$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143526.roa File: AS143526.roa (raw, json) Hash identifier: SXY0B4jWve614tdQhFNQcNwqIOEJgABa6FW/XikyNlI= Subject key identifier: CF:D6:EF:40:13:E7:92:05:19:FC:A0:F3:F2:CD:D8:F4:93:FA:BD:37 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E135FE06755C6472556424B06F948E9E036B9EB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143526.roa Signing time: Wed 04 Mar 2026 06:13:23 +0000 ROA not before: Wed 04 Mar 2026 06:08:23 +0000 ROA not after: Wed 03 Mar 2027 06:13:23 +0000 asID: 143526 IP address blocks: 240a:a36c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:13:5f:e0:67:55:c6:47:25:56:42:4b:06:f9:48:e9:e0:36:b9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:23 2026 GMT Not After : Mar 3 06:13:23 2027 GMT Subject: CN=CFD6EF4013E7920519FCA0F3F2CDD8F493FABD37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:b1:cf:41:b7:e3:65:fe:0c:de:be:ed:ba: 96:93:63:3a:9d:3f:c1:f7:e9:85:3a:bc:26:0b:30: e0:df:7f:ff:5b:a8:14:d7:de:17:f1:38:c7:ae:07: fa:d9:5a:9e:c3:2a:e6:ef:c4:32:a5:72:89:20:2c: 19:8a:78:16:fa:b3:9b:15:a9:7a:47:4a:87:e4:88: a1:42:ca:f7:5e:66:61:71:29:a9:e7:de:9b:7e:e3: a2:21:b3:cb:1b:e9:3c:b2:a6:4b:f2:c1:71:13:03: 3c:ff:2d:1e:ce:27:08:fd:82:70:3a:41:44:7f:0a: 9f:c6:4c:a4:3e:0f:c2:27:7a:c0:e7:c2:97:8a:0a: 52:10:ca:28:97:61:aa:35:ee:90:a5:b7:aa:97:d0: ef:9a:da:17:72:36:d7:36:a7:92:59:e9:5b:9b:be: 10:82:4e:e9:d7:e2:d5:1c:0c:60:83:76:98:80:54: 29:81:a1:04:4e:6e:3a:39:bf:6b:5d:68:95:55:4a: b2:cc:9c:27:53:d7:02:1b:63:71:7f:2e:e4:92:73: c2:04:be:2e:77:63:7e:8c:e6:fe:fe:4e:0a:01:1e: 8e:81:3d:27:8f:90:f2:42:80:c4:bb:cf:20:76:3f: 25:08:7b:40:8f:c5:ad:dc:dd:17:9e:60:47:b4:e6: b5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D6:EF:40:13:E7:92:05:19:FC:A0:F3:F2:CD:D8:F4:93:FA:BD:37 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143526.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a36c::/32 Signature Algorithm: sha256WithRSAEncryption 1f:18:81:7a:e5:9c:3a:e0:f6:9e:93:f9:3c:cb:87:c6:3b:3d: b2:66:78:e3:40:b4:eb:0a:fb:ac:8d:85:7a:1c:89:f9:dc:0f: 7c:0b:3d:a4:87:f8:9b:8e:4e:01:c8:84:27:53:e3:4e:1c:34: aa:f8:dc:ae:f7:59:10:3b:f1:36:b5:c2:9d:02:d8:ec:76:d3: 21:cb:39:75:83:ea:29:86:12:94:7b:81:c4:7f:90:7e:f8:43: 2b:96:e7:8a:31:33:8b:5f:22:da:c0:c6:a8:96:7a:f9:35:69: a9:75:da:81:d0:97:5e:9c:a9:fa:a7:f9:13:55:61:15:8a:25: 8e:c9:63:27:62:04:51:7d:95:fa:1b:92:02:89:d8:22:62:64: ec:3b:2f:a8:42:9b:d8:f8:0f:ef:52:13:5e:70:7c:a8:2f:35: 71:5b:e0:50:c8:ba:8d:44:2b:51:ff:e8:04:73:2b:e1:b0:ef: 58:b0:f1:f6:ab:f2:5a:78:a3:41:b0:a8:0a:08:fb:fd:d7:fd: b3:cd:48:cc:b8:b3:e5:ed:91:1b:dc:3f:8f:e6:2e:04:cb:c2: ae:e6:f3:01:b3:93:f0:4f:98:eb:05:37:40:30:2b:bf:86:21: 5f:ae:83:bd:36:59:db:d5:da:81:84:bb:88:e4:18:4f:9c:09: 34:bb:7d:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULhNf4GdVxkclVkJLBvlI6eA2ueswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyM1oX DTI3MDMwMzA2MTMyM1owMzExMC8GA1UEAxMoQ0ZENkVGNDAxM0U3OTIwNTE5RkNB MEYzRjJDREQ4RjQ5M0ZBQkQzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDysc9Bt+Nl/gzevu26lpNjOp0/wffphTq8Jgsw4N9//1uoFNfeF/E4x64H +tlansMq5u/EMqVyiSAsGYp4FvqzmxWpekdKh+SIoULK915mYXEpqefem37joiGz yxvpPLKmS/LBcRMDPP8tHs4nCP2CcDpBRH8Kn8ZMpD4Pwid6wOfCl4oKUhDKKJdh qjXukKW3qpfQ75raF3I21zanklnpW5u+EIJO6dfi1RwMYIN2mIBUKYGhBE5uOjm/ a11olVVKssycJ1PXAhtjcX8u5JJzwgS+Lndjfozm/v5OCgEejoE9J4+Q8kKAxLvP IHY/JQh7QI/FrdzdF55gR7TmtXECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTP1u9A E+eSBRn8oPPyzdj0k/q9NzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o2wwDQYJKoZIhvcNAQELBQADggEBAB8YgXrlnDrg9p6T+TzLh8Y7PbJmeONAtOsK +6yNhXocifncD3wLPaSH+JuOTgHIhCdT404cNKr43K73WRA78Ta1wp0C2Ox20yHL OXWD6imGEpR7gcR/kH74QyuW54oxM4tfItrAxqiWevk1aal12oHQl16cqfqn+RNV YRWKJY7JYydiBFF9lfobkgKJ2CJiZOw7L6hCm9j4D+9SE15wfKgvNXFb4FDIuo1E K1H/6ARzK+Gw71iw8far8lp4o0GwqAoI+/3X/bPNSMy4s+XtkRvcP4/mLgTLwq7m 8wGzk/BPmOsFN0AwK7+GIV+ug702WdvV2oGEu4jkGE+cCTS7fRo= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:37 2026 by rpki-client