$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143531.roa File: AS143531.roa (raw, json) Hash identifier: 3WpG7g01MbLkPlrKC6ubYZzXQTVyWS72n6uHRBKnPaM= Subject key identifier: F5:A2:EE:D2:55:47:CE:FE:B0:07:46:58:ED:AC:CC:A4:AE:AA:ED:34 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 365B284247D93E1F3D7C544EA76D47D2DE9CBFC4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143531.roa Signing time: Wed 04 Mar 2026 06:13:33 +0000 ROA not before: Wed 04 Mar 2026 06:08:33 +0000 ROA not after: Wed 03 Mar 2027 06:13:33 +0000 asID: 143531 IP address blocks: 240a:a371::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5b:28:42:47:d9:3e:1f:3d:7c:54:4e:a7:6d:47:d2:de:9c:bf:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:33 2026 GMT Not After : Mar 3 06:13:33 2027 GMT Subject: CN=F5A2EED25547CEFEB0074658EDACCCA4AEAAED34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:4e:1e:20:f7:19:7a:5c:2a:d9:91:0c:7b: 7c:11:56:3d:d1:4e:05:cd:5a:c7:90:2e:77:ab:e4: 97:df:8a:df:ed:3d:fd:53:46:a5:38:34:c2:b8:92: 12:a2:1f:40:bc:ea:80:5e:1d:97:6e:f9:7f:4d:d6: 37:ed:90:ae:36:3a:3f:1b:8c:91:d5:b2:61:b8:c6: c6:56:85:72:ae:23:a5:cd:3e:3b:eb:03:4d:41:44: 64:62:71:4d:29:76:9e:bd:00:ca:76:26:ce:d7:74: 9f:24:2e:1d:7e:a1:29:d9:d2:bf:46:14:26:e9:15: ab:45:5b:77:1a:92:fa:30:75:31:46:09:cc:1c:5d: 13:12:50:89:12:14:66:33:3c:07:2e:17:f6:5c:0c: 1d:17:f2:16:06:8c:68:b0:7e:e8:f4:f2:da:79:31: 70:ae:92:48:76:8e:b4:1e:c0:6c:e7:8d:5c:66:6b: 8f:76:ba:c4:02:1d:29:7d:e5:8f:dc:c9:29:d2:50: cb:00:a3:45:f7:7a:57:f7:d6:18:1b:88:ba:12:da: 1d:90:0e:9f:d2:02:b7:d2:30:86:4f:f1:64:2c:f2: eb:95:fd:a6:63:d0:c1:e1:91:84:6c:ac:de:37:d9: 0a:57:ec:cb:8a:e7:1a:c4:53:ae:d5:b6:9a:de:ae: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A2:EE:D2:55:47:CE:FE:B0:07:46:58:ED:AC:CC:A4:AE:AA:ED:34 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a371::/32 Signature Algorithm: sha256WithRSAEncryption 8e:99:31:15:63:78:89:c1:f5:93:c7:d9:4d:2a:03:36:7f:af: 6b:cd:75:90:85:41:16:e4:9f:a9:5a:18:3e:77:e6:9c:b1:9f: 01:12:df:e7:04:47:e0:95:ef:09:7f:5f:c7:aa:12:4b:c2:8b: ac:03:f7:a0:35:82:d1:9a:86:15:10:04:0e:10:a1:0c:25:cb: ad:83:e5:10:c5:75:03:4d:91:a0:44:ce:d6:7f:f1:c8:dc:5e: 3b:10:49:ea:a5:f6:d4:63:fd:b0:40:0b:51:05:08:11:38:4d: ee:55:b3:14:6b:9d:d3:f0:d7:f1:c9:d4:76:04:24:28:ec:0d: c9:d7:ed:c1:6f:a0:49:9b:1f:e3:6e:c5:00:5f:c8:1a:4b:d8: 86:33:cd:46:3e:fd:d8:73:a0:b6:56:f3:0c:f7:62:e3:37:9b: a9:f5:1a:ea:1d:6a:75:5d:f1:7a:db:c2:32:da:77:17:bb:bc: 14:1d:fd:c2:f4:4b:9f:a9:d3:61:da:ae:3e:43:75:12:66:49: a4:10:e7:6b:f5:d8:2e:ef:8f:be:06:d1:30:e2:86:52:91:07: 5c:7b:da:72:84:09:bb:ba:6b:3a:15:08:7a:5c:75:db:45:cb: 06:82:8a:4f:dd:cc:32:37:3d:a1:15:88:fa:60:6a:78:db:08: 5f:7e:81:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNlsoQkfZPh89fFROp21H0t6cv8QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzM1oX DTI3MDMwMzA2MTMzM1owMzExMC8GA1UEAxMoRjVBMkVFRDI1NTQ3Q0VGRUIwMDc0 NjU4RURBQ0NDQTRBRUFBRUQzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD6Th4g9xl6XCrZkQx7fBFWPdFOBc1ax5Aud6vkl9+K3+09/VNGpTg0wriS EqIfQLzqgF4dl275f03WN+2QrjY6PxuMkdWyYbjGxlaFcq4jpc0+O+sDTUFEZGJx TSl2nr0AynYmztd0nyQuHX6hKdnSv0YUJukVq0VbdxqS+jB1MUYJzBxdExJQiRIU ZjM8By4X9lwMHRfyFgaMaLB+6PTy2nkxcK6SSHaOtB7AbOeNXGZrj3a6xAIdKX3l j9zJKdJQywCjRfd6V/fWGBuIuhLaHZAOn9ICt9Iwhk/xZCzy65X9pmPQweGRhGys 3jfZClfsy4rnGsRTrtW2mt6uPN0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT1ou7S VUfO/rAHRljtrMykrqrtNDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o3EwDQYJKoZIhvcNAQELBQADggEBAI6ZMRVjeInB9ZPH2U0qAzZ/r2vNdZCFQRbk n6laGD535pyxnwES3+cER+CV7wl/X8eqEkvCi6wD96A1gtGahhUQBA4QoQwly62D 5RDFdQNNkaBEztZ/8cjcXjsQSeql9tRj/bBAC1EFCBE4Te5VsxRrndPw1/HJ1HYE JCjsDcnX7cFvoEmbH+NuxQBfyBpL2IYzzUY+/dhzoLZW8wz3YuM3m6n1GuodanVd 8XrbwjLadxe7vBQd/cL0S5+p02Harj5DdRJmSaQQ52v12C7vj74G0TDihlKRB1x7 2nKECbu6azoVCHpcddtFywaCik/dzDI3PaEViPpganjbCF9+gR0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:22 2026 by rpki-client