$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143447.roa File: AS143447.roa (raw, json) Hash identifier: M0+Aam0Ns3o6r6Pz53T/AK2Vz0RYPrt5NOcbR1uiX+Y= Subject key identifier: 3D:FE:4B:C0:43:F4:85:E6:8B:85:BF:37:DD:18:78:D9:2E:4A:0E:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5B0B32AB1FBFE7A519A2CAFCA6BD97AAD37D89F7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143447.roa Signing time: Wed 04 Mar 2026 06:05:09 +0000 ROA not before: Wed 04 Mar 2026 06:00:09 +0000 ROA not after: Wed 03 Mar 2027 06:05:09 +0000 asID: 143447 IP address blocks: 240a:a31d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0b:32:ab:1f:bf:e7:a5:19:a2:ca:fc:a6:bd:97:aa:d3:7d:89:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:09 2026 GMT Not After : Mar 3 06:05:09 2027 GMT Subject: CN=3DFE4BC043F485E68B85BF37DD1878D92E4A0E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:f6:4e:6f:bc:59:94:41:6d:e0:ef:d3:27: 9a:15:9c:5e:e5:e5:a6:d6:0b:b8:46:31:73:97:b7: ab:f2:60:b2:58:b6:28:27:71:1a:f6:ae:5e:c3:0c: 3b:d4:fd:68:de:49:fc:12:8e:3f:f0:7e:9a:e3:26: 5d:53:6e:6e:d8:72:69:ed:7b:66:22:af:d5:d1:cc: 91:65:4f:cb:fb:cc:9f:9f:b7:58:13:43:f2:bf:95: 39:f0:22:76:00:54:91:1a:cf:31:8f:42:2f:80:01: b4:29:20:9a:c1:26:a7:df:88:01:f0:1e:1f:83:9f: 5d:95:37:9c:e9:73:2f:e7:7a:ed:2f:49:98:0d:71: 4d:e2:19:8f:00:b7:49:db:ae:81:f6:c9:c5:81:9a: 90:0c:7a:74:01:cc:ae:ad:0b:b6:29:12:9c:17:87: 2f:5f:f7:63:84:86:c2:45:da:6b:8f:fc:63:15:9e: 0f:36:70:52:0f:fb:69:70:ba:56:ae:c0:60:48:35: 08:b8:99:18:13:c7:87:03:ac:c4:92:cd:fb:2f:62: aa:b6:77:ab:5f:9d:40:f5:d0:ba:e0:f6:67:42:c9: c8:d0:f8:07:37:df:9e:f9:cd:3e:b4:2f:ee:e9:bb: ca:22:8a:bf:9a:e4:31:08:6b:76:c2:37:72:d8:c7: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FE:4B:C0:43:F4:85:E6:8B:85:BF:37:DD:18:78:D9:2E:4A:0E:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143447.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a31d::/32 Signature Algorithm: sha256WithRSAEncryption 23:31:ac:9b:aa:cf:e5:d8:05:1e:30:e2:92:f7:69:f2:1f:4e: d7:74:dc:4d:7a:27:e4:10:fb:5f:4c:16:45:05:fb:9f:e5:9b: 42:d2:19:f4:9a:b6:6c:56:ef:69:76:04:65:2b:97:15:22:5b: d3:b1:e5:2b:fd:bb:9a:13:31:0f:3c:58:41:09:35:08:e9:5a: a3:d1:04:70:00:25:47:0b:33:9d:43:a7:d3:15:a3:2a:07:03: 57:4f:c9:92:8a:09:01:35:34:98:f8:e3:42:fe:92:f8:c0:5b: 7c:2c:a4:b8:28:0c:d5:4a:bd:20:49:1b:32:6a:aa:0a:fc:fd: ab:0c:a6:8b:55:c0:37:1a:18:71:14:eb:03:12:c7:8e:60:bf: b0:09:82:87:db:57:55:ee:9a:61:b9:15:99:54:65:fa:22:ec: d1:c9:6f:69:66:54:ee:53:10:a8:40:33:ca:6f:45:25:22:45: 63:0c:9c:52:18:c8:c8:c5:16:01:29:e6:39:e9:f6:e4:cb:06: 4d:1c:b0:d6:6f:89:41:b0:eb:86:48:da:24:b0:39:01:41:d3: d5:ec:39:1a:1b:e7:73:2d:3c:5f:38:75:10:63:cf:52:ca:73: 65:86:93:64:88:6a:86:e4:37:a4:bf:45:8a:ae:9f:ad:0b:6d: 09:a0:e7:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWwsyqx+/56UZosr8pr2XqtN9ifcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAwOVoX DTI3MDMwMzA2MDUwOVowMzExMC8GA1UEAxMoM0RGRTRCQzA0M0Y0ODVFNjhCODVC RjM3REQxODc4RDkyRTRBMEUwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALg89k5vvFmUQW3g79MnmhWcXuXlptYLuEYxc5e3q/Jgsli2KCdxGvauXsMM O9T9aN5J/BKOP/B+muMmXVNubthyae17ZiKv1dHMkWVPy/vMn5+3WBND8r+VOfAi dgBUkRrPMY9CL4ABtCkgmsEmp9+IAfAeH4OfXZU3nOlzL+d67S9JmA1xTeIZjwC3 SduugfbJxYGakAx6dAHMrq0LtikSnBeHL1/3Y4SGwkXaa4/8YxWeDzZwUg/7aXC6 Vq7AYEg1CLiZGBPHhwOsxJLN+y9iqrZ3q1+dQPXQuuD2Z0LJyND4BzffnvnNPrQv 7um7yiKKv5rkMQhrdsI3ctjHbh8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ9/kvA Q/SF5ouFvzfdGHjZLkoOAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ox0wDQYJKoZIhvcNAQELBQADggEBACMxrJuqz+XYBR4w4pL3afIfTtd03E16J+QQ +19MFkUF+5/lm0LSGfSatmxW72l2BGUrlxUiW9Ox5Sv9u5oTMQ88WEEJNQjpWqPR BHAAJUcLM51Dp9MVoyoHA1dPyZKKCQE1NJj440L+kvjAW3wspLgoDNVKvSBJGzJq qgr8/asMpotVwDcaGHEU6wMSx45gv7AJgofbV1XummG5FZlUZfoi7NHJb2lmVO5T EKhAM8pvRSUiRWMMnFIYyMjFFgEp5jnp9uTLBk0csNZviUGw64ZI2iSwOQFB09Xs ORob53MtPF84dRBjz1LKc2WGk2SIaobkN6S/RYqun60LbQmg578= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:28 2026 by rpki-client