$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143578.roa File: AS143578.roa (raw, json) Hash identifier: PLFOYgUl8v5HJF3sOovSi136HcLRSqocYGw671jUfr8= Subject key identifier: FE:67:BA:42:38:F1:96:7A:3B:79:22:6C:7A:EA:E0:3B:A0:BE:BF:9F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4621903CBA151BF9C8A3E87E7C1F7382F81194F3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143578.roa Signing time: Wed 04 Mar 2026 06:14:53 +0000 ROA not before: Wed 04 Mar 2026 06:09:53 +0000 ROA not after: Wed 03 Mar 2027 06:14:53 +0000 asID: 143578 IP address blocks: 240a:a3a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:21:90:3c:ba:15:1b:f9:c8:a3:e8:7e:7c:1f:73:82:f8:11:94:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:53 2026 GMT Not After : Mar 3 06:14:53 2027 GMT Subject: CN=FE67BA4238F1967A3B79226C7AEAE03BA0BEBF9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:f6:16:7a:97:6b:d8:b1:80:92:e6:4f:98: 1b:7f:4b:e9:2c:42:90:b2:d6:aa:24:ac:43:3c:a3: d0:17:a3:fb:03:26:42:78:6c:1d:c3:c8:52:46:bd: c2:50:b5:d5:08:e7:95:b2:69:e7:de:b4:31:53:0f: 34:b9:f9:3b:30:46:2f:70:55:45:54:52:20:0c:00: 80:92:e3:75:6d:b1:12:55:f8:90:80:5d:20:8c:70: be:55:d4:53:f1:f8:78:99:36:f1:73:38:69:61:37: 2a:2f:06:38:f7:db:97:a3:31:e0:e4:48:d4:13:51: e3:2a:9f:84:a1:2d:a8:78:0a:49:ae:fd:4c:9c:eb: ed:08:e4:89:40:7e:0a:1a:e8:71:9a:c9:56:c4:2f: 67:03:8c:55:b0:3c:1d:30:23:56:a2:ac:de:7f:06: 25:c9:a0:cf:fb:1b:d4:3c:89:db:96:0f:f3:93:58: 01:bd:51:6d:23:51:0c:a6:8d:8b:2f:36:4e:73:7d: a3:e6:f7:a7:c0:ec:d6:d0:72:dc:79:01:96:09:0f: 73:d6:63:b3:35:c9:b1:20:38:60:3d:50:1d:6a:eb: f7:a3:70:e5:fe:69:b4:87:4f:f6:8c:11:f7:55:b2: 04:b7:d1:86:f2:78:d3:43:a0:0e:c0:33:30:63:80: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:67:BA:42:38:F1:96:7A:3B:79:22:6C:7A:EA:E0:3B:A0:BE:BF:9F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143578.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3a0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:91:5d:7a:34:3e:89:be:e6:5c:35:eb:94:3f:70:6f:c4:8b: 86:fa:af:b2:3a:eb:41:8c:5a:7c:b0:2d:2b:ce:3d:1a:ee:b8: 10:b6:77:9e:4b:1c:74:c4:c1:88:64:e3:8b:4b:41:dd:bc:d8: 68:4e:f0:e5:45:41:54:40:e5:cc:b4:2a:9f:ae:86:fb:03:e7: 4e:20:ec:13:47:1f:66:95:3c:78:a4:30:3f:27:31:0f:b8:67: 24:51:c6:a9:75:41:1b:c3:73:ac:fb:4e:a2:1c:ea:61:8b:7f: 8e:3a:eb:fd:b5:4e:03:d3:83:14:f8:b5:32:38:48:f3:55:f3: ac:cb:22:dd:cf:b7:8e:9b:6b:c5:32:dc:d0:9a:03:e4:f1:74: c1:5b:01:0b:d6:d8:cf:a0:0d:2e:0f:db:85:28:af:a6:03:9b: 20:ce:01:85:20:c3:7f:ef:4b:c1:79:65:58:2f:68:2b:fc:10: b3:f2:5a:2c:ac:d8:b5:40:8a:6c:56:02:4f:a5:59:6f:e0:35: bd:6e:aa:45:05:7d:c8:25:b8:3b:17:05:bd:e8:ab:6d:15:f3: 36:2d:0a:38:7f:c2:92:f8:7e:9a:2d:a5:f5:26:d7:15:c3:62: b7:fc:c3:9b:06:bd:4b:3e:a9:f5:fc:0e:d8:74:cf:41:0d:f5: d7:6f:ad:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURiGQPLoVG/nIo+h+fB9zgvgRlPMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1M1oX DTI3MDMwMzA2MTQ1M1owMzExMC8GA1UEAxMoRkU2N0JBNDIzOEYxOTY3QTNCNzky MjZDN0FFQUUwM0JBMEJFQkY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTp9hZ6l2vYsYCS5k+YG39L6SxCkLLWqiSsQzyj0Bej+wMmQnhsHcPIUka9 wlC11QjnlbJp5960MVMPNLn5OzBGL3BVRVRSIAwAgJLjdW2xElX4kIBdIIxwvlXU U/H4eJk28XM4aWE3Ki8GOPfbl6Mx4ORI1BNR4yqfhKEtqHgKSa79TJzr7QjkiUB+ ChrocZrJVsQvZwOMVbA8HTAjVqKs3n8GJcmgz/sb1DyJ25YP85NYAb1RbSNRDKaN iy82TnN9o+b3p8Ds1tBy3HkBlgkPc9ZjszXJsSA4YD1QHWrr96Nw5f5ptIdP9owR 91WyBLfRhvJ400OgDsAzMGOATaUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT+Z7pC OPGWejt5Imx66uA7oL6/nzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o6AwDQYJKoZIhvcNAQELBQADggEBAFuRXXo0Pom+5lw165Q/cG/Ei4b6r7I660GM WnywLSvOPRruuBC2d55LHHTEwYhk44tLQd282GhO8OVFQVRA5cy0Kp+uhvsD504g 7BNHH2aVPHikMD8nMQ+4ZyRRxql1QRvDc6z7TqIc6mGLf4466/21TgPTgxT4tTI4 SPNV86zLIt3Pt46ba8Uy3NCaA+TxdMFbAQvW2M+gDS4P24Uor6YDmyDOAYUgw3/v S8F5ZVgvaCv8ELPyWiys2LVAimxWAk+lWW/gNb1uqkUFfcgluDsXBb3oq20V8zYt Cjh/wpL4fpotpfUm1xXDYrf8w5sGvUs+qfX8Dth0z0EN9ddvrQA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:00 2026 by rpki-client