$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143539.roa File: AS143539.roa (raw, json) Hash identifier: uMgG+lrDemKco41L95LIWxIZqjnF8pMxfFvzdsNdUTA= Subject key identifier: 11:DE:E7:0F:E6:87:A5:82:77:0B:47:08:29:FD:BA:AF:68:7E:5E:17 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 060AE2A065559D04225844C5326CB979AB718282 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143539.roa Signing time: Wed 04 Mar 2026 06:14:25 +0000 ROA not before: Wed 04 Mar 2026 06:09:25 +0000 ROA not after: Wed 03 Mar 2027 06:14:25 +0000 asID: 143539 IP address blocks: 240a:a379::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0a:e2:a0:65:55:9d:04:22:58:44:c5:32:6c:b9:79:ab:71:82:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:25 2026 GMT Not After : Mar 3 06:14:25 2027 GMT Subject: CN=11DEE70FE687A582770B470829FDBAAF687E5E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:62:21:bd:c0:10:57:78:61:1f:c2:f0:a5: 30:ea:87:b7:51:ac:71:c8:ba:2b:bc:66:b6:33:6e: 7a:4a:50:6e:8f:18:aa:02:33:8f:22:34:8d:4e:82: 22:ee:11:77:b5:a1:4a:b5:e2:3f:e8:02:01:d8:9a: 0e:10:05:a6:3b:05:68:a3:35:05:d1:8b:11:b1:c8: e5:2c:cc:52:e0:3e:de:95:d1:60:7e:8e:eb:ec:75: dd:6b:54:3e:4d:21:b4:fe:fe:a4:31:57:55:4d:51: a3:47:f7:e3:7c:bb:a2:ed:a4:6d:ac:f2:5c:f9:fd: b0:82:2e:c6:2a:75:7b:a7:08:55:7a:5d:06:d3:41: 4c:31:d3:ca:20:09:af:79:c0:19:88:48:47:94:09: 82:a4:e9:50:18:7e:c5:3e:c8:aa:93:34:9d:e0:5e: ec:c7:ce:ef:f8:5b:38:b7:ba:83:2b:46:db:98:ee: 46:e2:7e:64:23:55:ee:23:20:e1:82:1a:dc:e0:39: 3f:bb:1b:97:c5:f3:e4:4f:94:e7:22:9d:cb:35:75: 16:01:bd:8b:bf:e1:2b:7e:bb:ee:3a:c9:ed:8d:54: f9:19:71:1e:fd:82:4d:66:ce:a2:35:36:37:15:9a: 67:59:6e:e3:93:28:6d:bc:83:07:1c:23:c2:20:51: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DE:E7:0F:E6:87:A5:82:77:0B:47:08:29:FD:BA:AF:68:7E:5E:17 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a379::/32 Signature Algorithm: sha256WithRSAEncryption 0b:db:3b:8b:2a:37:89:48:8a:18:fe:52:8b:02:00:1f:f9:b9: b2:bf:a2:b8:9b:27:32:91:d7:99:00:42:39:fa:bd:27:7f:20: f5:c5:37:6d:6e:6f:fb:e5:26:ba:b7:d9:85:6e:4f:75:9d:a6: 61:8c:e9:e9:24:72:a4:eb:75:b7:ea:88:aa:e3:f4:28:3a:3c: 03:e3:25:dc:79:30:c2:f4:56:2e:c8:f0:d5:2c:28:56:6e:a3: 8c:12:0a:f2:c6:07:8a:6a:c6:61:c9:f1:c6:a9:a2:c9:f9:ed: 8e:39:b3:aa:69:c5:45:7b:28:a7:b4:a0:dc:4c:db:3c:a8:63: 7a:c1:2d:68:80:fb:a8:9b:ee:e9:2f:30:8e:71:22:25:b8:0b: 94:28:2a:7a:c2:73:22:f7:40:5a:5e:17:cd:6c:81:32:86:9c: 5f:c6:2a:9a:44:0b:80:45:ab:9c:21:74:f5:84:ea:e7:87:18: 55:d5:7f:1b:12:4b:67:80:71:a3:05:84:18:06:81:b4:ea:b0: 6b:1a:1a:c4:35:ee:1f:58:72:d8:26:4c:be:1c:f9:9b:85:83: 01:56:13:f6:4b:a7:9d:7d:97:c0:3c:01:07:81:4a:6c:5f:53: c4:56:cc:37:d7:8e:1a:b1:95:95:02:fc:aa:76:a1:1d:6f:22: 26:6c:48:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBgrioGVVnQQiWETFMmy5eatxgoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyNVoX DTI3MDMwMzA2MTQyNVowMzExMC8GA1UEAxMoMTFERUU3MEZFNjg3QTU4Mjc3MEI0 NzA4MjlGREJBQUY2ODdFNUUxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVhYiG9wBBXeGEfwvClMOqHt1Gscci6K7xmtjNuekpQbo8YqgIzjyI0jU6C Iu4Rd7WhSrXiP+gCAdiaDhAFpjsFaKM1BdGLEbHI5SzMUuA+3pXRYH6O6+x13WtU Pk0htP7+pDFXVU1Ro0f343y7ou2kbazyXPn9sIIuxip1e6cIVXpdBtNBTDHTyiAJ r3nAGYhIR5QJgqTpUBh+xT7IqpM0neBe7MfO7/hbOLe6gytG25juRuJ+ZCNV7iMg 4YIa3OA5P7sbl8Xz5E+U5yKdyzV1FgG9i7/hK3677jrJ7Y1U+RlxHv2CTWbOojU2 NxWaZ1lu45MobbyDBxwjwiBRf/sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQR3ucP 5oelgncLRwgp/bqvaH5eFzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o3kwDQYJKoZIhvcNAQELBQADggEBAAvbO4sqN4lIihj+UosCAB/5ubK/oribJzKR 15kAQjn6vSd/IPXFN21ub/vlJrq32YVuT3WdpmGM6ekkcqTrdbfqiKrj9Cg6PAPj Jdx5MML0Vi7I8NUsKFZuo4wSCvLGB4pqxmHJ8caposn57Y45s6ppxUV7KKe0oNxM 2zyoY3rBLWiA+6ib7ukvMI5xIiW4C5QoKnrCcyL3QFpeF81sgTKGnF/GKppEC4BF q5whdPWE6ueHGFXVfxsSS2eAcaMFhBgGgbTqsGsaGsQ17h9YctgmTL4c+ZuFgwFW E/ZLp519l8A8AQeBSmxfU8RWzDfXjhqxlZUC/Kp2oR1vIiZsSKw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:31 2026 by rpki-client