$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143461.roa File: AS143461.roa (raw, json) Hash identifier: q8cahRR2d2vlcH8CORvH4DMgpMdaYEiWVFlAtAHY4Cw= Subject key identifier: D7:44:EB:71:08:5D:EE:7A:66:4C:08:F0:A6:8B:10:C7:2B:B3:69:6E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30BF1C08C47ADC0BB755065FD5AF33166A021609 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143461.roa Signing time: Wed 04 Mar 2026 06:06:48 +0000 ROA not before: Wed 04 Mar 2026 06:01:48 +0000 ROA not after: Wed 03 Mar 2027 06:06:48 +0000 asID: 143461 IP address blocks: 240a:a32b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bf:1c:08:c4:7a:dc:0b:b7:55:06:5f:d5:af:33:16:6a:02:16:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:48 2026 GMT Not After : Mar 3 06:06:48 2027 GMT Subject: CN=D744EB71085DEE7A664C08F0A68B10C72BB3696E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6d:2c:90:83:2e:15:c1:fc:c0:79:3c:1c:b7: f8:d0:9e:8b:de:c4:63:2a:05:ab:7c:0c:ba:48:d9: e5:79:f6:8a:14:d2:6b:9c:36:aa:61:f7:65:9b:a3: 7f:32:7e:70:75:d7:a7:e2:c6:9e:9f:3a:e0:16:6e: 63:a9:8a:c6:ae:7b:48:23:9a:b8:99:ca:53:11:22: b8:3b:bb:8f:12:89:80:1a:7c:9c:d5:1a:63:46:30: a4:7e:70:62:d3:50:f3:1f:1a:45:33:7f:b2:51:8a: 53:b9:69:c9:09:18:7e:3f:37:bd:8a:25:79:a3:17: 35:d0:c3:1c:e8:d0:b7:99:19:21:e1:85:ff:10:00: a4:d7:11:f4:7b:a7:57:a1:8c:53:69:c4:0f:4e:db: 80:c9:81:f4:fa:e1:69:22:d7:dc:07:c0:bf:18:6c: 05:2b:53:fb:b9:69:dd:9e:87:56:3c:55:a8:ac:c4: 0b:70:71:22:fc:15:0b:96:8e:62:f5:9f:3d:34:fd: 6e:1e:a8:36:6e:8c:a4:b9:c6:b0:32:1f:3a:c2:a5: 51:1f:71:b9:bc:25:9e:c6:41:62:66:79:8c:95:92: f2:94:eb:cb:e3:59:66:e2:94:c1:f2:de:a6:bc:25: be:25:75:f4:fa:2a:d6:56:2b:bc:b2:4a:00:03:26: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:44:EB:71:08:5D:EE:7A:66:4C:08:F0:A6:8B:10:C7:2B:B3:69:6E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143461.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a32b::/32 Signature Algorithm: sha256WithRSAEncryption 85:8d:2a:51:67:47:91:71:2d:89:9d:de:c2:36:f3:5c:8d:73: 6c:b6:23:72:00:21:95:9d:d7:dd:56:b3:7f:81:8c:77:25:d9: a2:88:25:c1:3d:dd:14:b5:cb:0d:fe:ae:09:f0:1c:ee:bf:22: 9e:85:5a:7e:17:dc:99:a2:b5:f9:44:f8:4c:6c:6b:2e:99:53: 77:ea:f7:fe:dd:47:a9:a1:03:40:ee:43:20:bf:6e:1b:8f:36: f1:0f:25:10:a8:f7:3b:2b:88:57:a2:c8:e6:32:e1:ae:08:93: 4e:53:ef:06:59:e0:89:d8:a5:55:5c:79:ce:2e:25:2f:8e:7a: 49:ec:22:1a:5e:d7:74:70:cf:a1:cf:7a:76:7f:77:80:a1:5c: 04:18:d2:6c:76:d3:99:f9:50:a0:2d:80:c7:af:cd:1d:45:61: f8:c0:30:42:dd:9a:44:0f:cd:15:9e:3e:8a:32:10:87:1b:ea: e4:e4:b0:24:fa:a1:96:d3:a3:c8:36:35:9d:39:de:20:79:40: 36:05:27:ad:44:ea:07:91:ec:43:24:c7:60:0e:ba:e6:68:da: 2d:3e:ef:59:98:b5:58:ff:14:03:ab:37:a7:f6:be:c1:fc:62: 78:1d:97:d9:f4:ca:4e:27:c0:bd:f0:26:40:cd:c9:15:5c:53: 97:97:ee:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUML8cCMR63Au3VQZf1a8zFmoCFgkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0OFoX DTI3MDMwMzA2MDY0OFowMzExMC8GA1UEAxMoRDc0NEVCNzEwODVERUU3QTY2NEMw OEYwQTY4QjEwQzcyQkIzNjk2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhtLJCDLhXB/MB5PBy3+NCei97EYyoFq3wMukjZ5Xn2ihTSa5w2qmH3ZZuj fzJ+cHXXp+LGnp864BZuY6mKxq57SCOauJnKUxEiuDu7jxKJgBp8nNUaY0YwpH5w YtNQ8x8aRTN/slGKU7lpyQkYfj83vYoleaMXNdDDHOjQt5kZIeGF/xAApNcR9Hun V6GMU2nED07bgMmB9PrhaSLX3AfAvxhsBStT+7lp3Z6HVjxVqKzEC3BxIvwVC5aO YvWfPTT9bh6oNm6MpLnGsDIfOsKlUR9xubwlnsZBYmZ5jJWS8pTry+NZZuKUwfLe prwlviV19Poq1lYrvLJKAAMmVHsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTXROtx CF3uemZMCPCmixDHK7NpbjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oyswDQYJKoZIhvcNAQELBQADggEBAIWNKlFnR5FxLYmd3sI281yNc2y2I3IAIZWd 191Ws3+BjHcl2aKIJcE93RS1yw3+rgnwHO6/Ip6FWn4X3JmitflE+Exsay6ZU3fq 9/7dR6mhA0DuQyC/bhuPNvEPJRCo9zsriFeiyOYy4a4Ik05T7wZZ4InYpVVcec4u JS+OeknsIhpe13Rwz6HPenZ/d4ChXAQY0mx205n5UKAtgMevzR1FYfjAMELdmkQP zRWePooyEIcb6uTksCT6oZbTo8g2NZ053iB5QDYFJ61E6geR7EMkx2AOuuZo2i0+ 71mYtVj/FAOrN6f2vsH8Yngdl9n0yk4nwL3wJkDNyRVcU5eX7q8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:48 2026 by rpki-client