$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143462.roa File: AS143462.roa (raw, json) Hash identifier: Y30/O0uQ7v6+P5YA49HDXdwgmC9mt2BVZxTzyLDAbHk= Subject key identifier: 3F:93:A1:89:34:8A:52:D4:43:55:3E:15:F9:34:F5:A9:AF:74:75:A2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0933506D50E007F7FBA8E0D21CFBCCBABDC3B6FC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143462.roa Signing time: Wed 04 Mar 2026 06:05:09 +0000 ROA not before: Wed 04 Mar 2026 06:00:09 +0000 ROA not after: Wed 03 Mar 2027 06:05:09 +0000 asID: 143462 IP address blocks: 240a:a32c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:33:50:6d:50:e0:07:f7:fb:a8:e0:d2:1c:fb:cc:ba:bd:c3:b6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:09 2026 GMT Not After : Mar 3 06:05:09 2027 GMT Subject: CN=3F93A189348A52D443553E15F934F5A9AF7475A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:0c:a6:69:2c:25:ec:96:83:ed:e6:b2:c3: 4f:0f:62:2e:0c:fc:e7:db:30:de:33:e5:e4:7d:0d: 8f:c1:ae:f1:01:82:5d:e7:83:2a:22:7b:72:94:bf: 7d:17:76:8e:bc:96:4f:0e:b9:1b:65:53:bc:5c:35: 53:5d:69:1f:bc:53:c8:7c:b7:f6:44:0f:f4:fc:79: 27:40:95:b0:f6:3f:dd:66:30:8f:15:88:6c:72:7a: 30:56:33:08:98:75:88:58:c5:46:20:6a:8c:44:41: ed:01:87:e6:d6:f6:a5:bd:8f:49:a8:90:e9:f4:a0: a2:92:bf:56:45:ba:d1:15:1a:ef:76:f8:40:b6:e6: ea:1d:62:8a:6b:2a:d9:5f:4f:97:da:6e:54:86:37: 8a:b1:d8:1d:ff:23:93:63:1a:66:97:d9:42:34:69: 20:c5:f4:a9:5b:24:e4:26:94:d7:bc:7e:ae:b3:fe: 40:a7:a8:df:d9:c1:e6:de:69:33:af:02:69:41:28: 0e:c5:88:1a:1d:46:d2:0e:ad:bf:07:63:59:51:78: 7f:2d:d4:62:ee:9d:f1:6c:35:45:f4:b7:fa:8e:b0: 85:5d:84:50:bb:ac:fc:75:3e:c9:ad:83:2e:74:63: 73:6a:d7:9c:26:f6:41:f6:23:22:00:2c:f6:1d:ee: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:93:A1:89:34:8A:52:D4:43:55:3E:15:F9:34:F5:A9:AF:74:75:A2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143462.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a32c::/32 Signature Algorithm: sha256WithRSAEncryption 61:7b:3a:a8:2b:38:4e:3c:15:92:2e:34:79:d9:ca:5d:dd:f6: 64:3c:c1:17:2d:e7:99:df:17:f9:85:c9:1a:1b:70:19:fc:3f: ba:c4:ba:8a:b3:c1:26:ce:ae:dd:de:15:73:b9:76:7c:4e:73: a6:be:f8:b3:02:b6:93:10:54:ab:34:7a:5d:b8:e1:7c:8b:ea: c6:43:73:af:98:3d:32:7e:0a:c3:a0:a7:a8:f3:25:51:7a:0a: 37:55:b9:58:6d:57:1c:b4:03:41:c7:c4:44:e8:de:46:bc:da: 8a:ac:4b:77:75:93:3e:e9:d3:0a:1c:db:17:a6:93:e9:27:33: 03:ec:d8:32:88:98:38:a5:2c:b5:1d:a4:79:5b:b1:6b:b2:a3: 25:d4:e5:c9:0e:19:51:19:8d:16:14:de:60:16:61:8b:35:f6: f6:3f:e1:3b:c8:85:27:b4:54:d3:59:36:65:b5:d3:1a:d0:ad: 78:2c:e1:be:6e:75:c4:20:c5:db:94:4a:c7:7d:44:a2:2c:d5: e6:9a:5e:62:16:ec:a5:a1:8e:ad:45:8d:d2:75:37:85:bb:6a: b1:b7:5b:8b:7a:9c:7f:20:d4:d8:ec:ec:8e:67:81:d7:e2:39: 8b:53:ff:b3:80:86:cf:8a:7b:ca:5f:97:2f:8f:9c:14:bf:aa: 2b:8b:da:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCTNQbVDgB/f7qODSHPvMur3DtvwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAwOVoX DTI3MDMwMzA2MDUwOVowMzExMC8GA1UEAxMoM0Y5M0ExODkzNDhBNTJENDQzNTUz RTE1RjkzNEY1QTlBRjc0NzVBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJjiDKZpLCXsloPt5rLDTw9iLgz859sw3jPl5H0Nj8Gu8QGCXeeDKiJ7cpS/ fRd2jryWTw65G2VTvFw1U11pH7xTyHy39kQP9Px5J0CVsPY/3WYwjxWIbHJ6MFYz CJh1iFjFRiBqjERB7QGH5tb2pb2PSaiQ6fSgopK/VkW60RUa73b4QLbm6h1iimsq 2V9Pl9puVIY3irHYHf8jk2MaZpfZQjRpIMX0qVsk5CaU17x+rrP+QKeo39nB5t5p M68CaUEoDsWIGh1G0g6tvwdjWVF4fy3UYu6d8Ww1RfS3+o6whV2EULus/HU+ya2D LnRjc2rXnCb2QfYjIgAs9h3uocECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ/k6GJ NIpS1ENVPhX5NPWpr3R1ojAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oywwDQYJKoZIhvcNAQELBQADggEBAGF7OqgrOE48FZIuNHnZyl3d9mQ8wRct55nf F/mFyRobcBn8P7rEuoqzwSbOrt3eFXO5dnxOc6a++LMCtpMQVKs0el244XyL6sZD c6+YPTJ+CsOgp6jzJVF6CjdVuVhtVxy0A0HHxETo3ka82oqsS3d1kz7p0woc2xem k+knMwPs2DKImDilLLUdpHlbsWuyoyXU5ckOGVEZjRYU3mAWYYs19vY/4TvIhSe0 VNNZNmW10xrQrXgs4b5udcQgxduUSsd9RKIs1eaaXmIW7KWhjq1FjdJ1N4W7arG3 W4t6nH8g1Njs7I5ngdfiOYtT/7OAhs+Ke8pfly+PnBS/qiuL2v4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:00 2026 by rpki-client