$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143459.roa File: AS143459.roa (raw, json) Hash identifier: k5OAs2O5KC3oifG6ChIKya9RTpXtQ25qax/AhXC08tU= Subject key identifier: AB:2A:45:5E:52:EE:25:4B:E9:B5:D8:7A:63:D6:11:9F:3B:78:AA:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1EFFCDE73FA5571DB0DD463832B08353198C6A49 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143459.roa Signing time: Wed 04 Mar 2026 06:07:01 +0000 ROA not before: Wed 04 Mar 2026 06:02:01 +0000 ROA not after: Wed 03 Mar 2027 06:07:01 +0000 asID: 143459 IP address blocks: 240a:a329::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ff:cd:e7:3f:a5:57:1d:b0:dd:46:38:32:b0:83:53:19:8c:6a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:01 2026 GMT Not After : Mar 3 06:07:01 2027 GMT Subject: CN=AB2A455E52EE254BE9B5D87A63D6119F3B78AAD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:fd:89:57:2e:72:d7:7f:e2:f0:bf:a7:aa: bc:26:da:54:69:0c:1a:57:f6:86:b7:0d:b8:92:e9: 6b:66:7c:7a:de:2d:f3:cd:55:70:91:4d:85:f5:dd: 62:48:5d:32:e5:4d:63:63:ea:86:e8:89:6b:c2:ef: 67:83:cb:a8:0e:a9:21:a1:6a:7a:81:ac:b7:b2:12: c6:54:22:d5:c4:35:db:35:d2:f7:63:4b:de:54:66: a0:37:37:15:e6:04:78:15:5f:dd:fd:56:3d:ae:81: 59:1b:d1:09:e5:de:59:8b:ea:00:b4:e6:7f:fe:45: 89:bd:ce:b7:96:4c:30:9f:1e:de:da:12:a0:f7:a7: 12:19:3a:9d:8a:1b:24:93:de:a4:a1:ef:ce:42:0e: b3:be:b3:79:40:5f:a3:44:6d:ec:2c:5a:b2:29:9f: a4:b7:d7:c0:a6:b4:73:ee:d4:2f:5d:a7:bc:72:0d: f9:f8:77:4f:e6:4d:5e:1a:93:48:bb:72:c8:41:f0: 1a:cb:1d:8f:91:21:e0:90:df:55:d4:50:14:d7:43: 75:b9:24:c8:82:52:42:5b:b0:e5:f2:db:72:1d:41: 46:aa:91:02:a6:93:32:12:3f:07:82:29:5d:a5:b2: 9e:b8:98:e0:75:06:f6:c3:91:69:3f:6f:66:b2:e5: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:45:5E:52:EE:25:4B:E9:B5:D8:7A:63:D6:11:9F:3B:78:AA:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143459.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a329::/32 Signature Algorithm: sha256WithRSAEncryption 1a:9e:8d:2e:9e:21:33:19:b9:ec:4a:e0:8b:05:18:7f:8b:09: af:d1:05:9f:25:4c:ba:64:52:10:92:e4:a7:26:6e:ec:87:cd: 5f:8a:d1:e9:56:03:c8:33:ce:0c:7b:72:01:90:e1:f2:a2:6a: e1:0b:9c:01:94:6d:c9:d0:20:a7:03:9b:cc:84:18:44:be:97: a2:e6:68:00:85:f0:02:b7:6e:14:c1:eb:aa:9f:fd:11:d8:d2: ab:02:c4:81:2b:e6:45:e8:0d:85:ac:64:4a:00:86:7c:fa:25: ad:cb:f6:f8:1e:da:e4:6e:74:b4:90:79:48:1e:ae:22:5f:37: 2e:e3:2c:4e:2a:94:07:76:b9:7d:fc:6d:d8:bf:b7:5f:bf:2d: 10:0b:21:67:01:92:3a:23:e9:a9:5a:a7:01:c0:a5:8e:96:df: f0:e2:50:85:cf:bf:39:3c:db:31:e6:a2:55:ce:2e:9e:1d:73: d1:81:ed:f9:76:be:fe:61:f6:c9:fd:8d:77:17:ee:7a:e0:8e: 2e:9c:19:a4:25:cb:74:35:e6:6e:e9:85:c8:33:14:c8:94:b4: 12:69:89:e8:fc:f4:d0:93:db:c8:b9:53:20:56:f9:e9:b5:0c: b4:ec:07:08:e3:f7:9d:9b:52:0a:80:30:d7:3d:79:99:90:16: 80:29:14:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHv/N5z+lVx2w3UY4MrCDUxmMakkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwMVoX DTI3MDMwMzA2MDcwMVowMzExMC8GA1UEAxMoQUIyQTQ1NUU1MkVFMjU0QkU5QjVE ODdBNjNENjExOUYzQjc4QUFENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5p/YlXLnLXf+Lwv6eqvCbaVGkMGlf2hrcNuJLpa2Z8et4t881VcJFNhfXd YkhdMuVNY2PqhuiJa8LvZ4PLqA6pIaFqeoGst7ISxlQi1cQ12zXS92NL3lRmoDc3 FeYEeBVf3f1WPa6BWRvRCeXeWYvqALTmf/5Fib3Ot5ZMMJ8e3toSoPenEhk6nYob JJPepKHvzkIOs76zeUBfo0Rt7CxasimfpLfXwKa0c+7UL12nvHIN+fh3T+ZNXhqT SLtyyEHwGssdj5Eh4JDfVdRQFNdDdbkkyIJSQluw5fLbch1BRqqRAqaTMhI/B4Ip XaWynriY4HUG9sORaT9vZrLlKy8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSrKkVe Uu4lS+m12Hpj1hGfO3iq1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oykwDQYJKoZIhvcNAQELBQADggEBABqejS6eITMZuexK4IsFGH+LCa/RBZ8lTLpk UhCS5KcmbuyHzV+K0elWA8gzzgx7cgGQ4fKiauELnAGUbcnQIKcDm8yEGES+l6Lm aACF8AK3bhTB66qf/RHY0qsCxIEr5kXoDYWsZEoAhnz6Ja3L9vge2uRudLSQeUge riJfNy7jLE4qlAd2uX38bdi/t1+/LRALIWcBkjoj6alapwHApY6W3/DiUIXPvzk8 2zHmolXOLp4dc9GB7fl2vv5h9sn9jXcX7nrgji6cGaQly3Q15m7phcgzFMiUtBJp iej89NCT28i5UyBW+em1DLTsBwjj952bUgqAMNc9eZmQFoApFHs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:32 2026 by rpki-client