$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143623.roa File: AS143623.roa (raw, json) Hash identifier: UTp/yqn3cYGM2PeFnJ8Yhewr4vDXXWVY+bFosP0GoNQ= Subject key identifier: 84:C3:36:36:3B:D0:B3:2B:A7:03:E9:B3:EF:C0:2E:AA:97:E2:7F:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 18E9FA88DEEB909F88AD35932EC1D827BB5B9D02 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143623.roa Signing time: Wed 04 Mar 2026 06:14:53 +0000 ROA not before: Wed 04 Mar 2026 06:09:53 +0000 ROA not after: Wed 03 Mar 2027 06:14:53 +0000 asID: 143623 IP address blocks: 240a:a3cd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e9:fa:88:de:eb:90:9f:88:ad:35:93:2e:c1:d8:27:bb:5b:9d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:53 2026 GMT Not After : Mar 3 06:14:53 2027 GMT Subject: CN=84C336363BD0B32BA703E9B3EFC02EAA97E27FA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:f9:91:36:e2:13:a4:7f:48:b9:e4:59:c7: f7:14:40:d4:99:60:b4:16:27:76:c3:ff:e7:2e:e3: b5:0b:5e:10:cb:4a:62:91:6c:7f:6d:b7:84:bf:87: 64:8d:20:d6:25:90:4b:2f:2c:68:45:20:1d:e6:61: 72:fe:08:5a:a5:d2:a1:9e:3d:55:95:a3:ba:95:6d: 8e:83:b7:b4:46:b9:b2:9a:81:c0:09:6d:dd:9c:aa: 45:61:98:5d:30:3c:f4:85:f9:a7:2d:0f:9e:08:53: df:d3:87:18:ae:44:de:dc:c5:a6:90:16:73:c7:49: 6e:a5:5d:32:0b:b0:79:6b:bf:08:43:c7:dc:d6:ad: 1e:da:94:6e:c9:3e:dc:f1:8d:ca:49:08:3c:da:6a: fb:ab:f2:65:b6:76:c8:86:c9:40:79:9f:ba:4c:bf: b5:86:9b:68:a0:26:ec:f1:88:e6:23:0b:8d:d3:29: 2a:88:e3:08:d8:c1:53:c0:95:17:c4:56:4a:2c:15: e5:55:44:bb:ad:c8:30:f2:f0:13:a2:be:0c:ca:a5: c4:80:04:2a:61:7c:df:b0:f8:0a:ec:29:56:7d:95: ea:e6:3e:30:ed:8c:43:62:2b:26:66:24:54:34:28: 5d:0e:9c:dd:8d:f7:07:97:24:6e:2b:b6:66:7b:e0: a4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C3:36:36:3B:D0:B3:2B:A7:03:E9:B3:EF:C0:2E:AA:97:E2:7F:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143623.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3cd::/32 Signature Algorithm: sha256WithRSAEncryption bd:79:43:3e:35:65:b9:62:1f:46:07:70:bc:a4:20:3a:97:da: f3:16:ca:10:b0:ec:c4:57:7b:0a:db:fb:f7:e5:5a:3d:d6:27: fb:61:47:b2:b1:91:c3:33:f9:10:5f:99:13:4e:63:95:8b:6f: d9:0f:40:97:10:e7:05:de:2d:55:c4:14:99:e4:42:bc:fb:8a: 5e:1d:54:99:ea:bb:5a:de:25:bc:5e:c9:bb:81:9e:3d:08:63: a8:5e:de:99:4a:cc:ad:06:c9:b0:f7:de:10:06:84:04:96:55: 2d:2d:89:84:55:38:2f:cd:16:30:81:e2:82:00:d5:cd:00:2c: 06:31:fc:28:36:fe:36:a8:c7:c3:50:0a:02:54:b2:29:65:ea: 90:f7:dd:eb:b6:aa:98:88:ca:ac:8e:dc:37:15:d1:18:c6:53: e6:49:aa:ff:5f:8f:e4:7b:71:78:35:5e:84:f9:43:c5:ba:97: ef:28:85:dd:77:8a:76:e2:f6:fd:ac:7f:c6:46:a3:0e:71:dd: 23:eb:66:f1:df:01:a0:71:42:5e:b1:7a:0d:dc:f3:d7:0a:00: 7e:bf:4e:9d:24:cc:c3:b0:f0:8b:46:f6:85:93:bc:55:00:f2: 97:ad:c6:8f:13:0e:a1:0a:06:43:52:16:f2:a6:b0:ed:6a:38: 92:ed:d2:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGOn6iN7rkJ+IrTWTLsHYJ7tbnQIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1M1oX DTI3MDMwMzA2MTQ1M1owMzExMC8GA1UEAxMoODRDMzM2MzYzQkQwQjMyQkE3MDNF OUIzRUZDMDJFQUE5N0UyN0ZBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnY+ZE24hOkf0i55FnH9xRA1JlgtBYndsP/5y7jtQteEMtKYpFsf223hL+H ZI0g1iWQSy8saEUgHeZhcv4IWqXSoZ49VZWjupVtjoO3tEa5spqBwAlt3ZyqRWGY XTA89IX5py0PnghT39OHGK5E3tzFppAWc8dJbqVdMguweWu/CEPH3NatHtqUbsk+ 3PGNykkIPNpq+6vyZbZ2yIbJQHmfuky/tYabaKAm7PGI5iMLjdMpKojjCNjBU8CV F8RWSiwV5VVEu63IMPLwE6K+DMqlxIAEKmF837D4CuwpVn2V6uY+MO2MQ2IrJmYk VDQoXQ6c3Y33B5ckbiu2ZnvgpFUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSEwzY2 O9CzK6cD6bPvwC6ql+J/pTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzYyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o80wDQYJKoZIhvcNAQELBQADggEBAL15Qz41ZbliH0YHcLykIDqX2vMWyhCw7MRX ewrb+/flWj3WJ/thR7KxkcMz+RBfmRNOY5WLb9kPQJcQ5wXeLVXEFJnkQrz7il4d VJnqu1reJbxeybuBnj0IY6he3plKzK0GybD33hAGhASWVS0tiYRVOC/NFjCB4oIA 1c0ALAYx/Cg2/jaox8NQCgJUsill6pD33eu2qpiIyqyO3DcV0RjGU+ZJqv9fj+R7 cXg1XoT5Q8W6l+8ohd13inbi9v2sf8ZGow5x3SPrZvHfAaBxQl6xeg3c89cKAH6/ Tp0kzMOw8ItG9oWTvFUA8petxo8TDqEKBkNSFvKmsO1qOJLt0r0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:19 2026 by rpki-client