$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143544.roa File: AS143544.roa (raw, json) Hash identifier: bwHKaZlstQRPatDyUEITTE1LqX18otzRUyEk7csANig= Subject key identifier: 0C:EF:88:8B:4E:BC:28:0B:7A:65:22:08:8F:EF:68:75:BB:6D:3C:32 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2B3907CCA16AD5920BC6F182933215302210FB74 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143544.roa Signing time: Wed 04 Mar 2026 06:13:16 +0000 ROA not before: Wed 04 Mar 2026 06:08:16 +0000 ROA not after: Wed 03 Mar 2027 06:13:16 +0000 asID: 143544 IP address blocks: 240a:a37e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:39:07:cc:a1:6a:d5:92:0b:c6:f1:82:93:32:15:30:22:10:fb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:16 2026 GMT Not After : Mar 3 06:13:16 2027 GMT Subject: CN=0CEF888B4EBC280B7A6522088FEF6875BB6D3C32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:f0:44:83:ae:fd:8d:11:f5:79:e4:e8:6f: f9:b9:91:67:41:28:56:6a:5a:e3:a6:93:46:7c:4e: 62:22:7d:d2:44:0c:68:39:b5:1a:68:32:ae:ee:db: 3e:ea:26:1e:4b:cc:3d:b2:50:6b:a6:fd:bb:0a:f8: a1:58:71:6b:af:17:44:60:b9:91:51:06:5f:84:4a: b0:f4:5a:3c:ad:a8:18:d4:9f:6c:48:5d:f5:a9:a3: 32:00:b6:64:09:61:9b:3d:0f:17:cf:9c:d6:df:99: f6:06:57:af:3c:d7:31:b0:5f:2b:97:56:64:a4:4a: f5:7c:35:90:3b:35:c5:69:60:75:41:09:bc:5b:62: e9:2b:02:2a:80:78:2a:20:39:77:b1:df:a3:ef:05: 0b:dd:73:11:c7:ae:cb:19:40:08:c4:41:f2:3b:05: cc:32:37:7c:4e:b5:2b:0f:3c:2c:73:a8:00:19:03: a8:12:32:c0:6f:9e:9c:ae:aa:41:d7:57:44:d5:34: 9d:1a:45:f2:25:2e:af:3a:50:1a:82:80:9e:c5:e2: 39:75:07:63:73:fc:5d:91:6f:18:02:5e:98:4f:bc: 51:a5:08:49:69:3e:d1:ea:0d:57:9c:86:07:f9:df: 5e:22:75:d5:b8:a5:2d:fa:a6:27:c3:50:29:c4:f2: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EF:88:8B:4E:BC:28:0B:7A:65:22:08:8F:EF:68:75:BB:6D:3C:32 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143544.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a37e::/32 Signature Algorithm: sha256WithRSAEncryption 73:3c:3c:d1:5e:7e:ee:97:56:0a:67:f8:1b:6b:27:e7:50:31: e2:63:cf:05:e5:aa:7c:d0:11:f1:d7:06:29:af:07:b5:d2:4c: 31:85:5e:e8:5a:31:72:bc:90:40:44:28:c2:c4:67:19:d0:9a: fd:38:e5:0b:53:94:53:b4:bf:c9:a1:5b:de:85:c1:9d:f1:2a: 88:74:78:b4:9e:e8:7a:25:a3:85:ab:2e:99:a6:b0:58:92:7c: 59:71:ae:f4:d7:1a:01:83:11:41:a1:fb:6d:0a:40:3a:45:66: 55:14:91:3c:d7:03:bc:8c:10:18:2e:cb:28:55:f2:85:c7:73: e5:61:b1:0a:70:20:06:77:5f:c7:3d:67:ec:aa:1b:75:41:a7: 77:53:54:4d:fb:8c:44:90:c6:b1:ce:77:1e:d8:e3:a2:c7:ad: fa:85:87:61:79:a8:84:60:f7:d9:65:0f:99:87:e4:f6:34:e5: 2d:18:4e:a6:01:74:e2:d2:6b:46:58:3d:16:eb:6c:0b:b3:f6: 38:97:c0:d2:90:4d:c7:9e:78:f5:5c:cf:7a:51:99:01:4e:ef: f4:36:b0:e5:21:3f:cc:5d:b9:96:9a:9c:67:aa:27:d4:a0:fe: df:a9:13:68:2c:00:eb:65:20:5a:d4:8d:bd:1f:6f:70:9b:79: 9e:f4:c1:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKzkHzKFq1ZILxvGCkzIVMCIQ+3QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNloX DTI3MDMwMzA2MTMxNlowMzExMC8GA1UEAxMoMENFRjg4OEI0RUJDMjgwQjdBNjUy MjA4OEZFRjY4NzVCQjZEM0MzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZA8ESDrv2NEfV55Ohv+bmRZ0EoVmpa46aTRnxOYiJ90kQMaDm1Gmgyru7b PuomHkvMPbJQa6b9uwr4oVhxa68XRGC5kVEGX4RKsPRaPK2oGNSfbEhd9amjMgC2 ZAlhmz0PF8+c1t+Z9gZXrzzXMbBfK5dWZKRK9Xw1kDs1xWlgdUEJvFti6SsCKoB4 KiA5d7Hfo+8FC91zEceuyxlACMRB8jsFzDI3fE61Kw88LHOoABkDqBIywG+enK6q QddXRNU0nRpF8iUurzpQGoKAnsXiOXUHY3P8XZFvGAJemE+8UaUISWk+0eoNV5yG B/nfXiJ11bilLfqmJ8NQKcTyAj8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQM74iL TrwoC3plIgiP72h1u208MjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o34wDQYJKoZIhvcNAQELBQADggEBAHM8PNFefu6XVgpn+BtrJ+dQMeJjzwXlqnzQ EfHXBimvB7XSTDGFXuhaMXK8kEBEKMLEZxnQmv045QtTlFO0v8mhW96FwZ3xKoh0 eLSe6Holo4WrLpmmsFiSfFlxrvTXGgGDEUGh+20KQDpFZlUUkTzXA7yMEBguyyhV 8oXHc+VhsQpwIAZ3X8c9Z+yqG3VBp3dTVE37jESQxrHOdx7Y46LHrfqFh2F5qIRg 99llD5mH5PY05S0YTqYBdOLSa0ZYPRbrbAuz9jiXwNKQTceeePVcz3pRmQFO7/Q2 sOUhP8xduZaanGeqJ9Sg/t+pE2gsAOtlIFrUjb0fb3CbeZ70was= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:04 2026 by rpki-client