$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143482.roa File: AS143482.roa (raw, json) Hash identifier: H/I4zbXp1lN4xw+QLlkngmXXZT1ids+ClV/XVxsvays= Subject key identifier: 7D:AC:D1:5F:ED:EE:B5:B1:2F:F9:FE:63:A8:F6:AB:68:7B:D6:79:EB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1C5BCEC40E297E2804EA20F2A3CAA44F35AE0B40 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143482.roa Signing time: Wed 04 Mar 2026 06:06:23 +0000 ROA not before: Wed 04 Mar 2026 06:01:23 +0000 ROA not after: Wed 03 Mar 2027 06:06:23 +0000 asID: 143482 IP address blocks: 240a:a340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5b:ce:c4:0e:29:7e:28:04:ea:20:f2:a3:ca:a4:4f:35:ae:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:23 2026 GMT Not After : Mar 3 06:06:23 2027 GMT Subject: CN=7DACD15FEDEEB5B12FF9FE63A8F6AB687BD679EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:b2:f5:26:80:34:41:d6:94:4a:81:2e:97: 54:96:20:a8:71:f7:fe:13:75:74:49:5d:8e:a1:aa: 77:8d:d4:5b:53:f4:a5:1b:df:14:92:5a:6b:07:df: 14:c9:13:05:ab:ec:49:d8:1d:76:f1:93:92:a0:1b: ee:4c:b4:e1:ad:ea:ad:b9:29:c3:df:9e:9e:06:87: 2b:ba:d9:49:ba:0b:2a:0a:c3:a7:3c:87:fb:cf:41: e9:19:42:aa:51:b4:48:ec:ea:6c:dd:28:d3:2a:99: 1e:96:11:be:ad:d0:02:72:d5:9f:15:3c:be:b5:fd: bb:64:4a:16:ac:30:bc:42:25:74:76:d4:96:06:e2: 8d:ae:1c:cd:cf:51:6a:98:d8:5d:3a:39:4f:34:66: 71:69:b6:d6:cd:4a:66:eb:20:95:e5:07:55:6d:96: 40:c7:92:2a:62:1b:a7:86:17:48:dd:aa:f0:66:db: fc:51:81:d4:ff:d4:82:d9:30:93:87:c0:a3:13:71: b6:c2:09:62:0e:61:ee:84:d1:72:2c:25:31:97:69: 56:db:e5:4b:54:67:bf:7c:14:13:c4:c3:0c:87:16: 0a:af:5f:ca:ea:d5:39:c2:0f:ce:7d:60:40:17:2a: 00:10:04:42:ce:4a:4b:ba:29:bf:f5:9f:16:12:6b: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AC:D1:5F:ED:EE:B5:B1:2F:F9:FE:63:A8:F6:AB:68:7B:D6:79:EB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143482.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a340::/32 Signature Algorithm: sha256WithRSAEncryption b4:8c:44:84:82:3f:eb:88:5d:52:fe:fb:20:d3:68:b8:b4:c9: bb:b2:e2:06:3b:18:4a:6a:eb:6c:ad:62:68:ce:5a:fd:da:42: 36:13:24:8f:4d:41:94:55:34:2c:88:87:9e:47:c7:89:76:8b: 11:c1:70:46:d8:6a:2f:72:37:5f:33:6f:d0:41:b6:7d:f1:cf: e7:a0:f3:7c:18:91:a7:8c:cc:f8:e6:2d:ab:19:43:bb:fb:a0: 29:6f:46:7d:cb:7f:ba:14:00:dd:0e:6f:1a:40:e5:d2:d2:9e: f5:fd:45:18:76:f1:2b:98:9f:1b:62:22:ba:2b:c2:f7:51:5e: ac:67:98:7f:c9:0a:12:d9:e1:50:97:94:ff:36:ba:a5:11:d0: 01:d5:73:41:1a:43:dd:a5:cd:d1:89:b8:04:93:49:b3:44:34: 15:1a:15:ba:3c:69:e8:c8:d4:0a:1c:41:a3:aa:f5:7b:ff:4b: f7:17:4d:02:2e:f8:21:87:f4:39:5d:27:e5:8b:c9:4b:aa:a8: 07:e0:01:57:64:70:8b:13:de:98:66:17:1e:e4:22:e5:99:5d: d2:6d:31:30:76:fb:ba:42:bb:cd:62:7b:60:8f:2b:6e:67:02: ad:62:78:6b:a5:e9:97:39:e3:ee:42:b2:32:fe:76:ad:0c:66: fe:4c:42:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHFvOxA4pfigE6iDyo8qkTzWuC0AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyM1oX DTI3MDMwMzA2MDYyM1owMzExMC8GA1UEAxMoN0RBQ0QxNUZFREVFQjVCMTJGRjlG RTYzQThGNkFCNjg3QkQ2NzlFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANV3svUmgDRB1pRKgS6XVJYgqHH3/hN1dEldjqGqd43UW1P0pRvfFJJaawff FMkTBavsSdgddvGTkqAb7ky04a3qrbkpw9+engaHK7rZSboLKgrDpzyH+89B6RlC qlG0SOzqbN0o0yqZHpYRvq3QAnLVnxU8vrX9u2RKFqwwvEIldHbUlgbija4czc9R apjYXTo5TzRmcWm21s1KZusgleUHVW2WQMeSKmIbp4YXSN2q8Gbb/FGB1P/Ugtkw k4fAoxNxtsIJYg5h7oTRciwlMZdpVtvlS1Rnv3wUE8TDDIcWCq9fyurVOcIPzn1g QBcqABAEQs5KS7opv/WfFhJrfEkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR9rNFf 7e61sS/5/mOo9qtoe9Z56zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o0AwDQYJKoZIhvcNAQELBQADggEBALSMRISCP+uIXVL++yDTaLi0ybuy4gY7GEpq 62ytYmjOWv3aQjYTJI9NQZRVNCyIh55Hx4l2ixHBcEbYai9yN18zb9BBtn3xz+eg 83wYkaeMzPjmLasZQ7v7oClvRn3Lf7oUAN0ObxpA5dLSnvX9RRh28SuYnxtiIror wvdRXqxnmH/JChLZ4VCXlP82uqUR0AHVc0EaQ92lzdGJuASTSbNENBUaFbo8aejI 1AocQaOq9Xv/S/cXTQIu+CGH9DldJ+WLyUuqqAfgAVdkcIsT3phmFx7kIuWZXdJt MTB2+7pCu81ie2CPK25nAq1ieGul6Zc54+5CsjL+dq0MZv5MQhY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:09 2026 by rpki-client