$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143536.roa File: AS143536.roa (raw, json) Hash identifier: wnh2JczthxSfKyi9c3X7srmkmdefvpnP0pTirEbwWZI= Subject key identifier: B2:91:3A:90:BD:86:08:C6:82:C5:C5:EA:A3:53:61:AC:76:51:D1:16 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4F5FFF0424B044FD363334919EC05BFF6CEAD94F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143536.roa Signing time: Wed 04 Mar 2026 06:13:12 +0000 ROA not before: Wed 04 Mar 2026 06:08:12 +0000 ROA not after: Wed 03 Mar 2027 06:13:12 +0000 asID: 143536 IP address blocks: 240a:a376::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5f:ff:04:24:b0:44:fd:36:33:34:91:9e:c0:5b:ff:6c:ea:d9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:12 2026 GMT Not After : Mar 3 06:13:12 2027 GMT Subject: CN=B2913A90BD8608C682C5C5EAA35361AC7651D116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:01:f7:5a:45:9c:20:92:86:10:21:6f:5c: b8:80:f8:d2:9c:26:8a:92:60:cd:de:50:5e:10:75: 46:47:f8:18:c3:77:a4:e1:22:c6:de:b5:34:70:76: 76:6a:ba:58:0d:9e:a3:85:d2:4a:07:40:d0:85:87: df:11:4d:23:20:ae:41:11:ad:d4:9a:93:32:dd:be: 03:9b:fa:92:26:58:e8:90:6d:6a:58:31:83:99:ee: 15:47:4d:54:92:66:b9:e4:4d:eb:34:72:f3:7d:5c: 55:f0:49:99:75:60:67:4e:2f:58:fa:ce:f0:6a:91: 91:bb:d6:d4:85:12:31:65:f4:1e:88:b1:33:e4:39: 19:f8:ae:ff:01:dd:d9:0e:22:e4:d0:fd:33:e0:4a: d7:87:f3:60:a2:71:83:be:0a:07:1a:1b:86:4e:b8: 50:ab:72:a5:65:66:f8:4b:9b:38:cd:31:79:18:ca: d0:27:a0:88:f4:03:d8:c1:89:fe:41:7a:2d:a8:56: d2:e7:32:8e:a7:9a:fa:de:30:61:95:70:fc:5c:89: 3a:39:c3:dd:ea:d6:82:d1:96:2b:5f:5a:1f:37:72: fa:68:db:cf:a4:f7:08:ef:2e:c8:ed:e4:ad:d9:41: f9:02:49:16:4a:00:d9:4c:57:a8:58:b9:d2:80:ea: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:91:3A:90:BD:86:08:C6:82:C5:C5:EA:A3:53:61:AC:76:51:D1:16 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a376::/32 Signature Algorithm: sha256WithRSAEncryption 32:59:c4:21:31:d3:cd:e3:ee:e3:cb:cc:00:a1:48:b6:a7:a0: 7b:d5:57:9a:07:62:55:d5:e9:dd:22:76:88:51:87:03:69:36: d4:22:5b:66:b3:ae:31:20:84:38:cb:e5:42:b3:fa:d0:84:dc: 48:05:89:15:7a:6b:e2:4d:82:db:d8:c8:31:44:80:a6:08:cf: 29:0a:6f:43:e9:36:70:10:fa:2a:36:d6:d0:55:4c:d2:2d:b9: 71:40:ef:d2:7d:50:c2:62:3f:76:12:47:70:b8:71:21:ec:75: b6:f9:f3:c9:3e:26:58:7f:69:bd:20:5e:52:f4:f5:60:ef:ef: 98:b2:bd:66:04:52:e3:09:7a:17:40:fc:78:b0:e5:4f:c1:27: ed:b2:be:03:29:48:3e:27:6f:26:75:83:75:a0:40:59:7d:07: a7:45:54:ed:bf:e2:19:4a:07:3f:fd:22:cd:05:c9:b5:a7:58: 3f:3f:e6:7b:dc:ce:17:1d:82:c8:f5:80:01:16:67:f6:41:86: 09:eb:fa:3a:ac:97:68:87:0c:be:6a:06:97:75:7c:fc:e4:80: c4:49:8a:6d:1a:b8:a0:bc:bb:e3:57:ad:f8:f6:a4:4f:ed:de: 1b:65:0d:fa:93:c7:50:8c:53:94:19:11:d1:df:8b:24:fa:0d: c9:38:cf:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUT1//BCSwRP02MzSRnsBb/2zq2U8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxMloX DTI3MDMwMzA2MTMxMlowMzExMC8GA1UEAxMoQjI5MTNBOTBCRDg2MDhDNjgyQzVD NUVBQTM1MzYxQUM3NjUxRDExNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSEAfdaRZwgkoYQIW9cuID40pwmipJgzd5QXhB1Rkf4GMN3pOEixt61NHB2 dmq6WA2eo4XSSgdA0IWH3xFNIyCuQRGt1JqTMt2+A5v6kiZY6JBtalgxg5nuFUdN VJJmueRN6zRy831cVfBJmXVgZ04vWPrO8GqRkbvW1IUSMWX0HoixM+Q5Gfiu/wHd 2Q4i5ND9M+BK14fzYKJxg74KBxobhk64UKtypWVm+EubOM0xeRjK0CegiPQD2MGJ /kF6LahW0ucyjqea+t4wYZVw/FyJOjnD3erWgtGWK19aHzdy+mjbz6T3CO8uyO3k rdlB+QJJFkoA2UxXqFi50oDqdvkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSykTqQ vYYIxoLFxeqjU2GsdlHRFjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o3YwDQYJKoZIhvcNAQELBQADggEBADJZxCEx083j7uPLzAChSLanoHvVV5oHYlXV 6d0idohRhwNpNtQiW2azrjEghDjL5UKz+tCE3EgFiRV6a+JNgtvYyDFEgKYIzykK b0PpNnAQ+io21tBVTNItuXFA79J9UMJiP3YSR3C4cSHsdbb588k+Jlh/ab0gXlL0 9WDv75iyvWYEUuMJehdA/Hiw5U/BJ+2yvgMpSD4nbyZ1g3WgQFl9B6dFVO2/4hlK Bz/9Is0FybWnWD8/5nvczhcdgsj1gAEWZ/ZBhgnr+jqsl2iHDL5qBpd1fPzkgMRJ im0auKC8u+NXrfj2pE/t3htlDfqTx1CMU5QZEdHfiyT6Dck4z4w= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:05 2026 by rpki-client