$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143525.roa File: AS143525.roa (raw, json) Hash identifier: 73QsyDLOuz+/aRHXxDRvSkzeo+2pu58EJ6yGZv7Q+AU= Subject key identifier: 66:AD:8E:56:9A:BF:0D:A4:EC:8A:7C:81:D0:90:25:73:EA:64:BF:D7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 44F462AB45CCD78D6DD370C37AFB5D3D2E32638B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143525.roa Signing time: Wed 04 Mar 2026 06:15:46 +0000 ROA not before: Wed 04 Mar 2026 06:10:46 +0000 ROA not after: Wed 03 Mar 2027 06:15:46 +0000 asID: 143525 IP address blocks: 240a:a36b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f4:62:ab:45:cc:d7:8d:6d:d3:70:c3:7a:fb:5d:3d:2e:32:63:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:46 2026 GMT Not After : Mar 3 06:15:46 2027 GMT Subject: CN=66AD8E569ABF0DA4EC8A7C81D0902573EA64BFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:48:9c:11:8e:63:59:d1:1d:cd:0d:15:c9: e9:6f:53:67:af:b5:69:b6:59:df:e1:6e:34:31:ae: 4d:61:3a:70:eb:8a:5d:3a:c1:26:a4:73:55:cf:db: 82:5d:45:c6:d9:a5:42:08:b5:27:6b:01:a3:10:77: cc:70:61:fa:e0:99:62:f7:b9:d3:64:7b:b9:1a:4e: 0c:b2:4b:94:09:46:ad:fe:96:62:50:8b:ff:ca:c0: 1a:64:a4:47:f9:19:d0:6b:13:74:62:5d:ab:f6:95: cd:6a:77:46:cd:7e:6b:34:f1:ed:83:b7:d6:c5:1c: 87:67:a0:03:da:dc:85:cb:44:43:f4:2e:9f:b8:01: 25:bd:23:2f:66:15:fe:f6:4a:26:63:29:fd:6f:db: be:f5:f4:5a:42:ef:ef:3e:08:dc:65:00:b2:6e:f6: 5d:07:22:fb:e4:30:54:50:c7:35:f1:21:8f:f0:5b: fb:e8:ce:77:44:90:24:39:c6:0c:9b:06:0f:33:f1: 90:8e:07:b6:56:2c:6d:05:eb:be:f0:9d:08:8b:29: 80:47:f1:a9:02:dd:16:e3:a5:1c:e3:07:37:50:ff: 1c:51:ca:a6:01:44:b4:e1:75:99:c1:8b:22:4a:c4: 0e:d3:a9:9d:e7:92:6c:5a:32:91:ea:84:53:b2:f2: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AD:8E:56:9A:BF:0D:A4:EC:8A:7C:81:D0:90:25:73:EA:64:BF:D7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143525.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a36b::/32 Signature Algorithm: sha256WithRSAEncryption ba:ec:3f:58:dd:cc:1c:79:30:d9:b5:87:61:50:ea:26:42:09: ea:59:25:76:d5:bd:f7:9f:f0:42:ac:da:ab:6f:a4:22:fb:5a: 13:7e:5b:bf:13:bd:d2:5a:4c:2a:1f:0f:54:6d:e5:5c:2c:6d: 26:06:cf:f9:95:8f:00:af:62:ec:bf:a9:54:21:51:63:e8:98: 91:be:72:e0:e1:17:7f:1a:b5:1d:2c:c4:c1:15:3b:0d:70:cd: ff:92:35:98:d2:b1:fa:b4:70:3e:d0:76:a6:2c:64:7a:cf:32: e4:15:1a:48:11:81:b1:68:25:68:ef:f2:1d:e0:7d:b0:27:d8: b3:e7:53:71:f6:48:9a:d2:6d:63:3b:df:90:45:0f:25:05:ea: 1f:b7:e0:72:71:97:1b:0f:70:5b:de:ae:a4:2c:74:fc:9e:7e: 32:60:7d:1f:14:cf:d4:8b:c2:00:d9:5b:3c:2c:ff:d1:3d:75: 2d:85:de:17:e0:5d:f4:9a:eb:7a:0b:21:3a:a5:1e:19:a0:df: 5a:23:b1:35:50:15:44:92:f7:e8:fa:d4:c2:a6:2a:39:9f:96: 44:78:47:c4:e4:89:bd:d9:93:8c:b7:50:d2:a4:5d:20:2b:c1: 42:40:17:a7:95:27:6d:13:56:3f:6f:fe:9e:44:5e:fb:51:bf: e2:01:e5:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURPRiq0XM141t03DDevtdPS4yY4swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0NloX DTI3MDMwMzA2MTU0NlowMzExMC8GA1UEAxMoNjZBRDhFNTY5QUJGMERBNEVDOEE3 QzgxRDA5MDI1NzNFQTY0QkZENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJftSJwRjmNZ0R3NDRXJ6W9TZ6+1abZZ3+FuNDGuTWE6cOuKXTrBJqRzVc/b gl1FxtmlQgi1J2sBoxB3zHBh+uCZYve502R7uRpODLJLlAlGrf6WYlCL/8rAGmSk R/kZ0GsTdGJdq/aVzWp3Rs1+azTx7YO31sUch2egA9rchctEQ/Qun7gBJb0jL2YV /vZKJmMp/W/bvvX0WkLv7z4I3GUAsm72XQci++QwVFDHNfEhj/Bb++jOd0SQJDnG DJsGDzPxkI4HtlYsbQXrvvCdCIspgEfxqQLdFuOlHOMHN1D/HFHKpgFEtOF1mcGL IkrEDtOpneeSbFoykeqEU7Lypb8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRmrY5W mr8NpOyKfIHQkCVz6mS/1zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o2swDQYJKoZIhvcNAQELBQADggEBALrsP1jdzBx5MNm1h2FQ6iZCCepZJXbVvfef 8EKs2qtvpCL7WhN+W78TvdJaTCofD1Rt5VwsbSYGz/mVjwCvYuy/qVQhUWPomJG+ cuDhF38atR0sxMEVOw1wzf+SNZjSsfq0cD7QdqYsZHrPMuQVGkgRgbFoJWjv8h3g fbAn2LPnU3H2SJrSbWM735BFDyUF6h+34HJxlxsPcFverqQsdPyefjJgfR8Uz9SL wgDZWzws/9E9dS2F3hfgXfSa63oLITqlHhmg31ojsTVQFUSS9+j61MKmKjmflkR4 R8Tkib3Zk4y3UNKkXSArwUJAF6eVJ20TVj9v/p5EXvtRv+IB5RA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:13 2026 by rpki-client