$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143417.roa File: AS143417.roa (raw, json) Hash identifier: ZLu39gYuueCcb6OBYLTConcNsBBTA6POnGK58l9gtuU= Subject key identifier: 4C:B4:E7:8A:AB:82:F5:87:22:75:9E:36:92:A5:F4:50:68:89:36:D9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5982121A9EF108989CE4F927AB5D34B914328638 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143417.roa Signing time: Wed 04 Mar 2026 06:06:17 +0000 ROA not before: Wed 04 Mar 2026 06:01:17 +0000 ROA not after: Wed 03 Mar 2027 06:06:17 +0000 asID: 143417 IP address blocks: 240a:a2ff::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:82:12:1a:9e:f1:08:98:9c:e4:f9:27:ab:5d:34:b9:14:32:86:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:17 2026 GMT Not After : Mar 3 06:06:17 2027 GMT Subject: CN=4CB4E78AAB82F58722759E3692A5F450688936D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:e4:bb:d9:cc:0f:92:ef:34:1a:33:15:88: 92:93:d6:c7:f3:76:50:85:18:a3:aa:b1:63:6f:f6: 71:bc:dc:7d:f1:79:05:67:34:8f:0e:4e:ae:2c:87: c6:2a:b1:e4:84:da:74:52:18:19:3f:29:b9:f4:60: 04:0e:c3:eb:2c:e8:bd:81:fb:18:38:d1:b5:14:6d: d8:f1:5d:70:85:55:b3:54:74:6f:9d:f8:5f:24:7a: 65:0a:22:8b:e2:92:c9:68:7c:60:6a:69:ae:fb:45: 7f:ad:c9:a5:a2:1f:1f:d7:0d:a2:f6:21:95:f2:0f: b2:8d:b2:99:f4:a3:1d:17:b5:a1:3e:ab:27:3e:8d: 01:40:cb:96:50:44:1e:50:d2:f9:25:4b:e5:40:68: 5d:e1:a6:d4:f7:90:f7:3d:f1:58:07:c8:fd:0f:b4: 61:c7:9d:fb:ee:c0:b3:2a:d7:88:5a:ba:3c:79:00: cc:ee:ec:e0:9e:ca:c0:4d:fb:46:8f:63:56:30:2b: 16:ff:57:d6:40:e8:c2:1b:7b:3b:1b:c0:10:84:2b: 76:75:8e:11:dc:fc:ac:d0:c3:c1:d2:a2:b0:8d:69: 1f:b0:51:cd:4c:39:05:d5:cf:14:b6:d9:46:39:3d: 1b:25:47:34:49:58:6e:83:d0:f3:04:03:e9:ee:38: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B4:E7:8A:AB:82:F5:87:22:75:9E:36:92:A5:F4:50:68:89:36:D9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143417.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2ff::/32 Signature Algorithm: sha256WithRSAEncryption 6b:d1:06:e6:49:cb:b4:8e:56:dc:65:27:5f:09:ff:d3:85:96: d9:7c:4c:be:2a:67:49:3d:f9:d1:5c:87:a2:9d:ce:ea:14:84: 9b:09:45:bd:75:68:d4:d9:17:3b:51:15:bd:7e:54:aa:2e:4a: 48:a9:8d:e8:56:a0:cd:4c:68:01:72:d6:83:ab:cc:8e:a7:d1: 64:7a:40:d3:f8:94:89:a5:34:d3:31:d9:cc:ff:86:a2:ad:21: b8:bb:04:2a:61:7b:02:5f:52:e6:86:6b:0e:c3:f9:2e:e6:b8: 59:d3:30:67:f1:1e:38:8d:5c:1f:f7:34:22:8e:1e:59:fc:ba: 30:d8:f6:e6:c7:71:b3:18:49:0d:e7:49:97:31:e2:d9:a3:de: 94:41:4c:81:8c:b8:2e:d9:9b:7c:40:1e:b3:58:aa:5a:35:4e: ae:1a:49:60:bf:f7:67:93:a9:03:f7:33:50:8b:66:2d:9e:91: 9d:b5:79:da:0b:23:c1:2b:3c:56:ae:e3:a1:31:e6:10:3e:87: 9a:e5:0c:04:24:2e:ac:94:3d:6a:e0:7a:8f:3a:ee:e3:7c:6e: f0:6c:c8:27:54:60:e6:1b:9e:22:3d:83:9f:54:dd:2b:e1:6b: cf:eb:f7:78:72:76:71:ae:6d:5d:ec:f7:41:33:24:74:42:2a: a9:34:26:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWYISGp7xCJic5Pknq100uRQyhjgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExN1oX DTI3MDMwMzA2MDYxN1owMzExMC8GA1UEAxMoNENCNEU3OEFBQjgyRjU4NzIyNzU5 RTM2OTJBNUY0NTA2ODg5MzZEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGP5LvZzA+S7zQaMxWIkpPWx/N2UIUYo6qxY2/2cbzcffF5BWc0jw5OriyH xiqx5ITadFIYGT8pufRgBA7D6yzovYH7GDjRtRRt2PFdcIVVs1R0b534XyR6ZQoi i+KSyWh8YGpprvtFf63JpaIfH9cNovYhlfIPso2ymfSjHRe1oT6rJz6NAUDLllBE HlDS+SVL5UBoXeGm1PeQ9z3xWAfI/Q+0Yced++7AsyrXiFq6PHkAzO7s4J7KwE37 Ro9jVjArFv9X1kDowht7OxvAEIQrdnWOEdz8rNDDwdKisI1pH7BRzUw5BdXPFLbZ Rjk9GyVHNElYboPQ8wQD6e446DECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRMtOeK q4L1hyJ1njaSpfRQaIk22TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ov8wDQYJKoZIhvcNAQELBQADggEBAGvRBuZJy7SOVtxlJ18J/9OFltl8TL4qZ0k9 +dFch6KdzuoUhJsJRb11aNTZFztRFb1+VKouSkipjehWoM1MaAFy1oOrzI6n0WR6 QNP4lImlNNMx2cz/hqKtIbi7BCphewJfUuaGaw7D+S7muFnTMGfxHjiNXB/3NCKO Hln8ujDY9ubHcbMYSQ3nSZcx4tmj3pRBTIGMuC7Zm3xAHrNYqlo1Tq4aSWC/92eT qQP3M1CLZi2ekZ21edoLI8ErPFau46Ex5hA+h5rlDAQkLqyUPWrgeo867uN8bvBs yCdUYOYbniI9g59U3Svha8/r93hydnGubV3s90EzJHRCKqk0Jno= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:05 2026 by rpki-client