$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143560.roa File: AS143560.roa (raw, json) Hash identifier: Qv4Erq549108qOVSPoo40m+juAVSYv1Dvs2YOzd6W9k= Subject key identifier: FE:95:EE:79:39:77:E2:17:F7:08:36:A1:1E:FE:A5:D3:E5:9D:92:7D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5B0FED36765045D58AA48382D33D2FE9D61A3210 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143560.roa Signing time: Wed 04 Mar 2026 06:14:34 +0000 ROA not before: Wed 04 Mar 2026 06:09:34 +0000 ROA not after: Wed 03 Mar 2027 06:14:34 +0000 asID: 143560 IP address blocks: 240a:a38e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0f:ed:36:76:50:45:d5:8a:a4:83:82:d3:3d:2f:e9:d6:1a:32:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:34 2026 GMT Not After : Mar 3 06:14:34 2027 GMT Subject: CN=FE95EE793977E217F70836A11EFEA5D3E59D927D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:00:68:55:d0:ec:74:68:7b:e0:64:6a:6e: 32:6c:2e:b0:e6:5b:e9:61:a6:0b:54:b7:64:63:66: 23:88:14:7a:e5:07:9b:0d:4f:cf:3b:43:96:56:54: 25:11:cb:79:e0:3d:f2:5c:43:20:e2:cf:91:04:c9: 55:1e:65:47:3a:34:f9:9a:35:87:a5:30:28:e7:01: b3:0c:a8:e3:a9:f9:0d:e0:c4:ad:7f:79:ac:4b:ed: 02:6d:94:78:ff:c2:4c:70:bf:96:fa:e1:d9:48:fe: af:33:6d:c0:5a:29:b3:2a:c5:59:22:f5:5d:00:0c: 86:54:70:52:c1:23:09:a8:9b:dd:e0:b4:eb:ae:c2: 38:ae:c3:ce:db:1b:55:a6:0d:04:1a:44:bf:c7:d6: 7e:19:d0:69:48:97:6d:8f:54:f7:06:ee:29:22:14: cf:6e:1b:bf:ba:73:f7:c8:cf:b3:04:42:50:67:6a: 46:bb:6a:4c:3d:ec:06:c8:b2:05:1a:55:ec:7c:d7: 86:e9:d0:b8:26:f7:1c:4a:98:42:01:a4:10:b9:6f: d4:a7:9c:66:2c:be:94:02:e5:f2:ea:fd:90:46:71: 89:bc:21:92:18:a6:63:35:fb:f9:01:a3:79:05:be: ca:be:a3:28:82:e6:90:c5:e3:91:81:51:7c:8f:e3: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:95:EE:79:39:77:E2:17:F7:08:36:A1:1E:FE:A5:D3:E5:9D:92:7D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143560.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a38e::/32 Signature Algorithm: sha256WithRSAEncryption 85:bc:a0:5a:25:e0:55:c7:3a:21:0d:d5:45:c8:da:52:4b:67: 9d:57:da:43:6d:b2:ad:71:ff:c4:52:4a:63:79:40:37:9b:1e: e2:90:4d:c8:e9:06:fa:15:e5:62:95:4a:dd:c5:a0:b5:e6:92: 23:aa:24:54:dc:46:13:0a:00:94:83:21:52:bb:e2:f3:d3:10: 2b:9b:ac:76:ad:8e:b5:f3:55:ae:b3:36:6a:08:f4:03:98:fc: b3:bd:77:23:c5:6e:37:65:69:7e:a4:5a:21:e5:5d:70:12:4e: d7:ed:4e:1d:db:48:e3:69:da:ba:7e:56:b3:ed:a7:bf:bc:28: 1d:42:77:f8:34:eb:55:67:98:75:ae:fe:6d:23:16:2f:d1:15: f4:e2:c0:14:11:23:69:cb:30:3c:fb:b4:3a:a5:96:8e:e3:3e: 9f:02:79:66:10:6d:85:54:0a:09:2b:37:cc:50:1f:91:0e:50: 74:a1:76:63:30:7d:3b:c4:e9:7b:6d:84:c2:67:a8:fc:ec:9e: a5:e8:c4:4f:a1:6d:d8:04:6c:e6:f8:3a:be:a0:61:dc:90:a0: eb:d1:a6:24:04:54:7e:66:75:e4:43:58:79:73:d2:2b:70:6e: 31:7a:db:5e:a8:35:27:58:6a:be:71:34:c1:67:b2:41:32:f7: 57:6a:f6:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWw/tNnZQRdWKpIOC0z0v6dYaMhAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzNFoX DTI3MDMwMzA2MTQzNFowMzExMC8GA1UEAxMoRkU5NUVFNzkzOTc3RTIxN0Y3MDgz NkExMUVGRUE1RDNFNTlEOTI3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKaiAGhV0Ox0aHvgZGpuMmwusOZb6WGmC1S3ZGNmI4gUeuUHmw1PzztDllZU JRHLeeA98lxDIOLPkQTJVR5lRzo0+Zo1h6UwKOcBswyo46n5DeDErX95rEvtAm2U eP/CTHC/lvrh2Uj+rzNtwFopsyrFWSL1XQAMhlRwUsEjCaib3eC0667COK7Dztsb VaYNBBpEv8fWfhnQaUiXbY9U9wbuKSIUz24bv7pz98jPswRCUGdqRrtqTD3sBsiy BRpV7HzXhunQuCb3HEqYQgGkELlv1KecZiy+lALl8ur9kEZxibwhkhimYzX7+QGj eQW+yr6jKILmkMXjkYFRfI/jEdECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT+le55 OXfiF/cINqEe/qXT5Z2SfTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o44wDQYJKoZIhvcNAQELBQADggEBAIW8oFol4FXHOiEN1UXI2lJLZ51X2kNtsq1x /8RSSmN5QDebHuKQTcjpBvoV5WKVSt3FoLXmkiOqJFTcRhMKAJSDIVK74vPTECub rHatjrXzVa6zNmoI9AOY/LO9dyPFbjdlaX6kWiHlXXASTtftTh3bSONp2rp+VrPt p7+8KB1Cd/g061VnmHWu/m0jFi/RFfTiwBQRI2nLMDz7tDqllo7jPp8CeWYQbYVU CgkrN8xQH5EOUHShdmMwfTvE6XtthMJnqPzsnqXoxE+hbdgEbOb4Or6gYdyQoOvR piQEVH5mdeRDWHlz0itwbjF6216oNSdYar5xNMFnskEy91dq9jU= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:39 2026 by rpki-client