$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143504.roa File: AS143504.roa (raw, json) Hash identifier: oBqiBpMHSf7Ynbo1SDpDwlwLaiwo2X4PE/yuhCklKFQ= Subject key identifier: 0A:28:56:55:98:0C:C5:A4:A7:27:6E:18:8C:CA:5E:EF:29:EE:14:DB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 53CFA6A3B23538FF0A7E99CE245F3532107A7FE5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143504.roa Signing time: Wed 04 Mar 2026 06:06:28 +0000 ROA not before: Wed 04 Mar 2026 06:01:28 +0000 ROA not after: Wed 03 Mar 2027 06:06:28 +0000 asID: 143504 IP address blocks: 240a:a356::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cf:a6:a3:b2:35:38:ff:0a:7e:99:ce:24:5f:35:32:10:7a:7f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:28 2026 GMT Not After : Mar 3 06:06:28 2027 GMT Subject: CN=0A285655980CC5A4A7276E188CCA5EEF29EE14DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:17:93:07:de:74:56:b5:42:f5:ca:8c:0d:25: 3a:33:8a:34:06:cc:d5:a7:d9:c9:c1:86:7b:50:92: 12:86:70:0e:7f:93:6c:0e:4f:0c:c8:e9:fe:84:bc: b3:77:d6:ab:4f:be:3e:2d:01:ec:d9:34:c6:13:2a: 50:87:9c:f1:3c:b5:b6:ca:cf:8c:d2:ae:c8:07:03: bb:13:64:a9:e6:51:75:9d:dc:35:b5:0b:17:65:22: 42:dd:5e:56:31:54:4c:ea:2c:39:84:eb:4a:b2:4e: 9e:8f:b3:14:b8:41:6a:a7:7a:0f:c3:e1:b8:7c:96: 3e:7e:48:95:b0:80:78:d8:a6:0b:c8:b7:5d:af:ab: 6c:9e:48:81:99:7b:26:11:82:cb:96:04:22:dc:f3: 3a:17:4d:c6:40:00:4c:bf:7a:75:8f:5b:19:6b:9a: 9c:83:31:4a:87:40:c5:72:87:1c:20:0f:c6:44:3f: 04:6f:7c:aa:58:2a:6e:71:b1:db:af:80:8e:ed:20: e1:ee:6f:18:cd:94:7d:4f:a6:c4:10:19:75:d2:5d: c1:e0:62:eb:78:05:55:ff:9c:e0:bf:d5:85:02:c0: 51:66:2f:49:f3:f2:53:68:ca:ce:ae:86:d8:63:7b: 5d:aa:67:14:95:cb:5f:45:80:aa:f3:0f:34:2d:cb: 23:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:28:56:55:98:0C:C5:A4:A7:27:6E:18:8C:CA:5E:EF:29:EE:14:DB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143504.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a356::/32 Signature Algorithm: sha256WithRSAEncryption 7b:a7:55:0a:92:07:e9:3a:ac:46:26:4e:33:19:42:d3:b9:ff: 0a:61:35:66:e6:28:c6:73:31:ca:9c:01:73:10:25:94:16:3e: d9:af:1c:63:32:dc:71:f3:be:56:01:a4:b3:46:2f:91:30:1f: f2:da:78:53:1d:5b:8e:16:78:06:2a:a5:4f:6a:4a:08:d9:52: 1a:46:8e:32:ae:83:7a:02:4b:3d:25:03:6e:f8:8c:3b:61:07: 86:50:69:14:a9:31:73:d6:dd:f6:3e:e2:4c:f2:92:bd:4e:83: ab:de:31:b0:31:71:0c:77:6c:0b:1c:06:92:e7:59:1d:3c:16: b5:54:8a:c4:e1:79:b7:68:df:3f:b4:e5:bd:26:c8:b1:0a:5d: 98:cd:b1:02:01:dd:35:d8:b9:1e:c9:77:78:9f:b8:ac:4b:68: 10:d8:55:92:4f:3c:1c:11:44:8b:33:32:16:77:02:66:16:5b: 0b:cd:1e:09:8a:cc:98:d0:38:e9:98:b3:cf:a7:79:ad:cd:81: 45:78:48:2b:50:f6:4d:54:63:44:21:c7:07:7c:3e:7d:54:a1: 6d:f9:2f:17:7c:0d:6f:9d:1b:27:84:41:6d:64:2e:52:89:7a: 71:24:f7:29:ed:13:5d:bf:eb:bb:86:88:e5:21:28:6e:6f:0f: b2:7e:7a:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUU8+mo7I1OP8KfpnOJF81MhB6f+UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyOFoX DTI3MDMwMzA2MDYyOFowMzExMC8GA1UEAxMoMEEyODU2NTU5ODBDQzVBNEE3Mjc2 RTE4OENDQTVFRUYyOUVFMTREQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOAXkwfedFa1QvXKjA0lOjOKNAbM1afZycGGe1CSEoZwDn+TbA5PDMjp/oS8 s3fWq0++Pi0B7Nk0xhMqUIec8Ty1tsrPjNKuyAcDuxNkqeZRdZ3cNbULF2UiQt1e VjFUTOosOYTrSrJOno+zFLhBaqd6D8PhuHyWPn5IlbCAeNimC8i3Xa+rbJ5IgZl7 JhGCy5YEItzzOhdNxkAATL96dY9bGWuanIMxSodAxXKHHCAPxkQ/BG98qlgqbnGx 26+Aju0g4e5vGM2UfU+mxBAZddJdweBi63gFVf+c4L/VhQLAUWYvSfPyU2jKzq6G 2GN7XapnFJXLX0WAqvMPNC3LIyMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQKKFZV mAzFpKcnbhiMyl7vKe4U2zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o1YwDQYJKoZIhvcNAQELBQADggEBAHunVQqSB+k6rEYmTjMZQtO5/wphNWbmKMZz McqcAXMQJZQWPtmvHGMy3HHzvlYBpLNGL5EwH/LaeFMdW44WeAYqpU9qSgjZUhpG jjKug3oCSz0lA274jDthB4ZQaRSpMXPW3fY+4kzykr1Og6veMbAxcQx3bAscBpLn WR08FrVUisThebdo3z+05b0myLEKXZjNsQIB3TXYuR7Jd3ifuKxLaBDYVZJPPBwR RIszMhZ3AmYWWwvNHgmKzJjQOOmYs8+nea3NgUV4SCtQ9k1UY0Qhxwd8Pn1UoW35 Lxd8DW+dGyeEQW1kLlKJenEk9yntE12/67uGiOUhKG5vD7J+erQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:46 2026 by rpki-client