$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143428.roa File: AS143428.roa (raw, json) Hash identifier: HwANyshWcmb1VaUjce0rhRz7+7wIZcf541HbNbKhnqs= Subject key identifier: A8:9E:C3:5A:36:8E:68:77:D4:0E:B2:74:87:91:25:AC:97:D0:4F:BB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 49B41CD77EE120079FF3C3A3BB060F4342E9FB45 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143428.roa Signing time: Wed 04 Mar 2026 06:06:30 +0000 ROA not before: Wed 04 Mar 2026 06:01:30 +0000 ROA not after: Wed 03 Mar 2027 06:06:30 +0000 asID: 143428 IP address blocks: 240a:a30a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b4:1c:d7:7e:e1:20:07:9f:f3:c3:a3:bb:06:0f:43:42:e9:fb:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:30 2026 GMT Not After : Mar 3 06:06:30 2027 GMT Subject: CN=A89EC35A368E6877D40EB274879125AC97D04FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:18:74:20:c1:74:43:34:8b:2c:b2:a0:24: 62:c1:4d:9e:cc:58:d1:42:80:17:a2:c1:c3:9f:b1: d0:22:9a:48:c6:0a:fc:66:02:57:31:ba:bd:40:8f: 00:68:81:dd:a5:35:75:02:4a:2c:19:6c:33:fe:6e: e6:37:ae:6c:53:2c:e8:f0:a8:ca:96:07:d6:e1:80: 5a:12:46:fb:a4:fd:77:a3:34:2f:d4:df:93:ae:df: 9e:c3:81:f2:88:e5:9f:cf:dd:96:7c:90:11:fe:09: 0e:ac:67:c7:20:9d:6c:69:0f:5f:29:4e:aa:6e:8e: ad:b7:7a:c3:17:a8:15:65:f7:5c:b3:53:bf:4c:e1: 2c:12:72:27:30:c9:f1:82:b8:d7:1d:1c:d2:48:fe: 55:b1:f0:79:3d:77:a2:1b:03:c5:b1:83:b5:4f:6a: b3:06:4d:e5:fb:71:a0:43:59:3e:d9:5f:b8:37:2c: 18:27:09:17:ee:7c:8d:30:c6:50:1f:30:2c:9a:97: d1:b8:81:1c:d0:94:bc:48:f6:5f:b1:d1:83:9e:45: dd:7c:3d:51:37:a9:db:2d:ee:d1:24:33:85:13:9d: 99:34:6c:3d:85:3f:4c:a7:2a:42:45:36:78:ff:f3: 73:63:30:52:8e:d1:82:59:44:05:a1:7a:7c:64:79: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9E:C3:5A:36:8E:68:77:D4:0E:B2:74:87:91:25:AC:97:D0:4F:BB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143428.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a30a::/32 Signature Algorithm: sha256WithRSAEncryption 52:ac:56:fb:38:82:1a:1c:c4:08:69:f9:a5:25:c5:74:ad:27: 7e:41:a9:cf:37:fa:e4:2b:6f:89:3f:c7:d5:d7:3d:e3:05:57: f5:f0:88:b0:dd:a2:62:b3:77:89:a7:62:f5:48:41:1c:7f:ec: 29:77:41:a2:9c:09:0e:32:4e:ea:b3:e6:9e:0c:3f:11:af:02: e0:f9:2a:b0:f2:12:dc:6a:38:6d:23:3a:82:50:11:2a:21:8a: a4:0e:ad:1b:fc:ca:7c:de:d8:eb:ce:05:50:c0:9e:c3:f3:cb: 1c:9f:32:78:ff:e4:bd:dd:8a:c4:83:41:23:af:1c:98:28:10: 3f:12:4a:06:a3:bb:94:ab:0f:55:1c:aa:ce:2c:b9:1c:7f:89: a2:44:cb:fd:5e:cc:bb:5c:eb:0f:98:3c:1b:fb:12:18:43:e0: 31:6d:56:44:7a:23:5a:07:24:c8:de:22:ae:fd:7b:99:b3:f3: a3:93:73:3d:17:ce:16:9f:5c:8b:0e:4e:00:48:a3:e0:10:4b: 12:a9:da:bf:15:01:e6:01:41:d0:e2:fa:d2:76:59:29:16:10: 8a:33:b8:01:9b:45:55:95:57:11:fc:ca:d0:e3:8e:ca:10:ba: d4:d6:af:0e:5e:de:79:f4:c4:cb:80:1d:02:19:c7:b0:2a:2c: e6:3a:49:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSbQc137hIAef88OjuwYPQ0Lp+0UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzMFoX DTI3MDMwMzA2MDYzMFowMzExMC8GA1UEAxMoQTg5RUMzNUEzNjhFNjg3N0Q0MEVC Mjc0ODc5MTI1QUM5N0QwNEZCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJfbGHQgwXRDNIsssqAkYsFNnsxY0UKAF6LBw5+x0CKaSMYK/GYCVzG6vUCP AGiB3aU1dQJKLBlsM/5u5jeubFMs6PCoypYH1uGAWhJG+6T9d6M0L9Tfk67fnsOB 8ojln8/dlnyQEf4JDqxnxyCdbGkPXylOqm6Orbd6wxeoFWX3XLNTv0zhLBJyJzDJ 8YK41x0c0kj+VbHweT13ohsDxbGDtU9qswZN5ftxoENZPtlfuDcsGCcJF+58jTDG UB8wLJqX0biBHNCUvEj2X7HRg55F3Xw9UTep2y3u0SQzhROdmTRsPYU/TKcqQkU2 eP/zc2MwUo7RgllEBaF6fGR5u4kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSonsNa No5od9QOsnSHkSWsl9BPuzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK owowDQYJKoZIhvcNAQELBQADggEBAFKsVvs4ghocxAhp+aUlxXStJ35Bqc83+uQr b4k/x9XXPeMFV/XwiLDdomKzd4mnYvVIQRx/7Cl3QaKcCQ4yTuqz5p4MPxGvAuD5 KrDyEtxqOG0jOoJQESohiqQOrRv8ynze2OvOBVDAnsPzyxyfMnj/5L3disSDQSOv HJgoED8SSgaju5SrD1Ucqs4suRx/iaJEy/1ezLtc6w+YPBv7EhhD4DFtVkR6I1oH JMjeIq79e5mz86OTcz0XzhafXIsOTgBIo+AQSxKp2r8VAeYBQdDi+tJ2WSkWEIoz uAGbRVWVVxH8ytDjjsoQutTWrw5e3nn0xMuAHQIZx7AqLOY6SXE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:13 2026 by rpki-client