$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143433.roa File: AS143433.roa (raw, json) Hash identifier: Jh2yMVC5/bAsarWsX98NWnXjgiOFXvdgbJGY79NfEJg= Subject key identifier: B5:F2:D5:47:BC:9B:F6:7B:90:0A:51:2D:E2:1B:C1:C0:0A:13:BE:85 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 33073B6124056577B9BEF824E7B069A498CBB19D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143433.roa Signing time: Wed 04 Mar 2026 06:05:25 +0000 ROA not before: Wed 04 Mar 2026 06:00:25 +0000 ROA not after: Wed 03 Mar 2027 06:05:25 +0000 asID: 143433 IP address blocks: 240a:a30f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:07:3b:61:24:05:65:77:b9:be:f8:24:e7:b0:69:a4:98:cb:b1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:25 2026 GMT Not After : Mar 3 06:05:25 2027 GMT Subject: CN=B5F2D547BC9BF67B900A512DE21BC1C00A13BE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:66:a2:8d:b6:e7:86:12:ab:e4:a0:f7:e6:8f: 5e:4f:74:b0:24:20:83:40:d5:26:79:b4:3b:86:dd: bb:81:26:4f:9a:6b:61:7e:70:dc:fd:7c:5d:44:46: 8b:a7:dd:e5:24:5a:9b:43:6b:88:ce:eb:e0:b8:69: 25:95:19:fb:a7:34:64:d6:b0:25:51:ee:00:35:4d: 24:6d:94:6c:51:24:48:f4:85:f8:94:45:da:3d:cf: db:53:87:84:ae:d8:30:cb:17:ab:71:ed:b0:73:31: 42:bc:48:4d:63:8a:31:61:ee:65:7c:af:e1:ba:68: b0:bf:09:7c:22:90:3b:46:ad:7f:85:7e:ab:7b:3d: 4d:26:9a:a7:2c:e3:c5:bb:f0:3e:c0:3c:9f:02:ac: 52:f6:ff:e1:e6:f6:98:e5:f3:53:9a:5f:fd:05:fb: 5c:fa:ba:b8:80:b2:5e:a9:39:b0:ae:a0:b1:48:ef: 9f:42:73:02:d8:63:1f:45:a1:b4:56:95:89:14:af: ef:cb:99:d0:e6:bf:d1:7b:5d:cc:b4:52:78:f0:30: 09:21:d4:6d:93:c2:67:54:c4:1a:7b:d7:c2:8d:70: f2:da:e8:36:fd:46:c7:fb:75:ee:2f:ed:e5:99:06: bd:0a:56:08:16:3a:57:78:d0:eb:91:b4:20:fa:d5: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F2:D5:47:BC:9B:F6:7B:90:0A:51:2D:E2:1B:C1:C0:0A:13:BE:85 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a30f::/32 Signature Algorithm: sha256WithRSAEncryption c3:04:51:7a:c9:5e:0a:03:48:d4:5a:b2:4d:8b:d0:39:f3:f8: 92:cc:c6:a8:52:84:bd:da:59:c6:e6:e0:e9:6c:6f:07:f6:b2: 8f:32:5f:7a:3d:47:7d:65:e4:90:ea:66:6c:b7:14:88:c3:62: d8:07:70:1e:a2:55:87:93:a6:0c:bf:8d:1e:8a:4f:37:64:89: a1:b4:28:50:e8:bd:31:c3:04:69:b0:32:97:d5:2a:8b:97:13: bf:90:79:d1:56:eb:3a:88:1a:00:8b:9f:2c:3f:fd:81:8b:05: 21:eb:0f:96:08:0c:0d:cd:fa:de:88:34:8a:20:4f:74:c1:f7: eb:7f:b9:db:52:f9:bb:1a:b8:bb:7b:55:71:9e:51:08:3f:5e: b7:17:dc:46:22:90:2c:81:53:60:48:85:47:77:b8:d3:c2:c1: e0:cb:77:ac:15:65:d7:19:43:48:73:3e:03:9c:2b:ba:bb:1b: 5c:65:39:b7:bb:4e:b7:24:15:8e:c8:77:01:10:c7:67:2e:6c: 60:23:3d:50:51:9a:4b:1f:be:01:69:2c:23:e2:64:6f:51:cc: b1:d3:c5:be:a8:03:4a:d7:d2:51:b0:29:f8:d0:7a:40:91:0f: 6e:7b:91:79:7c:22:fa:17:13:9e:75:be:75:e1:68:02:38:92: 05:a8:bd:5c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMwc7YSQFZXe5vvgk57BppJjLsZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyNVoX DTI3MDMwMzA2MDUyNVowMzExMC8GA1UEAxMoQjVGMkQ1NDdCQzlCRjY3QjkwMEE1 MTJERTIxQkMxQzAwQTEzQkU4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRmoo2254YSq+Sg9+aPXk90sCQgg0DVJnm0O4bdu4EmT5prYX5w3P18XURG i6fd5SRam0NriM7r4LhpJZUZ+6c0ZNawJVHuADVNJG2UbFEkSPSF+JRF2j3P21OH hK7YMMsXq3HtsHMxQrxITWOKMWHuZXyv4bposL8JfCKQO0atf4V+q3s9TSaapyzj xbvwPsA8nwKsUvb/4eb2mOXzU5pf/QX7XPq6uICyXqk5sK6gsUjvn0JzAthjH0Wh tFaViRSv78uZ0Oa/0XtdzLRSePAwCSHUbZPCZ1TEGnvXwo1w8troNv1Gx/t17i/t 5ZkGvQpWCBY6V3jQ65G0IPrVKz0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS18tVH vJv2e5AKUS3iG8HAChO+hTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ow8wDQYJKoZIhvcNAQELBQADggEBAMMEUXrJXgoDSNRask2L0Dnz+JLMxqhShL3a Wcbm4Olsbwf2so8yX3o9R31l5JDqZmy3FIjDYtgHcB6iVYeTpgy/jR6KTzdkiaG0 KFDovTHDBGmwMpfVKouXE7+QedFW6zqIGgCLnyw//YGLBSHrD5YIDA3N+t6INIog T3TB9+t/udtS+bsauLt7VXGeUQg/XrcX3EYikCyBU2BIhUd3uNPCweDLd6wVZdcZ Q0hzPgOcK7q7G1xlObe7TrckFY7IdwEQx2cubGAjPVBRmksfvgFpLCPiZG9RzLHT xb6oA0rX0lGwKfjQekCRD257kXl8IvoXE551vnXhaAI4kgWovVw= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:35 2026 by rpki-client