$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143524.roa File: AS143524.roa (raw, json) Hash identifier: Eb5MxcwfkHJHCKa6ZwtwFjFk7R9qCl8kaFLjRptyuoM= Subject key identifier: DB:A1:55:9D:0B:E6:B3:6D:F4:FB:3C:A1:0B:22:F0:FE:92:E4:21:2C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3DF852BE804165D87A0BB595613A760832B4A2FA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143524.roa Signing time: Wed 04 Mar 2026 06:15:19 +0000 ROA not before: Wed 04 Mar 2026 06:10:19 +0000 ROA not after: Wed 03 Mar 2027 06:15:19 +0000 asID: 143524 IP address blocks: 240a:a36a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f8:52:be:80:41:65:d8:7a:0b:b5:95:61:3a:76:08:32:b4:a2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:19 2026 GMT Not After : Mar 3 06:15:19 2027 GMT Subject: CN=DBA1559D0BE6B36DF4FB3CA10B22F0FE92E4212C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4b:84:6c:dd:fa:34:39:c3:07:5b:b2:0c:20: 5d:66:b3:5c:c8:35:71:86:14:cf:a9:d7:53:37:05: 94:a5:14:f9:ed:15:2e:3d:60:01:b6:b4:ee:9b:69: 7f:53:76:f1:20:57:2f:fe:a7:43:9a:a6:54:60:93: 22:99:e2:2a:74:ca:b0:68:38:bd:09:bd:47:6d:16: 3b:65:36:21:1c:9b:a7:2f:e0:78:e8:e6:c4:0f:55: 28:85:df:00:4c:ff:81:1b:62:45:c0:f2:2c:e1:0a: 99:70:82:50:bb:22:e2:af:16:68:1b:2d:d1:3f:37: 24:44:d2:38:4a:0b:98:c2:7d:27:bb:76:95:ad:64: f5:ce:85:f5:db:d4:e9:97:b9:64:e1:40:a7:34:66: 1a:f2:f7:46:9c:d9:24:74:80:52:8e:30:ff:0b:e0: 3c:33:72:58:7b:fe:a5:9e:59:e8:43:29:cd:c3:02: 4a:0c:e1:6b:8c:06:75:c5:d2:e0:6c:4f:6b:ff:79: 85:76:44:d7:19:47:26:06:f9:f7:29:d9:4d:84:84: 64:fe:ef:76:c7:5d:0f:21:1c:3f:1c:3f:f1:75:e1: 12:87:06:1a:3c:72:c2:fb:2c:f3:d6:49:c5:f2:65: 0e:97:66:bc:eb:98:aa:a3:e7:79:49:b2:00:bb:24: 04:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A1:55:9D:0B:E6:B3:6D:F4:FB:3C:A1:0B:22:F0:FE:92:E4:21:2C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a36a::/32 Signature Algorithm: sha256WithRSAEncryption a5:81:67:2e:10:25:0d:c4:c2:06:a4:70:54:36:36:6b:68:6c: 12:a1:96:a1:80:5e:55:0e:f4:8e:9a:57:fa:f2:2d:1d:36:18: 49:52:ba:4f:21:94:e8:d9:86:dc:cc:1f:d0:dc:06:e5:fe:77: 46:27:a5:a6:f2:8b:33:41:eb:7a:97:af:b6:d6:32:b6:c1:f9: ad:28:84:12:05:3a:5c:b2:c9:7b:64:37:ad:0b:3d:74:db:96: 2f:26:7d:72:14:8d:ad:20:a9:7a:ea:ca:2a:90:97:55:8d:49: db:e8:8d:f1:55:f1:84:b3:81:7d:a5:88:4e:4a:d6:01:db:1d: 25:c2:72:17:4c:4f:4a:42:a1:7c:86:78:ee:88:b0:95:e9:2f: a8:cc:2f:23:f1:98:41:d6:36:cf:02:6d:25:1f:75:44:b0:69: c7:c5:c9:34:34:e7:d8:84:78:83:30:8d:1e:fd:6a:6a:4e:2b: 23:73:e8:bf:14:d4:4c:34:df:43:b5:50:fd:37:3e:85:18:78: f9:d7:3f:73:c0:60:30:8d:27:7f:2e:c6:3a:0f:2e:6b:19:ea: 74:11:19:db:cd:84:4f:15:c8:9c:ec:d3:e4:43:46:dc:74:be: a4:81:88:39:2b:8a:38:25:55:f8:5b:20:e8:85:5a:22:99:3b: 89:25:01:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPfhSvoBBZdh6C7WVYTp2CDK0ovowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxOVoX DTI3MDMwMzA2MTUxOVowMzExMC8GA1UEAxMoREJBMTU1OUQwQkU2QjM2REY0RkIz Q0ExMEIyMkYwRkU5MkU0MjEyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhLhGzd+jQ5wwdbsgwgXWazXMg1cYYUz6nXUzcFlKUU+e0VLj1gAba07ptp f1N28SBXL/6nQ5qmVGCTIpniKnTKsGg4vQm9R20WO2U2IRybpy/geOjmxA9VKIXf AEz/gRtiRcDyLOEKmXCCULsi4q8WaBst0T83JETSOEoLmMJ9J7t2la1k9c6F9dvU 6Ze5ZOFApzRmGvL3RpzZJHSAUo4w/wvgPDNyWHv+pZ5Z6EMpzcMCSgzha4wGdcXS 4GxPa/95hXZE1xlHJgb59ynZTYSEZP7vdsddDyEcPxw/8XXhEocGGjxywvss89ZJ xfJlDpdmvOuYqqPneUmyALskBEsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTboVWd C+azbfT7PKELIvD+kuQhLDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o2owDQYJKoZIhvcNAQELBQADggEBAKWBZy4QJQ3EwgakcFQ2NmtobBKhlqGAXlUO 9I6aV/ryLR02GElSuk8hlOjZhtzMH9DcBuX+d0YnpabyizNB63qXr7bWMrbB+a0o hBIFOlyyyXtkN60LPXTbli8mfXIUja0gqXrqyiqQl1WNSdvojfFV8YSzgX2liE5K 1gHbHSXCchdMT0pCoXyGeO6IsJXpL6jMLyPxmEHWNs8CbSUfdUSwacfFyTQ059iE eIMwjR79ampOKyNz6L8U1Ew030O1UP03PoUYePnXP3PAYDCNJ38uxjoPLmsZ6nQR GdvNhE8VyJzs0+RDRtx0vqSBiDkrijglVfhbIOiFWiKZO4klAak= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:35 2026 by rpki-client