$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143450.roa File: AS143450.roa (raw, json) Hash identifier: +g4tddLB0R+K6A1zXjL5+aKhC7KLwsgaJUxMTlvI+QE= Subject key identifier: 67:63:53:F0:17:BC:98:60:EE:D2:CB:62:16:16:C7:3C:27:AA:B1:6F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 50E2A2231AFB651D5135B06E753E3D42F4B92C94 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143450.roa Signing time: Wed 04 Mar 2026 06:05:46 +0000 ROA not before: Wed 04 Mar 2026 06:00:46 +0000 ROA not after: Wed 03 Mar 2027 06:05:46 +0000 asID: 143450 IP address blocks: 240a:a320::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e2:a2:23:1a:fb:65:1d:51:35:b0:6e:75:3e:3d:42:f4:b9:2c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:46 2026 GMT Not After : Mar 3 06:05:46 2027 GMT Subject: CN=676353F017BC9860EED2CB621616C73C27AAB16F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:c6:79:2f:af:49:27:fc:2c:69:17:49:60: f8:06:7f:80:32:e1:13:ad:ce:89:07:21:fc:00:0c: e8:5d:3e:d0:3a:25:65:ee:30:43:d6:59:46:c2:19: 86:bc:19:da:53:80:41:f3:b8:1b:41:b5:44:43:22: d9:ba:8e:c3:15:b9:a2:a1:4d:63:fb:fa:19:a5:3a: 2e:7e:24:9e:a6:ff:0d:26:54:98:01:b7:93:0f:f8: e9:ab:8d:b4:b0:0d:8e:87:ae:b5:e3:b8:78:a2:76: 94:cd:95:1d:af:41:eb:98:36:c1:d2:94:d1:88:c4: 81:0c:16:86:43:54:d5:b8:5f:fe:3d:14:aa:68:ca: a4:5c:54:cd:65:be:c9:2a:a6:d7:2f:e1:76:9d:09: 06:84:76:22:ed:28:a0:4b:d5:4e:0a:7c:87:04:08: 7e:1f:96:2b:b9:55:d2:8c:80:be:fb:59:ef:11:ab: cf:18:0b:76:9a:95:b2:24:0f:83:44:79:fd:85:cd: 7b:8c:1d:5b:f8:0f:48:4e:77:d1:f6:8c:7c:e8:58: 79:42:a8:a8:a8:a8:95:6c:5c:04:0f:5c:27:86:f8: 9e:ec:dc:b5:4a:aa:a4:74:f0:d0:c8:d7:4a:ee:59: 90:a8:63:a8:1b:3c:6c:1b:90:00:da:fb:50:5d:05: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:63:53:F0:17:BC:98:60:EE:D2:CB:62:16:16:C7:3C:27:AA:B1:6F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143450.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a320::/32 Signature Algorithm: sha256WithRSAEncryption 1c:d6:1c:61:00:09:5c:bb:15:f7:e3:14:08:05:95:69:76:51: f0:e4:68:a7:08:0f:64:e9:aa:43:d9:a5:7b:d0:b5:54:27:55: 25:9f:ce:84:9d:1b:a5:16:be:11:4b:7b:3a:fd:49:a8:75:e5: 59:86:0a:99:ed:91:36:99:ce:e0:b0:40:14:12:88:a1:18:54: d4:db:d2:fc:80:91:24:48:27:a4:2e:5c:9c:8d:e4:82:9c:66: af:c0:1b:34:80:98:13:f3:1f:b4:c7:c7:87:b4:18:65:8b:e2: 94:7a:ef:3f:91:63:80:12:ea:f4:fe:f9:ae:08:b4:0a:4f:2b: e0:97:94:04:2c:30:6b:0b:8f:d1:0a:44:e5:5b:30:97:83:f1: a5:c5:d4:8a:e8:1c:b0:97:7c:a1:16:91:3f:04:9f:55:7e:64: 1b:06:10:81:53:40:ec:7c:93:bd:72:0a:2a:e8:5c:18:f6:37: e7:c6:3e:6c:19:c6:7e:c7:1a:81:ed:ce:72:88:fd:ad:93:41: c4:e1:b0:fe:ee:6b:a2:14:f3:47:92:5a:80:88:2f:27:f3:6a: 3d:c3:c0:01:25:f6:8b:48:08:a4:86:99:2f:f8:17:9d:04:27: 28:7e:68:f4:62:15:3c:be:3f:7a:57:b4:5b:14:9d:48:68:14: 60:7b:ed:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUOKiIxr7ZR1RNbBudT49QvS5LJQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0NloX DTI3MDMwMzA2MDU0NlowMzExMC8GA1UEAxMoNjc2MzUzRjAxN0JDOTg2MEVFRDJD QjYyMTYxNkM3M0MyN0FBQjE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANABxnkvr0kn/CxpF0lg+AZ/gDLhE63OiQch/AAM6F0+0DolZe4wQ9ZZRsIZ hrwZ2lOAQfO4G0G1REMi2bqOwxW5oqFNY/v6GaU6Ln4knqb/DSZUmAG3kw/46auN tLANjoeuteO4eKJ2lM2VHa9B65g2wdKU0YjEgQwWhkNU1bhf/j0UqmjKpFxUzWW+ ySqm1y/hdp0JBoR2Iu0ooEvVTgp8hwQIfh+WK7lV0oyAvvtZ7xGrzxgLdpqVsiQP g0R5/YXNe4wdW/gPSE530faMfOhYeUKoqKiolWxcBA9cJ4b4nuzctUqqpHTw0MjX Su5ZkKhjqBs8bBuQANr7UF0F5TUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRnY1Pw F7yYYO7Sy2IWFsc8J6qxbzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oyAwDQYJKoZIhvcNAQELBQADggEBABzWHGEACVy7FffjFAgFlWl2UfDkaKcID2Tp qkPZpXvQtVQnVSWfzoSdG6UWvhFLezr9Sah15VmGCpntkTaZzuCwQBQSiKEYVNTb 0vyAkSRIJ6QuXJyN5IKcZq/AGzSAmBPzH7THx4e0GGWL4pR67z+RY4AS6vT++a4I tApPK+CXlAQsMGsLj9EKROVbMJeD8aXF1IroHLCXfKEWkT8En1V+ZBsGEIFTQOx8 k71yCiroXBj2N+fGPmwZxn7HGoHtznKI/a2TQcThsP7ua6IU80eSWoCILyfzaj3D wAEl9otICKSGmS/4F50EJyh+aPRiFTy+P3pXtFsUnUhoFGB77Xw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:52 2026 by rpki-client