$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143490.roa File: AS143490.roa (raw, json) Hash identifier: 7u1Nz5SuH2i6hgxMHlMb2PG0rRsvPppa8Cb5AXLLctQ= Subject key identifier: 49:ED:68:DD:68:77:C2:05:8F:8F:52:C9:35:A7:DF:4B:D1:D6:C2:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08B84AC6449BFBC54C2654566528FFF626335AFD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143490.roa Signing time: Wed 04 Mar 2026 06:07:06 +0000 ROA not before: Wed 04 Mar 2026 06:02:06 +0000 ROA not after: Wed 03 Mar 2027 06:07:06 +0000 asID: 143490 IP address blocks: 240a:a348::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b8:4a:c6:44:9b:fb:c5:4c:26:54:56:65:28:ff:f6:26:33:5a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:06 2026 GMT Not After : Mar 3 06:07:06 2027 GMT Subject: CN=49ED68DD6877C2058F8F52C935A7DF4BD1D6C24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:86:7b:c2:fc:45:d0:f6:0e:22:9d:a0:2b:09: cd:91:dc:6f:96:2b:a8:75:aa:63:ed:20:30:a1:e2: de:bb:d6:dc:9d:6f:9b:90:22:2e:05:56:ef:15:b8: 78:c8:37:92:6f:65:41:ee:08:a7:87:06:a3:1c:e3: e4:9d:97:c1:f0:83:31:13:39:41:d4:25:2f:72:56: 6b:f5:f6:4f:2a:c9:9f:3a:89:90:ab:64:42:e1:4c: f7:55:1c:7d:39:8b:02:e2:82:cb:1c:13:4e:06:69: 24:5c:60:ae:5e:ac:9e:ff:38:50:51:f8:4a:6f:e9: 15:59:ad:6a:e5:9d:82:c7:7f:2e:85:07:88:d7:9f: f9:49:52:5c:10:83:ca:a1:0c:5e:47:fd:4f:dc:40: 7a:83:c6:b6:6e:e2:97:55:80:82:e5:a9:7e:f6:3e: 12:0f:0c:c0:4f:cb:98:3a:6f:61:4f:74:ed:ba:91: 33:05:d4:2c:45:8a:85:90:61:4c:5d:65:56:f5:ab: bc:34:b6:31:61:3c:62:56:b0:24:2f:54:45:3c:4c: 33:b1:74:25:c7:7b:9e:de:09:48:7b:08:1e:8e:2c: cf:1d:35:8c:94:74:d2:0a:56:28:e7:cf:61:32:d1: 06:62:fb:be:2d:ea:d5:8d:36:57:05:6c:92:a6:3e: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:ED:68:DD:68:77:C2:05:8F:8F:52:C9:35:A7:DF:4B:D1:D6:C2:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143490.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a348::/32 Signature Algorithm: sha256WithRSAEncryption 50:75:ad:eb:f3:3c:d4:10:0a:42:f4:bf:69:e4:02:63:de:d0: ab:f1:b4:6a:f3:8c:98:60:98:30:44:3b:d6:c1:43:ca:e1:62: f0:15:77:44:36:37:3a:8c:d6:db:bb:42:4b:61:31:a0:05:fa: c0:4c:e2:e3:0a:d0:dd:f8:6f:51:a1:5d:5d:59:7e:8b:f0:f8: 98:43:34:a2:95:6a:a1:ae:23:68:5f:d8:43:33:34:5a:71:82: 6d:66:3d:bf:b9:a8:f7:3f:a9:0f:c8:94:4f:b7:4e:9f:05:ca: bd:c4:21:6b:4a:9a:70:6b:34:4e:3a:36:b5:87:b5:51:a9:c6: 85:58:39:40:ff:93:bf:45:05:b2:65:8d:72:98:60:24:e2:fc: 6d:3c:ba:7a:a3:ea:d5:96:39:92:84:8c:11:3c:ec:6f:8e:31: 2a:76:f2:43:ba:83:65:d6:8c:cb:c0:33:76:fc:42:be:81:61: dd:43:5c:cb:1a:9f:fa:4b:e0:73:34:d3:4c:42:22:f2:48:24: ed:e7:bb:89:8f:07:b7:6b:36:cc:86:c5:1f:d1:05:17:bd:91: 5e:fd:8e:6c:69:d7:dd:94:f4:bd:a0:3b:78:a9:09:c2:7d:fb: 33:64:f9:7e:bf:7e:75:4c:5b:d2:06:34:92:e9:7d:79:72:25: c6:62:8e:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCLhKxkSb+8VMJlRWZSj/9iYzWv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwNloX DTI3MDMwMzA2MDcwNlowMzExMC8GA1UEAxMoNDlFRDY4REQ2ODc3QzIwNThGOEY1 MkM5MzVBN0RGNEJEMUQ2QzI0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2Ge8L8RdD2DiKdoCsJzZHcb5YrqHWqY+0gMKHi3rvW3J1vm5AiLgVW7xW4 eMg3km9lQe4Ip4cGoxzj5J2XwfCDMRM5QdQlL3JWa/X2TyrJnzqJkKtkQuFM91Uc fTmLAuKCyxwTTgZpJFxgrl6snv84UFH4Sm/pFVmtauWdgsd/LoUHiNef+UlSXBCD yqEMXkf9T9xAeoPGtm7il1WAguWpfvY+Eg8MwE/LmDpvYU907bqRMwXULEWKhZBh TF1lVvWrvDS2MWE8YlawJC9URTxMM7F0Jcd7nt4JSHsIHo4szx01jJR00gpWKOfP YTLRBmL7vi3q1Y02VwVskqY+MXMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRJ7Wjd aHfCBY+PUsk1p99L0dbCSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o0gwDQYJKoZIhvcNAQELBQADggEBAFB1revzPNQQCkL0v2nkAmPe0KvxtGrzjJhg mDBEO9bBQ8rhYvAVd0Q2NzqM1tu7QkthMaAF+sBM4uMK0N34b1GhXV1Zfovw+JhD NKKVaqGuI2hf2EMzNFpxgm1mPb+5qPc/qQ/IlE+3Tp8Fyr3EIWtKmnBrNE46NrWH tVGpxoVYOUD/k79FBbJljXKYYCTi/G08unqj6tWWOZKEjBE87G+OMSp28kO6g2XW jMvAM3b8Qr6BYd1DXMsan/pL4HM000xCIvJIJO3nu4mPB7drNsyGxR/RBRe9kV79 jmxp192U9L2gO3ipCcJ9+zNk+X6/fnVMW9IGNJLpfXlyJcZijmw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:25 2026 by rpki-client