$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143448.roa File: AS143448.roa (raw, json) Hash identifier: or5EROa8LhldZ3pBI2WdJCG059pd4Dxs+tlsQQVef/E= Subject key identifier: 1E:56:44:47:51:E8:A6:31:CE:BD:3C:A9:9E:06:90:5B:34:B9:C1:B2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08477D879571CE543FAA06B6C069EB7D86B0DB09 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143448.roa Signing time: Wed 04 Mar 2026 06:05:43 +0000 ROA not before: Wed 04 Mar 2026 06:00:43 +0000 ROA not after: Wed 03 Mar 2027 06:05:43 +0000 asID: 143448 IP address blocks: 240a:a31e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:47:7d:87:95:71:ce:54:3f:aa:06:b6:c0:69:eb:7d:86:b0:db:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:43 2026 GMT Not After : Mar 3 06:05:43 2027 GMT Subject: CN=1E56444751E8A631CEBD3CA99E06905B34B9C1B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e4:29:53:2c:1a:88:42:3c:f5:ab:97:14:72: de:2d:40:37:92:b8:6a:18:fb:b2:ad:10:d9:51:67: ce:c7:25:22:e3:ca:67:ec:a4:19:0d:cd:81:76:92: 01:c9:2d:bc:5a:cd:7c:af:07:28:78:f1:da:68:8d: 1a:c0:56:3a:8d:15:2d:6d:2f:97:9d:b3:06:83:37: ad:b0:5b:17:e7:3d:15:8d:45:43:58:dd:c8:44:2d: 86:17:5e:d7:2a:7f:b9:26:fe:c3:52:36:13:1f:e9: 3c:ed:8e:5b:4d:f7:27:6a:8f:9b:f8:18:c2:5a:45: bd:35:f7:54:c4:6b:af:90:5a:60:4f:9e:b5:3b:40: e0:f5:25:be:f7:75:b9:80:48:6e:43:4e:8f:07:f6: 75:f6:e3:8c:1c:f8:0b:53:e9:07:72:89:71:db:a0: 1e:52:3d:17:d1:aa:a2:ea:1f:ca:f1:fb:b6:e3:fb: 3e:34:cd:10:6a:16:3d:a4:30:dc:ce:2c:7a:a3:86: 00:84:b6:2e:4d:8d:e2:bd:be:51:0a:93:39:a8:34: 51:67:87:bd:f5:7a:7b:61:eb:b4:6f:7b:bc:14:77: 5e:8d:67:00:c3:a7:e0:d7:9d:4b:76:6b:68:81:56: 65:8e:93:64:83:14:65:17:c7:97:fc:c3:b6:e8:86: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:56:44:47:51:E8:A6:31:CE:BD:3C:A9:9E:06:90:5B:34:B9:C1:B2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143448.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a31e::/32 Signature Algorithm: sha256WithRSAEncryption 1d:b0:7c:ee:04:9f:71:c9:a0:39:53:c4:91:8a:7c:b4:37:6f: 44:31:f5:f4:75:e0:ec:bf:91:a5:d6:b8:ec:86:e1:ef:5a:0d: 89:42:00:7c:32:07:91:ee:2a:0e:fc:14:80:a5:c1:78:12:e4: da:9f:a9:e5:cf:57:55:95:12:5a:fb:25:2f:44:aa:8e:ee:37: 13:f9:36:57:0e:59:8d:90:1d:a8:70:35:a6:12:48:68:e0:3a: 78:67:80:b0:da:aa:19:92:d6:72:c9:0f:06:f9:28:74:cd:13: 60:6f:6a:f6:4c:3a:0e:2f:15:47:64:96:e3:22:34:1e:69:96: 50:ea:5b:fa:3f:d7:a9:98:54:c9:d3:71:20:20:0d:ae:43:dd: 97:87:7b:98:16:b1:c1:91:34:55:2e:52:9b:86:6b:fa:14:e0: a8:44:e3:ab:67:c7:a4:a3:07:2a:02:8e:09:46:65:51:a8:87: 70:46:12:8c:bb:1b:60:98:9b:0e:ee:62:1a:d5:37:84:80:f1: e0:86:28:25:b3:b4:18:bd:04:25:2f:04:f1:2c:59:e7:5f:4f: 2e:08:26:40:cb:73:97:d2:ac:6a:31:39:e8:df:2f:84:af:3d: e0:c7:90:b2:68:f8:84:b6:fb:58:74:50:e2:6d:31:f1:d3:cc: e0:26:05:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCEd9h5VxzlQ/qga2wGnrfYaw2wkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0M1oX DTI3MDMwMzA2MDU0M1owMzExMC8GA1UEAxMoMUU1NjQ0NDc1MUU4QTYzMUNFQkQz Q0E5OUUwNjkwNUIzNEI5QzFCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPkKVMsGohCPPWrlxRy3i1AN5K4ahj7sq0Q2VFnzsclIuPKZ+ykGQ3NgXaS AcktvFrNfK8HKHjx2miNGsBWOo0VLW0vl52zBoM3rbBbF+c9FY1FQ1jdyEQthhde 1yp/uSb+w1I2Ex/pPO2OW033J2qPm/gYwlpFvTX3VMRrr5BaYE+etTtA4PUlvvd1 uYBIbkNOjwf2dfbjjBz4C1PpB3KJcdugHlI9F9GqouofyvH7tuP7PjTNEGoWPaQw 3M4seqOGAIS2Lk2N4r2+UQqTOag0UWeHvfV6e2HrtG97vBR3Xo1nAMOn4NedS3Zr aIFWZY6TZIMUZRfHl/zDtuiGVkMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQeVkRH UeimMc69PKmeBpBbNLnBsjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ox4wDQYJKoZIhvcNAQELBQADggEBAB2wfO4En3HJoDlTxJGKfLQ3b0Qx9fR14Oy/ kaXWuOyG4e9aDYlCAHwyB5HuKg78FIClwXgS5NqfqeXPV1WVElr7JS9Eqo7uNxP5 NlcOWY2QHahwNaYSSGjgOnhngLDaqhmS1nLJDwb5KHTNE2BvavZMOg4vFUdkluMi NB5pllDqW/o/16mYVMnTcSAgDa5D3ZeHe5gWscGRNFUuUpuGa/oU4KhE46tnx6Sj ByoCjglGZVGoh3BGEoy7G2CYmw7uYhrVN4SA8eCGKCWztBi9BCUvBPEsWedfTy4I JkDLc5fSrGoxOejfL4SvPeDHkLJo+IS2+1h0UOJtMfHTzOAmBYA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:20 2026 by rpki-client