$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143426.roa File: AS143426.roa (raw, json) Hash identifier: DX3Pftzn9/XkVwjUT/MtFyAPvtGDOzsHrPij5covJRQ= Subject key identifier: 6C:1B:B8:A4:A5:8F:3F:39:05:3A:02:B3:A7:90:D5:36:72:E0:FE:DA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4292B45FC20D04E8EBC82C4AA356C16158EDFCB4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143426.roa Signing time: Wed 04 Mar 2026 06:05:08 +0000 ROA not before: Wed 04 Mar 2026 06:00:08 +0000 ROA not after: Wed 03 Mar 2027 06:05:08 +0000 asID: 143426 IP address blocks: 240a:a308::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:92:b4:5f:c2:0d:04:e8:eb:c8:2c:4a:a3:56:c1:61:58:ed:fc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:08 2026 GMT Not After : Mar 3 06:05:08 2027 GMT Subject: CN=6C1BB8A4A58F3F39053A02B3A790D53672E0FEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:b9:86:2b:a5:4e:3f:ee:78:3d:65:cb:55: 99:07:08:f3:2c:5c:af:91:39:9d:82:cd:81:00:de: bf:19:24:38:b9:35:0c:08:a6:bf:04:12:a3:42:42: ec:71:72:44:22:78:7e:78:d0:01:ae:e4:2e:99:fb: f7:41:24:97:b0:b1:eb:73:6f:6e:7a:2d:75:1f:2d: fb:80:eb:c6:ad:a4:ac:7d:e7:17:83:41:a0:e0:05: e8:7c:7e:f5:15:49:1a:bd:ad:01:15:0e:f0:8e:e2: 67:6b:52:4f:b5:a7:1b:03:be:f9:0f:31:6a:a4:9c: 1f:68:1a:b4:1b:e6:87:b6:97:97:5a:09:c8:b2:07: 82:02:eb:8e:ff:8d:e0:37:92:62:10:31:e7:59:55: c7:fc:af:2d:72:41:7f:a8:c2:cb:fa:19:3d:75:b3: 91:b1:3f:17:fb:cb:91:9a:a1:35:2b:40:c5:c7:5e: f3:6e:f8:4a:ff:00:44:15:f8:c9:cc:13:7e:fd:15: 69:70:85:92:71:9a:8b:e4:e0:84:0f:9d:e1:6e:0a: d5:72:42:5e:08:93:84:b9:9f:28:b4:a0:40:cb:12: a1:83:68:73:be:8e:34:5d:b0:86:a4:42:8e:cd:88: f9:e8:0a:a8:b4:23:39:be:57:54:f0:d1:ff:55:a6: d3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1B:B8:A4:A5:8F:3F:39:05:3A:02:B3:A7:90:D5:36:72:E0:FE:DA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143426.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a308::/32 Signature Algorithm: sha256WithRSAEncryption ac:6d:95:68:03:c3:08:f3:7e:5c:e4:a5:a4:fb:7a:30:ea:a1: 04:aa:e9:be:41:f3:ae:b1:30:e0:47:61:35:03:f9:00:3d:c1: 66:94:a5:95:76:fa:71:a6:58:ca:00:12:54:c8:ac:fb:65:c8: 68:ff:fc:d1:65:a8:1f:02:c4:36:2e:4f:fc:66:f9:63:f8:af: 88:5a:40:cc:8e:bc:f2:a8:ee:45:09:48:a2:61:69:1d:16:ea: 61:be:09:2b:a6:cd:34:74:08:31:41:bf:0c:ad:27:10:5f:da: 66:a2:5e:00:08:fd:9a:e5:33:f6:76:89:33:f7:cf:85:de:1d: db:4f:3a:29:81:4f:e8:8f:fc:6a:f9:eb:37:aa:be:1c:50:ff: 79:d2:80:31:4b:1e:d8:f4:a9:60:f4:ac:38:4e:a5:8b:e0:f4: 6a:bd:b3:33:fd:ab:b0:35:49:3e:93:ef:b1:fa:3d:05:aa:ff: b4:9b:c9:b0:50:ab:99:54:97:77:61:21:36:ce:1a:be:66:8a: 1d:dc:6c:c1:40:61:3c:88:be:06:5a:4a:8b:81:9c:c5:5f:8e: 11:be:c9:63:8f:94:f2:0a:2c:d1:8c:00:7c:d9:b9:d7:b3:1f: 81:00:18:e6:7c:06:87:07:7b:76:a4:20:c0:58:9a:0a:7a:c9: b8:61:1c:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQpK0X8INBOjryCxKo1bBYVjt/LQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAwOFoX DTI3MDMwMzA2MDUwOFowMzExMC8GA1UEAxMoNkMxQkI4QTRBNThGM0YzOTA1M0Ew MkIzQTc5MEQ1MzY3MkUwRkVEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVHuYYrpU4/7ng9ZctVmQcI8yxcr5E5nYLNgQDevxkkOLk1DAimvwQSo0JC 7HFyRCJ4fnjQAa7kLpn790Ekl7Cx63NvbnotdR8t+4Drxq2krH3nF4NBoOAF6Hx+ 9RVJGr2tARUO8I7iZ2tST7WnGwO++Q8xaqScH2gatBvmh7aXl1oJyLIHggLrjv+N 4DeSYhAx51lVx/yvLXJBf6jCy/oZPXWzkbE/F/vLkZqhNStAxcde8274Sv8ARBX4 ycwTfv0VaXCFknGai+TghA+d4W4K1XJCXgiThLmfKLSgQMsSoYNoc76ONF2whqRC js2I+egKqLQjOb5XVPDR/1Wm07ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRsG7ik pY8/OQU6ArOnkNU2cuD+2jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK owgwDQYJKoZIhvcNAQELBQADggEBAKxtlWgDwwjzflzkpaT7ejDqoQSq6b5B866x MOBHYTUD+QA9wWaUpZV2+nGmWMoAElTIrPtlyGj//NFlqB8CxDYuT/xm+WP4r4ha QMyOvPKo7kUJSKJhaR0W6mG+CSumzTR0CDFBvwytJxBf2maiXgAI/ZrlM/Z2iTP3 z4XeHdtPOimBT+iP/Gr56zeqvhxQ/3nSgDFLHtj0qWD0rDhOpYvg9Gq9szP9q7A1 ST6T77H6PQWq/7SbybBQq5lUl3dhITbOGr5mih3cbMFAYTyIvgZaSouBnMVfjhG+ yWOPlPIKLNGMAHzZudezH4EAGOZ8BocHe3akIMBYmgp6ybhhHFQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:19 2026 by rpki-client