$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143529.roa File: AS143529.roa (raw, json) Hash identifier: Z206q8Cx941DXEfgG3QLumfvisN2gHih0fCWP1uU7Fc= Subject key identifier: 1B:83:00:21:16:30:CA:0E:F5:71:3D:9E:C4:BF:0F:72:A0:3F:2C:C4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 162139386DBB8329E145D564E789853E88160CDF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143529.roa Signing time: Wed 04 Mar 2026 06:15:30 +0000 ROA not before: Wed 04 Mar 2026 06:10:30 +0000 ROA not after: Wed 03 Mar 2027 06:15:30 +0000 asID: 143529 IP address blocks: 240a:a36f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:21:39:38:6d:bb:83:29:e1:45:d5:64:e7:89:85:3e:88:16:0c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:30 2026 GMT Not After : Mar 3 06:15:30 2027 GMT Subject: CN=1B8300211630CA0EF5713D9EC4BF0F72A03F2CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:ef:c4:77:b0:3b:8b:4d:12:00:e1:a1:cb: 67:53:29:55:9f:95:45:8d:3a:0e:37:8e:9e:0b:5e: b6:82:96:3e:ab:10:50:35:0c:02:2c:aa:df:f5:db: b4:8a:39:29:50:30:ca:8d:81:26:b8:96:5e:f2:70: f7:62:2a:64:b6:79:5c:de:ee:87:89:20:2b:44:5c: d0:20:99:c0:4c:2f:a0:25:0f:bc:fd:2c:7c:92:9d: 30:8b:05:64:97:ff:a8:9f:ab:83:57:f7:d0:e2:bd: e0:db:a9:10:88:a3:df:42:f5:18:c4:3e:dd:f4:e7: bf:bc:a4:23:96:54:b2:03:15:76:05:e5:4b:51:43: 7d:e5:aa:fe:58:63:22:1b:ae:2e:68:94:4f:55:62: d1:83:59:53:86:77:84:61:e3:ac:7e:01:7f:be:b3: 7a:2a:4b:03:9e:03:aa:5e:f8:8d:ad:64:56:e2:d8: ae:0f:93:cf:47:dc:12:55:9d:2c:1b:a4:68:1a:a6: 6b:37:cf:14:62:7d:1c:a8:3c:a9:50:e7:59:9f:ec: f7:5f:6d:67:bf:30:7a:e6:d2:51:57:65:1e:e2:59: 7e:6f:6c:41:dc:3c:8f:c1:a2:a9:19:d5:84:df:9e: c3:4e:9f:99:17:6c:78:44:f4:2c:0d:19:8a:1c:c1: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:83:00:21:16:30:CA:0E:F5:71:3D:9E:C4:BF:0F:72:A0:3F:2C:C4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a36f::/32 Signature Algorithm: sha256WithRSAEncryption 45:11:22:bd:a4:c9:a4:cb:8d:00:80:7c:75:a5:d8:52:69:e4: d9:f4:87:0c:2a:d2:8d:8c:af:8a:bc:e3:30:52:ac:51:2f:d3: b4:24:20:3a:cb:28:3c:9d:5e:c3:58:22:e1:ae:7e:eb:5a:52: a7:b0:8d:57:62:ec:68:80:5e:b7:d6:9a:6c:1f:a9:c1:cb:02: 79:f4:12:3b:82:e7:eb:0a:19:b8:33:59:69:10:72:50:3b:c2: cb:aa:03:07:24:59:71:80:f3:7d:07:19:5b:1c:7f:5b:4d:74: 58:9f:fb:c6:c2:03:02:90:c1:c3:0c:21:b4:b3:75:e1:47:ba: dc:cd:4a:20:88:3b:1d:6e:68:89:d5:91:99:c6:5b:27:d1:ff: 73:e2:4a:fe:29:75:cc:ac:a7:2e:a2:84:60:68:1b:59:d4:84: f0:99:0c:17:48:21:f3:16:06:1a:f2:ce:37:7b:a6:f5:5b:4e: 2f:c1:3d:b3:19:57:07:fa:ea:dc:48:f9:ec:ce:b9:96:11:24: 5e:a5:db:2b:b6:60:c4:50:74:71:48:6c:7f:ba:e7:e3:5c:3d: b9:9b:0b:a4:c9:28:d2:73:80:45:54:c3:e4:7c:1d:28:39:70: bb:61:7d:ea:a8:bb:48:0e:2c:d1:7d:bb:b4:26:a6:79:1c:64: b3:85:63:df -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFiE5OG27gynhRdVk54mFPogWDN8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzMFoX DTI3MDMwMzA2MTUzMFowMzExMC8GA1UEAxMoMUI4MzAwMjExNjMwQ0EwRUY1NzEz RDlFQzRCRjBGNzJBMDNGMkNDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIkn78R3sDuLTRIA4aHLZ1MpVZ+VRY06DjeOngtetoKWPqsQUDUMAiyq3/Xb tIo5KVAwyo2BJriWXvJw92IqZLZ5XN7uh4kgK0Rc0CCZwEwvoCUPvP0sfJKdMIsF ZJf/qJ+rg1f30OK94NupEIij30L1GMQ+3fTnv7ykI5ZUsgMVdgXlS1FDfeWq/lhj IhuuLmiUT1Vi0YNZU4Z3hGHjrH4Bf76zeipLA54Dql74ja1kVuLYrg+Tz0fcElWd LBukaBqmazfPFGJ9HKg8qVDnWZ/s919tZ78weubSUVdlHuJZfm9sQdw8j8GiqRnV hN+ew06fmRdseET0LA0ZihzBF88CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQbgwAh FjDKDvVxPZ7Evw9yoD8sxDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o28wDQYJKoZIhvcNAQELBQADggEBAEURIr2kyaTLjQCAfHWl2FJp5Nn0hwwq0o2M r4q84zBSrFEv07QkIDrLKDydXsNYIuGufutaUqewjVdi7GiAXrfWmmwfqcHLAnn0 EjuC5+sKGbgzWWkQclA7wsuqAwckWXGA830HGVscf1tNdFif+8bCAwKQwcMMIbSz deFHutzNSiCIOx1uaInVkZnGWyfR/3PiSv4pdcyspy6ihGBoG1nUhPCZDBdIIfMW Bhryzjd7pvVbTi/BPbMZVwf66txI+ezOuZYRJF6l2yu2YMRQdHFIbH+65+NcPbmb C6TJKNJzgEVUw+R8HSg5cLthfeqou0gOLNF9u7QmpnkcZLOFY98= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:10 2026 by rpki-client