$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143551.roa File: AS143551.roa (raw, json) Hash identifier: Duc4yRIKtzrn2Y2+WY9Drxrgne8eAlIroWt0AS4eHPc= Subject key identifier: D4:67:67:E8:5C:D6:5B:C2:EC:54:EC:12:26:70:8E:17:DA:F3:64:79 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0D66B6697C32BA0E9ED0DF94F6806793E9EF48EA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143551.roa Signing time: Wed 04 Mar 2026 06:12:43 +0000 ROA not before: Wed 04 Mar 2026 06:07:43 +0000 ROA not after: Wed 03 Mar 2027 06:12:43 +0000 asID: 143551 IP address blocks: 240a:a385::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:66:b6:69:7c:32:ba:0e:9e:d0:df:94:f6:80:67:93:e9:ef:48:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:43 2026 GMT Not After : Mar 3 06:12:43 2027 GMT Subject: CN=D46767E85CD65BC2EC54EC1226708E17DAF36479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:44:10:6e:c6:d3:45:ed:17:59:f3:43:95: 80:47:28:d8:61:5b:a8:68:19:8e:db:b9:c1:42:9e: cd:06:52:33:04:f5:b3:b8:0d:0e:59:5b:4b:10:59: ae:ae:25:27:da:24:dc:73:5f:26:2e:30:a3:ca:df: 26:0d:98:c1:eb:2c:55:aa:04:3c:d2:ba:7f:9e:27: 62:1e:26:d9:33:f9:50:0d:ee:ae:ca:99:79:c1:1e: 9d:51:49:ad:cd:d8:56:23:39:99:a1:3b:72:69:ec: 15:3e:4d:ed:05:fc:49:d7:67:aa:72:b5:a2:8d:e2: 88:94:97:5e:73:db:9f:c0:3c:d8:69:1b:9e:0a:bd: 42:7d:d8:3f:cf:43:67:2d:44:29:d5:a0:f6:bf:3c: f3:47:d5:e0:9c:57:83:44:07:5f:66:c3:6e:e8:5d: c9:61:a7:59:64:38:35:4a:18:6e:d7:eb:89:41:12: 0c:a2:ef:41:09:28:e8:37:65:9c:6e:80:9c:3d:2d: 3d:61:a5:d4:fb:0d:55:66:f4:74:df:d4:0f:ea:76: 20:d1:96:63:58:3a:0b:8f:15:94:65:f3:df:9e:d5: 6e:82:f2:48:53:2c:42:64:07:0b:3e:19:01:a4:e4: c1:c6:c7:fa:0e:e2:f8:30:98:06:f8:d8:71:1e:e2: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:67:67:E8:5C:D6:5B:C2:EC:54:EC:12:26:70:8E:17:DA:F3:64:79 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143551.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a385::/32 Signature Algorithm: sha256WithRSAEncryption 74:32:0e:de:76:a2:88:a0:ce:f8:13:22:62:26:8d:8c:73:ef: c0:f7:e7:27:cd:4f:55:07:24:9c:90:a0:f1:8a:96:b0:93:0b: 76:e3:d5:6d:83:42:a7:e1:3c:88:42:44:7e:2e:d8:69:6d:77: 60:a9:5b:cd:58:b1:29:c7:31:cd:d7:b1:fa:4b:99:10:8e:ba: 38:0b:3a:0a:23:16:6a:ff:7d:af:ba:bc:7a:9c:c0:48:82:28: bd:76:c9:51:a9:f1:db:33:e6:34:fc:83:62:18:b2:ba:81:f4: 47:c5:42:e3:2f:68:91:99:13:57:be:0e:6a:b7:6b:63:e5:57: f9:fa:f3:c8:b9:73:b7:38:0b:f6:15:94:ae:50:72:25:e9:c9: 0e:f4:e0:75:25:7b:43:c8:e3:a9:d3:64:dd:91:f9:77:0b:35: cc:98:71:0f:c8:85:f2:f0:f2:b4:50:66:12:2d:30:60:4d:a8: 9f:80:cf:9d:c4:22:ee:5c:b8:58:ca:c0:51:28:40:43:90:1a: fd:66:8d:68:d4:5d:80:21:21:42:47:54:12:62:03:d5:bf:2c: 59:47:cf:85:75:20:d5:50:75:5a:08:16:9b:81:fa:25:ee:52: ef:64:dc:d6:b1:bc:4a:1a:38:c2:0f:88:8e:80:51:8b:91:c9: 12:af:eb:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDWa2aXwyug6e0N+U9oBnk+nvSOowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0M1oX DTI3MDMwMzA2MTI0M1owMzExMC8GA1UEAxMoRDQ2NzY3RTg1Q0Q2NUJDMkVDNTRF QzEyMjY3MDhFMTdEQUYzNjQ3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+hRBBuxtNF7RdZ80OVgEco2GFbqGgZjtu5wUKezQZSMwT1s7gNDllbSxBZ rq4lJ9ok3HNfJi4wo8rfJg2YwessVaoEPNK6f54nYh4m2TP5UA3ursqZecEenVFJ rc3YViM5maE7cmnsFT5N7QX8SddnqnK1oo3iiJSXXnPbn8A82Gkbngq9Qn3YP89D Zy1EKdWg9r8880fV4JxXg0QHX2bDbuhdyWGnWWQ4NUoYbtfriUESDKLvQQko6Ddl nG6AnD0tPWGl1PsNVWb0dN/UD+p2INGWY1g6C48VlGXz357VboLySFMsQmQHCz4Z AaTkwcbH+g7i+DCYBvjYcR7icA0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTUZ2fo XNZbwuxU7BImcI4X2vNkeTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o4UwDQYJKoZIhvcNAQELBQADggEBAHQyDt52ooigzvgTImImjYxz78D35yfNT1UH JJyQoPGKlrCTC3bj1W2DQqfhPIhCRH4u2Gltd2CpW81YsSnHMc3XsfpLmRCOujgL OgojFmr/fa+6vHqcwEiCKL12yVGp8dsz5jT8g2IYsrqB9EfFQuMvaJGZE1e+Dmq3 a2PlV/n688i5c7c4C/YVlK5QciXpyQ704HUle0PI46nTZN2R+XcLNcyYcQ/IhfLw 8rRQZhItMGBNqJ+Az53EIu5cuFjKwFEoQEOQGv1mjWjUXYAhIUJHVBJiA9W/LFlH z4V1INVQdVoIFpuB+iXuUu9k3NaxvEoaOMIPiI6AUYuRyRKv67k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:44 2026 by rpki-client