$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143541.roa File: AS143541.roa (raw, json) Hash identifier: yyrjx7JsU+HwR01Q9JhraRp4+CxZQjpGKjYM9LCnpM0= Subject key identifier: 6D:91:FB:B4:EB:71:62:BE:5F:F4:FF:56:85:38:D3:37:C8:6F:86:D7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5BA7204E4FEA2681D7A0E06226A3FBB2310DC8AE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143541.roa Signing time: Wed 04 Mar 2026 06:12:30 +0000 ROA not before: Wed 04 Mar 2026 06:07:30 +0000 ROA not after: Wed 03 Mar 2027 06:12:30 +0000 asID: 143541 IP address blocks: 240a:a37b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a7:20:4e:4f:ea:26:81:d7:a0:e0:62:26:a3:fb:b2:31:0d:c8:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:30 2026 GMT Not After : Mar 3 06:12:30 2027 GMT Subject: CN=6D91FBB4EB7162BE5FF4FF568538D337C86F86D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:b3:2c:87:38:23:9b:50:1d:35:86:76:29: 97:d9:27:fc:1d:89:5a:c9:23:d8:f2:bf:c5:6a:cf: ed:41:96:4a:58:19:68:ee:c8:a8:fd:45:11:1e:c4: ca:4e:b0:af:0d:aa:b0:de:6e:c3:ed:5b:02:6c:58: 19:b4:d7:3c:e5:4a:30:8f:c1:57:e0:b8:15:74:86: 9f:d3:59:74:00:0d:ed:65:85:82:5c:cb:d8:6f:6c: 5a:cf:c1:79:1e:c6:6c:76:14:d4:eb:86:06:de:9d: 5a:6a:ba:b6:64:e3:7e:b0:03:e7:01:18:ce:87:9a: af:a0:21:62:32:5e:6c:a9:bb:d0:ef:ce:5b:69:81: 16:11:c3:16:81:f2:00:82:f4:f0:28:a3:ae:2f:3e: 63:d2:04:2e:fb:18:09:65:f1:26:93:da:6b:36:03: c9:ae:19:8f:20:c1:af:b2:78:36:9a:88:25:b9:07: 5d:f4:e2:36:ba:d2:23:ef:89:31:67:4b:1a:e7:5d: 82:7c:78:69:81:92:53:49:fb:ec:3c:86:a7:8d:42: f1:39:61:a9:29:ba:ef:54:43:d3:19:a4:83:b4:ce: 8c:cf:93:92:c4:69:5c:1e:f9:8e:8a:69:8f:db:79: 2b:e5:c9:74:e5:71:16:ee:3f:db:35:a5:63:cd:14: 92:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:91:FB:B4:EB:71:62:BE:5F:F4:FF:56:85:38:D3:37:C8:6F:86:D7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a37b::/32 Signature Algorithm: sha256WithRSAEncryption 42:01:71:ad:2d:66:40:2a:9b:95:15:08:20:c8:1f:cb:c8:eb: b7:08:d3:99:91:e2:75:64:e5:40:ff:76:61:15:d9:6f:37:46: 66:3f:5b:58:91:80:80:4d:ed:9c:44:a0:24:6d:4f:e8:a3:cf: 43:cd:09:fb:67:cb:ae:5b:77:52:08:5e:e4:e3:0d:60:8c:e1: 6b:b2:69:f1:04:19:33:8a:eb:87:f8:6b:65:a8:2d:c1:9e:e6: 61:06:2f:e2:5f:37:fb:56:c7:e7:9f:f8:99:64:28:02:b7:bd: 56:77:7f:38:b6:9d:17:08:98:96:66:06:8a:e0:0a:76:ac:9a: da:79:86:55:b3:cd:21:be:f0:c1:f8:03:d1:d7:de:e6:e7:ec: 26:7b:44:6f:7c:9a:d1:bb:08:b8:f7:d6:b8:d1:6d:12:d9:73: 3f:f8:ee:65:c0:ab:49:8f:c0:1b:c2:26:ef:0f:c9:f8:08:b3: c3:52:c9:13:84:91:6d:8c:a9:9e:14:2c:69:01:d8:ba:67:f3: 1c:7e:22:dc:fe:9b:4f:16:c1:de:37:22:f8:ac:b0:21:09:78: 0e:22:97:c2:00:ce:97:8a:4c:d5:64:97:f9:6a:36:8d:26:bb: ca:cd:9f:28:dc:73:af:93:7d:ec:b1:b1:74:98:f5:cb:d1:71: 34:8d:2b:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUW6cgTk/qJoHXoOBiJqP7sjENyK4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczMFoX DTI3MDMwMzA2MTIzMFowMzExMC8GA1UEAxMoNkQ5MUZCQjRFQjcxNjJCRTVGRjRG RjU2ODUzOEQzMzdDODZGODZENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHXsyyHOCObUB01hnYpl9kn/B2JWskj2PK/xWrP7UGWSlgZaO7IqP1FER7E yk6wrw2qsN5uw+1bAmxYGbTXPOVKMI/BV+C4FXSGn9NZdAAN7WWFglzL2G9sWs/B eR7GbHYU1OuGBt6dWmq6tmTjfrAD5wEYzoear6AhYjJebKm70O/OW2mBFhHDFoHy AIL08Cijri8+Y9IELvsYCWXxJpPaazYDya4ZjyDBr7J4NpqIJbkHXfTiNrrSI++J MWdLGuddgnx4aYGSU0n77DyGp41C8TlhqSm671RD0xmkg7TOjM+TksRpXB75jopp j9t5K+XJdOVxFu4/2zWlY80UkiECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRtkfu0 63Fivl/0/1aFONM3yG+G1zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o3swDQYJKoZIhvcNAQELBQADggEBAEIBca0tZkAqm5UVCCDIH8vI67cI05mR4nVk 5UD/dmEV2W83RmY/W1iRgIBN7ZxEoCRtT+ijz0PNCftny65bd1IIXuTjDWCM4Wuy afEEGTOK64f4a2WoLcGe5mEGL+JfN/tWx+ef+JlkKAK3vVZ3fzi2nRcImJZmBorg Cnasmtp5hlWzzSG+8MH4A9HX3ubn7CZ7RG98mtG7CLj31rjRbRLZcz/47mXAq0mP wBvCJu8PyfgIs8NSyROEkW2MqZ4ULGkB2Lpn8xx+Itz+m08Wwd43IvissCEJeA4i l8IAzpeKTNVkl/lqNo0mu8rNnyjcc6+TfeyxsXSY9cvRcTSNK4g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:05 2026 by rpki-client