$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143572.roa File: AS143572.roa (raw, json) Hash identifier: GIXVa7B9EuUd8bxGOFg3ldKHUdYzA1iVUBcAmpNjevc= Subject key identifier: 4F:F2:9D:86:24:D5:A1:8B:C0:53:B6:3F:FD:01:5A:38:74:84:51:57 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 14AF3EC4D2636C9B34B96B2C79C4F848B8D6C8D4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143572.roa Signing time: Wed 04 Mar 2026 06:13:44 +0000 ROA not before: Wed 04 Mar 2026 06:08:44 +0000 ROA not after: Wed 03 Mar 2027 06:13:44 +0000 asID: 143572 IP address blocks: 240a:a39a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:af:3e:c4:d2:63:6c:9b:34:b9:6b:2c:79:c4:f8:48:b8:d6:c8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:44 2026 GMT Not After : Mar 3 06:13:44 2027 GMT Subject: CN=4FF29D8624D5A18BC053B63FFD015A3874845157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:0f:da:82:84:3a:c6:80:f1:49:6f:d7:30: 1d:a3:4f:a9:29:5b:0c:ed:e6:d4:ad:05:76:54:05: 1a:6d:d1:60:a9:4a:af:aa:90:11:29:f5:aa:4c:6c: 1d:22:d9:39:82:52:5d:b2:fb:b4:1c:da:ed:30:7f: cd:f3:55:84:8e:ad:72:19:99:65:5d:04:53:34:71: 42:11:f6:09:6e:c5:be:0f:b0:9d:30:ed:4b:6c:3b: a4:f6:c7:15:2b:dd:d0:07:82:4f:6e:25:b5:6b:b2: 0f:83:6a:05:1d:3b:4e:d3:44:37:ed:16:33:00:a4: fc:d1:2d:b1:6e:28:e3:ea:4f:9a:75:66:a7:ab:2d: a7:ff:33:aa:4d:bc:68:16:46:c1:99:cf:2c:2e:04: 04:78:9c:b2:47:de:47:83:81:f2:a7:57:d5:94:98: 5a:57:35:77:da:14:be:d7:ea:19:7e:f4:e3:94:a6: 28:2e:19:5d:3f:44:c0:64:c3:37:58:c5:34:76:6c: ac:5e:04:e1:90:51:e7:f6:b0:fe:7e:ff:07:b8:88: 45:38:95:e5:93:d9:db:97:d2:a8:ed:d5:77:7e:14: 82:f2:78:a9:68:92:72:e8:6d:21:99:e5:e7:73:71: a8:f8:81:b7:51:31:6c:6a:b5:99:32:a8:8d:c2:5c: 64:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F2:9D:86:24:D5:A1:8B:C0:53:B6:3F:FD:01:5A:38:74:84:51:57 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143572.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a39a::/32 Signature Algorithm: sha256WithRSAEncryption 86:81:d7:25:6c:2b:3a:35:e9:40:91:8c:ba:49:16:ef:54:46: da:27:0e:d3:b0:e7:4a:be:da:08:02:42:9a:ae:6d:e5:62:31: b9:16:ad:7f:41:55:e2:92:86:60:a0:75:38:2d:f7:b9:3a:f8: 34:e8:01:67:c4:99:01:b0:06:a1:12:44:ee:c4:12:23:6b:1d: 75:8b:61:e2:b5:60:e5:f1:13:04:e3:d0:d1:d7:d6:e0:3a:07: 84:67:1f:9c:c5:7e:3f:7c:26:7b:2e:f3:c6:b0:93:30:ce:86: 8d:d9:b0:01:c3:a2:7b:f1:ab:fe:21:3b:3c:d8:1c:ef:f7:3a: 78:38:72:6c:da:b3:3f:78:68:45:07:e4:9c:95:65:69:b5:e3: 55:8f:24:62:82:0d:d6:98:cf:a5:03:82:b3:25:c0:b3:90:90: 1c:5d:a4:26:a4:6c:7c:c6:a3:c8:e8:26:8e:f5:4d:9d:b8:b9: e2:4d:fc:fc:aa:67:1c:3f:5d:e5:25:78:82:76:bd:ee:d4:8d: 37:29:46:fa:9c:b5:33:22:02:ea:b9:fb:97:4a:e8:60:5d:ac: 2a:22:8f:a3:ef:f0:b3:97:09:16:77:61:61:58:f1:2d:ad:7b: 1a:ff:31:28:04:f0:ab:23:06:aa:54:ab:92:79:c5:b0:7a:7d: 87:68:7a:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFK8+xNJjbJs0uWssecT4SLjWyNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0NFoX DTI3MDMwMzA2MTM0NFowMzExMC8GA1UEAxMoNEZGMjlEODYyNEQ1QTE4QkMwNTNC NjNGRkQwMTVBMzg3NDg0NTE1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWvD9qChDrGgPFJb9cwHaNPqSlbDO3m1K0FdlQFGm3RYKlKr6qQESn1qkxs HSLZOYJSXbL7tBza7TB/zfNVhI6tchmZZV0EUzRxQhH2CW7Fvg+wnTDtS2w7pPbH FSvd0AeCT24ltWuyD4NqBR07TtNEN+0WMwCk/NEtsW4o4+pPmnVmp6stp/8zqk28 aBZGwZnPLC4EBHicskfeR4OB8qdX1ZSYWlc1d9oUvtfqGX7045SmKC4ZXT9EwGTD N1jFNHZsrF4E4ZBR5/aw/n7/B7iIRTiV5ZPZ25fSqO3Vd34UgvJ4qWiScuhtIZnl 53NxqPiBt1ExbGq1mTKojcJcZJkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRP8p2G JNWhi8BTtj/9AVo4dIRRVzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o5owDQYJKoZIhvcNAQELBQADggEBAIaB1yVsKzo16UCRjLpJFu9URtonDtOw50q+ 2ggCQpqubeViMbkWrX9BVeKShmCgdTgt97k6+DToAWfEmQGwBqESRO7EEiNrHXWL YeK1YOXxEwTj0NHX1uA6B4RnH5zFfj98Jnsu88awkzDOho3ZsAHDonvxq/4hOzzY HO/3Ong4cmzasz94aEUH5JyVZWm141WPJGKCDdaYz6UDgrMlwLOQkBxdpCakbHzG o8joJo71TZ24ueJN/PyqZxw/XeUleIJ2ve7UjTcpRvqctTMiAuq5+5dK6GBdrCoi j6Pv8LOXCRZ3YWFY8S2texr/MSgE8KsjBqpUq5J5xbB6fYdoesI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:04 2026 by rpki-client