$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143505.roa File: AS143505.roa (raw, json) Hash identifier: cSIlj1rq/2XDeoDzmUDMwqlJMxxQub12R/9axfalrc8= Subject key identifier: 77:B5:BD:CD:2D:D9:1F:76:54:98:31:14:18:71:04:30:96:CC:45:74 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5EC834E04346FB3DA27E8D2B62CE71B38954AEDE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143505.roa Signing time: Wed 04 Mar 2026 06:05:11 +0000 ROA not before: Wed 04 Mar 2026 06:00:11 +0000 ROA not after: Wed 03 Mar 2027 06:05:11 +0000 asID: 143505 IP address blocks: 240a:a357::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c8:34:e0:43:46:fb:3d:a2:7e:8d:2b:62:ce:71:b3:89:54:ae:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:11 2026 GMT Not After : Mar 3 06:05:11 2027 GMT Subject: CN=77B5BDCD2DD91F76549831141871043096CC4574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:6b:14:4a:94:9a:2b:a2:c6:65:df:92:ca: 78:43:65:eb:ac:5f:3d:9c:69:d9:e2:46:70:b7:1d: 69:5e:a7:00:35:92:68:23:c3:20:3b:0a:45:78:11: c4:46:7f:03:50:98:ac:57:45:6f:11:6d:84:f4:8c: 15:bc:4a:47:55:68:0a:50:27:ac:f9:0c:41:87:2c: 42:38:58:83:25:7a:c4:c4:b2:15:ea:98:73:52:75: 3c:7a:ea:5c:92:21:b4:06:0f:83:6a:d6:a5:68:9d: f4:24:7d:37:be:6c:57:bc:6e:b0:a2:92:0e:97:e2: 85:a6:3d:60:9b:8c:0e:95:dd:44:45:e9:4c:24:4c: 92:9d:20:6f:fa:54:13:d0:86:1f:39:2a:95:7c:93: a7:20:d5:53:7b:b0:5d:3d:29:0c:73:98:68:db:be: e9:8b:4a:93:8c:e3:18:e6:d4:de:1e:79:0e:ec:1a: b0:61:34:df:53:b2:5e:37:33:7b:3d:d4:4e:ee:55: 69:72:8a:8e:a8:10:0a:0b:cd:72:15:2b:d6:b4:ba: 88:26:5a:ab:88:d2:58:6a:e8:af:9d:df:3b:69:b3: de:43:71:51:5c:d1:d4:36:df:d7:c0:52:2f:21:4d: 0a:23:d1:82:38:7d:d5:98:61:1c:cd:39:6c:8a:ef: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B5:BD:CD:2D:D9:1F:76:54:98:31:14:18:71:04:30:96:CC:45:74 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143505.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a357::/32 Signature Algorithm: sha256WithRSAEncryption 68:d1:ae:0f:4c:36:75:97:22:6d:d3:43:18:8e:01:e6:a7:59: 0e:2a:8d:ca:85:60:b5:6b:53:12:b2:38:4f:f3:7b:68:64:01: b8:12:8a:33:63:5f:c5:5e:29:2d:ad:df:12:77:ad:c2:c4:56: ef:68:ce:89:67:d3:d3:08:a1:25:67:6e:3b:21:83:9a:ed:53: 35:96:38:49:49:35:ca:d0:74:fe:b5:bb:23:40:1e:8b:c7:50: 0f:66:dd:36:d5:d7:07:3a:e8:6b:b6:04:74:9c:53:3a:b6:5d: 28:b5:68:92:43:26:b4:a7:d8:85:6a:87:dc:e1:a2:9e:07:30: 73:1d:70:66:88:bc:cc:20:fc:73:b7:c1:18:1f:4a:69:43:96: 3e:6d:48:24:c6:e5:b0:37:58:30:da:0b:a1:3b:a3:26:df:ee: 6e:15:60:93:eb:2b:c8:50:77:01:80:3c:02:48:73:3b:26:76: ad:f6:d0:60:d4:44:79:db:35:cc:3c:f4:ef:f0:8e:0b:a6:f0: e7:96:c3:eb:ba:2d:ac:99:b2:c8:78:67:52:14:53:c7:4c:fb: f9:b4:61:f3:9d:dd:75:46:d7:ec:9a:18:c9:75:9a:a7:c2:32: bc:c7:dd:49:5b:5d:fe:ef:1b:7b:ea:68:ef:45:03:68:8d:aa: 0e:cd:09:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXsg04ENG+z2ifo0rYs5xs4lUrt4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxMVoX DTI3MDMwMzA2MDUxMVowMzExMC8GA1UEAxMoNzdCNUJEQ0QyREQ5MUY3NjU0OTgz MTE0MTg3MTA0MzA5NkNDNDU3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMN0axRKlJorosZl35LKeENl66xfPZxp2eJGcLcdaV6nADWSaCPDIDsKRXgR xEZ/A1CYrFdFbxFthPSMFbxKR1VoClAnrPkMQYcsQjhYgyV6xMSyFeqYc1J1PHrq XJIhtAYPg2rWpWid9CR9N75sV7xusKKSDpfihaY9YJuMDpXdREXpTCRMkp0gb/pU E9CGHzkqlXyTpyDVU3uwXT0pDHOYaNu+6YtKk4zjGObU3h55DuwasGE031OyXjcz ez3UTu5VaXKKjqgQCgvNchUr1rS6iCZaq4jSWGror53fO2mz3kNxUVzR1Dbf18BS LyFNCiPRgjh91ZhhHM05bIrv3UsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR3tb3N LdkfdlSYMRQYcQQwlsxFdDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o1cwDQYJKoZIhvcNAQELBQADggEBAGjRrg9MNnWXIm3TQxiOAeanWQ4qjcqFYLVr UxKyOE/ze2hkAbgSijNjX8VeKS2t3xJ3rcLEVu9ozoln09MIoSVnbjshg5rtUzWW OElJNcrQdP61uyNAHovHUA9m3TbV1wc66Gu2BHScUzq2XSi1aJJDJrSn2IVqh9zh op4HMHMdcGaIvMwg/HO3wRgfSmlDlj5tSCTG5bA3WDDaC6E7oybf7m4VYJPrK8hQ dwGAPAJIczsmdq320GDURHnbNcw89O/wjgum8OeWw+u6LayZssh4Z1IUU8dM+/m0 YfOd3XVG1+yaGMl1mqfCMrzH3UlbXf7vG3vqaO9FA2iNqg7NCdw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:34 2026 by rpki-client