$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143667.roa File: AS143667.roa (raw, json) Hash identifier: 6wIQq9SsrJqZtlhm5CQ0Gr9erbJV7kAWf5t0mjNJGzs= Subject key identifier: F6:5B:F2:A6:2D:C4:7A:C5:1C:70:B6:E1:33:78:33:0C:0E:66:2E:3C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48A76E4B6C396A729113A9E1C75683DD52CA9A57 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143667.roa Signing time: Wed 04 Mar 2026 06:13:01 +0000 ROA not before: Wed 04 Mar 2026 06:08:01 +0000 ROA not after: Wed 03 Mar 2027 06:13:01 +0000 asID: 143667 IP address blocks: 240a:a3f9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a7:6e:4b:6c:39:6a:72:91:13:a9:e1:c7:56:83:dd:52:ca:9a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:01 2026 GMT Not After : Mar 3 06:13:01 2027 GMT Subject: CN=F65BF2A62DC47AC51C70B6E13378330C0E662E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:21:73:a8:d9:cd:01:ee:f4:14:0b:cb:e5: 28:aa:83:f3:20:06:a2:63:6a:60:2c:15:f4:b3:ac: c7:60:59:2d:b1:46:08:dc:99:18:e3:eb:2f:6f:98: 8a:79:f0:43:3a:8d:52:2d:c8:1a:34:9f:e4:fd:e7: 90:9d:95:03:cb:6a:14:21:eb:44:66:c4:b8:64:11: 1d:02:45:a8:4b:d6:f0:41:2d:59:19:0e:3a:07:65: 15:66:b2:f4:42:54:60:0f:18:48:13:07:59:4c:0e: dc:65:2d:6e:e9:67:0f:2e:05:b3:78:24:7f:3c:d6: e3:d9:9b:cc:f0:81:ca:31:19:90:ce:d0:28:a9:da: f9:16:9c:92:14:f1:da:21:92:14:53:44:9d:a2:9e: cf:49:2c:de:1e:99:02:be:b9:62:53:83:f2:bb:37: 8e:b3:e7:b5:ad:13:cf:2a:e8:93:7a:64:28:ce:85: d9:b5:8c:3e:89:e8:fe:b4:96:2c:02:ab:c3:f2:fb: a8:fa:f3:fd:f8:6d:94:98:75:9a:53:99:91:e4:7d: 3f:ee:c2:16:1f:d3:a3:1e:76:37:27:b7:43:3c:50: a7:9c:72:d7:09:53:22:26:84:28:b8:0d:02:83:12: d4:0a:6c:2b:f6:ae:57:a3:44:69:4d:35:93:b3:cf: f9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:F2:A6:2D:C4:7A:C5:1C:70:B6:E1:33:78:33:0C:0E:66:2E:3C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3f9::/32 Signature Algorithm: sha256WithRSAEncryption 4f:91:b8:35:66:84:f2:e1:8d:09:55:5d:a1:dc:41:1e:a1:cd: 7c:18:2d:22:ac:0e:69:6e:bc:10:dd:c1:8f:7d:55:ec:0f:af: a9:cb:ed:12:24:fc:00:d5:16:de:55:6f:1a:b0:79:ad:92:92: ae:14:a2:89:bd:e9:98:44:38:30:48:b7:20:d9:d4:54:77:72: 8f:ef:e0:fe:1b:cb:e4:c3:51:69:11:37:2a:01:49:5b:df:5c: d2:43:1f:67:c1:5c:7e:28:4f:2e:e0:05:46:86:84:a3:63:9e: 71:aa:3a:c7:1f:16:c1:1b:c6:df:82:2f:ac:24:fb:46:e3:7c: 75:4d:1f:4e:50:65:65:e7:21:06:cc:3f:39:69:f7:c0:99:61: db:32:01:a1:f1:20:53:2a:e9:fd:bd:cc:e1:e3:b7:0a:a0:c0: 8c:d1:d5:a6:03:25:ef:6f:49:f8:3f:b5:29:85:d3:84:a2:9e: e1:38:6d:d3:bd:e0:67:ac:3c:96:e9:40:97:ed:cf:5e:fb:40: fb:c2:8d:84:44:ca:7e:bd:08:b1:6c:36:1d:24:9b:fb:3c:58: f7:5f:21:aa:03:8b:6b:d8:1a:f9:89:c5:3c:66:d6:27:41:dd: fe:ae:38:64:21:da:cb:fc:b2:42:4b:4c:94:b0:8b:26:77:f1: b3:82:14:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSKduS2w5anKRE6nhx1aD3VLKmlcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwMVoX DTI3MDMwMzA2MTMwMVowMzExMC8GA1UEAxMoRjY1QkYyQTYyREM0N0FDNTFDNzBC NkUxMzM3ODMzMEMwRTY2MkUzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYbIXOo2c0B7vQUC8vlKKqD8yAGomNqYCwV9LOsx2BZLbFGCNyZGOPrL2+Y innwQzqNUi3IGjSf5P3nkJ2VA8tqFCHrRGbEuGQRHQJFqEvW8EEtWRkOOgdlFWay 9EJUYA8YSBMHWUwO3GUtbulnDy4Fs3gkfzzW49mbzPCByjEZkM7QKKna+RackhTx 2iGSFFNEnaKez0ks3h6ZAr65YlOD8rs3jrPnta0Tzyrok3pkKM6F2bWMPono/rSW LAKrw/L7qPrz/fhtlJh1mlOZkeR9P+7CFh/Tox52Nye3QzxQp5xy1wlTIiaEKLgN AoMS1ApsK/auV6NEaU01k7PP+YsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT2W/Km LcR6xRxwtuEzeDMMDmYuPDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o/kwDQYJKoZIhvcNAQELBQADggEBAE+RuDVmhPLhjQlVXaHcQR6hzXwYLSKsDmlu vBDdwY99VewPr6nL7RIk/ADVFt5Vbxqwea2Skq4Uoom96ZhEODBItyDZ1FR3co/v 4P4by+TDUWkRNyoBSVvfXNJDH2fBXH4oTy7gBUaGhKNjnnGqOscfFsEbxt+CL6wk +0bjfHVNH05QZWXnIQbMPzlp98CZYdsyAaHxIFMq6f29zOHjtwqgwIzR1aYDJe9v Sfg/tSmF04SinuE4bdO94GesPJbpQJftz177QPvCjYREyn69CLFsNh0km/s8WPdf IaoDi2vYGvmJxTxm1idB3f6uOGQh2sv8skJLTJSwiyZ38bOCFC0= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:35 2026 by rpki-client