$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143451.roa File: AS143451.roa (raw, json) Hash identifier: adwfsl12R4BTHjogRvFjLGeoPUKE8i6h078Qaazko4Q= Subject key identifier: E6:38:EE:65:47:A5:20:95:49:12:F4:31:1A:8A:FF:EF:3E:F1:68:05 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 645E61FC6C42E17974D404A23118215BAF762041 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143451.roa Signing time: Wed 04 Mar 2026 06:06:38 +0000 ROA not before: Wed 04 Mar 2026 06:01:38 +0000 ROA not after: Wed 03 Mar 2027 06:06:38 +0000 asID: 143451 IP address blocks: 240a:a321::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5e:61:fc:6c:42:e1:79:74:d4:04:a2:31:18:21:5b:af:76:20:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:38 2026 GMT Not After : Mar 3 06:06:38 2027 GMT Subject: CN=E638EE6547A520954912F4311A8AFFEF3EF16805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:4d:4b:06:d4:f7:8d:0e:96:cb:a3:4b:2a: 51:a6:a2:83:f1:41:90:c9:f6:ba:7c:cb:f9:9c:06: e7:b6:37:af:b0:87:21:27:4d:bc:20:89:5e:0f:e6: 2b:dd:94:59:b9:1a:8d:c2:55:d0:d1:fe:a9:1d:49: 9e:43:c7:cb:f4:8c:24:0e:02:f2:13:5d:07:49:d4: d8:8a:39:ae:aa:ab:64:60:52:7d:25:b5:cc:d0:ae: 75:64:4a:08:92:64:47:25:dc:17:93:c1:04:53:7a: cd:3a:a9:3b:9c:d7:93:b1:0a:2c:b7:ef:ea:bd:ca: a9:c4:0d:9d:cf:13:11:6f:18:63:7b:5a:4a:5b:54: 7c:99:74:80:4d:b5:7a:48:48:81:63:c2:fc:ab:27: 53:94:14:ea:f7:bb:b6:cf:b0:10:28:27:93:0f:5d: 1b:e9:4e:ff:b9:22:58:9a:8b:af:43:9f:47:73:a7: 69:75:8d:91:b6:14:ae:3a:4d:ba:19:0f:97:c3:2c: 15:d2:b9:dd:f5:c6:c0:e9:b0:f2:a4:23:a9:e2:cb: ca:94:6e:ff:ef:ba:0d:24:d7:a1:37:a4:de:df:7d: 9a:a0:91:f0:73:3d:94:39:17:3b:da:bc:60:1f:cb: b6:ca:d8:ce:6d:70:eb:47:59:29:cc:71:4b:13:c2: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:EE:65:47:A5:20:95:49:12:F4:31:1A:8A:FF:EF:3E:F1:68:05 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143451.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a321::/32 Signature Algorithm: sha256WithRSAEncryption c5:c3:f0:db:86:8e:cf:9f:de:4e:96:31:ec:fe:51:70:6a:3b: 64:c4:8d:46:d2:4f:fc:59:13:fb:43:90:6b:be:bd:50:c5:29: 75:74:cb:d0:d5:e1:49:f6:28:80:27:b9:43:0e:01:31:2e:00: c2:54:0b:d9:a0:10:df:b4:49:c5:2a:a8:5d:d8:a8:26:0c:08: dd:65:ca:42:c2:df:4b:63:af:10:92:47:0b:0f:e6:14:1c:38: da:4d:b2:00:d5:f3:f9:36:17:b1:c9:63:41:62:6f:cf:cd:08: 65:a4:9e:81:c1:f7:72:ac:f7:62:b9:b8:35:c3:45:18:11:7a: 16:da:3c:b0:cf:37:dc:05:51:c4:66:86:ca:bd:4e:94:87:02: e3:d3:53:ea:54:a2:aa:35:e7:dd:4f:a7:3b:15:bc:0e:fd:8d: 27:23:88:a6:d0:cc:ed:21:08:e8:c8:37:fe:dc:90:e8:04:a2: 5a:c5:e7:85:ee:c6:e2:de:04:29:c7:85:a2:cd:cb:ce:6c:7c: f5:04:a0:9a:fc:97:70:b4:89:1b:24:b4:7f:43:e6:b8:5c:43: 6c:fd:cb:8d:3a:d8:b1:1e:8b:22:1e:1f:65:1a:30:f6:b7:3e: ea:06:67:a6:56:5c:79:36:27:b7:1c:22:5c:23:aa:e4:3f:c2: 19:65:8c:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZF5h/GxC4Xl01ASiMRghW692IEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzOFoX DTI3MDMwMzA2MDYzOFowMzExMC8GA1UEAxMoRTYzOEVFNjU0N0E1MjA5NTQ5MTJG NDMxMUE4QUZGRUYzRUYxNjgwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKseTUsG1PeNDpbLo0sqUaaig/FBkMn2unzL+ZwG57Y3r7CHISdNvCCJXg/m K92UWbkajcJV0NH+qR1JnkPHy/SMJA4C8hNdB0nU2Io5rqqrZGBSfSW1zNCudWRK CJJkRyXcF5PBBFN6zTqpO5zXk7EKLLfv6r3KqcQNnc8TEW8YY3taSltUfJl0gE21 ekhIgWPC/KsnU5QU6ve7ts+wECgnkw9dG+lO/7kiWJqLr0OfR3OnaXWNkbYUrjpN uhkPl8MsFdK53fXGwOmw8qQjqeLLypRu/++6DSTXoTek3t99mqCR8HM9lDkXO9q8 YB/LtsrYzm1w60dZKcxxSxPC9nMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTmOO5l R6UglUkS9DEaiv/vPvFoBTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oyEwDQYJKoZIhvcNAQELBQADggEBAMXD8NuGjs+f3k6WMez+UXBqO2TEjUbST/xZ E/tDkGu+vVDFKXV0y9DV4Un2KIAnuUMOATEuAMJUC9mgEN+0ScUqqF3YqCYMCN1l ykLC30tjrxCSRwsP5hQcONpNsgDV8/k2F7HJY0Fib8/NCGWknoHB93Ks92K5uDXD RRgRehbaPLDPN9wFUcRmhsq9TpSHAuPTU+pUoqo1591PpzsVvA79jScjiKbQzO0h COjIN/7ckOgEolrF54XuxuLeBCnHhaLNy85sfPUEoJr8l3C0iRsktH9D5rhcQ2z9 y4062LEeiyIeH2UaMPa3PuoGZ6ZWXHk2J7ccIlwjquQ/whlljMQ= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:33 2026 by rpki-client