$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143483.roa File: AS143483.roa (raw, json) Hash identifier: 8qJLAdGz9Q3lp2VCk59BrAS8h2ahfoAOmktxJar26n0= Subject key identifier: 2B:4C:35:D9:A7:7A:06:B5:64:7A:A5:58:02:1E:84:64:BF:BF:9B:3C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 227BA31F7D3AEEC471226E8015B05395AE6074FD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143483.roa Signing time: Wed 04 Mar 2026 06:05:23 +0000 ROA not before: Wed 04 Mar 2026 06:00:23 +0000 ROA not after: Wed 03 Mar 2027 06:05:23 +0000 asID: 143483 IP address blocks: 240a:a341::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7b:a3:1f:7d:3a:ee:c4:71:22:6e:80:15:b0:53:95:ae:60:74:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:23 2026 GMT Not After : Mar 3 06:05:23 2027 GMT Subject: CN=2B4C35D9A77A06B5647AA558021E8464BFBF9B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:43:43:4e:b2:d7:f7:6d:e9:23:cf:45:ba: 04:ff:bc:64:67:cd:f9:2f:64:0b:4d:7c:d9:8e:00: 3c:89:2a:3f:c0:f7:30:8d:86:0d:e2:8b:a9:fc:11: 46:de:d6:57:19:89:06:b9:00:df:cc:7d:63:f4:90: 89:b7:22:54:70:d8:df:a1:9b:fb:49:bc:95:48:cc: 64:7c:14:81:77:aa:84:d7:f7:f7:cb:83:17:86:c4: 91:cf:b1:7c:6f:81:97:3a:41:9a:b1:e3:b5:41:19: 95:05:88:cd:5c:45:e9:74:c7:51:47:22:cb:eb:cc: 38:04:98:10:0d:c1:89:58:a4:15:3f:5a:71:e4:53: f6:bc:c9:51:33:6e:87:e2:ea:c2:34:49:e1:21:9e: 78:59:7f:f3:36:cb:ff:69:ff:c9:cc:ea:cf:01:b5: 78:59:dd:40:ff:0f:22:1d:ef:2f:10:b5:b6:f6:9e: 33:5c:24:f8:ba:dd:6e:27:35:0d:71:2b:66:94:5e: fd:c0:7d:db:63:59:00:2f:b7:55:1c:da:82:54:fc: 2a:dd:30:1f:9e:ec:23:56:37:41:38:5b:f0:ce:f9: 39:8a:a9:1b:b2:b9:be:45:51:41:b1:95:f1:ff:9c: 84:ce:6a:2d:fa:5a:11:77:67:96:a0:06:c0:c2:af: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4C:35:D9:A7:7A:06:B5:64:7A:A5:58:02:1E:84:64:BF:BF:9B:3C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a341::/32 Signature Algorithm: sha256WithRSAEncryption 68:a6:cf:72:b0:24:4b:35:ee:84:6d:ef:c5:49:32:36:e2:41: e8:f6:6e:5b:e7:14:3d:26:09:9f:7e:2d:23:56:50:be:17:71: e8:ba:0d:45:96:4d:a1:65:9d:27:56:c6:cf:3a:af:d1:69:91: 0f:cd:fe:bd:70:7c:49:6e:9a:3e:51:77:1d:87:08:88:fb:a7: c1:27:c4:23:15:61:9f:f8:51:51:a0:f3:70:c6:16:06:2d:75: 4f:88:34:06:4d:47:4c:97:9e:67:03:c3:3a:67:10:a9:58:04: 02:6c:cf:0d:9a:5a:2a:b7:f3:a2:d9:c7:58:ea:b7:08:c7:36: cd:11:83:39:d1:24:80:87:9b:8b:7b:6f:fb:c2:98:13:94:7a: 2b:f0:ac:dd:fc:4c:d9:ae:13:2d:df:98:73:0f:0b:1f:c7:7d: e2:f3:a3:fb:42:90:f7:c7:9a:2b:f1:5f:2e:57:80:2c:63:6c: 0a:6e:bd:0c:35:5e:02:29:1b:fa:f9:15:8e:7c:ac:ed:35:6b: 15:11:da:ac:46:25:41:9f:e3:27:8a:02:3e:95:d4:99:67:1e: 27:ee:03:e1:bc:0a:38:ae:03:7d:77:a1:fe:12:2b:c9:e8:9c: 20:56:2f:bc:90:84:82:ad:93:69:cf:6b:6f:af:6b:de:8d:4f: df:62:ab:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUInujH3067sRxIm6AFbBTla5gdP0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyM1oX DTI3MDMwMzA2MDUyM1owMzExMC8GA1UEAxMoMkI0QzM1RDlBNzdBMDZCNTY0N0FB NTU4MDIxRTg0NjRCRkJGOUIzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNxQ0NOstf3bekjz0W6BP+8ZGfN+S9kC0182Y4APIkqP8D3MI2GDeKLqfwR Rt7WVxmJBrkA38x9Y/SQibciVHDY36Gb+0m8lUjMZHwUgXeqhNf398uDF4bEkc+x fG+BlzpBmrHjtUEZlQWIzVxF6XTHUUciy+vMOASYEA3BiVikFT9aceRT9rzJUTNu h+LqwjRJ4SGeeFl/8zbL/2n/yczqzwG1eFndQP8PIh3vLxC1tvaeM1wk+Lrdbic1 DXErZpRe/cB922NZAC+3VRzaglT8Kt0wH57sI1Y3QThb8M75OYqpG7K5vkVRQbGV 8f+chM5qLfpaEXdnlqAGwMKvitUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQrTDXZ p3oGtWR6pVgCHoRkv7+bPDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o0EwDQYJKoZIhvcNAQELBQADggEBAGimz3KwJEs17oRt78VJMjbiQej2blvnFD0m CZ9+LSNWUL4Xcei6DUWWTaFlnSdWxs86r9FpkQ/N/r1wfElumj5Rdx2HCIj7p8En xCMVYZ/4UVGg83DGFgYtdU+INAZNR0yXnmcDwzpnEKlYBAJszw2aWiq386LZx1jq twjHNs0RgznRJICHm4t7b/vCmBOUeivwrN38TNmuEy3fmHMPCx/HfeLzo/tCkPfH mivxXy5XgCxjbApuvQw1XgIpG/r5FY58rO01axUR2qxGJUGf4yeKAj6V1JlnHifu A+G8CjiuA313of4SK8nonCBWL7yQhIKtk2nPa2+va96NT99iqxE= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:37 2026 by rpki-client