$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143565.roa File: AS143565.roa (raw, json) Hash identifier: jze73pAC+GZ7iv/n4Gkp2rXSeaSaiP4YBvuyqiHsqe0= Subject key identifier: 92:11:81:A6:7F:C0:09:C7:0D:59:4B:5F:3B:08:F9:7D:65:6C:37:83 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 70650709D4D11649614942AC1D2A81EFF3F6AFD6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143565.roa Signing time: Wed 04 Mar 2026 06:14:28 +0000 ROA not before: Wed 04 Mar 2026 06:09:28 +0000 ROA not after: Wed 03 Mar 2027 06:14:28 +0000 asID: 143565 IP address blocks: 240a:a393::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:65:07:09:d4:d1:16:49:61:49:42:ac:1d:2a:81:ef:f3:f6:af:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:28 2026 GMT Not After : Mar 3 06:14:28 2027 GMT Subject: CN=921181A67FC009C70D594B5F3B08F97D656C3783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:37:6d:2b:66:13:ba:96:8f:0a:22:2c:4f:0b: 01:f9:04:2b:12:02:63:c2:46:0c:ea:b2:81:60:73: a8:b4:1a:e3:13:34:e3:16:d7:54:72:91:28:7c:6c: ab:fd:33:04:4f:df:7f:07:a2:0d:d5:92:16:24:36: 58:e0:f8:59:85:ce:1e:5b:ca:7b:8a:d0:f1:23:cf: 37:5e:dd:e2:18:fc:74:1f:57:4e:7b:a0:19:50:72: 0e:c4:ac:38:cc:e1:ad:23:61:45:53:df:d6:64:3a: 5c:f2:d9:a7:74:41:62:1b:35:a1:fb:f5:9c:f6:b2: 7a:bd:d8:9b:4c:6d:4c:6a:56:e3:84:a7:53:ce:fa: 81:c0:d7:14:d8:f6:e5:1e:eb:73:01:e1:fb:4a:0e: 80:c5:55:de:48:16:48:bf:ab:3c:b9:b8:52:f8:8e: 93:3e:a7:a2:68:4e:c4:ca:6e:2f:d1:df:8b:75:da: f0:09:bc:7e:3a:33:51:20:8e:52:e2:c3:ad:94:9b: cd:90:de:a4:73:c1:0f:cd:06:b2:6c:2c:25:43:ae: 28:90:cc:be:62:e9:01:c9:f0:f8:57:e9:72:9c:0d: 69:dc:70:10:9b:91:2a:97:20:76:1d:4e:f4:49:d5: b0:a6:9a:d9:76:b2:f4:df:21:16:43:32:0b:2d:10: 3d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:11:81:A6:7F:C0:09:C7:0D:59:4B:5F:3B:08:F9:7D:65:6C:37:83 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143565.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a393::/32 Signature Algorithm: sha256WithRSAEncryption 33:1e:93:7c:d0:6b:31:50:e5:50:c8:7f:b3:a7:a6:7d:27:99: b0:6b:c9:c9:7f:3a:ec:34:ba:47:70:28:fb:10:6a:b0:50:54: f4:f1:94:06:c2:21:5b:74:0b:59:b1:1b:56:b1:70:72:ab:78: 33:46:2f:72:38:13:8b:40:11:d1:bd:1e:3a:23:44:63:cb:96: 2a:60:d2:7e:2c:3f:b1:5c:7f:56:7e:35:42:64:c1:25:81:c0: 45:b4:74:ce:5d:57:0d:8e:4e:5d:f0:3c:a8:c9:c9:8d:b1:b3: f6:a8:f4:d8:ea:98:de:35:01:10:24:8a:ef:d2:de:58:61:0b: 3e:05:6a:e7:79:fd:cd:8a:69:6d:87:3d:7e:cf:43:d7:ec:d5: c5:3d:f7:35:c2:7f:ff:e1:76:da:a1:b6:d1:cf:f1:a6:e3:6e: fa:54:bb:ba:51:ca:46:88:f3:cc:6e:64:b2:c1:e0:57:e9:35: bd:fe:03:b6:3f:5c:75:61:ca:3f:0d:8a:4c:a6:b3:50:a0:a3: 0b:88:07:3f:42:07:11:ac:d0:dc:d0:9a:4f:aa:cf:d7:f6:d2: 02:8c:c6:21:62:06:c5:a3:b2:89:dd:9c:59:c5:d1:0d:a6:34: 3a:81:9b:92:d5:6a:c8:ae:35:aa:a2:69:7e:aa:5d:7d:0f:c1: 7a:aa:64:b6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcGUHCdTRFklhSUKsHSqB7/P2r9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyOFoX DTI3MDMwMzA2MTQyOFowMzExMC8GA1UEAxMoOTIxMTgxQTY3RkMwMDlDNzBENTk0 QjVGM0IwOEY5N0Q2NTZDMzc4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIw3bStmE7qWjwoiLE8LAfkEKxICY8JGDOqygWBzqLQa4xM04xbXVHKRKHxs q/0zBE/ffweiDdWSFiQ2WOD4WYXOHlvKe4rQ8SPPN17d4hj8dB9XTnugGVByDsSs OMzhrSNhRVPf1mQ6XPLZp3RBYhs1ofv1nPayer3Ym0xtTGpW44SnU876gcDXFNj2 5R7rcwHh+0oOgMVV3kgWSL+rPLm4UviOkz6nomhOxMpuL9Hfi3Xa8Am8fjozUSCO UuLDrZSbzZDepHPBD80GsmwsJUOuKJDMvmLpAcnw+FfpcpwNadxwEJuRKpcgdh1O 9EnVsKaa2Xay9N8hFkMyCy0QPWsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSEYGm f8AJxw1ZS187CPl9ZWw3gzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o5MwDQYJKoZIhvcNAQELBQADggEBADMek3zQazFQ5VDIf7Onpn0nmbBrycl/Ouw0 ukdwKPsQarBQVPTxlAbCIVt0C1mxG1axcHKreDNGL3I4E4tAEdG9HjojRGPLlipg 0n4sP7Fcf1Z+NUJkwSWBwEW0dM5dVw2OTl3wPKjJyY2xs/ao9NjqmN41ARAkiu/S 3lhhCz4Faud5/c2KaW2HPX7PQ9fs1cU99zXCf//hdtqhttHP8abjbvpUu7pRykaI 88xuZLLB4FfpNb3+A7Y/XHVhyj8Nikyms1CgowuIBz9CBxGs0NzQmk+qz9f20gKM xiFiBsWjsondnFnF0Q2mNDqBm5LVasiuNaqiaX6qXX0PwXqqZLY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:03 2026 by rpki-client