$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143399.roa File: AS143399.roa (raw, json) Hash identifier: rgehKUmpaHcI6zdwAqFaI81YXHeIGLUCWYw5zzq5jTo= Subject key identifier: 35:2A:77:DD:68:30:A5:4D:5F:90:BB:E7:92:B8:F1:6B:D3:30:91:6F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4B2C2EFE869C83CE65D17FD00337A9350DD43E72 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143399.roa Signing time: Wed 04 Mar 2026 06:05:46 +0000 ROA not before: Wed 04 Mar 2026 06:00:46 +0000 ROA not after: Wed 03 Mar 2027 06:05:46 +0000 asID: 143399 IP address blocks: 240a:a2ed::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2c:2e:fe:86:9c:83:ce:65:d1:7f:d0:03:37:a9:35:0d:d4:3e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:46 2026 GMT Not After : Mar 3 06:05:46 2027 GMT Subject: CN=352A77DD6830A54D5F90BBE792B8F16BD330916F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:ea:c6:91:e3:78:26:6f:95:04:2c:69:ed: 51:84:f4:d5:0e:c2:ce:7e:57:30:fd:dc:ee:5c:48: c6:4e:49:0d:ef:55:76:3b:38:90:07:71:2d:23:9f: fa:79:ae:73:41:b4:b6:9f:85:6e:12:2f:ec:27:16: fa:c8:ea:e7:35:4e:ad:15:31:b3:8b:38:07:a4:65: f7:3f:a6:eb:30:85:82:58:64:c7:d0:98:7a:24:5f: 23:50:33:58:d3:18:29:86:f8:7f:3b:3e:16:6c:0f: 77:e4:7e:87:70:14:48:c7:ce:b1:ef:8c:58:9c:04: d8:2a:52:23:36:9d:64:46:95:e1:0d:40:53:9d:98: 9b:42:e3:48:4f:5e:69:9d:05:11:04:8e:64:07:10: 6f:82:68:10:81:1d:ac:b8:35:12:80:31:58:06:ce: 69:91:83:15:27:3b:02:b0:9a:b7:9b:50:9a:9a:0b: 44:17:74:62:84:88:7b:27:be:1f:d6:c8:10:45:1a: 04:2a:64:aa:03:79:03:7e:65:db:7d:04:3a:e8:14: d6:9e:20:89:ec:ca:d9:6b:13:79:80:f6:da:c3:c9: b1:44:b9:72:ad:dc:1e:47:6e:7c:1e:f1:46:a6:44: d9:b4:11:d6:df:36:6c:98:04:d6:ce:2f:5e:9d:c7: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2A:77:DD:68:30:A5:4D:5F:90:BB:E7:92:B8:F1:6B:D3:30:91:6F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143399.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2ed::/32 Signature Algorithm: sha256WithRSAEncryption 66:cc:4b:74:ca:73:97:92:e4:ed:21:72:a1:2b:b5:98:f5:ff: 95:f0:fc:2a:12:4e:aa:ac:24:a1:f1:b1:8a:72:e6:47:7e:7c: b0:1a:ac:45:31:48:31:41:e5:78:a7:6c:cf:79:fb:bc:03:66: ef:29:cf:f4:fc:38:b6:e7:e9:bf:68:6d:33:4b:3e:83:89:8b: 14:04:dc:0b:41:86:fc:73:e6:e1:3f:e6:04:54:14:f3:e5:21: 7c:33:e0:ee:b0:66:86:89:0d:f4:de:ca:1b:72:b5:e2:0a:c7: 22:e2:7f:22:d0:14:5d:61:12:92:64:e9:7c:01:06:84:67:d5: 44:f3:4d:26:45:38:04:0a:9f:0e:3d:a7:62:07:85:2f:8e:13: d3:1b:f8:6d:51:71:61:0f:1f:b3:eb:fc:e6:8d:96:58:79:72: 16:22:3e:fa:66:cd:5f:5b:f7:87:91:e9:74:d3:83:d6:13:d4: c0:79:c1:5b:cf:f9:76:d7:2f:fa:90:75:56:fa:1c:85:13:b1: bc:90:45:1b:69:2c:e9:8a:80:b8:8d:31:98:9d:97:2b:5d:5e: 1a:39:e4:22:43:b0:e2:49:76:25:4c:a4:9a:48:0d:9e:e7:e9: b4:e9:cc:8a:11:56:50:a8:dc:29:43:88:ab:07:13:b7:e1:13: 70:ad:3a:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSywu/oacg85l0X/QAzepNQ3UPnIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0NloX DTI3MDMwMzA2MDU0NlowMzExMC8GA1UEAxMoMzUyQTc3REQ2ODMwQTU0RDVGOTBC QkU3OTJCOEYxNkJEMzMwOTE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMe66saR43gmb5UELGntUYT01Q7Czn5XMP3c7lxIxk5JDe9Vdjs4kAdxLSOf +nmuc0G0tp+FbhIv7CcW+sjq5zVOrRUxs4s4B6Rl9z+m6zCFglhkx9CYeiRfI1Az WNMYKYb4fzs+FmwPd+R+h3AUSMfOse+MWJwE2CpSIzadZEaV4Q1AU52Ym0LjSE9e aZ0FEQSOZAcQb4JoEIEdrLg1EoAxWAbOaZGDFSc7ArCat5tQmpoLRBd0YoSIeye+ H9bIEEUaBCpkqgN5A35l230EOugU1p4giezK2WsTeYD22sPJsUS5cq3cHkdufB7x RqZE2bQR1t82bJgE1s4vXp3H/7kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ1Knfd aDClTV+Qu+eSuPFr0zCRbzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ou0wDQYJKoZIhvcNAQELBQADggEBAGbMS3TKc5eS5O0hcqErtZj1/5Xw/CoSTqqs JKHxsYpy5kd+fLAarEUxSDFB5XinbM95+7wDZu8pz/T8OLbn6b9obTNLPoOJixQE 3AtBhvxz5uE/5gRUFPPlIXwz4O6wZoaJDfTeyhtyteIKxyLifyLQFF1hEpJk6XwB BoRn1UTzTSZFOAQKnw49p2IHhS+OE9Mb+G1RcWEPH7Pr/OaNllh5chYiPvpmzV9b 94eR6XTTg9YT1MB5wVvP+XbXL/qQdVb6HIUTsbyQRRtpLOmKgLiNMZidlytdXho5 5CJDsOJJdiVMpJpIDZ7n6bTpzIoRVlCo3ClDiKsHE7fhE3CtOgA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:11 2026 by rpki-client