$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143372.roa File: AS143372.roa (raw, json) Hash identifier: n5nCKouKXVSS3pxID0B/KRwj+W2B1TDVjxRcHm2pISI= Subject key identifier: 74:43:3E:F4:94:15:31:EE:2F:2A:47:94:EA:A2:AE:57:03:C0:4D:91 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6D3614629FF2CEADE9024426F5DFF9A9DD353438 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143372.roa Signing time: Wed 04 Mar 2026 06:07:33 +0000 ROA not before: Wed 04 Mar 2026 06:02:33 +0000 ROA not after: Wed 03 Mar 2027 06:07:33 +0000 asID: 143372 IP address blocks: 240a:a2d2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:36:14:62:9f:f2:ce:ad:e9:02:44:26:f5:df:f9:a9:dd:35:34:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:33 2026 GMT Not After : Mar 3 06:07:33 2027 GMT Subject: CN=74433EF4941531EE2F2A4794EAA2AE5703C04D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:b0:77:36:5d:5e:8a:c3:2c:4c:c1:a8:e0: 01:7a:73:3c:0f:95:50:f9:14:40:55:af:a4:8c:3e: 94:fa:7b:ef:2d:95:7a:bc:bd:6e:0a:65:ac:42:17: 45:1a:bd:a8:7f:f7:7b:6b:32:75:53:53:84:21:f1: d0:ee:77:7d:a8:f4:ee:38:e4:dc:83:cf:11:9f:89: bd:40:1f:8d:52:fc:65:37:0e:05:ec:59:b3:d6:3b: 35:f1:3e:eb:c7:f1:33:59:bf:fa:38:f8:97:d6:4e: d0:c9:16:9e:a6:42:92:83:cb:db:f5:dd:55:32:97: a7:cc:a2:e5:81:f3:be:91:96:1d:0a:4b:0f:46:28: c2:08:4b:ab:b5:c3:d0:bc:54:78:39:80:21:36:cb: af:0a:4a:08:86:fd:eb:13:83:d7:cf:fc:19:7f:1d: 9a:11:aa:0f:b4:60:65:9e:f6:31:f3:11:a1:6d:d8: 82:5f:c5:f6:2b:5b:1f:12:bf:44:1e:2e:35:40:f8: f1:54:9b:50:52:59:f2:7c:1b:71:15:15:5d:56:d9: 0a:5c:a7:cb:4a:00:8d:f2:9e:4c:a1:30:9d:86:40: b9:f9:12:83:b5:ad:12:1c:f6:cf:e6:83:6c:a1:08: e0:18:f8:9f:95:3d:56:3c:cb:65:26:00:69:f7:28: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:43:3E:F4:94:15:31:EE:2F:2A:47:94:EA:A2:AE:57:03:C0:4D:91 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143372.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2d2::/32 Signature Algorithm: sha256WithRSAEncryption 36:c5:48:00:6f:ed:56:1c:29:80:b1:90:08:3e:6c:0f:da:c8: 71:45:33:6f:73:84:f1:fe:5c:a5:25:d7:ed:b2:f6:a1:46:d1: 8a:68:af:62:f2:53:3d:5d:db:d1:b2:40:bc:05:9a:52:60:a9: f0:aa:d3:b3:62:11:5d:f6:5e:f2:90:1f:ff:ef:6a:eb:5a:8b: 31:1b:63:96:28:a7:d3:60:d1:45:ca:a8:f2:3c:da:95:32:a6: 15:f6:e3:81:2c:59:fa:18:9b:f9:10:90:a5:c2:72:95:17:c7: 0c:38:ac:22:44:cd:ca:b3:d1:be:69:63:ae:e1:0d:c8:cf:e1: 72:10:5e:91:22:ff:a3:e2:e7:91:0f:34:83:65:07:7f:6c:28: 0e:71:2e:96:35:d9:ba:03:ea:fd:a8:c7:d2:12:56:41:1a:f3: a5:e2:f7:f4:49:11:d9:5c:ef:fe:ee:14:2e:68:dc:0f:6a:55: 3a:1d:db:ec:b0:4c:de:07:a4:ba:de:8e:96:8c:47:bb:60:05: a7:42:0b:89:e8:92:d5:c4:a6:77:24:7f:db:6c:68:74:7d:d8: 7b:cb:34:c2:16:75:f6:85:07:3f:47:6a:8d:d8:27:ce:26:2d: 26:31:e0:25:40:1a:ed:75:b0:cd:72:9e:c4:7e:09:3f:e3:09: a2:6c:d9:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbTYUYp/yzq3pAkQm9d/5qd01NDgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzM1oX DTI3MDMwMzA2MDczM1owMzExMC8GA1UEAxMoNzQ0MzNFRjQ5NDE1MzFFRTJGMkE0 Nzk0RUFBMkFFNTcwM0MwNEQ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiCsHc2XV6KwyxMwajgAXpzPA+VUPkUQFWvpIw+lPp77y2Very9bgplrEIX RRq9qH/3e2sydVNThCHx0O53faj07jjk3IPPEZ+JvUAfjVL8ZTcOBexZs9Y7NfE+ 68fxM1m/+jj4l9ZO0MkWnqZCkoPL2/XdVTKXp8yi5YHzvpGWHQpLD0YowghLq7XD 0LxUeDmAITbLrwpKCIb96xOD18/8GX8dmhGqD7RgZZ72MfMRoW3Ygl/F9itbHxK/ RB4uNUD48VSbUFJZ8nwbcRUVXVbZClyny0oAjfKeTKEwnYZAufkSg7WtEhz2z+aD bKEI4Bj4n5U9VjzLZSYAafco8fkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR0Qz70 lBUx7i8qR5Tqoq5XA8BNkTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK otIwDQYJKoZIhvcNAQELBQADggEBADbFSABv7VYcKYCxkAg+bA/ayHFFM29zhPH+ XKUl1+2y9qFG0Ypor2LyUz1d29GyQLwFmlJgqfCq07NiEV32XvKQH//vautaizEb Y5Yop9Ng0UXKqPI82pUyphX244EsWfoYm/kQkKXCcpUXxww4rCJEzcqz0b5pY67h DcjP4XIQXpEi/6Pi55EPNINlB39sKA5xLpY12boD6v2ox9ISVkEa86Xi9/RJEdlc 7/7uFC5o3A9qVTod2+ywTN4HpLrejpaMR7tgBadCC4noktXEpnckf9tsaHR92HvL NMIWdfaFBz9Hao3YJ84mLSYx4CVAGu11sM1ynsR+CT/jCaJs2S0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:15 2026 by rpki-client