$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143519.roa File: AS143519.roa (raw, json) Hash identifier: 62m8+qaRoZsu9mQe5heL8wLXjgRC1MC7hMRvzNqAlQo= Subject key identifier: BE:79:15:11:59:35:1E:FD:EC:56:B7:34:D8:A4:D3:22:C6:90:4F:C7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 61C01E68FE2C0847A040DA344228A15571C90B1F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143519.roa Signing time: Wed 04 Mar 2026 06:12:38 +0000 ROA not before: Wed 04 Mar 2026 06:07:38 +0000 ROA not after: Wed 03 Mar 2027 06:12:38 +0000 asID: 143519 IP address blocks: 240a:a365::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c0:1e:68:fe:2c:08:47:a0:40:da:34:42:28:a1:55:71:c9:0b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:38 2026 GMT Not After : Mar 3 06:12:38 2027 GMT Subject: CN=BE79151159351EFDEC56B734D8A4D322C6904FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d5:87:dc:de:24:da:83:ce:b8:ac:04:f7:2c: 8e:5d:93:cc:8c:ef:02:1b:a7:1b:9a:e3:4b:77:9e: 73:4c:bb:af:e4:f3:6b:83:5c:b1:bf:0a:37:49:5e: 17:63:64:48:3b:db:9f:11:29:be:cb:a9:9d:59:6b: 48:6d:66:31:65:1e:68:a8:cf:a3:3b:d4:ff:31:52: 4b:37:d0:65:21:8a:c6:71:a1:63:94:a1:fd:c5:7b: a5:8f:15:ce:36:dd:8d:10:40:3c:c5:0f:c9:92:33: 47:22:7c:b8:48:54:52:b7:cb:77:41:bd:c5:10:62: 97:df:44:c1:2c:b9:a7:5a:5f:88:44:db:2e:72:e6: 4f:a5:63:99:14:a2:79:ba:ad:07:e7:1f:ed:0a:3b: 58:4f:41:8d:fe:bd:dd:2a:c6:9f:ab:a6:be:58:8c: 9c:c5:7e:7b:54:f0:fb:85:a4:e6:97:40:35:6f:5c: fb:08:cd:3a:50:a3:b3:d2:0a:72:55:e3:c6:47:55: dd:8d:ef:01:9e:b9:71:45:27:72:5b:6f:b5:33:c4: 8b:b9:cb:5f:ca:be:61:60:19:37:d6:6f:1a:39:72: 04:a6:9e:a6:c8:4b:a7:45:e7:5c:c9:54:a9:e9:e4: 22:be:17:4a:0d:0a:60:e5:ea:f0:43:65:67:11:4e: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:79:15:11:59:35:1E:FD:EC:56:B7:34:D8:A4:D3:22:C6:90:4F:C7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143519.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a365::/32 Signature Algorithm: sha256WithRSAEncryption 3f:09:18:92:9d:7b:ba:ef:5d:98:45:d7:a9:4a:9c:66:79:bc: 1b:eb:41:0f:86:d7:b6:dc:1e:67:6c:c0:e8:6a:09:69:aa:7a: 7e:7c:f4:b7:98:e2:22:e0:66:86:ab:18:5e:24:43:5d:92:cc: 63:94:20:46:bb:49:05:40:71:00:88:90:74:11:92:dc:58:11: 4e:98:16:72:bd:01:f5:fa:59:89:ec:07:f4:d6:a9:9d:99:57: 6a:cd:9e:ca:df:84:0c:2b:8d:1c:58:6c:a8:ea:34:82:ec:df: 90:21:16:ab:16:da:f4:f7:44:be:e5:7c:17:f2:17:75:94:32: 6a:ef:a9:81:80:2e:5e:01:52:f7:9b:6f:a3:ed:3a:df:92:2c: 52:44:fa:9d:2d:5f:b0:ea:ee:3d:3d:72:dc:be:bc:87:49:ec: 1a:58:27:d7:41:15:35:c9:45:b9:39:99:fd:7c:9e:47:82:72: f2:0e:e2:92:90:b1:81:80:9f:b2:9f:80:77:b5:ce:40:65:80: a5:eb:c8:ce:d7:ac:27:c1:4d:cf:c1:f3:00:68:66:2a:66:eb: 0c:e6:d0:5c:39:82:cd:d3:87:f2:19:9e:36:88:dc:fc:e7:5a: 39:ab:3c:a6:a4:73:47:40:53:49:c5:73:81:03:e3:77:0a:33: 16:bc:69:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYcAeaP4sCEegQNo0QiihVXHJCx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczOFoX DTI3MDMwMzA2MTIzOFowMzExMC8GA1UEAxMoQkU3OTE1MTE1OTM1MUVGREVDNTZC NzM0RDhBNEQzMjJDNjkwNEZDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI/Vh9zeJNqDzrisBPcsjl2TzIzvAhunG5rjS3eec0y7r+Tza4Ncsb8KN0le F2NkSDvbnxEpvsupnVlrSG1mMWUeaKjPozvU/zFSSzfQZSGKxnGhY5Sh/cV7pY8V zjbdjRBAPMUPyZIzRyJ8uEhUUrfLd0G9xRBil99EwSy5p1pfiETbLnLmT6VjmRSi ebqtB+cf7Qo7WE9Bjf693SrGn6umvliMnMV+e1Tw+4Wk5pdANW9c+wjNOlCjs9IK clXjxkdV3Y3vAZ65cUUncltvtTPEi7nLX8q+YWAZN9ZvGjlyBKaepshLp0XnXMlU qenkIr4XSg0KYOXq8ENlZxFOxzECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS+eRUR WTUe/exWtzTYpNMixpBPxzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o2UwDQYJKoZIhvcNAQELBQADggEBAD8JGJKde7rvXZhF16lKnGZ5vBvrQQ+G17bc HmdswOhqCWmqen589LeY4iLgZoarGF4kQ12SzGOUIEa7SQVAcQCIkHQRktxYEU6Y FnK9AfX6WYnsB/TWqZ2ZV2rNnsrfhAwrjRxYbKjqNILs35AhFqsW2vT3RL7lfBfy F3WUMmrvqYGALl4BUvebb6PtOt+SLFJE+p0tX7Dq7j09cty+vIdJ7BpYJ9dBFTXJ Rbk5mf18nkeCcvIO4pKQsYGAn7KfgHe1zkBlgKXryM7XrCfBTc/B8wBoZipm6wzm 0Fw5gs3Th/IZnjaI3PznWjmrPKakc0dAU0nFc4ED43cKMxa8ac0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:50 2026 by rpki-client