$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143478.roa File: AS143478.roa (raw, json) Hash identifier: VjSi7l0E59HqGXFZvOD+z57e1JAqRaBC91SB18Th6bw= Subject key identifier: 38:B7:6E:06:81:D9:80:E4:AB:A5:B4:99:6C:7C:C5:A1:8F:D7:80:35 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 065A6A6030CD28BF9055E2EF8442C5C2F4F58165 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143478.roa Signing time: Wed 04 Mar 2026 06:07:12 +0000 ROA not before: Wed 04 Mar 2026 06:02:12 +0000 ROA not after: Wed 03 Mar 2027 06:07:12 +0000 asID: 143478 IP address blocks: 240a:a33c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5a:6a:60:30:cd:28:bf:90:55:e2:ef:84:42:c5:c2:f4:f5:81:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:12 2026 GMT Not After : Mar 3 06:07:12 2027 GMT Subject: CN=38B76E0681D980E4ABA5B4996C7CC5A18FD78035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:2a:04:c0:2c:a4:32:57:55:75:f7:67:26: 10:9b:8a:e9:ee:6b:b6:db:27:f5:cc:3d:0a:2d:19: ec:40:d4:db:91:40:63:14:79:f1:0e:0f:8f:a1:6e: 2e:5d:db:96:90:fb:65:bd:c1:ad:c3:99:4d:87:42: 12:61:6b:7d:5c:ad:9a:43:09:9c:b0:a5:0a:15:48: 1a:6d:17:dd:26:a6:68:4b:fc:e7:b1:8b:93:f5:17: 2f:29:3b:74:35:6c:9f:91:fb:2c:13:69:37:d2:ee: 48:70:89:85:56:63:c8:39:cc:03:f2:a5:e2:c4:18: 6a:54:94:8f:26:aa:6c:1e:5e:52:66:0b:fa:f8:64: 7c:90:a8:34:77:8f:98:8e:85:52:17:60:fa:b6:d9: ec:bd:3c:6d:97:68:72:73:e7:f4:6b:37:0f:e0:a2: b7:e6:c6:0c:43:0b:32:a7:a9:4e:b4:57:df:0f:fb: dc:42:cd:a0:ae:80:b1:c3:ac:4b:0e:77:4a:3b:84: 96:5a:61:87:8f:ab:61:4b:b6:c0:9b:10:91:56:48: 60:66:58:5a:c6:3e:7d:11:0d:6b:56:8e:10:6c:8d: 35:91:c0:12:b6:a0:49:98:ca:fc:8c:04:72:02:88: 1d:a1:dc:79:13:90:f4:11:37:dc:99:9e:a3:df:32: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B7:6E:06:81:D9:80:E4:AB:A5:B4:99:6C:7C:C5:A1:8F:D7:80:35 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143478.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a33c::/32 Signature Algorithm: sha256WithRSAEncryption 79:85:34:c4:c4:e9:2e:36:df:28:64:28:4f:1f:72:1a:71:a3: fb:20:ea:69:a8:95:3e:da:1e:a9:43:a2:7f:ae:67:6e:30:4b: f8:9e:c8:84:6c:2a:3f:1b:39:8a:39:54:27:3f:d6:35:99:3c: e7:b4:17:3b:40:23:ec:0c:e2:27:14:a5:84:61:ab:c9:8f:1d: db:a6:93:ce:e7:10:9a:ae:56:95:3f:98:b7:f3:6b:f3:4b:55: 2a:ea:83:8f:66:5a:c9:ae:50:86:9f:77:5f:21:22:66:d7:25: 4a:cd:d2:39:dd:ea:6d:82:1e:56:70:91:88:d4:d5:ab:32:77: 1d:ff:92:74:57:1a:49:7f:61:fe:69:74:6b:3e:1d:1a:60:66: 2d:86:7f:e9:6a:b1:e3:6f:c5:c0:c3:b8:26:be:bf:43:23:cf: 1e:89:04:81:f0:ec:16:f3:cb:64:f7:d3:82:e3:64:93:74:38: 7e:c5:50:5d:1a:f9:0d:50:97:7e:f9:72:b1:21:9a:22:c0:f5: 8f:1b:d5:c9:c1:d2:27:63:d2:9b:78:dc:b7:b3:07:fe:ae:9a: 8a:78:85:f6:cc:85:2b:b8:84:2e:24:a5:26:83:a8:d8:5d:e6: 8c:b0:a2:b6:8a:85:1f:26:3e:34:0c:96:65:71:05:48:85:51: 0a:82:6c:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBlpqYDDNKL+QVeLvhELFwvT1gWUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxMloX DTI3MDMwMzA2MDcxMlowMzExMC8GA1UEAxMoMzhCNzZFMDY4MUQ5ODBFNEFCQTVC NDk5NkM3Q0M1QTE4RkQ3ODAzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMACKgTALKQyV1V192cmEJuK6e5rttsn9cw9Ci0Z7EDU25FAYxR58Q4Pj6Fu Ll3blpD7Zb3BrcOZTYdCEmFrfVytmkMJnLClChVIGm0X3SamaEv857GLk/UXLyk7 dDVsn5H7LBNpN9LuSHCJhVZjyDnMA/Kl4sQYalSUjyaqbB5eUmYL+vhkfJCoNHeP mI6FUhdg+rbZ7L08bZdocnPn9Gs3D+Cit+bGDEMLMqepTrRX3w/73ELNoK6AscOs Sw53SjuEllphh4+rYUu2wJsQkVZIYGZYWsY+fRENa1aOEGyNNZHAEragSZjK/IwE cgKIHaHceROQ9BE33Jmeo98yfxkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ4t24G gdmA5KultJlsfMWhj9eANTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ozwwDQYJKoZIhvcNAQELBQADggEBAHmFNMTE6S423yhkKE8fchpxo/sg6mmolT7a HqlDon+uZ24wS/ieyIRsKj8bOYo5VCc/1jWZPOe0FztAI+wM4icUpYRhq8mPHdum k87nEJquVpU/mLfza/NLVSrqg49mWsmuUIafd18hImbXJUrN0jnd6m2CHlZwkYjU 1asydx3/knRXGkl/Yf5pdGs+HRpgZi2Gf+lqseNvxcDDuCa+v0Mjzx6JBIHw7Bbz y2T304LjZJN0OH7FUF0a+Q1Ql375crEhmiLA9Y8b1cnB0idj0pt43LezB/6umop4 hfbMhSu4hC4kpSaDqNhd5oyworaKhR8mPjQMlmVxBUiFUQqCbBw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:38 2026 by rpki-client