$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143545.roa File: AS143545.roa (raw, json) Hash identifier: Kuwg6G/tNdrNeOJfWflMQDFEULFDhomKdfM0hyy3ZQI= Subject key identifier: 58:70:E7:45:A4:93:83:62:6D:E5:E2:A1:7B:3E:AE:47:46:CE:41:20 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 678FB097EEBBD2976772B80BD4D918D65DCE8F44 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143545.roa Signing time: Wed 04 Mar 2026 06:12:36 +0000 ROA not before: Wed 04 Mar 2026 06:07:36 +0000 ROA not after: Wed 03 Mar 2027 06:12:36 +0000 asID: 143545 IP address blocks: 240a:a37f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8f:b0:97:ee:bb:d2:97:67:72:b8:0b:d4:d9:18:d6:5d:ce:8f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:36 2026 GMT Not After : Mar 3 06:12:36 2027 GMT Subject: CN=5870E745A49383626DE5E2A17B3EAE4746CE4120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d3:83:54:6c:b7:c4:2b:44:c2:8a:33:01:12: af:e3:d3:95:c2:1b:1b:f6:e3:a0:a4:ec:2e:3c:01: 51:ff:e3:70:10:33:c7:67:fd:92:2b:55:eb:77:7a: d2:13:57:45:3d:42:80:12:61:65:6c:5b:a1:e9:b5: 0e:85:74:a2:b3:c6:10:7e:34:4a:27:36:b2:a1:8f: 2b:a2:ba:f9:31:bb:86:2a:23:8a:07:e4:0a:31:6d: 3e:77:bc:b9:3a:75:e0:b9:87:6a:02:4a:90:e1:07: b0:8c:7d:8b:6f:51:26:0a:60:e5:81:93:87:b0:7d: 07:ea:cb:62:2f:f1:e0:dc:76:22:90:e5:6f:18:1d: 55:1c:70:c7:3a:35:ea:bf:0b:35:d3:d4:1a:f3:ab: 85:0a:4e:34:b9:e0:da:bf:e7:6c:a9:40:68:32:99: c2:63:35:9c:ba:54:ac:fc:b6:b5:52:73:6c:e3:a8: a7:17:f9:56:c5:49:37:66:72:6c:be:b5:5a:dd:e1: d2:7d:37:13:5d:6b:d4:1b:92:e6:16:64:de:1f:48: 32:19:8e:67:e8:26:d9:ba:42:f5:83:dc:9c:7e:65: b8:3c:30:b5:7f:55:6b:09:30:53:ce:db:ad:e4:48: 07:e1:62:1f:57:b0:64:b0:9d:a0:12:72:84:0b:e8: be:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:E7:45:A4:93:83:62:6D:E5:E2:A1:7B:3E:AE:47:46:CE:41:20 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143545.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a37f::/32 Signature Algorithm: sha256WithRSAEncryption cf:3c:73:22:03:35:80:9b:0a:98:9d:2a:bd:28:13:99:3e:8d: 45:cb:a2:60:4d:2b:70:4a:a3:14:50:2d:db:1b:60:99:64:23: a9:8d:ab:f2:59:d1:78:19:7d:64:d6:0a:86:d6:08:25:ae:9c: 07:ed:a6:08:7a:76:72:e1:f1:f6:41:3f:08:cf:e2:b5:91:87: ea:8a:6a:6e:f4:7f:de:87:7f:c3:a6:90:33:1c:07:74:15:92: d5:6e:6f:f5:41:6d:56:48:db:3e:c4:90:74:f2:0f:ab:88:13: 43:0e:c2:69:3a:63:e4:4d:0c:47:6e:e1:80:52:9d:ab:a3:2b: 6c:92:fb:7c:99:47:4e:e6:17:d3:cb:82:e8:80:df:b7:d0:50: 00:cd:68:08:53:d1:19:89:48:01:df:81:f7:60:8b:37:c3:79: 1e:76:22:f6:9d:69:a6:69:54:09:65:e7:08:10:ca:b2:94:2f: 79:1f:ed:30:90:11:fe:2d:70:d1:2c:fc:c9:67:19:6b:82:48: a9:43:fa:6c:cd:79:ee:e0:cf:19:d9:00:85:23:f3:67:de:a8: 1d:01:a9:2b:7b:fb:65:78:1d:d0:b8:e8:c1:73:49:53:89:77: 7e:3e:3e:03:81:0d:ff:f4:e1:ce:18:be:7c:be:fd:8d:a1:14: 36:22:10:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZ4+wl+670pdncrgL1NkY1l3Oj0QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczNloX DTI3MDMwMzA2MTIzNlowMzExMC8GA1UEAxMoNTg3MEU3NDVBNDkzODM2MjZERTVF MkExN0IzRUFFNDc0NkNFNDEyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJDTg1Rst8QrRMKKMwESr+PTlcIbG/bjoKTsLjwBUf/jcBAzx2f9kitV63d6 0hNXRT1CgBJhZWxboem1DoV0orPGEH40Sic2sqGPK6K6+TG7hiojigfkCjFtPne8 uTp14LmHagJKkOEHsIx9i29RJgpg5YGTh7B9B+rLYi/x4Nx2IpDlbxgdVRxwxzo1 6r8LNdPUGvOrhQpONLng2r/nbKlAaDKZwmM1nLpUrPy2tVJzbOOopxf5VsVJN2Zy bL61Wt3h0n03E11r1BuS5hZk3h9IMhmOZ+gm2bpC9YPcnH5luDwwtX9VawkwU87b reRIB+FiH1ewZLCdoBJyhAvovmECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRYcOdF pJODYm3l4qF7Pq5HRs5BIDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o38wDQYJKoZIhvcNAQELBQADggEBAM88cyIDNYCbCpidKr0oE5k+jUXLomBNK3BK oxRQLdsbYJlkI6mNq/JZ0XgZfWTWCobWCCWunAftpgh6dnLh8fZBPwjP4rWRh+qK am70f96Hf8OmkDMcB3QVktVub/VBbVZI2z7EkHTyD6uIE0MOwmk6Y+RNDEdu4YBS naujK2yS+3yZR07mF9PLguiA37fQUADNaAhT0RmJSAHfgfdgizfDeR52IvadaaZp VAll5wgQyrKUL3kf7TCQEf4tcNEs/MlnGWuCSKlD+mzNee7gzxnZAIUj82feqB0B qSt7+2V4HdC46MFzSVOJd34+PgOBDf/04c4Yvny+/Y2hFDYiEEo= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:13 2026 by rpki-client