$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143419.roa File: AS143419.roa (raw, json) Hash identifier: kFrKkxh1myPXOF/bFB7CP/22dEkjpef8uU7niIIhNLY= Subject key identifier: 2F:76:60:B6:36:81:DF:D8:77:2D:38:8D:DD:B4:82:54:0F:87:3A:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5DDD621EA36E672E95B7CC3381EAC9162C5602E4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143419.roa Signing time: Wed 04 Mar 2026 06:05:49 +0000 ROA not before: Wed 04 Mar 2026 06:00:49 +0000 ROA not after: Wed 03 Mar 2027 06:05:49 +0000 asID: 143419 IP address blocks: 240a:a301::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:dd:62:1e:a3:6e:67:2e:95:b7:cc:33:81:ea:c9:16:2c:56:02:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:49 2026 GMT Not After : Mar 3 06:05:49 2027 GMT Subject: CN=2F7660B63681DFD8772D388DDDB482540F873A27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:2b:c2:f4:06:90:ad:db:a7:e4:38:43:3f: 6c:1c:32:cb:ba:80:d1:ac:a8:3c:12:b5:20:d6:0a: fe:86:ec:f2:8b:92:e9:0c:eb:4c:3e:b8:31:47:d5: 57:cb:bf:0a:96:02:44:d7:d1:96:21:7b:b1:e7:21: 58:37:fa:0a:d2:e1:44:f5:f5:69:08:2b:ac:ac:b1: c1:fd:4c:2f:cd:e5:95:c5:43:e1:6d:8b:74:13:b8: 73:3b:82:97:06:b2:ed:09:d2:76:25:b7:1c:f5:c9: 71:85:f1:cc:fa:3e:00:ab:17:c6:ec:ad:8d:95:ed: 44:39:83:6c:af:b9:27:ef:89:98:94:db:d6:07:7c: 8c:c8:ef:5d:3a:19:ee:d9:59:9a:5b:01:32:fa:32: 67:5b:05:d5:f8:6e:e7:95:79:25:48:51:d6:d1:16: fd:03:98:e3:3c:45:ce:97:1f:57:be:dc:12:3d:da: 4b:e5:26:16:bd:b6:f8:fd:e6:69:52:c4:02:79:4a: 89:c5:3c:70:21:f9:de:ce:9a:35:b6:c2:3a:37:e0: 05:67:be:34:d8:b8:bb:5a:f0:3c:e4:60:ba:22:cc: 94:cf:be:5a:be:dc:98:27:b3:ff:3d:90:11:b2:17: 3a:c6:32:03:2b:10:d7:67:81:f9:7b:7a:70:79:65: c3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:76:60:B6:36:81:DF:D8:77:2D:38:8D:DD:B4:82:54:0F:87:3A:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143419.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a301::/32 Signature Algorithm: sha256WithRSAEncryption 3e:fe:d3:74:f5:e8:6a:12:6d:9b:32:28:49:fe:7a:74:d3:2e: 97:e2:37:bc:bd:c0:ab:99:58:03:4f:7f:a3:b0:39:06:83:f5: a4:c3:02:3e:5a:a4:fa:74:1b:21:d8:fc:a8:91:06:89:14:a8: 29:40:84:47:ac:ad:76:69:ed:de:45:b7:2f:1a:1b:04:2b:83: 2a:39:a9:7b:1c:30:fc:a0:4b:ba:0f:f3:98:40:5f:62:23:89: d7:db:20:79:77:f9:22:47:8e:c8:9a:74:d8:16:d5:89:3f:f3: 69:a4:0a:c0:0b:fb:98:37:97:78:d9:3c:2d:26:83:b7:b0:f7: 02:d8:de:90:78:00:b9:98:20:f9:52:af:51:89:6e:7e:3d:5a: da:1c:52:f6:f8:77:87:e6:8b:1a:31:c0:f9:2a:61:3e:8e:ac: b6:cf:60:ca:e4:87:5d:d2:b7:7b:c3:9c:de:5d:a2:10:45:a9: b3:48:5d:4b:7d:5c:c8:df:e2:32:0e:84:c4:03:0f:7f:14:6a: 19:ff:57:8e:fd:f4:43:c4:e6:b8:d7:06:9a:9a:7e:b8:2d:2f: c9:07:a3:b3:e8:02:35:6d:af:05:37:4b:0f:76:6e:1b:98:41: c8:39:65:7c:09:bf:2f:9d:11:ba:47:3a:ef:ea:db:de:5b:d0: f7:de:39:5f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXd1iHqNuZy6Vt8wzgerJFixWAuQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0OVoX DTI3MDMwMzA2MDU0OVowMzExMC8GA1UEAxMoMkY3NjYwQjYzNjgxREZEODc3MkQz ODhERERCNDgyNTQwRjg3M0EyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5FK8L0BpCt26fkOEM/bBwyy7qA0ayoPBK1INYK/obs8ouS6QzrTD64MUfV V8u/CpYCRNfRliF7sechWDf6CtLhRPX1aQgrrKyxwf1ML83llcVD4W2LdBO4czuC lway7QnSdiW3HPXJcYXxzPo+AKsXxuytjZXtRDmDbK+5J++JmJTb1gd8jMjvXToZ 7tlZmlsBMvoyZ1sF1fhu55V5JUhR1tEW/QOY4zxFzpcfV77cEj3aS+UmFr22+P3m aVLEAnlKicU8cCH53s6aNbbCOjfgBWe+NNi4u1rwPORguiLMlM++Wr7cmCez/z2Q EbIXOsYyAysQ12eB+Xt6cHllw98CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQvdmC2 NoHf2HctOI3dtIJUD4c6JzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK owEwDQYJKoZIhvcNAQELBQADggEBAD7+03T16GoSbZsyKEn+enTTLpfiN7y9wKuZ WANPf6OwOQaD9aTDAj5apPp0GyHY/KiRBokUqClAhEesrXZp7d5Fty8aGwQrgyo5 qXscMPygS7oP85hAX2IjidfbIHl3+SJHjsiadNgW1Yk/82mkCsAL+5g3l3jZPC0m g7ew9wLY3pB4ALmYIPlSr1GJbn49WtocUvb4d4fmixoxwPkqYT6OrLbPYMrkh13S t3vDnN5dohBFqbNIXUt9XMjf4jIOhMQDD38Uahn/V4799EPE5rjXBpqafrgtL8kH o7PoAjVtrwU3Sw92bhuYQcg5ZXwJvy+dEbpHOu/q295b0PfeOV8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:12 2026 by rpki-client