$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143670.roa File: AS143670.roa (raw, json) Hash identifier: xGS5KTBvD7RCGJcIhHNylNVSk4HwsFD/F9C0tj+lsGk= Subject key identifier: 90:C9:28:A3:1A:F4:40:54:99:18:2D:88:19:C9:08:69:E0:D5:64:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 21E27D0831C249A361A3E40914E432216173924D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143670.roa Signing time: Wed 04 Mar 2026 06:15:17 +0000 ROA not before: Wed 04 Mar 2026 06:10:17 +0000 ROA not after: Wed 03 Mar 2027 06:15:17 +0000 asID: 143670 IP address blocks: 240a:a3fc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e2:7d:08:31:c2:49:a3:61:a3:e4:09:14:e4:32:21:61:73:92:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:17 2026 GMT Not After : Mar 3 06:15:17 2027 GMT Subject: CN=90C928A31AF4405499182D8819C90869E0D5647C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:f6:db:d5:ac:9d:48:b5:cf:01:49:c5:bb: b7:25:aa:ed:06:f2:2a:10:5e:38:95:64:95:5a:8c: fc:4d:7f:49:5f:ef:0c:09:26:fa:cb:89:9f:9c:0a: a3:79:fd:e0:26:e7:59:a8:f6:cb:32:1b:66:d5:14: f1:b8:0d:26:dd:90:d2:d0:95:3e:c2:f2:be:4e:47: c5:b6:d0:11:5a:0b:b6:1e:eb:da:72:0e:ad:79:c6: ce:d1:cf:54:f9:d6:69:99:2a:47:0b:ac:a1:7c:80: 06:e3:4b:87:06:2f:f9:08:e6:d6:91:44:6a:e0:d1: b4:74:87:ee:eb:6a:3e:73:f8:04:2e:af:5e:86:a4: e2:d9:83:85:6c:53:78:ed:8d:b3:68:7c:12:ba:37: 6b:53:9e:f7:c3:bc:28:17:08:94:ae:1c:42:a9:ef: 68:52:13:73:6d:65:31:59:ef:49:26:ef:b9:f9:50: 42:01:40:91:3a:f5:31:92:24:51:5c:80:21:f4:f0: 05:5b:40:ba:14:4f:95:33:9e:97:51:b7:03:46:05: a5:9d:d3:43:95:7c:8e:e7:ca:8b:d8:80:9a:df:bd: 4f:a7:8d:c8:e7:f9:f3:83:34:23:99:a4:42:62:17: 01:4f:c5:34:cd:6f:24:5f:d3:37:40:56:09:e0:90: 73:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C9:28:A3:1A:F4:40:54:99:18:2D:88:19:C9:08:69:E0:D5:64:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143670.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3fc::/32 Signature Algorithm: sha256WithRSAEncryption 9a:36:61:a8:cc:73:11:9b:3a:b6:b6:ff:83:35:ca:be:d0:e2: 5a:cc:a5:c7:80:13:f3:22:52:57:ab:a8:20:14:2a:fc:f4:33: dc:2b:df:85:d1:19:c5:7f:d9:50:8d:05:bf:15:9d:00:26:4f: d4:16:45:44:5f:37:63:6c:4c:73:5a:cf:c0:d5:db:c2:6f:c7: a3:7e:c3:49:23:9c:d5:23:20:c3:9e:d0:ca:b7:4c:6b:4d:05: 8f:e0:23:43:63:2a:e4:35:1c:71:64:94:6f:d4:c8:76:0b:9e: 86:2b:d3:7d:40:6e:56:49:75:bf:e6:d7:2b:37:37:84:49:1f: ae:06:76:45:a2:d4:ae:6f:e5:17:b5:54:c9:71:ea:13:25:41: 51:2f:a1:11:ce:68:7a:b9:90:a8:ba:1c:54:3e:24:79:f8:ac: 74:1b:07:da:12:15:6a:ab:46:6d:ed:4f:ad:c0:e4:8c:34:60: 77:c2:7e:41:38:14:2a:ae:2d:26:a1:06:29:6d:db:1e:c7:85: a2:04:7b:11:24:64:8b:36:8c:0b:d2:dd:51:3c:d0:11:53:bb: 3d:19:8b:51:e1:01:1e:44:cf:f8:28:ae:eb:fc:c2:0a:18:91: cb:8f:da:2e:c9:38:d2:a3:b0:a2:91:fb:38:11:f8:ae:2a:30: 0a:4e:9c:c7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIeJ9CDHCSaNho+QJFOQyIWFzkk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxN1oX DTI3MDMwMzA2MTUxN1owMzExMC8GA1UEAxMoOTBDOTI4QTMxQUY0NDA1NDk5MTgy RDg4MTlDOTA4NjlFMEQ1NjQ3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSG9tvVrJ1Itc8BScW7tyWq7QbyKhBeOJVklVqM/E1/SV/vDAkm+suJn5wK o3n94CbnWaj2yzIbZtUU8bgNJt2Q0tCVPsLyvk5HxbbQEVoLth7r2nIOrXnGztHP VPnWaZkqRwusoXyABuNLhwYv+Qjm1pFEauDRtHSH7utqPnP4BC6vXoak4tmDhWxT eO2Ns2h8Ero3a1Oe98O8KBcIlK4cQqnvaFITc21lMVnvSSbvuflQQgFAkTr1MZIk UVyAIfTwBVtAuhRPlTOel1G3A0YFpZ3TQ5V8jufKi9iAmt+9T6eNyOf584M0I5mk QmIXAU/FNM1vJF/TN0BWCeCQc00CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSQySij GvRAVJkYLYgZyQhp4NVkfDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o/wwDQYJKoZIhvcNAQELBQADggEBAJo2YajMcxGbOra2/4M1yr7Q4lrMpceAE/Mi UlerqCAUKvz0M9wr34XRGcV/2VCNBb8VnQAmT9QWRURfN2NsTHNaz8DV28Jvx6N+ w0kjnNUjIMOe0Mq3TGtNBY/gI0NjKuQ1HHFklG/UyHYLnoYr031AblZJdb/m1ys3 N4RJH64GdkWi1K5v5Re1VMlx6hMlQVEvoRHOaHq5kKi6HFQ+JHn4rHQbB9oSFWqr Rm3tT63A5Iw0YHfCfkE4FCquLSahBilt2x7HhaIEexEkZIs2jAvS3VE80BFTuz0Z i1HhAR5Ez/goruv8wgoYkcuP2i7JONKjsKKR+zgR+K4qMApOnMc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:32 2026 by rpki-client