$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143434.roa File: AS143434.roa (raw, json) Hash identifier: fZuSzJcRk7ItVaA/+3D1yi7jt37C4965QF0O/eyZimA= Subject key identifier: DD:B3:9B:27:2A:58:CF:4D:19:5F:6C:CD:8C:4B:51:5C:77:10:41:65 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5996A287E29D12B751F05E2BC892786EBCFB37FE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143434.roa Signing time: Wed 04 Mar 2026 06:06:27 +0000 ROA not before: Wed 04 Mar 2026 06:01:27 +0000 ROA not after: Wed 03 Mar 2027 06:06:27 +0000 asID: 143434 IP address blocks: 240a:a310::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:96:a2:87:e2:9d:12:b7:51:f0:5e:2b:c8:92:78:6e:bc:fb:37:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:27 2026 GMT Not After : Mar 3 06:06:27 2027 GMT Subject: CN=DDB39B272A58CF4D195F6CCD8C4B515C77104165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:57:08:8e:ef:34:40:5a:30:23:2d:e1:2a:70: 94:ae:be:e3:53:30:7e:d1:2e:08:3a:bd:e6:5d:02: 47:75:80:2c:b6:3a:7c:44:5b:74:b3:23:d8:44:83: b4:c9:37:17:ff:16:95:d7:f6:7d:56:63:6e:b5:58: 6c:a6:4e:12:50:9f:06:e4:f5:33:78:5e:a3:03:fb: bf:8e:b6:be:55:e4:fe:c1:3b:57:0c:f4:b5:13:e5: f2:f4:97:35:69:43:24:10:6e:8a:d6:3a:f1:4f:99: 50:f8:59:8e:65:a3:42:8a:6e:94:f3:e9:c6:37:d7: c0:c1:c3:ea:a5:46:56:e2:33:ac:f8:22:89:c2:25: e1:2c:a1:e6:33:17:96:0f:04:2a:87:d4:68:fb:3d: 9e:71:c0:b7:99:33:e1:39:51:4a:f2:40:0b:13:91: 7b:43:19:77:b7:4a:0b:8d:6b:f4:0f:f6:7f:74:2d: 9b:e1:8b:11:d1:37:3a:fd:52:2a:a7:76:c5:02:33: 06:59:91:77:82:2f:4f:10:98:39:86:f0:ca:9f:39: 06:ef:8c:be:e8:c7:9f:ee:73:95:f1:85:48:21:05: cf:00:67:f1:9b:ad:77:bd:35:96:58:2e:80:a6:3a: 52:d8:2d:03:c8:2b:e7:b1:43:d8:42:92:63:2e:62: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B3:9B:27:2A:58:CF:4D:19:5F:6C:CD:8C:4B:51:5C:77:10:41:65 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a310::/32 Signature Algorithm: sha256WithRSAEncryption 73:0b:49:72:4a:cd:f5:86:2a:1d:e6:50:a3:2f:f5:8e:35:e2: 09:bd:29:3e:eb:d7:55:73:31:0f:c7:a9:6e:ee:fd:b1:59:7f: 33:9e:eb:3c:3c:8a:29:59:10:43:fd:b9:14:3a:11:a8:17:58: 59:4a:aa:38:ae:ed:8a:f3:be:18:3f:ee:8b:28:97:67:9d:75: c7:84:40:50:5c:40:84:14:e2:5e:6c:53:dd:92:95:b8:c7:ab: 3f:27:87:f1:a5:85:87:48:16:69:d0:f0:ea:d4:f4:7d:c8:86: bf:ea:97:1d:ad:9e:84:cb:2c:03:24:93:7e:61:37:b0:35:a6: 78:50:85:19:0d:27:de:0a:3c:fd:d1:b0:88:18:4c:b9:52:e0: 0e:6a:41:73:19:ce:c6:f9:94:11:6a:9b:d9:5f:c9:96:00:9c: 4c:97:f7:1a:3a:1b:cd:6d:b0:45:4e:ae:75:00:f5:ee:61:29: 96:83:e8:f2:b4:19:17:c8:7d:ce:b4:8f:65:51:0b:d1:f3:af: c2:4d:8f:35:2f:86:76:f2:0a:85:0b:39:84:0d:aa:b8:ae:82: 8a:35:03:43:43:4e:0e:1f:3f:83:b7:40:6c:27:f0:76:82:0e: 9a:c9:cd:60:30:cc:c1:ed:dd:20:ea:56:61:5d:7b:b7:48:cd: 9f:5a:f4:73 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWZaih+KdErdR8F4ryJJ4brz7N/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyN1oX DTI3MDMwMzA2MDYyN1owMzExMC8GA1UEAxMoRERCMzlCMjcyQTU4Q0Y0RDE5NUY2 Q0NEOEM0QjUxNUM3NzEwNDE2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhXCI7vNEBaMCMt4SpwlK6+41MwftEuCDq95l0CR3WALLY6fERbdLMj2ESD tMk3F/8Wldf2fVZjbrVYbKZOElCfBuT1M3heowP7v462vlXk/sE7Vwz0tRPl8vSX NWlDJBBuitY68U+ZUPhZjmWjQopulPPpxjfXwMHD6qVGVuIzrPgiicIl4Syh5jMX lg8EKofUaPs9nnHAt5kz4TlRSvJACxORe0MZd7dKC41r9A/2f3Qtm+GLEdE3Ov1S Kqd2xQIzBlmRd4IvTxCYOYbwyp85Bu+MvujHn+5zlfGFSCEFzwBn8Zutd701llgu gKY6UtgtA8gr57FD2EKSYy5isY0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTds5sn KljPTRlfbM2MS1FcdxBBZTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oxAwDQYJKoZIhvcNAQELBQADggEBAHMLSXJKzfWGKh3mUKMv9Y414gm9KT7r11Vz MQ/HqW7u/bFZfzOe6zw8iilZEEP9uRQ6EagXWFlKqjiu7Yrzvhg/7osol2eddceE QFBcQIQU4l5sU92SlbjHqz8nh/GlhYdIFmnQ8OrU9H3Ihr/qlx2tnoTLLAMkk35h N7A1pnhQhRkNJ94KPP3RsIgYTLlS4A5qQXMZzsb5lBFqm9lfyZYAnEyX9xo6G81t sEVOrnUA9e5hKZaD6PK0GRfIfc60j2VRC9Hzr8JNjzUvhnbyCoULOYQNqriugoo1 A0NDTg4fP4O3QGwn8HaCDprJzWAwzMHt3SDqVmFde7dIzZ9a9HM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:54 2026 by rpki-client