$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143615.roa File: AS143615.roa (raw, json) Hash identifier: bCjMzygq3AJ1snsNenFjw3SDQXSWRB0dYXRgHle/X4A= Subject key identifier: BB:A4:59:37:96:F5:4E:F2:E9:BF:2C:94:4D:85:13:88:BA:57:3E:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 768125D96F4823E7CBDDD460D7C1FCCEA5F9341B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143615.roa Signing time: Wed 04 Mar 2026 06:15:45 +0000 ROA not before: Wed 04 Mar 2026 06:10:45 +0000 ROA not after: Wed 03 Mar 2027 06:15:45 +0000 asID: 143615 IP address blocks: 240a:a3c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:81:25:d9:6f:48:23:e7:cb:dd:d4:60:d7:c1:fc:ce:a5:f9:34:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:45 2026 GMT Not After : Mar 3 06:15:45 2027 GMT Subject: CN=BBA4593796F54EF2E9BF2C944D851388BA573E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:c4:76:5c:93:b8:a3:0c:05:0c:7d:17:05: 47:b9:66:4b:22:8b:14:c9:aa:b4:60:1c:cd:02:19: b1:b8:b4:81:6a:c8:d3:16:43:4d:9f:8c:03:3b:91: 90:90:4b:58:a3:7b:ab:3e:ad:7b:f5:69:dd:4e:f9: 7b:c7:d3:fe:d7:4b:af:24:09:0b:cc:b7:1e:95:cb: ea:79:c9:7f:0d:bd:4e:a6:8e:41:ee:cd:8d:e0:98: e7:ad:7c:fb:28:01:53:09:08:c9:1b:ea:df:89:b0: 72:de:e8:ef:95:f6:11:f6:aa:e3:4d:ca:60:87:38: 59:77:5f:2f:23:70:74:ac:30:d5:20:0e:1a:a9:26: 25:ad:f2:58:b1:39:c0:ba:6f:0a:63:fb:6a:92:c5: 65:fe:97:65:7a:ac:51:88:51:b1:75:9c:f7:23:bc: fb:ad:ca:8f:1b:71:54:07:65:dc:fd:24:95:77:4e: cd:de:b9:01:57:dd:60:d5:58:f5:5b:22:6e:48:90: c2:ec:24:b5:93:43:f7:87:cd:20:83:9e:41:3e:a9: d9:00:7f:e7:e3:10:2f:96:07:7d:67:1f:6f:14:57: e1:27:cc:f5:71:47:14:0d:60:26:8f:b9:69:1c:8d: 65:ec:d3:cf:1d:99:45:70:c0:dc:4a:74:34:64:09: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A4:59:37:96:F5:4E:F2:E9:BF:2C:94:4D:85:13:88:BA:57:3E:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143615.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3c5::/32 Signature Algorithm: sha256WithRSAEncryption ba:4d:ff:4e:ec:5d:f9:ab:7c:02:50:19:62:04:22:30:43:d7: cc:e4:6f:f4:b8:a3:7f:7e:ae:44:51:7b:8f:50:2f:44:c1:e1: 42:53:b9:15:23:be:3f:cf:d4:70:e7:6f:77:3d:6d:17:b1:8f: 7d:d7:f2:1d:ee:ee:b2:c9:77:ea:e0:4b:6d:83:e0:0c:6d:90: a9:bb:56:e5:ac:16:01:3a:13:87:f3:92:2f:75:34:23:13:94: 6e:54:ca:83:d4:f9:a8:97:63:b1:83:db:a5:3e:11:de:08:9a: 20:9d:91:a6:ac:7a:d3:4b:e0:f7:43:91:d3:9b:df:77:8d:41: d6:f7:2e:77:8f:6f:b1:d0:d2:9f:29:5e:dd:a2:cc:55:74:4f: bf:9c:09:df:31:7d:fe:ed:57:cd:2a:3e:ab:77:01:93:c8:22: e9:73:31:e3:43:04:c2:8d:51:3d:97:a7:6d:4b:66:ab:70:f2: 68:03:e9:29:c9:38:da:5a:1b:7c:e0:7c:88:0d:d0:36:28:62: f7:f0:0d:7b:2d:89:7c:3a:b7:93:b7:0b:a4:dd:78:1f:02:c8: e3:3e:75:6d:2a:5e:0d:3a:c5:0c:20:46:b2:9f:92:6f:d5:aa: 36:82:42:bc:8d:17:4a:c5:34:7b:64:1a:1b:be:c5:3c:3c:7f: ba:c2:e4:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdoEl2W9II+fL3dRg18H8zqX5NBswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0NVoX DTI3MDMwMzA2MTU0NVowMzExMC8GA1UEAxMoQkJBNDU5Mzc5NkY1NEVGMkU5QkYy Qzk0NEQ4NTEzODhCQTU3M0U3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWtxHZck7ijDAUMfRcFR7lmSyKLFMmqtGAczQIZsbi0gWrI0xZDTZ+MAzuR kJBLWKN7qz6te/Vp3U75e8fT/tdLryQJC8y3HpXL6nnJfw29TqaOQe7NjeCY5618 +ygBUwkIyRvq34mwct7o75X2Efaq403KYIc4WXdfLyNwdKww1SAOGqkmJa3yWLE5 wLpvCmP7apLFZf6XZXqsUYhRsXWc9yO8+63KjxtxVAdl3P0klXdOzd65AVfdYNVY 9VsibkiQwuwktZND94fNIIOeQT6p2QB/5+MQL5YHfWcfbxRX4SfM9XFHFA1gJo+5 aRyNZezTzx2ZRXDA3Ep0NGQJVmkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS7pFk3 lvVO8um/LJRNhROIulc+fDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzYxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o8UwDQYJKoZIhvcNAQELBQADggEBALpN/07sXfmrfAJQGWIEIjBD18zkb/S4o39+ rkRRe49QL0TB4UJTuRUjvj/P1HDnb3c9bRexj33X8h3u7rLJd+rgS22D4AxtkKm7 VuWsFgE6E4fzki91NCMTlG5UyoPU+aiXY7GD26U+Ed4ImiCdkaasetNL4PdDkdOb 33eNQdb3LnePb7HQ0p8pXt2izFV0T7+cCd8xff7tV80qPqt3AZPIIulzMeNDBMKN UT2Xp21LZqtw8mgD6SnJONpaG3zgfIgN0DYoYvfwDXstiXw6t5O3C6TdeB8CyOM+ dW0qXg06xQwgRrKfkm/VqjaCQryNF0rFNHtkGhu+xTw8f7rC5CY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:02 2026 by rpki-client