$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143549.roa File: AS143549.roa (raw, json) Hash identifier: ZlMYra+X8dD78UvsDsV9TCTh3BpzQr9u1WX1KXDAV58= Subject key identifier: CA:69:2E:89:87:23:6B:D4:30:F1:90:32:F6:5F:3A:4B:D0:46:23:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C5932A126DDF0A64B3B7C2E9CEE128B3F957B73 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143549.roa Signing time: Wed 04 Mar 2026 06:13:37 +0000 ROA not before: Wed 04 Mar 2026 06:08:37 +0000 ROA not after: Wed 03 Mar 2027 06:13:37 +0000 asID: 143549 IP address blocks: 240a:a383::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:59:32:a1:26:dd:f0:a6:4b:3b:7c:2e:9c:ee:12:8b:3f:95:7b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:37 2026 GMT Not After : Mar 3 06:13:37 2027 GMT Subject: CN=CA692E8987236BD430F19032F65F3A4BD046239D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:97:0d:b7:2c:4a:d8:c8:df:16:f2:46:b2: 76:2b:23:8c:88:07:8e:19:b6:09:d1:0b:46:ea:e7: d9:16:3f:86:0e:cc:63:ae:88:8a:ab:b6:14:f4:db: c1:e3:f4:1b:88:11:83:c0:96:71:12:6f:f2:74:e5: 36:e3:e3:c9:3e:2d:19:4f:0e:9d:34:2f:ef:97:62: da:75:11:53:4f:30:c5:6f:d6:55:b2:dc:e1:81:91: d7:12:9f:19:13:3c:6b:17:9c:d9:49:ba:e3:88:28: b3:25:ab:44:0d:c0:be:bd:99:86:48:14:27:31:a4: 7c:e6:8a:9a:81:3b:f7:0e:29:d2:a0:d9:c4:4f:5a: ab:52:77:a5:b5:0a:06:fe:7b:7e:44:f8:73:b4:2c: 1e:c9:62:cd:2b:cc:57:bd:8b:75:9e:5b:a8:f1:37: 96:ac:cc:44:f2:d3:63:fa:9c:1a:90:f9:1f:10:b3: 5c:44:56:3e:1e:09:c5:68:24:70:cd:54:e7:46:3a: af:9b:52:21:ee:28:ee:44:f9:46:a7:20:71:fc:0f: 2b:ba:31:85:90:6f:4c:c7:ac:97:a2:df:50:ed:12: 87:5c:f8:24:a6:83:94:09:7b:d7:61:a5:9c:7e:63: 0b:a6:52:c7:87:9f:0f:dc:01:1d:ac:ba:7b:70:a7: f5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:69:2E:89:87:23:6B:D4:30:F1:90:32:F6:5F:3A:4B:D0:46:23:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143549.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a383::/32 Signature Algorithm: sha256WithRSAEncryption 66:24:53:c7:b1:03:5c:cb:2d:bd:ab:13:65:db:27:dd:6f:bf: 98:8b:d2:f2:b7:55:4f:0f:86:24:20:b6:e5:cf:f3:89:a3:1b: 06:1e:b5:5e:be:47:90:23:f5:42:d7:7b:be:e5:93:dd:8b:2a: 51:3b:be:88:2c:71:52:96:62:a4:0b:03:99:cd:88:5f:d8:44: 25:f3:ce:dd:07:62:9d:18:84:16:5b:08:59:d0:5a:d7:c2:b8: 11:87:05:d7:a7:d3:2e:67:3e:a4:ac:70:f8:64:46:d3:7a:df: 57:99:f5:f9:0d:37:e1:1a:39:32:0d:02:06:92:53:77:bf:9e: 59:a6:84:62:4a:9b:bb:8b:02:1a:03:28:33:de:ae:24:d9:85: 7b:3b:08:40:53:e8:24:27:03:23:89:9f:8a:a1:a9:7f:46:40: 4b:c6:22:80:df:d1:06:61:36:8a:18:39:08:66:5e:48:97:1a: 41:47:76:ad:b6:e1:a8:25:4b:61:79:2a:59:61:2b:cd:86:0f: 0c:8f:7a:b1:f3:8d:b9:f0:cd:cd:77:0c:2c:d6:33:17:94:91: 80:9d:68:92:dd:06:cb:fb:76:64:05:79:bf:a5:54:56:4b:c1: 87:bd:02:66:f2:f0:63:c4:32:58:17:34:e5:1b:9e:f5:de:72: 63:68:a5:6b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfFkyoSbd8KZLO3wunO4Siz+Ve3MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzN1oX DTI3MDMwMzA2MTMzN1owMzExMC8GA1UEAxMoQ0E2OTJFODk4NzIzNkJENDMwRjE5 MDMyRjY1RjNBNEJEMDQ2MjM5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9xlw23LErYyN8W8kaydisjjIgHjhm2CdELRurn2RY/hg7MY66Iiqu2FPTb weP0G4gRg8CWcRJv8nTlNuPjyT4tGU8OnTQv75di2nURU08wxW/WVbLc4YGR1xKf GRM8axec2Um644gosyWrRA3Avr2ZhkgUJzGkfOaKmoE79w4p0qDZxE9aq1J3pbUK Bv57fkT4c7QsHslizSvMV72LdZ5bqPE3lqzMRPLTY/qcGpD5HxCzXERWPh4JxWgk cM1U50Y6r5tSIe4o7kT5RqcgcfwPK7oxhZBvTMesl6LfUO0Sh1z4JKaDlAl712Gl nH5jC6ZSx4efD9wBHay6e3Cn9aECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTKaS6J hyNr1DDxkDL2XzpL0EYjnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o4MwDQYJKoZIhvcNAQELBQADggEBAGYkU8exA1zLLb2rE2XbJ91vv5iL0vK3VU8P hiQgtuXP84mjGwYetV6+R5Aj9ULXe77lk92LKlE7vogscVKWYqQLA5nNiF/YRCXz zt0HYp0YhBZbCFnQWtfCuBGHBden0y5nPqSscPhkRtN631eZ9fkNN+EaOTINAgaS U3e/nlmmhGJKm7uLAhoDKDPeriTZhXs7CEBT6CQnAyOJn4qhqX9GQEvGIoDf0QZh NooYOQhmXkiXGkFHdq224aglS2F5KllhK82GDwyPerHzjbnwzc13DCzWMxeUkYCd aJLdBsv7dmQFeb+lVFZLwYe9Amby8GPEMlgXNOUbnvXecmNopWs= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:44 2026 by rpki-client