$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143579.roa File: AS143579.roa (raw, json) Hash identifier: X1JEuB5/DYO7O1g8bRK4YLGHPxAm94n+dzXyPPLGcjQ= Subject key identifier: C7:4E:B3:21:F6:33:97:33:22:CF:CD:D6:62:F7:CB:AC:3F:11:0F:D2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6C46F5CD586F011646FBCB9068455F64A10BE069 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143579.roa Signing time: Wed 04 Mar 2026 06:13:16 +0000 ROA not before: Wed 04 Mar 2026 06:08:16 +0000 ROA not after: Wed 03 Mar 2027 06:13:16 +0000 asID: 143579 IP address blocks: 240a:a3a1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:46:f5:cd:58:6f:01:16:46:fb:cb:90:68:45:5f:64:a1:0b:e0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:16 2026 GMT Not After : Mar 3 06:13:16 2027 GMT Subject: CN=C74EB321F633973322CFCDD662F7CBAC3F110FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:d7:54:ed:d0:9f:3d:65:85:63:40:38:8d: 19:6d:27:2a:50:ec:0a:b4:33:cd:36:fb:a7:95:7b: 0d:d3:87:69:50:63:6a:c1:72:1e:7c:fd:82:21:29: 62:22:77:da:56:61:af:a8:c7:ba:0a:f1:01:25:35: 3f:e6:59:94:82:aa:ff:de:dd:46:de:b6:5d:e9:f9: 5e:42:12:b2:3d:19:ca:6c:f9:08:8f:c7:e6:fe:fb: fb:19:ee:68:46:ec:f1:0b:68:e2:16:0d:90:9d:a1: f9:9d:5d:c8:a9:bc:a8:df:74:86:a9:02:78:fe:d8: 62:2a:b1:97:ec:89:43:b3:83:27:71:16:19:5e:92: 0a:ea:b2:bb:54:f7:14:c5:0b:32:b2:c5:4f:cb:3a: 80:49:cc:07:b9:8e:42:07:42:51:38:20:ac:7c:68: 91:a0:30:c4:52:19:19:c3:27:dc:f3:99:ee:9d:9c: 67:0e:6f:6b:e1:58:8c:27:2c:a4:3c:94:ea:95:3d: 5a:f4:94:f1:6c:47:8c:71:3b:61:55:a1:f5:4e:08: 21:bc:6a:4c:a9:24:bc:fd:7d:0a:39:d0:f2:93:29: dc:1c:3e:5a:1e:19:d3:ca:0c:35:47:72:4d:a0:f7: 83:f9:d8:8e:a3:c0:b6:99:47:33:f1:89:d4:f8:13: ad:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4E:B3:21:F6:33:97:33:22:CF:CD:D6:62:F7:CB:AC:3F:11:0F:D2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143579.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3a1::/32 Signature Algorithm: sha256WithRSAEncryption 24:f0:9f:28:45:bf:10:20:c1:59:4e:90:c8:7a:16:95:02:6e: 64:d7:04:02:29:91:f0:1c:12:62:b3:23:8e:d3:2f:2b:fe:39: 92:5e:61:c8:45:b9:6f:e0:51:ba:69:49:b2:6e:34:34:18:b4: 13:15:05:03:3d:45:30:05:3e:1c:e4:75:96:2f:39:2f:43:64: 95:94:e2:1e:ad:b3:85:77:03:15:9e:d1:1a:da:ce:fd:92:05: 8a:47:d1:ca:88:24:81:5e:be:2d:91:d1:72:21:d7:07:9f:c5: af:85:cf:de:14:99:cd:19:88:70:86:98:31:4c:2e:77:a1:bb: be:bd:21:57:37:0f:3a:8f:43:30:ed:16:01:e4:bb:08:25:1e: 7e:69:80:08:79:91:1e:bc:c6:eb:87:a0:94:ac:1d:c4:02:e0: 3f:28:a6:45:bf:96:36:93:1f:6a:4e:2c:61:76:33:1e:18:fc: c0:2d:61:a4:b8:63:79:dc:f0:4e:80:8a:e1:0a:93:f6:bf:64: 91:79:22:ca:08:6d:7c:2b:80:f0:28:85:8d:8e:dd:61:fd:10: e4:16:d9:ea:c6:d7:19:40:d5:f7:6e:93:90:0d:ea:af:ae:23: 9b:64:ae:27:8e:f0:83:8d:9f:ab:de:e1:98:eb:1b:6e:70:ef: b5:ef:f0:c6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbEb1zVhvARZG+8uQaEVfZKEL4GkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNloX DTI3MDMwMzA2MTMxNlowMzExMC8GA1UEAxMoQzc0RUIzMjFGNjMzOTczMzIyQ0ZD REQ2NjJGN0NCQUMzRjExMEZEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJHm11Tt0J89ZYVjQDiNGW0nKlDsCrQzzTb7p5V7DdOHaVBjasFyHnz9giEp YiJ32lZhr6jHugrxASU1P+ZZlIKq/97dRt62Xen5XkISsj0Zymz5CI/H5v77+xnu aEbs8Qto4hYNkJ2h+Z1dyKm8qN90hqkCeP7YYiqxl+yJQ7ODJ3EWGV6SCuqyu1T3 FMULMrLFT8s6gEnMB7mOQgdCUTggrHxokaAwxFIZGcMn3POZ7p2cZw5va+FYjCcs pDyU6pU9WvSU8WxHjHE7YVWh9U4IIbxqTKkkvP19CjnQ8pMp3Bw+Wh4Z08oMNUdy TaD3g/nYjqPAtplHM/GJ1PgTrSUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTHTrMh 9jOXMyLPzdZi98usPxEP0jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o6EwDQYJKoZIhvcNAQELBQADggEBACTwnyhFvxAgwVlOkMh6FpUCbmTXBAIpkfAc EmKzI47TLyv+OZJeYchFuW/gUbppSbJuNDQYtBMVBQM9RTAFPhzkdZYvOS9DZJWU 4h6ts4V3AxWe0Rrazv2SBYpH0cqIJIFevi2R0XIh1wefxa+Fz94Umc0ZiHCGmDFM Lnehu769IVc3DzqPQzDtFgHkuwglHn5pgAh5kR68xuuHoJSsHcQC4D8opkW/ljaT H2pOLGF2Mx4Y/MAtYaS4Y3nc8E6AiuEKk/a/ZJF5IsoIbXwrgPAohY2O3WH9EOQW 2erG1xlA1fduk5AN6q+uI5tkrieO8IONn6ve4ZjrG25w77Xv8MY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:16 2026 by rpki-client