$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143609.roa File: AS143609.roa (raw, json) Hash identifier: i10XGFvvasqtws9VLczsckoQfzI2/XztohG1F7OOyVs= Subject key identifier: F6:DA:34:76:EB:00:31:29:3D:80:51:32:B8:13:FF:B5:4B:EE:71:E6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 69BAE5A293EAD5E3586E76446E4F51CFDE4322BA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143609.roa Signing time: Wed 04 Mar 2026 06:14:43 +0000 ROA not before: Wed 04 Mar 2026 06:09:43 +0000 ROA not after: Wed 03 Mar 2027 06:14:43 +0000 asID: 143609 IP address blocks: 240a:a3bf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ba:e5:a2:93:ea:d5:e3:58:6e:76:44:6e:4f:51:cf:de:43:22:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:43 2026 GMT Not After : Mar 3 06:14:43 2027 GMT Subject: CN=F6DA3476EB0031293D805132B813FFB54BEE71E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:92:a0:f1:84:cb:80:3c:64:9b:31:5b:e9: e5:75:8e:aa:0d:99:28:3b:c6:87:6f:25:28:ed:e5: 68:94:fb:fc:0a:bf:3e:c4:07:29:0b:56:9e:03:64: 4e:a2:c2:1d:ca:e0:9c:d9:a6:59:27:c7:33:7d:80: a0:46:5a:95:09:63:4c:6d:fc:ef:47:e1:aa:ec:e5: f2:af:ce:d5:cc:5b:53:4d:75:7c:de:0e:c1:0d:9e: 36:a3:b3:3b:16:1f:31:6f:00:b6:42:ed:cb:e7:ec: 2c:7c:76:1b:87:83:52:de:35:b1:73:e7:1d:64:f6: d9:cf:90:d4:8a:6b:7b:6b:6b:ec:5b:5a:f1:69:77: 76:97:0b:26:85:62:b7:c1:cf:53:83:5e:35:da:af: 2e:1b:16:30:e6:bc:ed:7f:86:df:cc:c6:ac:c0:50: ad:10:8e:9c:cf:43:5a:ab:0c:bc:e8:d5:a3:db:b1: 2f:5a:ba:d4:d8:3a:63:64:d9:47:db:38:62:9e:ce: 29:71:d2:9b:d0:10:23:f9:70:df:18:38:bf:1c:95: 2f:de:b7:34:0d:6b:5d:ab:f0:b5:3c:2a:1c:8d:9a: 40:9d:e1:d0:d9:d7:99:ad:96:2d:f4:38:0b:f9:66: 12:fe:60:15:14:63:0b:4f:04:c7:8e:04:b9:99:15: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DA:34:76:EB:00:31:29:3D:80:51:32:B8:13:FF:B5:4B:EE:71:E6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143609.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3bf::/32 Signature Algorithm: sha256WithRSAEncryption 20:4e:89:ce:47:10:1e:e7:f7:67:71:b0:15:77:49:e3:e6:16: 8a:3a:80:60:e5:ca:0d:39:c5:2f:c2:78:cb:de:7d:75:5c:f7: e5:de:ac:6a:54:07:07:27:aa:31:0c:55:3b:ac:0f:c0:b1:7d: ba:25:ce:81:d0:82:d5:e9:30:31:eb:b0:6d:40:f3:8e:9e:9a: b5:33:22:54:8e:7e:27:bc:3c:af:46:80:42:ea:e0:d4:cf:dc: b8:38:9f:b8:9a:6b:45:2a:ab:14:7a:80:9a:20:13:23:87:bc: f5:a2:aa:20:32:22:2a:8d:a0:f7:fe:33:05:64:69:c1:ab:d4: e3:cb:e2:44:e9:26:21:c1:c5:95:66:15:66:fe:a2:f0:0e:fe: b1:eb:95:44:f3:47:3d:52:9b:b8:1c:90:31:63:85:b8:4e:2e: ef:a5:44:5e:22:35:36:24:ce:db:88:a9:68:2d:1d:d6:aa:53: f8:5a:ed:70:de:67:4c:ac:15:e7:41:06:b1:20:6d:da:68:80: d3:84:76:e5:96:30:dd:a9:6a:41:4f:4a:37:b8:28:69:3e:10: 96:05:60:63:02:3a:d7:f3:bc:5f:73:a3:1a:e4:49:fc:8e:bc: 36:80:72:0b:ea:7a:fc:99:a9:1b:f3:59:c7:2d:d5:ec:ef:54: eb:b2:51:da -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUabrlopPq1eNYbnZEbk9Rz95DIrowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0M1oX DTI3MDMwMzA2MTQ0M1owMzExMC8GA1UEAxMoRjZEQTM0NzZFQjAwMzEyOTNEODA1 MTMyQjgxM0ZGQjU0QkVFNzFFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJfwkqDxhMuAPGSbMVvp5XWOqg2ZKDvGh28lKO3laJT7/Aq/PsQHKQtWngNk TqLCHcrgnNmmWSfHM32AoEZalQljTG3870fhquzl8q/O1cxbU011fN4OwQ2eNqOz OxYfMW8AtkLty+fsLHx2G4eDUt41sXPnHWT22c+Q1Ipre2tr7Fta8Wl3dpcLJoVi t8HPU4NeNdqvLhsWMOa87X+G38zGrMBQrRCOnM9DWqsMvOjVo9uxL1q61Ng6Y2TZ R9s4Yp7OKXHSm9AQI/lw3xg4vxyVL963NA1rXavwtTwqHI2aQJ3h0NnXma2WLfQ4 C/lmEv5gFRRjC08Ex44EuZkV4OECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT22jR2 6wAxKT2AUTK4E/+1S+5x5jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzYwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o78wDQYJKoZIhvcNAQELBQADggEBACBOic5HEB7n92dxsBV3SePmFoo6gGDlyg05 xS/CeMvefXVc9+XerGpUBwcnqjEMVTusD8CxfbolzoHQgtXpMDHrsG1A846emrUz IlSOfie8PK9GgELq4NTP3Lg4n7iaa0UqqxR6gJogEyOHvPWiqiAyIiqNoPf+MwVk acGr1OPL4kTpJiHBxZVmFWb+ovAO/rHrlUTzRz1Sm7gckDFjhbhOLu+lRF4iNTYk ztuIqWgtHdaqU/ha7XDeZ0ysFedBBrEgbdpogNOEduWWMN2pakFPSje4KGk+EJYF YGMCOtfzvF9zoxrkSfyOvDaAcgvqevyZqRvzWcct1ezvVOuyUdo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:46 2026 by rpki-client