$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143659.roa File: AS143659.roa (raw, json) Hash identifier: pH3GdbTZDAszFEKZAmmswE37etXfp5RsLvAJ/laAuCE= Subject key identifier: 2C:D5:26:7C:33:13:9C:11:6C:D4:F4:B2:8B:94:63:77:DA:9F:F5:2D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7E38FBA6B1729C53CB54836FA220A82C720C5CFF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143659.roa Signing time: Wed 04 Mar 2026 06:13:15 +0000 ROA not before: Wed 04 Mar 2026 06:08:15 +0000 ROA not after: Wed 03 Mar 2027 06:13:15 +0000 asID: 143659 IP address blocks: 240a:a3f1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:38:fb:a6:b1:72:9c:53:cb:54:83:6f:a2:20:a8:2c:72:0c:5c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:15 2026 GMT Not After : Mar 3 06:13:15 2027 GMT Subject: CN=2CD5267C33139C116CD4F4B28B946377DA9FF52D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f2:91:b9:5d:73:8d:22:7f:ed:2f:4d:ed:bd: 3f:6d:85:ee:07:23:e6:7f:38:e9:ec:d0:3c:7f:c5: d6:ab:48:1e:e6:08:14:36:b8:29:32:1c:f6:4f:85: 21:81:1d:23:23:6b:b7:81:ae:e1:b8:4d:2c:42:73: f8:d5:33:a9:6a:29:7a:8c:22:ae:30:86:49:7e:b9: c9:41:fe:79:a9:57:3b:05:5f:07:6d:30:b4:04:cc: e1:b3:46:7c:91:14:90:59:9b:9d:ce:24:43:5c:37: 0d:24:83:5e:e3:e8:d2:29:42:59:1a:3d:97:2a:7a: b5:23:94:be:ff:a0:c8:78:31:1c:9b:9a:29:b0:51: 60:c8:49:a3:79:0f:07:a7:5f:e3:ad:db:b5:99:6b: 23:05:b4:7f:9e:e1:6a:74:0c:10:70:4b:6c:c9:9a: 52:ca:da:d9:bb:e9:aa:25:96:74:3b:f4:23:89:a9: c0:0e:a7:6f:96:b5:51:ba:27:c3:cb:f2:c5:a0:46: 08:c1:7f:c6:b6:40:ab:ad:4a:e1:84:2c:21:da:89: d0:51:dc:54:58:15:44:ed:f5:36:fa:68:ae:90:c3: bf:ae:b5:3f:e2:9f:53:a7:ef:76:8e:c9:04:58:38: 63:66:6c:bf:08:66:d2:ae:c6:ec:d3:75:b3:a5:bb: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D5:26:7C:33:13:9C:11:6C:D4:F4:B2:8B:94:63:77:DA:9F:F5:2D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143659.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3f1::/32 Signature Algorithm: sha256WithRSAEncryption 6d:6a:49:18:79:7a:73:a9:cf:5d:ed:5c:f7:64:73:26:3d:42: f0:2e:ea:f2:78:ff:0a:b4:55:0d:84:3b:ae:0e:42:8f:b7:d2: 78:bf:e6:bb:f6:3d:69:11:19:14:a3:ff:32:42:0d:79:dd:d5: 97:62:61:76:1e:e5:b8:f9:44:ed:e6:7b:43:4e:ab:e4:a6:30: c9:8e:e7:63:c7:25:c8:b0:7a:34:ad:5d:69:c7:9f:bd:ab:e0: ba:47:c8:e4:db:3b:d7:bd:3d:d8:a7:5b:41:35:51:87:1e:93: b0:97:8b:ff:67:de:87:04:83:fc:66:10:09:3c:3d:1f:d3:97: 54:d2:cb:3b:c2:a0:4e:a4:71:96:53:7b:d3:43:5f:be:bf:81: 6a:78:01:a1:e9:2f:0f:27:e0:24:f4:8b:80:29:73:0c:90:18: 5d:62:0e:32:95:94:b7:23:07:19:03:2b:5a:25:76:37:44:06: c8:57:d0:34:ac:46:8b:4a:5f:11:6b:8f:f9:b0:6c:2f:56:95: 05:c6:df:b5:11:17:13:0c:6f:20:6a:6f:77:26:20:83:45:1a: b6:1d:e1:d0:a3:0a:f7:0a:0d:d4:00:1e:bd:35:ab:ec:46:f7: fb:ec:dc:81:2f:56:ac:83:7b:72:ed:4c:a2:e7:9e:dc:22:3d: 97:63:ce:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfjj7prFynFPLVINvoiCoLHIMXP8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNVoX DTI3MDMwMzA2MTMxNVowMzExMC8GA1UEAxMoMkNENTI2N0MzMzEzOUMxMTZDRDRG NEIyOEI5NDYzNzdEQTlGRjUyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTykbldc40if+0vTe29P22F7gcj5n846ezQPH/F1qtIHuYIFDa4KTIc9k+F IYEdIyNrt4Gu4bhNLEJz+NUzqWopeowirjCGSX65yUH+ealXOwVfB20wtATM4bNG fJEUkFmbnc4kQ1w3DSSDXuPo0ilCWRo9lyp6tSOUvv+gyHgxHJuaKbBRYMhJo3kP B6df463btZlrIwW0f57hanQMEHBLbMmaUsra2bvpqiWWdDv0I4mpwA6nb5a1Ubon w8vyxaBGCMF/xrZAq61K4YQsIdqJ0FHcVFgVRO31NvporpDDv661P+KfU6fvdo7J BFg4Y2Zsvwhm0q7G7NN1s6W7uBMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQs1SZ8 MxOcEWzU9LKLlGN32p/1LTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o/EwDQYJKoZIhvcNAQELBQADggEBAG1qSRh5enOpz13tXPdkcyY9QvAu6vJ4/wq0 VQ2EO64OQo+30ni/5rv2PWkRGRSj/zJCDXnd1ZdiYXYe5bj5RO3me0NOq+SmMMmO 52PHJciwejStXWnHn72r4LpHyOTbO9e9PdinW0E1UYcek7CXi/9n3ocEg/xmEAk8 PR/Tl1TSyzvCoE6kcZZTe9NDX76/gWp4AaHpLw8n4CT0i4ApcwyQGF1iDjKVlLcj BxkDK1oldjdEBshX0DSsRotKXxFrj/mwbC9WlQXG37URFxMMbyBqb3cmIINFGrYd 4dCjCvcKDdQAHr01q+xG9/vs3IEvVqyDe3LtTKLnntwiPZdjzsE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:45 2026 by rpki-client