$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143567.roa File: AS143567.roa (raw, json) Hash identifier: la/GQOy53PM1waGs3eMKjn2P4wX53BBJRq/bQlMuOTY= Subject key identifier: DA:C5:2A:D2:82:9B:34:8D:38:8F:18:06:E2:89:7B:48:CB:A4:3E:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6CBC2F189D6123DE676EFA8FBB0D1D197128EDA4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143567.roa Signing time: Wed 04 Mar 2026 06:15:45 +0000 ROA not before: Wed 04 Mar 2026 06:10:45 +0000 ROA not after: Wed 03 Mar 2027 06:15:45 +0000 asID: 143567 IP address blocks: 240a:a395::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:bc:2f:18:9d:61:23:de:67:6e:fa:8f:bb:0d:1d:19:71:28:ed:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:45 2026 GMT Not After : Mar 3 06:15:45 2027 GMT Subject: CN=DAC52AD2829B348D388F1806E2897B48CBA43E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:8b:c1:0c:ef:76:33:00:5f:a8:f6:9e:d9: fa:4e:55:b2:95:a6:b3:27:8e:10:e6:6e:4b:7c:35: 5f:e5:b3:9a:e2:e0:49:a0:03:81:7c:81:d1:7d:95: 45:e8:62:9f:07:6d:e8:58:d8:e7:f4:63:b8:d1:b7: 62:09:db:42:42:86:d3:f1:9d:3a:a0:7a:87:c0:75: 71:34:62:44:75:5a:03:7e:d1:d6:8a:6c:41:36:0c: f6:8c:32:e3:7c:1e:ab:71:0c:ed:6d:ac:7d:e9:5a: 63:bb:b8:c2:92:93:d3:a7:7f:92:06:db:ef:a7:6e: 03:d8:7f:3e:bb:13:08:9b:69:82:92:ca:7f:77:e7: f9:83:10:a4:cf:08:05:1a:d1:1f:2e:d9:42:49:37: bc:3d:65:04:6a:00:17:9b:b9:90:d2:68:8a:70:a4: d6:60:b7:6e:67:ab:67:02:14:d2:4e:e9:90:c0:f4: 66:d9:09:cd:d0:48:71:ab:a7:7d:6d:84:73:0b:58: 66:0f:a9:7e:41:66:b4:b9:f3:50:d4:6f:df:c7:87: a5:02:08:5b:34:29:b4:a5:b6:07:38:1e:e8:4c:83: fe:a8:cf:b3:f3:ea:5e:e9:80:79:5c:2c:68:40:6b: 8e:ae:c0:b4:69:35:f2:e2:12:04:b9:9d:da:56:0d: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C5:2A:D2:82:9B:34:8D:38:8F:18:06:E2:89:7B:48:CB:A4:3E:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143567.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a395::/32 Signature Algorithm: sha256WithRSAEncryption 16:86:91:50:dc:5e:02:a3:93:b8:d9:4f:53:42:75:e4:4b:22: 00:9f:6b:58:72:22:a0:11:5e:b9:a7:ab:bc:52:30:97:12:b1: a8:7d:59:7b:75:bc:23:e6:89:8c:85:62:81:42:c2:d8:99:cd: ee:a6:72:fc:58:c2:4e:b7:cb:02:dc:b8:f2:6e:02:c4:92:5a: 62:a6:ac:36:10:89:73:49:94:70:e0:01:a0:23:03:86:33:fc: c3:6d:81:62:48:e5:f5:82:5d:0b:13:64:67:6e:c1:a8:df:fa: 43:64:94:ae:00:88:ab:3c:72:11:77:23:3d:8f:c0:95:5c:e1: b8:cc:67:9b:ec:52:ff:fd:15:7b:8c:fb:c4:fa:e2:b3:e2:2e: 6d:c6:d8:7d:f6:f7:b8:ee:00:3d:59:6d:1e:f3:3e:18:23:c1: 96:53:2f:9d:54:89:77:f0:8d:11:c5:21:04:e7:c0:68:0a:a2: 6b:4d:38:0c:30:dd:a5:92:a9:93:7d:94:4f:77:44:e2:7c:cc: cd:55:a1:3c:ca:48:ed:ff:7f:41:16:55:b1:68:fd:1e:ba:73: 27:ea:6b:c7:1a:b8:9e:fb:2c:76:f1:29:ad:ee:c9:ba:c5:7f: 0a:94:b0:81:ce:fc:2f:75:63:2c:f7:cb:a9:0f:25:9f:54:f2: 23:01:41:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbLwvGJ1hI95nbvqPuw0dGXEo7aQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0NVoX DTI3MDMwMzA2MTU0NVowMzExMC8GA1UEAxMoREFDNTJBRDI4MjlCMzQ4RDM4OEYx ODA2RTI4OTdCNDhDQkE0M0UwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKI6i8EM73YzAF+o9p7Z+k5VspWmsyeOEOZuS3w1X+WzmuLgSaADgXyB0X2V Rehinwdt6FjY5/RjuNG3YgnbQkKG0/GdOqB6h8B1cTRiRHVaA37R1opsQTYM9owy 43weq3EM7W2sfelaY7u4wpKT06d/kgbb76duA9h/PrsTCJtpgpLKf3fn+YMQpM8I BRrRHy7ZQkk3vD1lBGoAF5u5kNJoinCk1mC3bmerZwIU0k7pkMD0ZtkJzdBIcaun fW2EcwtYZg+pfkFmtLnzUNRv38eHpQIIWzQptKW2Bzge6EyD/qjPs/PqXumAeVws aEBrjq7AtGk18uISBLmd2lYN2A0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTaxSrS gps0jTiPGAbiiXtIy6Q+AjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o5UwDQYJKoZIhvcNAQELBQADggEBABaGkVDcXgKjk7jZT1NCdeRLIgCfa1hyIqAR Xrmnq7xSMJcSsah9WXt1vCPmiYyFYoFCwtiZze6mcvxYwk63ywLcuPJuAsSSWmKm rDYQiXNJlHDgAaAjA4Yz/MNtgWJI5fWCXQsTZGduwajf+kNklK4AiKs8chF3Iz2P wJVc4bjMZ5vsUv/9FXuM+8T64rPiLm3G2H3297juAD1ZbR7zPhgjwZZTL51UiXfw jRHFIQTnwGgKomtNOAww3aWSqZN9lE93ROJ8zM1VoTzKSO3/f0EWVbFo/R66cyfq a8cauJ77LHbxKa3uybrFfwqUsIHO/C91Yyz3y6kPJZ9U8iMBQT4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:47 2026 by rpki-client