$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143454.roa File: AS143454.roa (raw, json) Hash identifier: t9Dcy4CY09fOTP9j/GFgxV5AZcYZNAbKRi33GPtwfhU= Subject key identifier: B1:D5:CE:F6:B6:02:21:06:4D:78:A1:2F:F9:26:F2:52:71:29:90:CD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1AE537A3FCDF08F97D4D4D07DC12480F53E943FA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143454.roa Signing time: Wed 04 Mar 2026 06:06:47 +0000 ROA not before: Wed 04 Mar 2026 06:01:47 +0000 ROA not after: Wed 03 Mar 2027 06:06:47 +0000 asID: 143454 IP address blocks: 240a:a324::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e5:37:a3:fc:df:08:f9:7d:4d:4d:07:dc:12:48:0f:53:e9:43:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:47 2026 GMT Not After : Mar 3 06:06:47 2027 GMT Subject: CN=B1D5CEF6B60221064D78A12FF926F252712990CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:cd:bf:d5:be:c9:f9:77:ac:37:8e:e6:b6: 6a:19:8d:99:c4:9b:b2:98:2d:8d:5c:04:0a:56:09: 15:21:c6:55:26:21:99:f1:c8:d7:ef:e6:69:d9:14: e3:fb:83:89:42:08:16:51:bd:89:7f:04:ec:64:16: ce:c2:d1:aa:91:88:aa:5e:13:35:af:6f:43:94:64: f8:86:12:9d:06:14:df:7f:ab:d5:c4:2b:38:8d:57: a8:68:f3:e5:bf:c1:86:d2:c4:45:e2:7c:05:47:8f: 5d:f4:2f:7a:89:ad:0b:95:5a:ed:94:56:58:da:3c: ac:da:61:03:f7:53:d5:ef:d6:08:df:85:4c:28:42: 68:a9:7f:7e:36:95:2b:be:60:5f:d2:9f:0d:61:df: 61:a4:34:e5:ed:c5:32:82:eb:b4:70:3b:b4:a9:b4: 15:af:80:a8:fd:af:31:e2:53:3f:ee:42:38:2c:41: 33:0d:0f:51:45:cb:81:8b:cc:f7:23:b2:55:3b:3b: 8d:f2:a2:16:46:2c:09:96:99:98:a6:44:f9:d2:3c: ce:05:56:58:01:d5:c7:19:bd:78:fb:e0:cc:ad:f6: 3b:63:e2:7f:cb:0e:1d:83:d3:66:cf:46:bc:0d:58: 38:01:91:73:eb:fc:05:1f:6c:3e:61:98:ef:01:c2: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D5:CE:F6:B6:02:21:06:4D:78:A1:2F:F9:26:F2:52:71:29:90:CD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a324::/32 Signature Algorithm: sha256WithRSAEncryption 19:39:50:cf:dc:5b:59:0f:0b:b1:d0:c9:a0:f0:9f:a6:57:90: 33:a7:7f:cd:06:bf:d8:80:e2:28:c9:97:99:de:17:2e:22:d7: ca:83:9f:16:d6:8c:a9:3e:47:64:54:4f:3f:0e:3e:3d:94:49: a4:da:a3:a9:1d:15:dd:a4:64:63:7d:64:02:1a:05:7d:6b:91: 46:f1:95:e7:62:fe:84:af:83:34:9d:4e:31:92:02:68:f9:2b: 57:ea:c2:70:48:14:db:59:d5:b3:f4:2f:a8:5e:bc:af:f9:d5: 6e:b6:44:49:22:b0:d2:28:09:21:2c:ef:27:12:3d:03:66:fb: 62:66:56:74:85:13:2a:bc:e7:56:a2:cc:26:74:aa:c5:7f:7b: 60:f1:31:27:d9:33:d1:91:ad:b7:bf:42:c1:91:ab:c9:f5:88: 56:ee:aa:54:9f:8d:cf:c2:f4:1c:6c:e5:62:c4:52:a5:2c:32: 33:ac:9b:f8:fe:dc:d5:c1:ff:8b:44:c0:24:d2:a6:89:a4:68: 84:74:29:07:5f:e0:9f:f5:f4:a7:b4:b0:67:18:98:0b:c7:aa: c9:df:18:34:e6:6b:dd:f6:b9:ac:de:81:19:c1:b0:f8:ed:29: 9e:49:9f:19:2c:81:79:51:51:c2:6c:d4:fd:47:30:8b:f9:3a: 77:80:4f:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGuU3o/zfCPl9TU0H3BJID1PpQ/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0N1oX DTI3MDMwMzA2MDY0N1owMzExMC8GA1UEAxMoQjFENUNFRjZCNjAyMjEwNjRENzhB MTJGRjkyNkYyNTI3MTI5OTBDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1qzb/Vvsn5d6w3jua2ahmNmcSbspgtjVwEClYJFSHGVSYhmfHI1+/madkU 4/uDiUIIFlG9iX8E7GQWzsLRqpGIql4TNa9vQ5Rk+IYSnQYU33+r1cQrOI1XqGjz 5b/BhtLEReJ8BUePXfQveomtC5Va7ZRWWNo8rNphA/dT1e/WCN+FTChCaKl/fjaV K75gX9KfDWHfYaQ05e3FMoLrtHA7tKm0Fa+AqP2vMeJTP+5COCxBMw0PUUXLgYvM 9yOyVTs7jfKiFkYsCZaZmKZE+dI8zgVWWAHVxxm9ePvgzK32O2Pif8sOHYPTZs9G vA1YOAGRc+v8BR9sPmGY7wHCuqECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSx1c72 tgIhBk14oS/5JvJScSmQzTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oyQwDQYJKoZIhvcNAQELBQADggEBABk5UM/cW1kPC7HQyaDwn6ZXkDOnf80Gv9iA 4ijJl5neFy4i18qDnxbWjKk+R2RUTz8OPj2USaTao6kdFd2kZGN9ZAIaBX1rkUbx ledi/oSvgzSdTjGSAmj5K1fqwnBIFNtZ1bP0L6hevK/51W62REkisNIoCSEs7ycS PQNm+2JmVnSFEyq851aizCZ0qsV/e2DxMSfZM9GRrbe/QsGRq8n1iFbuqlSfjc/C 9Bxs5WLEUqUsMjOsm/j+3NXB/4tEwCTSpomkaIR0KQdf4J/19Ke0sGcYmAvHqsnf GDTma932uazegRnBsPjtKZ5JnxksgXlRUcJs1P1HMIv5OneAT24= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:34 2026 by rpki-client