$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143424.roa File: AS143424.roa (raw, json) Hash identifier: qtzSKABDXuZUW0WwOFYyfbL5mvju1lo8H+KQyKCHrKE= Subject key identifier: E9:0E:A7:22:2B:BB:8C:F2:9C:6E:80:D7:F2:4D:CC:E4:D2:88:B7:30 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 735CE35675F98AC72473383B4614F7F7CE88AE14 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143424.roa Signing time: Wed 04 Mar 2026 06:07:06 +0000 ROA not before: Wed 04 Mar 2026 06:02:06 +0000 ROA not after: Wed 03 Mar 2027 06:07:06 +0000 asID: 143424 IP address blocks: 240a:a306::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5c:e3:56:75:f9:8a:c7:24:73:38:3b:46:14:f7:f7:ce:88:ae:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:06 2026 GMT Not After : Mar 3 06:07:06 2027 GMT Subject: CN=E90EA7222BBB8CF29C6E80D7F24DCCE4D288B730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:84:36:7e:58:f8:9f:a4:c8:76:f5:d8:bb: f9:3c:8d:cd:3b:56:3c:08:8a:b7:7e:e2:e2:58:40: 34:d6:fd:90:90:d7:d7:cf:db:a9:7d:4f:d3:e3:f1: 2e:44:49:f8:31:9a:12:81:e1:10:62:57:07:c8:2a: 32:b3:82:eb:19:8d:64:e2:42:e2:69:e7:ab:50:f9: 15:23:5e:9a:5b:14:ad:ed:63:3d:15:be:26:e2:dc: c2:d4:fa:b5:83:8b:5d:97:55:9d:ca:10:3d:c6:10: 27:ad:eb:d2:94:ac:65:0a:db:0c:57:55:8e:87:09: db:8e:2a:92:24:6c:7c:0f:ad:ad:88:ca:41:e7:b1: 6f:e0:2c:d7:1b:aa:2c:fb:8b:2c:41:4f:22:51:21: 54:b1:2b:3b:f4:21:ab:33:01:db:d4:00:1d:1f:9b: d4:e2:2d:cb:25:ab:08:33:34:ce:b0:a0:b6:d2:a3: 5b:54:e2:cd:d0:a5:e0:c8:d6:70:d5:a1:2c:6c:b2: 6f:3b:d0:5a:77:a1:54:6a:19:7e:98:49:7b:bd:f1: b3:fa:a6:85:e5:7f:fa:d0:d6:82:81:38:e6:f4:08: 0f:b0:c5:d7:f9:85:41:56:f0:b1:77:a9:0a:f5:29: 20:18:d6:b4:ba:0c:62:5d:52:1e:c8:55:48:f9:c0: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0E:A7:22:2B:BB:8C:F2:9C:6E:80:D7:F2:4D:CC:E4:D2:88:B7:30 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143424.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a306::/32 Signature Algorithm: sha256WithRSAEncryption 22:58:09:a7:d1:75:4e:06:5f:17:bc:4b:e0:48:b8:80:43:9c: a5:34:60:dd:59:1d:48:b5:3b:ce:51:41:d8:c1:fe:8a:99:2d: dd:19:2e:a0:7c:71:ad:07:6d:e4:b5:50:14:e0:2c:a7:e0:52: 03:f9:0c:17:8b:7e:e1:1c:4f:bc:98:42:54:89:3b:1f:4b:c6: 20:20:c0:4f:15:6e:79:05:ca:47:91:85:6c:1a:b7:b1:25:6d: 70:56:ff:28:33:e7:11:fe:ab:b3:ab:ca:9d:4d:b9:71:da:e8: 95:a2:e4:e3:3b:a0:de:52:8a:91:04:4b:47:65:15:16:46:b7: ab:fc:6c:40:0b:0d:f8:32:0a:40:70:c1:c1:f9:94:77:54:af: a6:ec:cb:3a:74:62:57:d7:aa:b8:7f:d4:98:26:aa:54:be:99: 66:9d:d7:01:f2:4c:e5:d0:ac:d7:a6:97:67:91:1a:11:79:f0: 80:da:af:3b:08:fa:46:89:c5:ac:7b:bc:23:df:2e:9d:7c:46: 40:7c:07:42:29:19:f6:56:7d:40:53:52:dc:27:a6:43:2c:b8: a9:6f:81:99:2b:5a:0e:e6:7e:d3:36:f5:ca:c2:e0:53:7e:49: 59:99:30:de:13:fc:44:6e:23:3f:c4:cf:04:e9:6e:ce:ac:8b: 43:4e:5f:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUc1zjVnX5isckczg7RhT3986IrhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwNloX DTI3MDMwMzA2MDcwNlowMzExMC8GA1UEAxMoRTkwRUE3MjIyQkJCOENGMjlDNkU4 MEQ3RjI0RENDRTREMjg4QjczMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEVhDZ+WPifpMh29di7+TyNzTtWPAiKt37i4lhANNb9kJDX18/bqX1P0+Px LkRJ+DGaEoHhEGJXB8gqMrOC6xmNZOJC4mnnq1D5FSNemlsUre1jPRW+JuLcwtT6 tYOLXZdVncoQPcYQJ63r0pSsZQrbDFdVjocJ244qkiRsfA+trYjKQeexb+As1xuq LPuLLEFPIlEhVLErO/QhqzMB29QAHR+b1OItyyWrCDM0zrCgttKjW1TizdCl4MjW cNWhLGyybzvQWnehVGoZfphJe73xs/qmheV/+tDWgoE45vQID7DF1/mFQVbwsXep CvUpIBjWtLoMYl1SHshVSPnA6JECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTpDqci K7uM8pxugNfyTczk0oi3MDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK owYwDQYJKoZIhvcNAQELBQADggEBACJYCafRdU4GXxe8S+BIuIBDnKU0YN1ZHUi1 O85RQdjB/oqZLd0ZLqB8ca0HbeS1UBTgLKfgUgP5DBeLfuEcT7yYQlSJOx9LxiAg wE8VbnkFykeRhWwat7ElbXBW/ygz5xH+q7Oryp1NuXHa6JWi5OM7oN5SipEES0dl FRZGt6v8bEALDfgyCkBwwcH5lHdUr6bsyzp0YlfXqrh/1JgmqlS+mWad1wHyTOXQ rNeml2eRGhF58IDarzsI+kaJxax7vCPfLp18RkB8B0IpGfZWfUBTUtwnpkMsuKlv gZkrWg7mftM29crC4FN+SVmZMN4T/ERuIz/EzwTpbs6si0NOX6Y= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:18 2026 by rpki-client