$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143485.roa File: AS143485.roa (raw, json) Hash identifier: DpUrPZlPT6tdsHofiENXuzWGh/FZFzTVxcCB9Y84utA= Subject key identifier: 05:7C:49:23:7B:EB:BD:04:6C:BE:33:57:51:89:96:49:D0:4B:B4:A9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 095C94B0389EB1AA5C970692C12C53F26CC41968 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143485.roa Signing time: Wed 04 Mar 2026 06:06:05 +0000 ROA not before: Wed 04 Mar 2026 06:01:05 +0000 ROA not after: Wed 03 Mar 2027 06:06:05 +0000 asID: 143485 IP address blocks: 240a:a343::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5c:94:b0:38:9e:b1:aa:5c:97:06:92:c1:2c:53:f2:6c:c4:19:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:05 2026 GMT Not After : Mar 3 06:06:05 2027 GMT Subject: CN=057C49237BEBBD046CBE335751899649D04BB4A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:52:3f:07:e0:45:20:ad:96:56:17:18:dd:44: e3:df:10:45:c3:0a:f2:5b:b1:32:50:91:75:95:17: 4a:5f:21:c5:d7:c4:3e:58:04:2b:60:80:c1:6e:9c: 3c:6b:02:2c:e9:48:ce:c3:90:4d:ee:15:86:5c:fb: 44:3c:f5:64:ed:d1:05:7b:7e:5b:f5:32:85:b4:6f: d2:43:2f:61:4b:17:de:63:e9:e9:59:e4:90:2d:c3: 57:87:60:09:3e:5c:7e:50:89:fe:c8:66:4e:73:98: 6b:89:9b:92:20:51:e6:41:bb:c1:d2:9d:f9:b8:7b: 05:a6:84:46:48:bb:9e:33:1d:c6:2c:fe:5c:50:96: 2f:d6:2e:39:b2:70:96:cc:33:bd:57:e3:87:06:12: 77:df:58:f1:15:ff:25:a5:06:d4:62:4d:83:98:10: 6e:cf:fa:12:ac:f9:80:c1:a7:91:4f:17:8d:cb:a1: dd:93:ae:d4:29:d7:af:0c:20:4c:3d:66:76:7e:fe: 74:72:35:44:2a:d8:dc:87:e4:a9:ca:62:e5:8d:b9: c0:88:c4:b4:9b:0a:32:bb:7a:b2:5c:c8:18:09:0d: ea:83:c3:cf:41:5d:3c:03:52:c5:53:f1:b9:7f:c6: 14:7a:64:a2:1c:71:56:3a:60:b6:ca:72:de:d5:25: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7C:49:23:7B:EB:BD:04:6C:BE:33:57:51:89:96:49:D0:4B:B4:A9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143485.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a343::/32 Signature Algorithm: sha256WithRSAEncryption 26:d6:f6:9d:52:b1:4c:72:e8:db:ad:dc:63:d1:96:c2:4b:01: 39:d8:d7:5a:ec:fc:a2:6b:df:af:c2:74:ba:d8:c7:a3:ec:9e: 1e:9b:39:ee:64:8e:04:fb:3c:10:55:ec:83:99:25:88:30:a8: 21:2a:e8:1b:f4:87:6c:ee:e6:53:e8:57:b9:3a:74:9b:89:32: 9d:b0:55:b9:5d:40:e0:75:d4:e6:74:b2:b0:3a:fb:75:19:79: 77:1f:1e:f3:67:ea:b9:d7:0b:5c:23:e0:94:db:24:87:f5:b2: 64:8e:45:be:94:37:77:ba:92:a2:1b:43:93:c7:01:86:be:d8: 5f:f2:52:34:27:82:26:87:b5:c9:fd:8d:77:b5:73:8e:af:36: 85:50:c1:30:e5:35:f4:0c:38:6c:b7:cb:3a:43:be:0e:dc:96: e6:e2:9b:15:c5:f9:9b:92:2d:65:b7:7d:c2:9e:cd:7e:73:c5: 91:74:4b:e6:9a:c9:28:7c:84:aa:08:7e:18:87:03:0f:a6:d2: 51:99:fd:9c:12:fc:e4:c1:a1:1f:ae:d2:0f:d6:df:3c:a1:4c: bb:c4:48:e3:ab:d9:6b:49:bf:05:a4:c5:47:ca:fa:44:0f:ba: c9:4c:7d:cf:23:7d:08:32:26:41:39:b2:f5:d7:b4:40:0b:5c: d7:81:73:57 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCVyUsDiesapclwaSwSxT8mzEGWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwNVoX DTI3MDMwMzA2MDYwNVowMzExMC8GA1UEAxMoMDU3QzQ5MjM3QkVCQkQwNDZDQkUz MzU3NTE4OTk2NDlEMDRCQjRBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtSPwfgRSCtllYXGN1E498QRcMK8luxMlCRdZUXSl8hxdfEPlgEK2CAwW6c PGsCLOlIzsOQTe4Vhlz7RDz1ZO3RBXt+W/UyhbRv0kMvYUsX3mPp6VnkkC3DV4dg CT5cflCJ/shmTnOYa4mbkiBR5kG7wdKd+bh7BaaERki7njMdxiz+XFCWL9YuObJw lswzvVfjhwYSd99Y8RX/JaUG1GJNg5gQbs/6Eqz5gMGnkU8Xjcuh3ZOu1CnXrwwg TD1mdn7+dHI1RCrY3Ifkqcpi5Y25wIjEtJsKMrt6slzIGAkN6oPDz0FdPANSxVPx uX/GFHpkohxxVjpgtspy3tUlx0cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQFfEkj e+u9BGy+M1dRiZZJ0Eu0qTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o0MwDQYJKoZIhvcNAQELBQADggEBACbW9p1SsUxy6Nut3GPRlsJLATnY11rs/KJr 36/CdLrYx6Psnh6bOe5kjgT7PBBV7IOZJYgwqCEq6Bv0h2zu5lPoV7k6dJuJMp2w VbldQOB11OZ0srA6+3UZeXcfHvNn6rnXC1wj4JTbJIf1smSORb6UN3e6kqIbQ5PH AYa+2F/yUjQngiaHtcn9jXe1c46vNoVQwTDlNfQMOGy3yzpDvg7clubimxXF+ZuS LWW3fcKezX5zxZF0S+aaySh8hKoIfhiHAw+m0lGZ/ZwS/OTBoR+u0g/W3zyhTLvE SOOr2WtJvwWkxUfK+kQPuslMfc8jfQgyJkE5svXXtEALXNeBc1c= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:46 2026 by rpki-client