$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143651.roa File: AS143651.roa (raw, json) Hash identifier: v7JzvGeLIo79/SsHMtPysXHapn5O0OlUki5IeteRsXo= Subject key identifier: C5:85:70:5F:7F:A6:AF:45:CD:F4:E5:CD:77:06:E8:8B:DF:79:D9:54 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2C6A68FB732EBE008D12A949CDCC0C54DCB02ADA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143651.roa Signing time: Wed 04 Mar 2026 06:14:14 +0000 ROA not before: Wed 04 Mar 2026 06:09:14 +0000 ROA not after: Wed 03 Mar 2027 06:14:14 +0000 asID: 143651 IP address blocks: 240a:a3e9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6a:68:fb:73:2e:be:00:8d:12:a9:49:cd:cc:0c:54:dc:b0:2a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:14 2026 GMT Not After : Mar 3 06:14:14 2027 GMT Subject: CN=C585705F7FA6AF45CDF4E5CD7706E88BDF79D954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:44:0d:74:c7:49:b3:c6:bd:93:22:8e:35: 48:51:ca:84:1f:ec:a3:c2:b6:62:4d:54:0b:06:59: d1:48:a8:23:d6:1b:9e:1c:ca:17:d9:50:d2:2b:5b: 67:0b:90:8d:2b:79:6d:95:0e:b2:9b:2e:d6:e8:9c: e8:57:bc:76:14:88:b9:90:c6:3c:86:98:d1:09:24: 70:33:f8:9b:72:7e:af:52:e8:ba:0f:89:f7:67:3d: 71:83:eb:01:29:54:89:eb:76:5d:f3:0c:19:ac:e6: 2a:b6:69:2e:8c:6f:2c:c2:d6:11:43:75:f1:9b:cf: 06:06:c0:e8:9d:1b:47:92:16:7a:5f:88:24:b8:8a: 20:2c:c9:72:13:d5:30:7b:61:79:9c:85:62:33:a1: f3:0b:7d:28:67:51:3d:5e:f5:be:3e:3d:1f:b2:30: 77:cd:a9:a7:97:91:4b:c0:64:f6:a9:8d:e1:82:a0: 72:d1:09:bc:cc:23:7b:3a:02:cf:0e:f0:f4:cb:61: 54:62:fb:f4:3c:1a:37:97:3a:51:3e:72:94:83:10: 4e:8a:4a:ec:a3:14:4b:59:b5:da:10:13:53:7f:8e: 96:b9:31:70:8e:76:22:18:ff:23:15:77:e5:d6:3c: 19:fc:eb:f8:9e:40:10:38:28:90:c6:b5:c1:f2:ef: 99:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:85:70:5F:7F:A6:AF:45:CD:F4:E5:CD:77:06:E8:8B:DF:79:D9:54 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143651.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3e9::/32 Signature Algorithm: sha256WithRSAEncryption 18:99:78:a5:99:62:27:43:db:b7:32:26:80:3f:cf:ca:03:0e: 17:95:5f:fa:95:06:b3:1d:01:bb:7c:11:b4:04:5d:3a:3d:11: a1:4b:d4:ce:f1:d2:53:bf:11:6f:28:a3:96:9c:56:84:7e:cc: a6:b1:b1:19:d5:fe:33:d9:81:ee:52:f9:38:52:dc:21:5b:61: e6:55:25:37:a5:ae:5d:75:bb:35:a1:45:fd:3b:6e:33:9f:d7: 06:29:e1:4c:8c:c3:9d:bc:38:d3:f1:8f:18:fb:15:6b:60:5e: 7e:0c:ee:99:31:a4:20:dc:56:69:98:fe:06:16:b1:4d:ad:d8: 7f:4e:1f:42:5b:63:6e:49:7f:e9:77:62:4f:6b:0f:91:31:e8: de:56:19:52:13:cc:3e:7c:27:ce:ef:3a:51:9f:d9:5e:b3:28: 8e:a2:4a:c6:20:08:84:8d:54:0c:c4:3e:90:cd:6f:1c:d4:52: 62:5c:4e:38:69:88:63:93:a8:1a:1b:f4:41:dd:77:bd:52:0c: 4e:74:b2:62:f7:8e:f8:cf:42:f6:01:d9:28:30:27:e5:2b:a9: 9f:05:2a:39:c4:2f:1b:b9:cf:a7:9a:94:a4:f3:70:e5:2d:6c: 31:12:61:76:0c:5e:b1:39:97:a9:ba:07:72:d4:59:b6:ab:52: 81:7c:ae:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULGpo+3MuvgCNEqlJzcwMVNywKtowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxNFoX DTI3MDMwMzA2MTQxNFowMzExMC8GA1UEAxMoQzU4NTcwNUY3RkE2QUY0NUNERjRF NUNENzcwNkU4OEJERjc5RDk1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5ZRA10x0mzxr2TIo41SFHKhB/so8K2Yk1UCwZZ0UioI9YbnhzKF9lQ0itb ZwuQjSt5bZUOspsu1uic6Fe8dhSIuZDGPIaY0QkkcDP4m3J+r1Loug+J92c9cYPr ASlUiet2XfMMGazmKrZpLoxvLMLWEUN18ZvPBgbA6J0bR5IWel+IJLiKICzJchPV MHtheZyFYjOh8wt9KGdRPV71vj49H7Iwd82pp5eRS8Bk9qmN4YKgctEJvMwjezoC zw7w9MthVGL79DwaN5c6UT5ylIMQTopK7KMUS1m12hATU3+OlrkxcI52Ihj/IxV3 5dY8Gfzr+J5AEDgokMa1wfLvme8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTFhXBf f6avRc305c13BuiL33nZVDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o+kwDQYJKoZIhvcNAQELBQADggEBABiZeKWZYidD27cyJoA/z8oDDheVX/qVBrMd Abt8EbQEXTo9EaFL1M7x0lO/EW8oo5acVoR+zKaxsRnV/jPZge5S+ThS3CFbYeZV JTelrl11uzWhRf07bjOf1wYp4UyMw528ONPxjxj7FWtgXn4M7pkxpCDcVmmY/gYW sU2t2H9OH0JbY25Jf+l3Yk9rD5Ex6N5WGVITzD58J87vOlGf2V6zKI6iSsYgCISN VAzEPpDNbxzUUmJcTjhpiGOTqBob9EHdd71SDE50smL3jvjPQvYB2SgwJ+UrqZ8F KjnELxu5z6ealKTzcOUtbDESYXYMXrE5l6m6B3LUWbarUoF8rkg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:31 2026 by rpki-client