$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143444.roa File: AS143444.roa (raw, json) Hash identifier: S1P1afNnIpqW2oQtyOnAIWptwX8hLaeJVwXhknL1dwE= Subject key identifier: 83:C9:6E:83:70:82:A6:EB:E5:37:88:E5:48:55:A6:F3:54:6B:6C:DE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 52A81905FCA85ADA33968C05F691DC79535457A3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143444.roa Signing time: Wed 04 Mar 2026 06:05:18 +0000 ROA not before: Wed 04 Mar 2026 06:00:18 +0000 ROA not after: Wed 03 Mar 2027 06:05:18 +0000 asID: 143444 IP address blocks: 240a:a31a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a8:19:05:fc:a8:5a:da:33:96:8c:05:f6:91:dc:79:53:54:57:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:18 2026 GMT Not After : Mar 3 06:05:18 2027 GMT Subject: CN=83C96E837082A6EBE53788E54855A6F3546B6CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:23:4d:b9:59:13:f7:27:ff:5f:41:f1:65: 58:8b:7d:8e:d8:b2:5e:69:8b:73:bb:3a:38:37:71: 9a:17:91:9c:f5:0f:41:48:bc:f3:2d:1a:06:d4:c6: f8:d9:14:5b:03:0a:2f:53:ac:90:67:5b:7d:3a:08: bf:3e:66:f4:e6:b7:3c:58:66:cb:64:64:50:45:f6: fe:6d:fe:bd:4a:23:65:88:74:57:8e:c7:c9:ef:e6: 14:47:5e:c9:fc:33:08:c9:c9:6b:1b:f2:0f:2d:51: d5:c3:a6:1d:e0:b7:11:43:e7:d2:6c:fc:b3:a8:7b: f3:19:e9:44:dc:55:0a:cb:73:4a:ef:ae:5b:fc:4c: be:a9:c3:61:48:be:32:b7:51:bd:e5:28:7c:53:e0: 62:31:ea:a0:ad:78:b3:19:77:6b:00:cd:69:7e:c3: e5:9d:b2:40:e1:5a:e5:1b:49:bf:6f:43:31:07:c9: 34:f1:5c:f5:b1:19:7d:6f:06:63:27:37:7e:0b:25: da:95:b0:94:9d:ba:28:36:5c:55:60:c7:ec:14:f6: f2:44:72:86:41:4e:00:21:0d:bd:f9:17:41:90:51: 5a:49:9f:fa:62:ff:09:7a:b2:07:d8:1c:6a:63:e1: 3b:62:84:38:3e:44:1d:66:c1:77:f9:12:21:e9:dd: a3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C9:6E:83:70:82:A6:EB:E5:37:88:E5:48:55:A6:F3:54:6B:6C:DE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143444.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a31a::/32 Signature Algorithm: sha256WithRSAEncryption d0:e8:3e:02:d0:de:3c:7b:cb:38:25:50:86:48:66:91:03:32: 89:d3:e3:c7:5a:16:ab:d2:71:2f:aa:ec:ab:1a:b2:0e:4b:6e: 4d:e2:79:fe:f2:58:c2:db:c8:15:d8:64:05:30:cb:13:f9:52: 92:4c:fe:ad:28:b5:ef:5d:37:1c:24:64:ca:61:c3:74:f2:90: ce:ee:85:ac:57:3d:c5:c5:78:97:ab:dd:85:9c:d2:23:26:d5: 42:83:09:3e:df:6e:93:bc:2d:26:63:64:3b:bf:7d:97:47:ea: 67:be:7e:d4:3f:28:b3:01:09:17:f3:12:03:c7:42:45:b0:a5: 3b:cf:6d:21:d9:b1:01:a0:2c:a4:f0:75:03:e3:68:6b:ea:dd: 1d:c0:2d:d8:0e:af:0f:98:62:22:33:af:3d:11:80:15:93:6e: 10:e0:02:a8:2e:92:9f:6a:34:c9:fc:88:d1:24:3b:7f:d0:6d: c7:3b:3e:66:6b:e7:0e:eb:53:3a:78:f2:ec:d4:1b:63:8b:34: 0a:51:0a:39:98:29:1d:39:41:37:dc:bf:08:32:bb:79:8d:7e: e2:c3:cc:eb:95:68:c0:b2:b8:e9:4f:ab:17:28:ef:13:99:69: 7a:a4:a8:14:7e:4d:05:c8:94:b8:2a:7d:11:90:fc:73:23:d1: 26:07:c0:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUqgZBfyoWtozlowF9pHceVNUV6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxOFoX DTI3MDMwMzA2MDUxOFowMzExMC8GA1UEAxMoODNDOTZFODM3MDgyQTZFQkU1Mzc4 OEU1NDg1NUE2RjM1NDZCNkNERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOcI025WRP3J/9fQfFlWIt9jtiyXmmLc7s6ODdxmheRnPUPQUi88y0aBtTG +NkUWwMKL1OskGdbfToIvz5m9Oa3PFhmy2RkUEX2/m3+vUojZYh0V47Hye/mFEde yfwzCMnJaxvyDy1R1cOmHeC3EUPn0mz8s6h78xnpRNxVCstzSu+uW/xMvqnDYUi+ MrdRveUofFPgYjHqoK14sxl3awDNaX7D5Z2yQOFa5RtJv29DMQfJNPFc9bEZfW8G Yyc3fgsl2pWwlJ26KDZcVWDH7BT28kRyhkFOACENvfkXQZBRWkmf+mL/CXqyB9gc amPhO2KEOD5EHWbBd/kSIendo7sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSDyW6D cIKm6+U3iOVIVabzVGts3jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oxowDQYJKoZIhvcNAQELBQADggEBANDoPgLQ3jx7yzglUIZIZpEDMonT48daFqvS cS+q7Ksasg5Lbk3ief7yWMLbyBXYZAUwyxP5UpJM/q0ote9dNxwkZMphw3TykM7u haxXPcXFeJer3YWc0iMm1UKDCT7fbpO8LSZjZDu/fZdH6me+ftQ/KLMBCRfzEgPH QkWwpTvPbSHZsQGgLKTwdQPjaGvq3R3ALdgOrw+YYiIzrz0RgBWTbhDgAqgukp9q NMn8iNEkO3/Qbcc7PmZr5w7rUzp48uzUG2OLNApRCjmYKR05QTfcvwgyu3mNfuLD zOuVaMCyuOlPqxco7xOZaXqkqBR+TQXIlLgqfRGQ/HMj0SYHwBE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:55 2026 by rpki-client