$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143540.roa File: AS143540.roa (raw, json) Hash identifier: uAZ/u8Kw1yIBhQ8+Qgh2cxpsOCGZ8hFr07FDlHuNfgY= Subject key identifier: 3C:D2:97:08:62:4A:7E:28:78:34:3E:6C:E6:8D:4F:0D:99:07:90:73 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4E8951A11C57AE3E47AAFE317281BF777F544226 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143540.roa Signing time: Wed 04 Mar 2026 06:14:21 +0000 ROA not before: Wed 04 Mar 2026 06:09:21 +0000 ROA not after: Wed 03 Mar 2027 06:14:21 +0000 asID: 143540 IP address blocks: 240a:a37a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:89:51:a1:1c:57:ae:3e:47:aa:fe:31:72:81:bf:77:7f:54:42:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:21 2026 GMT Not After : Mar 3 06:14:21 2027 GMT Subject: CN=3CD29708624A7E2878343E6CE68D4F0D99079073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:c9:02:8d:b1:67:a6:cf:9b:f7:02:73:ba: 59:e6:ca:01:8d:c8:23:b7:bd:dd:1f:b8:ba:71:c4: e3:e6:fe:1d:56:ad:4e:f0:d8:5e:21:cd:ab:50:a2: 55:80:05:0c:95:ad:73:bb:04:26:38:22:ca:b2:b0: 1b:af:2d:54:e3:de:97:13:5f:2e:7e:42:cd:dd:ca: 05:3a:6a:b8:21:eb:2e:0f:aa:cb:92:bf:93:80:94: d5:21:6e:51:e7:b0:94:d2:d1:9d:5d:87:97:94:57: ae:ef:42:18:21:ac:57:de:cb:96:9f:49:98:4a:dc: 1e:f3:e2:f4:31:d5:3d:7d:f9:83:34:2c:28:75:e5: 42:46:f3:88:8a:bf:6a:b2:fd:31:92:7d:e4:c3:0f: 90:b1:7d:1b:be:e7:a6:0c:6b:f4:73:11:63:2d:e6: 93:11:7f:0c:f3:ab:d0:42:6c:84:f6:81:d4:e5:14: 71:c6:37:18:64:81:d2:cf:2e:ce:57:a6:a8:38:42: d8:51:50:ef:c9:bf:1d:6e:b0:84:e2:8b:f8:dd:29: 0e:cf:0b:16:b7:e3:d1:bd:b8:db:ad:69:54:1c:1e: fd:5b:6b:36:61:9c:7f:f4:5e:32:4a:a7:2f:cc:24: 81:a2:70:1e:f3:e7:6f:4f:99:80:4a:66:e7:cc:bd: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D2:97:08:62:4A:7E:28:78:34:3E:6C:E6:8D:4F:0D:99:07:90:73 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143540.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a37a::/32 Signature Algorithm: sha256WithRSAEncryption d1:7f:a1:9d:ad:da:17:40:91:47:09:16:d0:05:d7:1a:c3:5a: ba:da:00:0a:7c:70:ec:c4:63:fb:2e:27:08:43:b2:bb:ae:04: 45:43:bd:3d:4e:2c:c4:23:03:4f:f2:b0:c9:de:04:61:08:51: 4e:11:40:0d:c7:b5:e9:55:24:0f:7d:0d:b8:db:f2:f2:00:6e: 58:d1:52:b5:33:22:25:b0:42:42:9f:86:2e:b7:b2:21:b0:ec: bd:2b:ec:a2:4e:9a:9a:2f:4f:71:59:4e:a4:75:7d:69:38:14: 86:31:63:cc:72:4c:0b:93:6a:d8:7f:aa:a8:b2:6b:dc:48:d1: eb:21:85:4f:53:1e:07:12:27:f6:5a:e3:61:89:ff:ea:43:26: 10:b9:68:7f:38:d7:ff:22:72:2e:d9:26:32:c0:29:d2:36:71: 69:67:33:02:39:2f:76:ab:3e:09:96:f2:d9:8c:66:11:18:22: d1:4d:4d:ff:16:02:d8:d0:21:ef:d7:03:fa:13:86:1d:0c:51: 3f:02:fa:5c:52:f4:ce:c9:bd:4e:65:be:a5:48:0b:fb:bd:7b: 5d:ae:d8:d1:d6:9e:64:03:51:a6:8d:5a:61:71:70:c3:76:81: a7:a4:6a:be:b9:00:4d:5e:3f:dd:19:ad:1b:30:25:52:4d:00: fa:54:fd:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTolRoRxXrj5Hqv4xcoG/d39UQiYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyMVoX DTI3MDMwMzA2MTQyMVowMzExMC8GA1UEAxMoM0NEMjk3MDg2MjRBN0UyODc4MzQz RTZDRTY4RDRGMEQ5OTA3OTA3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaqyQKNsWemz5v3AnO6WebKAY3II7e93R+4unHE4+b+HVatTvDYXiHNq1Ci VYAFDJWtc7sEJjgiyrKwG68tVOPelxNfLn5Czd3KBTpquCHrLg+qy5K/k4CU1SFu UeewlNLRnV2Hl5RXru9CGCGsV97Llp9JmErcHvPi9DHVPX35gzQsKHXlQkbziIq/ arL9MZJ95MMPkLF9G77npgxr9HMRYy3mkxF/DPOr0EJshPaB1OUUccY3GGSB0s8u zlemqDhC2FFQ78m/HW6whOKL+N0pDs8LFrfj0b24261pVBwe/VtrNmGcf/ReMkqn L8wkgaJwHvPnb0+ZgEpm58y9Mk8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ80pcI Ykp+KHg0PmzmjU8NmQeQczAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o3owDQYJKoZIhvcNAQELBQADggEBANF/oZ2t2hdAkUcJFtAF1xrDWrraAAp8cOzE Y/suJwhDsruuBEVDvT1OLMQjA0/ysMneBGEIUU4RQA3HtelVJA99Dbjb8vIAbljR UrUzIiWwQkKfhi63siGw7L0r7KJOmpovT3FZTqR1fWk4FIYxY8xyTAuTath/qqiy a9xI0eshhU9THgcSJ/Za42GJ/+pDJhC5aH841/8ici7ZJjLAKdI2cWlnMwI5L3ar PgmW8tmMZhEYItFNTf8WAtjQIe/XA/oThh0MUT8C+lxS9M7JvU5lvqVIC/u9e12u 2NHWnmQDUaaNWmFxcMN2gaekar65AE1eP90ZrRswJVJNAPpU/TE= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:34 2026 by rpki-client