$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143506.roa File: AS143506.roa (raw, json) Hash identifier: fOBIZtvOjj7QdU6mvMfJQouL428mN0iUhZdxc5Ff/Kc= Subject key identifier: 57:2F:09:C8:5A:9B:C0:6E:E3:9A:0D:A8:0A:B7:7F:D6:D0:3B:D5:56 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3B963A172395234E59BF963AC737E7BBF1AE92EE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143506.roa Signing time: Wed 04 Mar 2026 06:05:34 +0000 ROA not before: Wed 04 Mar 2026 06:00:34 +0000 ROA not after: Wed 03 Mar 2027 06:05:34 +0000 asID: 143506 IP address blocks: 240a:a358::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:96:3a:17:23:95:23:4e:59:bf:96:3a:c7:37:e7:bb:f1:ae:92:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:34 2026 GMT Not After : Mar 3 06:05:34 2027 GMT Subject: CN=572F09C85A9BC06EE39A0DA80AB77FD6D03BD556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:c8:4a:e1:da:a7:07:d0:8f:1e:eb:b4:b2: 8a:2e:11:4f:aa:36:15:8e:64:96:a2:7e:96:0a:ab: 43:91:be:f6:85:be:68:c1:b8:38:31:f7:15:b7:44: 57:6f:9d:d6:4e:c9:4e:6c:75:2f:8e:b7:7f:be:5f: 6d:5d:29:50:c5:ac:b2:f3:e3:22:f0:3d:b4:1b:75: dd:eb:a8:67:ed:f5:0b:a4:84:78:ad:7c:0f:66:dd: 12:ed:4a:91:79:c1:db:8a:d3:bf:d0:07:b5:40:26: a5:42:9a:da:bd:f0:2b:0f:f0:da:b1:c6:76:b4:d6: 66:c9:a1:6b:2b:ac:df:f8:5a:1d:b5:0f:aa:28:ca: b2:19:82:ac:76:5a:07:2a:d4:15:65:f9:72:60:a4: ee:e9:a9:29:32:52:32:fb:6a:4d:57:02:70:95:b2: 8c:79:3e:ce:20:50:0b:54:76:f4:fd:6a:cf:f6:2b: 6e:bc:24:29:49:19:f7:5a:db:de:93:63:92:90:4f: e2:cf:09:21:10:ca:3e:b6:f3:88:0e:54:cd:01:7b: e5:7e:d3:38:32:0f:bb:e1:f4:1e:b6:e2:0f:fb:bb: 0a:d0:a3:c0:f8:64:7a:d8:2f:2b:36:da:04:75:e7: e1:2b:ef:44:08:b5:e7:19:f2:4e:52:92:89:93:70: f9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2F:09:C8:5A:9B:C0:6E:E3:9A:0D:A8:0A:B7:7F:D6:D0:3B:D5:56 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143506.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a358::/32 Signature Algorithm: sha256WithRSAEncryption 5a:d9:5d:d6:86:86:5a:d6:d2:23:c6:4c:de:92:3a:e8:fb:52: f3:5c:0f:54:8f:ad:d4:68:a6:64:f6:1d:55:49:a5:c2:4b:86: df:da:32:57:39:25:91:42:7a:1c:1b:32:62:a7:f2:d1:c7:f2: 9c:87:4f:7e:f2:5f:17:ae:54:03:8e:c6:10:7c:19:d3:46:c8: 61:72:00:21:51:ad:a4:82:2b:18:02:fb:5d:d7:05:61:2d:56: 07:21:e2:46:e0:69:9f:63:f1:8a:db:04:9d:eb:1b:6a:0e:6c: de:44:73:30:19:12:5e:3c:22:f4:34:d3:78:28:d1:24:94:17: 14:9c:f7:33:99:45:05:28:f2:f0:73:be:47:00:29:e4:db:65: a2:a6:54:20:e1:22:b3:68:c9:a6:45:62:62:7c:49:be:93:0c: bd:a8:cc:50:24:3e:64:a8:d9:68:c4:be:b2:2d:0b:c4:13:48: 21:bf:b9:da:5c:22:57:0e:79:05:f1:0d:06:68:d1:ee:3c:22: c6:cb:42:26:fd:d6:38:6d:60:01:85:fb:9b:e2:a0:42:c3:ca: 94:7f:a5:e7:4d:fd:44:07:98:e7:9c:e0:f3:d3:16:08:29:0d: 4f:61:03:87:ff:0e:37:a5:59:c2:d3:3c:6b:ac:da:a3:d3:c4: f1:3e:4a:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUO5Y6FyOVI05Zv5Y6xzfnu/Guku4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzNFoX DTI3MDMwMzA2MDUzNFowMzExMC8GA1UEAxMoNTcyRjA5Qzg1QTlCQzA2RUUzOUEw REE4MEFCNzdGRDZEMDNCRDU1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgAyErh2qcH0I8e67Syii4RT6o2FY5klqJ+lgqrQ5G+9oW+aMG4ODH3FbdE V2+d1k7JTmx1L463f75fbV0pUMWssvPjIvA9tBt13euoZ+31C6SEeK18D2bdEu1K kXnB24rTv9AHtUAmpUKa2r3wKw/w2rHGdrTWZsmhayus3/haHbUPqijKshmCrHZa ByrUFWX5cmCk7umpKTJSMvtqTVcCcJWyjHk+ziBQC1R29P1qz/YrbrwkKUkZ91rb 3pNjkpBP4s8JIRDKPrbziA5UzQF75X7TODIPu+H0HrbiD/u7CtCjwPhketgvKzba BHXn4SvvRAi15xnyTlKSiZNw+aECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRXLwnI WpvAbuOaDagKt3/W0DvVVjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o1gwDQYJKoZIhvcNAQELBQADggEBAFrZXdaGhlrW0iPGTN6SOuj7UvNcD1SPrdRo pmT2HVVJpcJLht/aMlc5JZFCehwbMmKn8tHH8pyHT37yXxeuVAOOxhB8GdNGyGFy ACFRraSCKxgC+13XBWEtVgch4kbgaZ9j8YrbBJ3rG2oObN5EczAZEl48IvQ003go 0SSUFxSc9zOZRQUo8vBzvkcAKeTbZaKmVCDhIrNoyaZFYmJ8Sb6TDL2ozFAkPmSo 2WjEvrItC8QTSCG/udpcIlcOeQXxDQZo0e48IsbLQib91jhtYAGF+5vioELDypR/ pedN/UQHmOec4PPTFggpDU9hA4f/DjelWcLTPGus2qPTxPE+Svk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:49 2026 by rpki-client