$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143420.roa File: AS143420.roa (raw, json) Hash identifier: SFogd3edrg+DsrpSt3Bsd8w96mtFNrlDk/oLPKZZuvs= Subject key identifier: 30:0E:4E:46:BA:8E:49:AF:31:3F:E0:F9:A0:36:11:94:E3:11:D9:54 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2D1967CB93AD05095AD35C6B13734BCCCA0BF932 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143420.roa Signing time: Wed 04 Mar 2026 06:06:42 +0000 ROA not before: Wed 04 Mar 2026 06:01:42 +0000 ROA not after: Wed 03 Mar 2027 06:06:42 +0000 asID: 143420 IP address blocks: 240a:a302::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:19:67:cb:93:ad:05:09:5a:d3:5c:6b:13:73:4b:cc:ca:0b:f9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:42 2026 GMT Not After : Mar 3 06:06:42 2027 GMT Subject: CN=300E4E46BA8E49AF313FE0F9A0361194E311D954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:a4:5f:0e:39:fe:f4:54:e4:cc:c2:c8:ea: 3d:84:a1:68:91:70:a0:d7:ec:65:a7:79:16:a0:03: c5:ef:64:0f:f7:27:d4:f6:7a:30:6e:aa:75:de:65: d7:52:f7:72:a9:4c:98:04:4c:8e:0d:74:34:b0:d3: 2c:4c:1c:88:02:e8:b4:7f:cb:21:5e:12:d1:56:2c: 01:22:a1:e1:14:96:68:c6:3c:f9:cc:e8:82:6f:dd: 8c:13:05:65:84:8f:04:fb:10:45:72:95:45:9d:c9: 76:9e:de:7f:f4:4e:a3:02:85:62:36:4d:d6:23:d3: 59:d7:2f:10:9c:97:13:58:43:c8:bf:9f:e1:c2:4f: 23:21:19:a2:b1:3c:cc:4b:60:30:b0:fc:6a:7c:bc: 8c:f3:55:dc:45:89:1f:09:cf:49:97:b5:39:38:01: fc:3c:43:8a:fa:f9:a2:a7:b5:da:16:3d:49:57:61: f5:92:7d:0c:62:1f:5a:46:27:57:2e:8f:06:14:75: 1c:2b:0c:ae:81:a0:fd:5f:9a:67:ce:35:59:82:b3: c6:49:98:e5:be:7b:fa:17:64:27:a8:b2:fc:0b:f1: f7:02:a9:f0:0c:88:d3:d5:23:81:cd:2b:66:9f:3a: bb:14:4b:62:24:40:8b:a6:7b:dc:3e:c6:7a:d8:ca: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0E:4E:46:BA:8E:49:AF:31:3F:E0:F9:A0:36:11:94:E3:11:D9:54 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143420.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a302::/32 Signature Algorithm: sha256WithRSAEncryption 8b:b1:46:cc:a1:46:85:57:6d:59:dc:40:2a:c4:4b:a4:18:b8: 79:ca:87:e9:0c:32:0f:79:ff:0b:f8:d1:23:8e:6a:81:a3:0a: a6:cf:10:1a:3c:bc:f3:e9:2d:4c:dc:3e:d6:32:7b:f0:8c:a3: 1c:68:1e:eb:34:d2:2c:3f:a0:d4:cd:e9:50:08:79:a6:1a:bc: d2:ad:dc:10:2d:f3:76:fd:00:d7:4c:d7:97:e8:a2:63:ed:5e: b5:32:3f:32:d8:f6:c4:0b:e7:28:e3:72:c7:7b:f1:e6:1c:9f: ef:bf:d5:12:bb:41:c9:7d:08:c6:a5:1b:99:53:a0:ce:cc:ae: a3:5e:41:ae:14:8d:2c:a0:76:93:e7:29:3c:00:07:d9:ec:1a: 12:e2:01:7d:32:bf:89:fd:cf:80:ef:48:ea:74:41:94:48:e4: f7:b6:02:0c:3c:2f:26:c1:c0:b4:ec:56:e4:ec:65:a6:3e:0c: c3:6d:54:5e:82:01:04:b7:24:7c:5c:d8:75:85:e4:8e:d0:75: 34:3a:2e:7e:34:f2:0c:25:f8:33:cf:87:4d:2d:2d:bb:a0:f1: 35:29:38:71:c0:94:58:da:95:f7:24:54:b4:f0:ad:9e:e0:a2: 75:d6:02:10:d6:5d:d0:b5:11:24:36:60:3b:ad:4f:70:6a:56: 93:b5:56:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULRlny5OtBQla01xrE3NLzMoL+TIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0MloX DTI3MDMwMzA2MDY0MlowMzExMC8GA1UEAxMoMzAwRTRFNDZCQThFNDlBRjMxM0ZF MEY5QTAzNjExOTRFMzExRDk1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJH1pF8OOf70VOTMwsjqPYShaJFwoNfsZad5FqADxe9kD/cn1PZ6MG6qdd5l 11L3cqlMmARMjg10NLDTLEwciALotH/LIV4S0VYsASKh4RSWaMY8+czogm/djBMF ZYSPBPsQRXKVRZ3Jdp7ef/ROowKFYjZN1iPTWdcvEJyXE1hDyL+f4cJPIyEZorE8 zEtgMLD8any8jPNV3EWJHwnPSZe1OTgB/DxDivr5oqe12hY9SVdh9ZJ9DGIfWkYn Vy6PBhR1HCsMroGg/V+aZ841WYKzxkmY5b57+hdkJ6iy/Avx9wKp8AyI09Ujgc0r Zp86uxRLYiRAi6Z73D7GetjKNiUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQwDk5G uo5JrzE/4PmgNhGU4xHZVDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK owIwDQYJKoZIhvcNAQELBQADggEBAIuxRsyhRoVXbVncQCrES6QYuHnKh+kMMg95 /wv40SOOaoGjCqbPEBo8vPPpLUzcPtYye/CMoxxoHus00iw/oNTN6VAIeaYavNKt 3BAt83b9ANdM15foomPtXrUyPzLY9sQL5yjjcsd78eYcn++/1RK7Qcl9CMalG5lT oM7MrqNeQa4UjSygdpPnKTwAB9nsGhLiAX0yv4n9z4DvSOp0QZRI5Pe2Agw8LybB wLTsVuTsZaY+DMNtVF6CAQS3JHxc2HWF5I7QdTQ6Ln408gwl+DPPh00tLbug8TUp OHHAlFjalfckVLTwrZ7gonXWAhDWXdC1ESQ2YDutT3BqVpO1VhQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:05 2026 by rpki-client