$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143638.roa File: AS143638.roa (raw, json) Hash identifier: yu4taDTJY9ojtF7iQlLcAcaPtggw/L4ijDaH4KCPen4= Subject key identifier: 2B:0E:70:4F:84:C9:D7:02:98:49:CF:05:DD:49:76:BC:AE:76:47:8F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 652CF023946C21F25348FF87706D799C0A7DB6F9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143638.roa Signing time: Wed 04 Mar 2026 06:13:04 +0000 ROA not before: Wed 04 Mar 2026 06:08:04 +0000 ROA not after: Wed 03 Mar 2027 06:13:04 +0000 asID: 143638 IP address blocks: 240a:a3dc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2c:f0:23:94:6c:21:f2:53:48:ff:87:70:6d:79:9c:0a:7d:b6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:04 2026 GMT Not After : Mar 3 06:13:04 2027 GMT Subject: CN=2B0E704F84C9D7029849CF05DD4976BCAE76478F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:4d:aa:d3:7f:a9:76:dd:c5:1f:42:2d:8d: b6:cb:e6:86:16:e9:8c:03:a5:d3:84:61:d5:26:df: 2e:a6:85:87:46:0f:82:cd:d2:47:35:3a:93:f2:00: f2:c1:5b:11:74:57:67:52:2b:4f:89:64:2d:3a:99: b6:47:da:e5:cf:98:bf:5a:db:ed:a3:47:f4:ad:bd: 1b:a9:1b:d9:55:a0:47:15:d0:2a:a8:37:7d:af:67: c1:28:2f:2a:58:a8:85:e9:93:99:7d:a4:72:04:a6: fc:41:bf:27:7d:fb:c1:1f:64:3a:0f:d5:83:eb:46: d7:d4:d6:ff:70:e1:1d:0b:c4:2f:9a:ed:d9:bf:f3: 37:e5:0f:cd:57:d0:a2:03:c6:52:46:65:64:9e:66: 18:2f:60:fb:69:a4:5f:7c:02:0f:f2:7f:76:20:7e: fa:be:8b:55:53:1f:bc:e5:e1:49:db:4a:55:b2:5a: 67:a2:8d:69:7c:e2:58:b5:68:10:d6:e1:19:80:d5: ae:e5:af:22:e4:dd:ed:16:62:14:07:dd:09:0c:53: 36:98:77:08:b1:69:f3:eb:f4:e0:f3:b8:5e:99:82: e8:4f:57:08:e0:b4:a0:4a:40:b4:59:66:60:bb:82: 51:6c:6c:9e:e3:57:f8:dd:94:f9:b0:24:17:86:8b: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0E:70:4F:84:C9:D7:02:98:49:CF:05:DD:49:76:BC:AE:76:47:8F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3dc::/32 Signature Algorithm: sha256WithRSAEncryption cd:cd:96:e6:af:a3:09:83:95:43:f4:e3:fe:5f:88:70:75:31: 82:a4:39:8d:52:de:bc:e9:21:d9:3e:df:6e:cb:0d:e0:40:7c: 88:f3:8b:cb:33:1a:0a:31:17:0d:31:4d:41:95:1b:82:a7:d9: 78:49:56:26:3c:27:e4:6c:7f:3c:5f:c1:01:fa:0b:f5:73:c2: d6:b4:ad:f9:a6:13:bc:9d:e2:88:34:e9:90:0b:ce:da:3e:dc: 7f:aa:9a:7d:d6:a1:a5:0b:fa:ec:22:58:52:0d:58:55:a8:c6: 1a:a5:70:c2:5a:a5:c1:1a:31:ac:e2:5f:8f:cd:0a:24:36:0c: dd:cd:81:a2:0a:97:ce:6b:dc:76:47:3b:0c:ee:67:71:18:6f: c3:5f:86:6d:4b:63:d2:5c:4e:53:45:1a:19:0d:c9:ab:2f:0f: 03:e4:4f:bf:60:13:a3:64:21:b1:6a:88:e8:b0:45:0d:f6:7a: ab:2b:0e:4c:0c:e9:5f:29:c3:2b:77:03:08:00:4a:2a:bd:5d: b1:dd:e3:a3:ba:c2:b5:2a:b3:ad:a0:8f:00:4d:10:3e:4a:ba: 08:a4:e8:21:89:ad:b3:d3:1a:6e:ea:9d:03:2c:5b:73:5a:ce: 8e:c5:26:d2:45:b8:b9:51:ac:4b:64:14:b5:c0:13:f7:cc:91: f9:28:d2:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZSzwI5RsIfJTSP+HcG15nAp9tvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwNFoX DTI3MDMwMzA2MTMwNFowMzExMC8GA1UEAxMoMkIwRTcwNEY4NEM5RDcwMjk4NDlD RjA1REQ0OTc2QkNBRTc2NDc4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK9TarTf6l23cUfQi2NtsvmhhbpjAOl04Rh1SbfLqaFh0YPgs3SRzU6k/IA 8sFbEXRXZ1IrT4lkLTqZtkfa5c+Yv1rb7aNH9K29G6kb2VWgRxXQKqg3fa9nwSgv KliohemTmX2kcgSm/EG/J337wR9kOg/Vg+tG19TW/3DhHQvEL5rt2b/zN+UPzVfQ ogPGUkZlZJ5mGC9g+2mkX3wCD/J/diB++r6LVVMfvOXhSdtKVbJaZ6KNaXziWLVo ENbhGYDVruWvIuTd7RZiFAfdCQxTNph3CLFp8+v04PO4XpmC6E9XCOC0oEpAtFlm YLuCUWxsnuNX+N2U+bAkF4aLfNECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQrDnBP hMnXAphJzwXdSXa8rnZHjzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzYzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o9wwDQYJKoZIhvcNAQELBQADggEBAM3NluavowmDlUP04/5fiHB1MYKkOY1S3rzp Idk+327LDeBAfIjzi8szGgoxFw0xTUGVG4Kn2XhJViY8J+RsfzxfwQH6C/Vzwta0 rfmmE7yd4og06ZALzto+3H+qmn3WoaUL+uwiWFINWFWoxhqlcMJapcEaMaziX4/N CiQ2DN3NgaIKl85r3HZHOwzuZ3EYb8Nfhm1LY9JcTlNFGhkNyasvDwPkT79gE6Nk IbFqiOiwRQ32eqsrDkwM6V8pwyt3AwgASiq9XbHd46O6wrUqs62gjwBNED5Kugik 6CGJrbPTGm7qnQMsW3Nazo7FJtJFuLlRrEtkFLXAE/fMkfko0lQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:45 2026 by rpki-client