$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143637.roa File: AS143637.roa (raw, json) Hash identifier: Adp42Auknoe7u2e9vHcLajltQVh2S1JlibSiol8Imzw= Subject key identifier: F1:BD:C4:F7:3B:33:4E:ED:85:B5:D2:21:2F:FE:FB:45:73:77:03:A0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 12A7803F20DBE296BF2172CB395D21959F690C75 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143637.roa Signing time: Wed 04 Mar 2026 06:15:40 +0000 ROA not before: Wed 04 Mar 2026 06:10:40 +0000 ROA not after: Wed 03 Mar 2027 06:15:40 +0000 asID: 143637 IP address blocks: 240a:a3db::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a7:80:3f:20:db:e2:96:bf:21:72:cb:39:5d:21:95:9f:69:0c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:40 2026 GMT Not After : Mar 3 06:15:40 2027 GMT Subject: CN=F1BDC4F73B334EED85B5D2212FFEFB45737703A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:32:22:23:48:ed:e2:43:95:63:a6:aa:49: 68:c0:07:fb:2c:0c:cb:8f:39:c0:bb:19:d0:32:b6: b3:86:2e:bc:9d:2f:97:65:6f:64:26:96:f3:0b:7b: 18:ef:72:dd:cd:7f:d3:fa:00:af:dd:48:37:2f:b5: fb:87:eb:1d:a0:8b:23:be:6f:ab:09:31:c5:65:3f: e4:48:ac:38:ea:f6:9f:36:f4:53:ef:46:73:1e:ef: 1c:2a:46:94:0d:2c:e1:f1:fe:e6:0b:21:35:8a:fc: 46:e2:65:dd:2e:4e:b2:ce:66:32:11:89:63:37:e2: 23:64:ea:36:e1:f6:fb:b8:a8:44:65:b3:25:e0:01: 56:a8:95:87:14:05:7d:92:5f:ad:d1:25:83:d9:4a: e2:5a:8f:e4:c1:f1:a3:2f:d3:ba:4b:f4:b6:cd:8e: fd:c4:e5:cf:70:a4:ef:d1:ee:74:99:b8:d7:d0:e3: 3f:23:29:ef:fc:63:1c:c6:e8:3c:f2:b6:1c:9d:cb: 34:59:c6:f2:9a:cc:cb:8c:db:07:22:0b:0d:fa:ed: 86:f8:05:92:80:14:7f:9d:0e:4a:36:b5:1a:d1:e4: 99:d7:2e:6e:a4:d8:f7:d5:bb:74:ae:8f:56:4d:d0: c2:bb:dc:b6:06:74:52:90:32:79:7b:19:b5:99:bc: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BD:C4:F7:3B:33:4E:ED:85:B5:D2:21:2F:FE:FB:45:73:77:03:A0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3db::/32 Signature Algorithm: sha256WithRSAEncryption 11:10:e5:3b:77:51:f7:01:57:fb:98:be:ab:93:1b:25:13:ef: 96:60:b1:29:4b:26:57:c8:ed:dd:43:57:5f:b4:cf:fc:21:e7: 57:06:c3:14:e2:af:03:9d:6c:d9:d3:8e:81:20:b5:49:92:c8: 90:51:ef:fd:d8:42:6f:d7:51:fc:8e:1a:64:00:91:52:49:7a: 1b:ad:f6:d2:d6:1a:d4:a5:d7:77:d7:96:a0:16:b9:23:61:de: b1:2b:90:d9:cb:41:78:cf:fe:bc:69:90:c6:57:96:38:e3:ac: 55:65:01:84:94:2c:4c:f1:3f:b6:10:23:10:23:7c:ae:96:62: 72:9f:c7:cf:a9:83:b3:11:62:e1:a1:cd:2e:09:b8:c6:06:e1: 37:9b:ab:0b:2e:f2:d8:a3:3b:6d:71:47:71:1a:78:e9:c7:59: 89:6f:3e:68:b2:17:ac:22:02:f2:a4:63:33:e6:e3:7b:44:22: 31:67:92:2b:b0:03:00:92:19:2d:33:4f:c7:46:4e:f0:90:13: 56:68:93:a7:be:6a:7e:74:7c:08:b3:23:d5:87:3f:c0:e5:be: 61:2b:45:aa:d3:90:bb:b1:34:b2:16:d7:b7:ef:d9:f4:ad:02: 85:70:2d:50:b3:ad:7e:06:9e:1d:52:68:fb:e3:f0:fb:0a:a8: f5:02:f4:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEqeAPyDb4pa/IXLLOV0hlZ9pDHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0MFoX DTI3MDMwMzA2MTU0MFowMzExMC8GA1UEAxMoRjFCREM0RjczQjMzNEVFRDg1QjVE MjIxMkZGRUZCNDU3Mzc3MDNBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAOMiIjSO3iQ5VjpqpJaMAH+ywMy485wLsZ0DK2s4YuvJ0vl2VvZCaW8wt7 GO9y3c1/0/oAr91INy+1+4frHaCLI75vqwkxxWU/5EisOOr2nzb0U+9Gcx7vHCpG lA0s4fH+5gshNYr8RuJl3S5Oss5mMhGJYzfiI2TqNuH2+7ioRGWzJeABVqiVhxQF fZJfrdElg9lK4lqP5MHxoy/Tukv0ts2O/cTlz3Ck79HudJm419DjPyMp7/xjHMbo PPK2HJ3LNFnG8prMy4zbByILDfrthvgFkoAUf50OSja1GtHkmdcubqTY99W7dK6P Vk3QwrvctgZ0UpAyeXsZtZm8f8cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTxvcT3 OzNO7YW10iEv/vtFc3cDoDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzYzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o9swDQYJKoZIhvcNAQELBQADggEBABEQ5Tt3UfcBV/uYvquTGyUT75ZgsSlLJlfI 7d1DV1+0z/wh51cGwxTirwOdbNnTjoEgtUmSyJBR7/3YQm/XUfyOGmQAkVJJehut 9tLWGtSl13fXlqAWuSNh3rErkNnLQXjP/rxpkMZXljjjrFVlAYSULEzxP7YQIxAj fK6WYnKfx8+pg7MRYuGhzS4JuMYG4Tebqwsu8tijO21xR3EaeOnHWYlvPmiyF6wi AvKkYzPm43tEIjFnkiuwAwCSGS0zT8dGTvCQE1Zok6e+an50fAizI9WHP8DlvmEr RarTkLuxNLIW17fv2fStAoVwLVCzrX4Gnh1SaPvj8PsKqPUC9NI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:18 2026 by rpki-client