$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143517.roa File: AS143517.roa (raw, json) Hash identifier: 1OYTJ9jMagAoaUTl5lkZEoTaz8HxsSLKpQO5YKDgKjY= Subject key identifier: DF:CC:B9:A2:E4:FB:20:8E:CC:77:46:54:B8:FA:49:6F:2F:FB:B7:46 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4F3F02CBA9DE2AB1630916C6FE87F2A206954EDF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143517.roa Signing time: Wed 04 Mar 2026 06:15:32 +0000 ROA not before: Wed 04 Mar 2026 06:10:32 +0000 ROA not after: Wed 03 Mar 2027 06:15:32 +0000 asID: 143517 IP address blocks: 240a:a363::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3f:02:cb:a9:de:2a:b1:63:09:16:c6:fe:87:f2:a2:06:95:4e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:32 2026 GMT Not After : Mar 3 06:15:32 2027 GMT Subject: CN=DFCCB9A2E4FB208ECC774654B8FA496F2FFBB746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:d0:31:3c:57:41:98:f0:66:ed:fe:d9:49: 47:8a:65:15:d5:bd:fe:e0:f3:4b:42:e8:7c:32:94: 23:41:94:a6:15:f7:7a:d2:88:65:e1:20:0c:3e:49: 83:68:25:8f:32:c4:07:d0:e3:31:e6:dd:02:e5:06: 56:b7:5c:1a:e7:9b:b4:1f:de:a1:47:2f:19:af:ef: 56:39:18:a3:54:95:1f:e4:de:66:25:52:d9:de:4a: 20:75:17:73:23:5b:43:16:ff:a6:a2:c4:a5:2d:3b: 90:7e:8c:11:81:d2:f1:91:31:79:8e:ad:d2:e1:20: 19:5c:fb:81:53:43:9f:99:b8:16:eb:fd:d5:5e:0a: e4:d7:b6:60:40:94:99:c3:9f:7f:b3:5f:04:f6:1e: 15:e7:b5:9c:1c:43:44:e5:f6:ee:66:13:64:35:04: 81:12:00:06:ea:42:c1:08:6a:df:75:22:0d:0b:21: b7:89:65:ea:c1:21:27:61:7d:eb:ed:f7:af:8c:3d: 29:60:20:48:97:58:73:4c:37:a2:2f:db:3a:95:89: 3e:3c:f1:94:02:97:e7:0e:e2:81:53:bb:6c:e8:cc: 16:78:d0:15:cf:74:a9:98:4d:82:1e:59:71:a2:9e: ba:93:0c:83:b8:cc:55:1e:6d:ee:3a:86:34:ae:8d: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CC:B9:A2:E4:FB:20:8E:CC:77:46:54:B8:FA:49:6F:2F:FB:B7:46 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143517.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a363::/32 Signature Algorithm: sha256WithRSAEncryption 19:6d:fb:43:16:57:c3:12:bf:4d:3f:53:22:1b:2b:9c:cc:a6: 8c:7f:48:0c:dc:61:10:fb:8d:28:d5:af:9d:b1:94:ff:06:74: 37:62:38:e6:79:40:7a:4f:06:14:81:22:03:7b:08:24:60:1d: 06:29:17:49:f0:a5:58:61:67:e5:fb:61:15:c6:a6:f2:51:29: 15:e0:33:d7:1d:f7:02:b5:1f:f5:b6:74:7a:44:3d:c5:46:f2: cb:5e:12:eb:04:cd:59:ed:7b:63:ae:7b:5a:c4:82:50:c5:c9: a9:13:e2:6a:3a:2e:a4:f7:e8:68:3d:0d:0d:c7:74:c9:ee:0c: dd:90:e1:b7:e6:84:9d:8d:8f:78:13:93:c2:91:9c:df:3f:0a: 35:83:71:e9:51:1d:74:84:6f:ee:e1:59:6f:28:56:c4:fc:22: ba:ee:91:82:9d:d6:8c:c5:46:3a:59:89:8f:84:fb:28:7f:ed: dc:3b:16:92:e1:73:8f:73:d0:b7:ff:f0:bf:90:8c:7a:d7:ac: c5:84:a6:0e:20:38:97:50:0c:bc:e9:95:e5:9d:87:25:28:e9: a9:72:3a:d9:29:56:b2:c4:44:95:70:d2:ec:09:c5:aa:6f:36: 88:0e:14:23:0a:98:25:23:45:3b:f1:48:39:6d:f4:55:7e:0a: 31:08:47:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTz8Cy6neKrFjCRbG/ofyogaVTt8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzMloX DTI3MDMwMzA2MTUzMlowMzExMC8GA1UEAxMoREZDQ0I5QTJFNEZCMjA4RUNDNzc0 NjU0QjhGQTQ5NkYyRkZCQjc0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvB0DE8V0GY8Gbt/tlJR4plFdW9/uDzS0LofDKUI0GUphX3etKIZeEgDD5J g2gljzLEB9DjMebdAuUGVrdcGuebtB/eoUcvGa/vVjkYo1SVH+TeZiVS2d5KIHUX cyNbQxb/pqLEpS07kH6MEYHS8ZExeY6t0uEgGVz7gVNDn5m4Fuv91V4K5Ne2YECU mcOff7NfBPYeFee1nBxDROX27mYTZDUEgRIABupCwQhq33UiDQsht4ll6sEhJ2F9 6+33r4w9KWAgSJdYc0w3oi/bOpWJPjzxlAKX5w7igVO7bOjMFnjQFc90qZhNgh5Z caKeupMMg7jMVR5t7jqGNK6NuA8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTfzLmi 5Psgjsx3RlS4+klvL/u3RjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o2MwDQYJKoZIhvcNAQELBQADggEBABlt+0MWV8MSv00/UyIbK5zMpox/SAzcYRD7 jSjVr52xlP8GdDdiOOZ5QHpPBhSBIgN7CCRgHQYpF0nwpVhhZ+X7YRXGpvJRKRXg M9cd9wK1H/W2dHpEPcVG8steEusEzVnte2Oue1rEglDFyakT4mo6LqT36Gg9DQ3H dMnuDN2Q4bfmhJ2Nj3gTk8KRnN8/CjWDcelRHXSEb+7hWW8oVsT8IrrukYKd1ozF RjpZiY+E+yh/7dw7FpLhc49z0Lf/8L+QjHrXrMWEpg4gOJdQDLzpleWdhyUo6aly OtkpVrLERJVw0uwJxapvNogOFCMKmCUjRTvxSDlt9FV+CjEIR04= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:02 2026 by rpki-client