$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143369.roa File: AS143369.roa (raw, json) Hash identifier: OvvxISvTnJlQPwwYaObiuUaE1KaqKB+Z5+KEKm39lB8= Subject key identifier: 83:16:76:C2:B5:5C:72:EA:59:09:E0:A1:7E:27:0A:35:A5:AD:FA:1C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1551DD4D4378639D3F2344D09BB489B97DAC4562 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143369.roa Signing time: Wed 04 Mar 2026 06:06:56 +0000 ROA not before: Wed 04 Mar 2026 06:01:56 +0000 ROA not after: Wed 03 Mar 2027 06:06:56 +0000 asID: 143369 IP address blocks: 240a:a2cf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:51:dd:4d:43:78:63:9d:3f:23:44:d0:9b:b4:89:b9:7d:ac:45:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:56 2026 GMT Not After : Mar 3 06:06:56 2027 GMT Subject: CN=831676C2B55C72EA5909E0A17E270A35A5ADFA1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:60:76:a0:61:51:25:59:37:02:66:a1:78:2e: ab:25:3a:6a:93:9c:f1:16:a3:95:67:3b:7f:63:9f: 10:32:b8:c6:46:75:bc:b9:e6:fb:8e:e0:06:9d:6e: be:3b:e5:23:4b:8a:71:4b:dd:7d:a6:38:4b:99:28: fe:e6:33:40:20:3a:a4:48:30:3f:17:cb:83:9f:fe: 9c:31:97:12:c7:c3:96:79:d9:2e:de:80:72:a2:40: ed:a2:d5:2c:50:a5:9b:92:ad:ff:49:6d:a7:59:f0: 5e:dd:9a:49:04:ca:2c:2f:7d:4f:d8:52:b9:2c:db: 3e:b9:36:b2:21:33:14:5a:e1:5c:01:63:20:bb:39: f7:ad:8e:b2:80:bb:6d:9d:49:c4:fe:88:e7:7c:2b: 16:32:09:1c:81:1b:2c:34:3e:45:1d:d0:46:c7:a4: b1:cd:bc:bf:3e:ee:93:4b:a3:1e:f8:70:f6:b2:f6: a2:ef:0d:f5:9b:62:99:26:ff:0d:5c:92:58:fb:a4: 43:1b:b3:9d:03:4c:4c:2a:2a:8b:2e:45:eb:93:dd: 9c:ba:7a:b8:0c:90:a0:ca:2b:0f:be:c3:58:62:04: 41:af:f1:43:a5:7e:3a:80:3a:4d:04:fb:37:c0:1b: f2:2e:dd:8a:68:2e:9b:4f:34:01:14:45:1a:82:3c: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:16:76:C2:B5:5C:72:EA:59:09:E0:A1:7E:27:0A:35:A5:AD:FA:1C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2cf::/32 Signature Algorithm: sha256WithRSAEncryption 44:cd:74:cb:12:3d:bd:ca:d9:11:65:d3:b7:43:c1:f4:f2:cb: 0e:74:de:e4:2e:8b:e8:b5:92:d9:f6:f4:65:9a:b7:3d:f3:51: a6:a9:f1:ad:9f:61:d0:a8:ca:ad:7c:6d:2d:56:25:47:81:72: b0:a2:cd:75:8a:f2:2e:30:c7:f2:13:7a:18:d0:dd:1d:ea:05: f0:f6:56:48:6b:95:df:5f:55:27:04:c0:8d:0e:eb:ce:f5:48: b2:98:4f:7f:57:56:b4:d6:bb:71:48:29:d1:32:1f:37:4e:fd: 75:5d:23:77:62:77:96:ee:49:e8:86:4d:22:91:19:c5:f7:b0: 64:fe:cc:0f:62:88:91:2a:b3:30:45:6f:3b:8c:ef:0e:21:67: cb:52:69:dc:dd:2a:66:b5:b0:d3:6a:00:d3:8d:25:0d:c9:4f: 48:90:b1:56:ba:8b:3e:cb:9b:45:1d:a9:fb:ad:8e:29:33:1b: 34:ce:b4:33:2a:9d:e3:ae:b2:08:d6:f6:f8:b1:b4:be:72:41: bc:08:f0:9d:da:0c:66:0c:3b:4d:4c:8a:26:84:3b:cc:6e:58: 5a:a4:1f:05:f5:c6:f9:27:0d:0d:c7:37:52:43:27:8f:72:e9: b1:27:d5:9d:98:14:63:90:8e:96:89:eb:e1:3b:f2:18:71:e8: 5e:0b:e5:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFVHdTUN4Y50/I0TQm7SJuX2sRWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1NloX DTI3MDMwMzA2MDY1NlowMzExMC8GA1UEAxMoODMxNjc2QzJCNTVDNzJFQTU5MDlF MEExN0UyNzBBMzVBNUFERkExQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9gdqBhUSVZNwJmoXguqyU6apOc8RajlWc7f2OfEDK4xkZ1vLnm+47gBp1u vjvlI0uKcUvdfaY4S5ko/uYzQCA6pEgwPxfLg5/+nDGXEsfDlnnZLt6AcqJA7aLV LFClm5Kt/0ltp1nwXt2aSQTKLC99T9hSuSzbPrk2siEzFFrhXAFjILs5962OsoC7 bZ1JxP6I53wrFjIJHIEbLDQ+RR3QRseksc28vz7uk0ujHvhw9rL2ou8N9ZtimSb/ DVySWPukQxuznQNMTCoqiy5F65PdnLp6uAyQoMorD77DWGIEQa/xQ6V+OoA6TQT7 N8Ab8i7dimgum080ARRFGoI8uAUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSDFnbC tVxy6lkJ4KF+Jwo1pa36HDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK os8wDQYJKoZIhvcNAQELBQADggEBAETNdMsSPb3K2RFl07dDwfTyyw503uQui+i1 ktn29GWatz3zUaap8a2fYdCoyq18bS1WJUeBcrCizXWK8i4wx/ITehjQ3R3qBfD2 Vkhrld9fVScEwI0O6871SLKYT39XVrTWu3FIKdEyHzdO/XVdI3did5buSeiGTSKR GcX3sGT+zA9iiJEqszBFbzuM7w4hZ8tSadzdKma1sNNqANONJQ3JT0iQsVa6iz7L m0UdqfutjikzGzTOtDMqneOusgjW9vixtL5yQbwI8J3aDGYMO01MiiaEO8xuWFqk HwX1xvknDQ3HN1JDJ49y6bEn1Z2YFGOQjpaJ6+E78hhx6F4L5Vk= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:32 2026 by rpki-client