$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143382.roa File: AS143382.roa (raw, json) Hash identifier: Fl5lahKl1a4e6sG6p4axp8WOo2lUc9dA/kG774nHjLQ= Subject key identifier: 4F:55:4E:F6:6B:A8:8E:CA:42:43:A0:E2:EE:58:CA:53:C6:C3:08:C9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 473C662F45E84C3E1861A128266874904999A45B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143382.roa Signing time: Wed 04 Mar 2026 06:06:12 +0000 ROA not before: Wed 04 Mar 2026 06:01:12 +0000 ROA not after: Wed 03 Mar 2027 06:06:12 +0000 asID: 143382 IP address blocks: 240a:a2dc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3c:66:2f:45:e8:4c:3e:18:61:a1:28:26:68:74:90:49:99:a4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:12 2026 GMT Not After : Mar 3 06:06:12 2027 GMT Subject: CN=4F554EF66BA88ECA4243A0E2EE58CA53C6C308C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:25:f1:16:20:a2:85:3e:74:5d:31:41:8c: b9:cc:eb:26:30:4e:d0:a3:da:31:ad:14:9e:71:2f: 8a:ff:a4:9c:78:7c:9e:3a:24:af:d4:2a:4b:48:70: a1:74:1c:3e:91:00:d8:45:ac:66:ba:75:be:a4:81: bb:4e:0f:45:05:87:01:a0:4f:5a:9b:94:9a:3e:04: a6:51:9f:b4:36:27:bd:2b:33:64:08:63:bd:a3:62: 22:a4:24:9a:b6:62:cd:fb:d4:3f:60:40:e5:74:e6: 99:7a:b1:04:40:61:8c:06:9e:e9:b5:d7:b7:fd:c2: ca:5f:6d:04:f7:be:55:07:b0:bc:93:3f:d9:38:5f: 4a:9e:7c:b4:a9:03:99:70:3b:47:44:73:04:84:86: a5:b2:4a:bb:9c:0a:d3:ea:49:a9:7e:25:1d:2a:f7: b6:ea:56:a6:40:a2:11:f1:0c:d4:8d:ab:fd:a3:0b: 5b:4c:ab:95:80:76:b1:9a:ce:dc:67:72:ba:ad:fb: bc:6d:28:3a:3f:2d:85:5f:4c:fe:b0:4a:f7:f9:b8: 7b:e6:84:55:5d:7e:79:be:a7:e1:85:d4:b3:b3:67: 1c:84:27:48:34:67:53:8c:38:c7:29:7e:1e:7a:fe: 7f:3e:33:16:9d:f1:fc:72:f2:5b:e0:f1:be:6f:c5: 79:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:55:4E:F6:6B:A8:8E:CA:42:43:A0:E2:EE:58:CA:53:C6:C3:08:C9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143382.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2dc::/32 Signature Algorithm: sha256WithRSAEncryption bb:9c:fc:af:9f:cd:e8:f9:d9:30:f0:aa:13:f6:b2:f0:58:ad: c4:56:9c:9f:82:4c:95:90:7e:50:36:8d:19:5d:eb:fa:f0:49: c1:95:2b:ef:d3:60:9e:ed:4a:9a:28:fa:38:2d:c0:72:87:a7: 30:ee:a6:3c:f7:11:6d:70:40:6e:03:99:eb:16:46:4d:26:00: c1:f8:81:42:40:e1:9f:a1:16:c9:9d:ea:16:91:5b:ee:12:a5: 5a:ab:86:87:fc:f0:b2:ae:9e:e6:6e:f1:a0:b7:47:ea:4c:b1: 95:c8:e2:fa:e3:e5:98:04:b9:8a:80:9f:c7:f6:9c:3c:f6:da: 78:a8:f2:f8:b7:c6:a5:bb:93:c8:46:f2:73:fe:40:2e:dc:7d: 56:b9:e8:a1:ed:29:91:08:4e:13:e2:07:9e:54:ef:20:d3:78: 38:e6:5a:1c:24:98:48:13:c1:a2:2f:ac:34:62:85:57:2f:65: c0:e5:92:4d:cb:d9:39:8c:87:8f:7b:88:4b:89:c1:40:fe:e5: 2f:64:03:46:a2:23:dd:0e:63:61:15:87:d3:65:e8:21:30:79: dd:b5:68:99:7a:f7:1d:b2:13:83:28:ca:28:9c:1f:10:c6:00: 7a:32:1e:a8:9c:12:ca:bb:fc:c5:12:18:7d:7a:58:a5:22:62: 5a:5e:e0:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURzxmL0XoTD4YYaEoJmh0kEmZpFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExMloX DTI3MDMwMzA2MDYxMlowMzExMC8GA1UEAxMoNEY1NTRFRjY2QkE4OEVDQTQyNDNB MEUyRUU1OENBNTNDNkMzMDhDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfqJfEWIKKFPnRdMUGMuczrJjBO0KPaMa0UnnEviv+knHh8njokr9QqS0hw oXQcPpEA2EWsZrp1vqSBu04PRQWHAaBPWpuUmj4EplGftDYnvSszZAhjvaNiIqQk mrZizfvUP2BA5XTmmXqxBEBhjAae6bXXt/3Cyl9tBPe+VQewvJM/2ThfSp58tKkD mXA7R0RzBISGpbJKu5wK0+pJqX4lHSr3tupWpkCiEfEM1I2r/aMLW0yrlYB2sZrO 3Gdyuq37vG0oOj8thV9M/rBK9/m4e+aEVV1+eb6n4YXUs7NnHIQnSDRnU4w4xyl+ Hnr+fz4zFp3x/HLyW+Dxvm/FeekCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRPVU72 a6iOykJDoOLuWMpTxsMIyTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK otwwDQYJKoZIhvcNAQELBQADggEBALuc/K+fzej52TDwqhP2svBYrcRWnJ+CTJWQ flA2jRld6/rwScGVK+/TYJ7tSpoo+jgtwHKHpzDupjz3EW1wQG4DmesWRk0mAMH4 gUJA4Z+hFsmd6haRW+4SpVqrhof88LKunuZu8aC3R+pMsZXI4vrj5ZgEuYqAn8f2 nDz22nio8vi3xqW7k8hG8nP+QC7cfVa56KHtKZEIThPiB55U7yDTeDjmWhwkmEgT waIvrDRihVcvZcDlkk3L2TmMh497iEuJwUD+5S9kA0aiI90OY2EVh9Nl6CEwed21 aJl69x2yE4MoyiicHxDGAHoyHqicEsq7/MUSGH16WKUiYlpe4M0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:42 2026 by rpki-client