$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143498.roa File: AS143498.roa (raw, json) Hash identifier: 1zNPyNk0J45xkIs5LoQvlPJtqLXIOwROkr2rd5PBpFc= Subject key identifier: B0:62:A4:38:98:87:8B:C2:26:FD:BB:06:80:99:D4:70:E1:53:7B:EE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3630CC3EAF4D0E6DBDD011651B952B5426B4275A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143498.roa Signing time: Wed 04 Mar 2026 06:06:00 +0000 ROA not before: Wed 04 Mar 2026 06:01:00 +0000 ROA not after: Wed 03 Mar 2027 06:06:00 +0000 asID: 143498 IP address blocks: 240a:a350::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:30:cc:3e:af:4d:0e:6d:bd:d0:11:65:1b:95:2b:54:26:b4:27:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:00 2026 GMT Not After : Mar 3 06:06:00 2027 GMT Subject: CN=B062A43898878BC226FDBB068099D470E1537BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:78:f6:9c:e8:18:fe:ff:95:ee:c0:31:21: f2:37:5c:10:c0:65:19:3e:71:60:a1:da:4d:a4:c8: 93:66:ef:99:40:7e:9d:b2:98:ff:7a:4f:6f:25:39: 2c:19:0e:a5:74:fe:ab:11:52:f7:47:de:a8:8b:04: 06:aa:c4:b4:de:5d:14:20:15:c3:9c:c4:94:11:38: aa:1f:a9:43:da:32:84:0f:7e:bf:95:5b:ce:68:cb: 3e:2d:ad:96:93:87:fe:dc:d9:4a:b6:ee:dc:83:b7: 80:e0:a1:46:9e:89:66:69:26:e0:20:fe:ae:55:28: 2a:78:93:63:b4:c0:5a:4a:cf:ed:ad:f7:d5:c9:4e: 73:cc:a5:17:e3:b1:28:92:90:b7:07:bb:6c:b6:cb: e9:c0:0c:0e:6e:cb:3a:61:6b:36:67:a7:a0:35:73: fc:e4:da:6e:f1:1f:9a:b1:99:8c:0c:c5:2b:db:09: cf:0c:b0:59:75:b2:07:87:24:80:26:00:98:ca:6f: cc:03:19:1c:d9:f8:83:43:2f:69:a3:99:60:10:ff: a5:8b:d4:8c:e3:49:2a:ef:2e:df:d2:cf:73:20:d6: 27:92:71:49:31:a1:e4:8d:0c:c5:00:80:51:01:dd: 1c:8f:44:8f:88:cb:aa:63:36:9a:71:dd:f2:a0:1f: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:62:A4:38:98:87:8B:C2:26:FD:BB:06:80:99:D4:70:E1:53:7B:EE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143498.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a350::/32 Signature Algorithm: sha256WithRSAEncryption 10:d7:88:cd:45:7b:54:bc:f1:af:15:65:9a:ce:4a:72:55:1f: ec:3b:83:e2:85:98:bd:af:be:fb:ec:c3:38:05:1f:e7:38:c6: 46:f4:0b:19:f7:94:3c:17:29:e0:fa:97:9d:14:84:86:2f:8f: 9f:59:11:96:98:01:96:8d:19:00:e7:e2:c1:90:36:2d:dd:b1: 7f:65:96:f7:a3:46:eb:df:0b:c1:ee:f6:09:5c:5e:cc:b9:d3: af:bb:f4:f0:81:09:9e:6e:03:2c:a4:4d:6d:58:6a:05:d1:83: af:96:74:25:44:85:da:6a:32:6c:a5:5c:a1:a9:2f:df:95:49: 38:17:ba:0b:3b:f2:cc:9c:c7:0e:75:5e:81:3f:f6:be:44:6f: a9:91:3e:56:a4:fa:63:18:e1:9c:fc:ba:cb:44:d6:cb:6a:0a: af:2a:a1:8a:14:87:d0:ca:43:09:2c:fe:13:7e:81:c1:c1:df: 84:16:e4:37:03:ad:ec:72:ea:8d:65:af:8a:85:84:84:69:dc: ea:9c:48:57:dd:07:02:c5:fd:39:56:73:f1:c6:94:f2:db:c6: fa:a5:4a:85:1c:2b:7e:0c:5d:51:a1:5d:b5:d3:58:ef:17:46: e9:7e:a8:dc:8b:b7:a6:04:91:dc:e2:de:e8:b8:16:8a:3c:84: 09:a0:a2:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNjDMPq9NDm290BFlG5UrVCa0J1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwMFoX DTI3MDMwMzA2MDYwMFowMzExMC8GA1UEAxMoQjA2MkE0Mzg5ODg3OEJDMjI2RkRC QjA2ODA5OUQ0NzBFMTUzN0JFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsSePac6Bj+/5XuwDEh8jdcEMBlGT5xYKHaTaTIk2bvmUB+nbKY/3pPbyU5 LBkOpXT+qxFS90feqIsEBqrEtN5dFCAVw5zElBE4qh+pQ9oyhA9+v5VbzmjLPi2t lpOH/tzZSrbu3IO3gOChRp6JZmkm4CD+rlUoKniTY7TAWkrP7a331clOc8ylF+Ox KJKQtwe7bLbL6cAMDm7LOmFrNmenoDVz/OTabvEfmrGZjAzFK9sJzwywWXWyB4ck gCYAmMpvzAMZHNn4g0MvaaOZYBD/pYvUjONJKu8u39LPcyDWJ5JxSTGh5I0MxQCA UQHdHI9Ej4jLqmM2mnHd8qAfq50CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSwYqQ4 mIeLwib9uwaAmdRw4VN77jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o1AwDQYJKoZIhvcNAQELBQADggEBABDXiM1Fe1S88a8VZZrOSnJVH+w7g+KFmL2v vvvswzgFH+c4xkb0Cxn3lDwXKeD6l50UhIYvj59ZEZaYAZaNGQDn4sGQNi3dsX9l lvejRuvfC8Hu9glcXsy506+79PCBCZ5uAyykTW1YagXRg6+WdCVEhdpqMmylXKGp L9+VSTgXugs78sycxw51XoE/9r5Eb6mRPlak+mMY4Zz8ustE1stqCq8qoYoUh9DK Qwks/hN+gcHB34QW5DcDrexy6o1lr4qFhIRp3OqcSFfdBwLF/TlWc/HGlPLbxvql SoUcK34MXVGhXbXTWO8XRul+qNyLt6YEkdzi3ui4Foo8hAmgokw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:04 2026 by rpki-client