$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143648.roa File: AS143648.roa (raw, json) Hash identifier: AMEVdaKj3V4/dDvXVdAgPB98s3byl1eVBknjARHLb1Q= Subject key identifier: 10:7B:6D:35:B3:38:16:E4:40:C5:64:E5:B2:6B:95:4A:E6:18:0C:E7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 27938C97893E8D362A05D049FD7BC8EAEECBDBE4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143648.roa Signing time: Wed 04 Mar 2026 06:15:06 +0000 ROA not before: Wed 04 Mar 2026 06:10:06 +0000 ROA not after: Wed 03 Mar 2027 06:15:06 +0000 asID: 143648 IP address blocks: 240a:a3e6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:93:8c:97:89:3e:8d:36:2a:05:d0:49:fd:7b:c8:ea:ee:cb:db:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:06 2026 GMT Not After : Mar 3 06:15:06 2027 GMT Subject: CN=107B6D35B33816E440C564E5B26B954AE6180CE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:b4:31:f4:fe:59:44:4b:cf:5e:ec:f7:75: 55:42:f2:7e:71:bb:c6:95:11:c8:5a:0b:45:0c:9c: 0c:4e:22:45:ac:ca:69:64:f0:c2:85:0a:76:89:d1: 1c:ca:d6:66:ad:20:8c:9e:7e:37:72:a0:69:e0:51: 5f:10:6f:40:20:12:a3:bb:83:2b:38:fa:c8:34:61: 09:6f:02:2d:ce:d1:eb:43:b0:1f:f5:a8:e6:a5:d9: 92:f9:0d:48:42:04:bf:27:96:0f:d6:f6:10:64:fe: eb:79:8f:74:00:98:a1:dd:12:be:df:2c:7c:9c:60: 76:4c:14:47:b8:2d:8d:f1:67:09:f7:2c:cd:e5:d4: 28:52:f6:bd:c0:54:48:b2:c3:e8:62:a1:a3:c0:0e: f8:ef:c5:90:6b:42:40:2a:dc:16:92:49:67:3c:7d: 1f:6b:af:6d:bc:e7:f0:a3:14:f9:78:67:36:de:86: 98:41:36:52:df:21:54:e2:54:b5:c9:2c:87:e4:c9: d7:aa:51:46:6e:c4:a9:14:5e:ae:6d:19:ff:e6:a4: 4a:c8:e5:5f:7f:c5:43:ea:61:83:18:65:d6:ac:c0: 89:fe:42:19:42:86:ac:1f:1a:31:f2:c5:f4:e6:69: 39:64:a3:77:2d:b7:0b:74:44:8c:64:69:51:69:f2: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7B:6D:35:B3:38:16:E4:40:C5:64:E5:B2:6B:95:4A:E6:18:0C:E7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3e6::/32 Signature Algorithm: sha256WithRSAEncryption 2b:2d:dd:ed:97:4d:7c:05:bb:7b:54:25:32:40:cc:0e:b2:92: d8:38:ad:57:c0:c6:3c:09:67:63:74:96:e5:78:3e:7f:75:5e: 94:77:b9:bc:a0:18:43:1a:78:c3:19:c4:a0:26:03:17:20:9b: 71:4d:80:31:dd:d9:c5:e4:2e:bc:0b:75:fb:fc:06:22:85:a8: 85:42:3b:58:a2:a2:54:d8:f8:d9:6e:3f:91:8e:58:7c:c1:7c: 0f:80:b8:df:1f:28:44:35:35:6d:6a:3d:50:b6:48:be:93:13: 96:1a:99:28:55:4a:b8:cb:ac:84:0a:63:94:08:ce:3e:92:e0: 33:17:ea:de:df:a7:8a:1a:d2:41:61:e7:81:44:21:d4:88:65: df:0e:34:bb:59:1e:8f:bb:2e:62:19:75:ab:4c:c1:d1:9b:34: 92:56:c0:3d:fe:6b:9c:9c:6f:cf:71:d1:9f:dc:8f:53:40:10: fb:30:d3:38:04:79:ff:1d:58:2c:cd:6b:c4:24:89:6b:17:87: 0c:bc:4e:16:68:9f:f8:cd:3c:d1:d8:61:a4:dd:82:40:9d:5f: 03:b5:08:aa:2c:27:e2:39:85:73:d8:26:06:65:8e:9b:53:e3: d6:f8:90:e0:05:1f:c4:d3:8c:46:92:fd:2c:15:78:c4:62:48: 22:38:da:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJ5OMl4k+jTYqBdBJ/XvI6u7L2+QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwNloX DTI3MDMwMzA2MTUwNlowMzExMC8GA1UEAxMoMTA3QjZEMzVCMzM4MTZFNDQwQzU2 NEU1QjI2Qjk1NEFFNjE4MENFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMH8tDH0/llES89e7Pd1VULyfnG7xpURyFoLRQycDE4iRazKaWTwwoUKdonR HMrWZq0gjJ5+N3KgaeBRXxBvQCASo7uDKzj6yDRhCW8CLc7R60OwH/Wo5qXZkvkN SEIEvyeWD9b2EGT+63mPdACYod0Svt8sfJxgdkwUR7gtjfFnCfcszeXUKFL2vcBU SLLD6GKho8AO+O/FkGtCQCrcFpJJZzx9H2uvbbzn8KMU+XhnNt6GmEE2Ut8hVOJU tcksh+TJ16pRRm7EqRRerm0Z/+akSsjlX3/FQ+phgxhl1qzAif5CGUKGrB8aMfLF 9OZpOWSjdy23C3REjGRpUWnya9UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQQe201 szgW5EDFZOWya5VK5hgM5zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o+YwDQYJKoZIhvcNAQELBQADggEBACst3e2XTXwFu3tUJTJAzA6yktg4rVfAxjwJ Z2N0luV4Pn91XpR3ubygGEMaeMMZxKAmAxcgm3FNgDHd2cXkLrwLdfv8BiKFqIVC O1iiolTY+NluP5GOWHzBfA+AuN8fKEQ1NW1qPVC2SL6TE5YamShVSrjLrIQKY5QI zj6S4DMX6t7fp4oa0kFh54FEIdSIZd8ONLtZHo+7LmIZdatMwdGbNJJWwD3+a5yc b89x0Z/cj1NAEPsw0zgEef8dWCzNa8QkiWsXhwy8ThZon/jNPNHYYaTdgkCdXwO1 CKosJ+I5hXPYJgZljptT49b4kOAFH8TTjEaS/SwVeMRiSCI42o0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:39 2026 by rpki-client