$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143611.roa File: AS143611.roa (raw, json) Hash identifier: vjf0/OusU1fvuMCHa3UjKF/Ws59lb5/nlI3cckDsaNc= Subject key identifier: 8E:F2:A5:48:9D:D2:7C:F1:C3:CA:7F:6C:81:96:77:2F:EC:77:AC:2B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7156464AC8D604E85928B070D0392607B7B34F0F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143611.roa Signing time: Wed 04 Mar 2026 06:15:36 +0000 ROA not before: Wed 04 Mar 2026 06:10:36 +0000 ROA not after: Wed 03 Mar 2027 06:15:36 +0000 asID: 143611 IP address blocks: 240a:a3c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:56:46:4a:c8:d6:04:e8:59:28:b0:70:d0:39:26:07:b7:b3:4f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:36 2026 GMT Not After : Mar 3 06:15:36 2027 GMT Subject: CN=8EF2A5489DD27CF1C3CA7F6C8196772FEC77AC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:05:80:28:21:75:4c:e7:ea:d5:c7:be:6d: 73:65:48:94:02:a4:32:78:92:ab:55:a7:ba:d8:31: fd:55:de:ab:70:6d:2b:6a:0e:2e:8d:ec:59:f9:bc: 47:cd:7e:24:11:16:d2:0b:80:d3:1f:f9:1d:49:2c: 83:8f:a8:ff:6c:38:08:b8:6c:7a:bb:6d:8c:55:07: d1:7d:74:f0:45:66:c1:a2:55:07:f4:78:be:17:ba: 9e:7d:65:65:f0:1a:c1:74:7b:b3:1a:c6:74:0c:40: cb:53:93:49:30:b0:44:f0:a1:15:4d:f1:3b:30:cb: 3e:f0:8f:a2:06:ea:1b:34:e4:0d:86:4f:06:8f:69: a9:cd:ac:41:53:bc:6c:c1:d3:e6:91:9f:eb:ac:20: e5:0c:5c:ed:fc:5a:20:aa:f5:90:52:de:47:d2:b5: 0e:a0:fe:06:f6:6f:fd:4a:7d:9e:c6:f5:a4:5b:16: ea:a6:52:7e:d7:0d:7a:43:7f:3d:af:d7:b6:27:d5: 0e:39:14:2b:d2:63:bd:00:40:4b:54:4a:64:bb:52: 7a:81:5c:a9:c8:30:7a:cc:b0:7c:92:1e:da:ec:c1: 53:f8:1d:43:9e:0a:de:1a:fa:a5:13:9e:bb:50:fd: 46:15:be:f4:d0:4f:b7:02:19:63:8e:1b:0b:0d:03: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F2:A5:48:9D:D2:7C:F1:C3:CA:7F:6C:81:96:77:2F:EC:77:AC:2B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143611.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3c1::/32 Signature Algorithm: sha256WithRSAEncryption 2e:f2:4a:17:f1:8d:f9:5a:ec:0e:c2:8c:d2:68:fc:b3:1f:a7: 49:aa:32:7d:b8:e9:17:29:b3:6e:03:62:86:2d:0b:9a:4d:28: bb:9c:a5:52:ff:5a:6a:ee:aa:52:2b:1a:dd:fd:40:ff:87:28: f5:cc:5d:bc:73:01:61:13:42:2c:c6:d9:5e:06:e7:66:ac:ba: d9:7a:55:82:2f:14:3d:ff:d6:e1:f6:bf:04:a1:76:bb:32:96: d4:22:68:bb:a9:d6:de:06:83:86:c5:60:5c:52:e7:aa:aa:65: 42:04:bd:34:92:2b:f6:65:44:e3:ac:79:38:57:c5:6e:5c:a1: 5f:11:9d:f2:78:8c:9f:dc:bb:c8:e5:11:31:65:e3:22:37:36: 06:09:0c:f1:19:9c:bb:67:70:24:c9:a3:3d:54:55:cc:37:e8: f2:90:18:a7:d7:f0:1a:7e:fe:67:bb:34:21:5d:7e:f0:db:57: 85:02:6a:54:ab:22:85:85:92:d4:61:14:52:28:a5:ac:08:97: 69:7e:07:92:8b:e2:57:22:2c:1d:e7:4e:f9:32:e2:4d:fc:17: 62:3a:cd:92:d0:10:20:93:88:45:76:ee:8b:6b:5b:9a:0c:e6: c6:60:a2:a1:db:30:7d:c4:94:75:40:b4:a7:d1:7d:48:ce:cb: 4c:cc:ad:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcVZGSsjWBOhZKLBw0DkmB7ezTw8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzNloX DTI3MDMwMzA2MTUzNlowMzExMC8GA1UEAxMoOEVGMkE1NDg5REQyN0NGMUMzQ0E3 RjZDODE5Njc3MkZFQzc3QUMyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMHBYAoIXVM5+rVx75tc2VIlAKkMniSq1Wnutgx/VXeq3BtK2oOLo3sWfm8 R81+JBEW0guA0x/5HUksg4+o/2w4CLhserttjFUH0X108EVmwaJVB/R4vhe6nn1l ZfAawXR7sxrGdAxAy1OTSTCwRPChFU3xOzDLPvCPogbqGzTkDYZPBo9pqc2sQVO8 bMHT5pGf66wg5Qxc7fxaIKr1kFLeR9K1DqD+BvZv/Up9nsb1pFsW6qZSftcNekN/ Pa/XtifVDjkUK9JjvQBAS1RKZLtSeoFcqcgwesywfJIe2uzBU/gdQ54K3hr6pROe u1D9RhW+9NBPtwIZY44bCw0DmtkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSO8qVI ndJ88cPKf2yBlncv7HesKzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzYxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o8EwDQYJKoZIhvcNAQELBQADggEBAC7yShfxjfla7A7CjNJo/LMfp0mqMn246Rcp s24DYoYtC5pNKLucpVL/WmruqlIrGt39QP+HKPXMXbxzAWETQizG2V4G52asutl6 VYIvFD3/1uH2vwShdrsyltQiaLup1t4Gg4bFYFxS56qqZUIEvTSSK/ZlROOseThX xW5coV8RnfJ4jJ/cu8jlETFl4yI3NgYJDPEZnLtncCTJoz1UVcw36PKQGKfX8Bp+ /me7NCFdfvDbV4UCalSrIoWFktRhFFIopawIl2l+B5KL4lciLB3nTvky4k38F2I6 zZLQECCTiEV27otrW5oM5sZgoqHbMH3ElHVAtKfRfUjOy0zMrdg= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:41 2026 by rpki-client