90:bb:3a:5d:99:9d:63:ec:96: c3:4f:39:28:dd:3d:e8:15:9c:a0:a7:b9:ee:57:8f: 17:6b:8f:af:f1:51:fd:11:44:33:b5:77:4d:90:9e: 52:51:f1:e3:01:e2:d0:db:77:76:98:5d:1d:c3:0a: 3d:57:e6:9b:83:f2:fb:e6:ce:7c:8b:ea:0f:b0:db: f8:be:7f:af:fe:37:21:47:be:5b:ff:cb:04:96:2c: 11:30:62:27:12:e4:00:70:5b:89:f3:b1:b0:f7:6b: 5a:b0:19:4a:97:5e:93:fb:80:df:c6:86:24:1d:29: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E6:AA:85:16:21:A0:44:97:45:1C:27:09:DD:C3:9F:08:75:EF:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143357.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2c3::/32 Signature Algorithm: sha256WithRSAEncryption 17:56:56:1a:15:5c:b0:f2:c2:36:bc:9a:b8:ee:22:59:58:e0: 87:9b:19:d5:86:b1:6d:80:6a:22:e6:03:4b:d1:a6:93:e3:8f: dd:08:3b:29:19:3e:52:93:98:a2:2f:bc:a6:23:5f:84:04:ac: ac:39:20:8b:69:ef:70:f9:05:af:55:4c:f7:b5:86:79:1d:27: 60:1c:7f:70:3f:44:44:6a:20:7b:cc:49:70:f5:0d:df:2f:49: 7f:b9:09:df:44:fc:ee:c7:af:9f:02:0d:1a:43:86:c6:cc:f9: 06:ec:50:0d:80:ea:b6:30:f7:d1:3e:ba:6d:b7:1f:95:31:59: 1d:89:55:9f:09:a2:1b:bb:33:de:51:25:bd:d9:af:08:47:f5: 18:27:48:78:e2:e1:bc:78:a8:bd:90:aa:20:d7:7f:a0:7d:a5: b9:b9:29:e7:68:e9:26:bd:07:3c:7d:7d:cc:72:f3:eb:15:63: 4c:3c:92:f1:65:68:ff:6b:93:47:39:a2:2f:ff:32:ca:79:ca: 5d:40:d3:93:a6:80:84:e7:12:df:5e:a8:48:76:93:39:1f:d5: 78:56:34:93:d0:88:3e:26:31:f7:6c:a4:bb:19:f6:f5:f8:9d: 0d:3e:a1:d9:76:d9:a7:ef:fa:28:d9:2d:21:83:4c:32:d1:63: a7:ae:17:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC5uskh+0/LM9ZyhUrviouiUETbEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExMFoX DTI3MDMwMzA2MDYxMFowMzExMC8GA1UEAxMoMDRFNkFBODUxNjIxQTA0NDk3NDUx QzI3MDlEREMzOUYwODc1RUY5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJm2ltIRvWfhphVk5HWBTRjWdloQAMZp4/Wv2BMGznJilplTD6vT1xM4YAEG ZsWaiw6A9mV+TJ5cEjGrke9f9yc8Q3+PEhryLZ2zMeaqKX/t+7dqPm6zLFY3kT8g I1Tt9lwMmpQF5wtsRQXYFi1f14Lvs2rSECt9eXqMw3gpeVkLLoA+52teOgOE9W/E kLs6XZmdY+yWw085KN096BWcoKe57lePF2uPr/FR/RFEM7V3TZCeUlHx4wHi0Nt3 dphdHcMKPVfmm4Py++bOfIvqD7Db+L5/r/43IUe+W//LBJYsETBiJxLkAHBbifOx sPdrWrAZSpdek/uA38aGJB0p8CkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQE5qqF FiGgRJdFHCcJ3cOfCHXvljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK osMwDQYJKoZIhvcNAQELBQADggEBABdWVhoVXLDywja8mrjuIllY4IebGdWGsW2A aiLmA0vRppPjj90IOykZPlKTmKIvvKYjX4QErKw5IItp73D5Ba9VTPe1hnkdJ2Ac f3A/RERqIHvMSXD1Dd8vSX+5Cd9E/O7Hr58CDRpDhsbM+QbsUA2A6rYw99E+um23 H5UxWR2JVZ8Johu7M95RJb3ZrwhH9RgnSHji4bx4qL2QqiDXf6B9pbm5Kedo6Sa9 Bzx9fcxy8+sVY0w8kvFlaP9rk0c5oi//Msp5yl1A05OmgITnEt9eqEh2kzkf1XhW NJPQiD4mMfdspLsZ9vX4nQ0+odl22afv+ijZLSGDTDLRY6euFxg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:46 2026 by rpki-client