$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143679.roa File: AS143679.roa (raw, json) Hash identifier: YnZGJnIUjLkepHjUBLNBXOe7pxfPeZneCdqXThQEPQU= Subject key identifier: 76:ED:EE:DA:65:F4:10:DF:EE:4A:A0:DC:C0:0A:12:B6:A4:ED:1B:38 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 546644B871C04046B0982C7C6D4AEACAC1E8F3CF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143679.roa Signing time: Wed 04 Mar 2026 06:15:41 +0000 ROA not before: Wed 04 Mar 2026 06:10:41 +0000 ROA not after: Wed 03 Mar 2027 06:15:41 +0000 asID: 143679 IP address blocks: 240a:a405::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:66:44:b8:71:c0:40:46:b0:98:2c:7c:6d:4a:ea:ca:c1:e8:f3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:41 2026 GMT Not After : Mar 3 06:15:41 2027 GMT Subject: CN=76EDEEDA65F410DFEE4AA0DCC00A12B6A4ED1B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cb:15:5d:d2:e6:b4:6b:50:89:d4:c2:d6:9c: 60:2c:81:9f:25:a1:64:e8:b9:4f:0c:e7:8c:72:db: 0a:88:6e:b1:19:30:3e:d6:9d:b8:3f:23:91:98:32: c7:06:17:72:18:79:67:5a:5c:8e:bc:d0:84:ee:6e: f0:47:52:d5:5b:ec:3d:4e:49:ca:85:9f:56:23:87: ee:5f:7d:23:b5:5d:8d:48:14:e0:8d:28:90:cd:99: 83:db:3e:91:4b:84:e7:53:d7:a0:d4:50:e1:5f:39: 5e:2e:69:e3:90:b6:ab:73:78:f7:31:09:76:67:b4: de:5f:ec:b0:34:0e:3b:04:37:b7:65:5e:37:f9:2a: 44:e3:cc:a3:9c:71:13:b9:5b:28:e2:6c:03:59:5f: 05:35:9d:f3:1a:78:a6:83:ef:79:fa:dd:d7:fe:3c: c2:86:07:12:6e:69:f6:24:eb:b4:c2:0c:5a:1a:d4: da:d6:d6:b1:66:82:71:b5:d1:aa:c8:03:c6:19:f4: f3:79:34:41:b4:b1:e7:cc:65:74:d5:b0:d2:36:61: c3:e0:be:bb:ad:26:b0:8e:e3:3c:51:e9:4b:34:64: 44:75:f1:69:22:57:79:bc:9c:aa:c7:3c:4e:db:ed: 8e:b7:0c:e7:b6:31:70:6f:14:0c:66:a5:0d:2d:92: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:ED:EE:DA:65:F4:10:DF:EE:4A:A0:DC:C0:0A:12:B6:A4:ED:1B:38 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a405::/32 Signature Algorithm: sha256WithRSAEncryption 7f:51:88:73:2f:3f:5c:15:85:37:c4:9f:54:f9:04:12:59:04: d0:67:a2:4d:7e:88:38:d5:10:37:80:ff:a3:16:4f:39:f9:49: f2:9c:aa:62:e3:73:ed:24:87:02:65:e9:3d:a9:4f:8c:2d:8b: 28:29:8c:97:61:b7:42:94:fe:d2:da:a3:29:e9:5e:e4:cb:71: 71:9e:f4:ca:b7:13:7a:7c:12:f7:80:82:ad:4d:0e:ca:91:a3: 7e:8e:9d:06:29:2c:74:36:01:eb:0b:a8:ad:c0:8f:d2:c0:c1: 23:12:5d:ef:76:24:4f:ab:b4:2b:1b:ca:15:07:88:be:57:a4: 0f:1f:15:cd:2a:51:83:49:0d:4a:df:f5:51:a3:b5:7f:fc:43: 64:f7:41:d6:c9:16:2f:ac:8a:cd:ed:41:ac:2b:25:e6:f1:35: 67:f0:ad:e5:fd:c5:b4:e4:5a:4f:6e:e7:09:bf:87:1e:9a:ee: bd:2e:32:4b:e2:a9:ad:d6:7b:cb:df:e2:b8:98:93:ff:3d:9e: 27:fa:1a:d2:3c:c1:7b:2c:45:4d:0a:93:e5:0c:70:21:fa:6f: 38:ba:20:f9:6d:06:d1:c7:d2:55:5f:32:fa:49:37:60:7b:6c: 5e:48:51:01:24:6b:36:c1:ad:50:30:eb:83:e1:13:83:19:fe: 78:d6:35:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVGZEuHHAQEawmCx8bUrqysHo888wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0MVoX DTI3MDMwMzA2MTU0MVowMzExMC8GA1UEAxMoNzZFREVFREE2NUY0MTBERkVFNEFB MERDQzAwQTEyQjZBNEVEMUIzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO/LFV3S5rRrUInUwtacYCyBnyWhZOi5TwznjHLbCohusRkwPtaduD8jkZgy xwYXchh5Z1pcjrzQhO5u8EdS1VvsPU5JyoWfViOH7l99I7VdjUgU4I0okM2Zg9s+ kUuE51PXoNRQ4V85Xi5p45C2q3N49zEJdme03l/ssDQOOwQ3t2VeN/kqROPMo5xx E7lbKOJsA1lfBTWd8xp4poPvefrd1/48woYHEm5p9iTrtMIMWhrU2tbWsWaCcbXR qsgDxhn083k0QbSx58xldNWw0jZhw+C+u60msI7jPFHpSzRkRHXxaSJXebycqsc8 TtvtjrcM57YxcG8UDGalDS2SYzMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR27e7a ZfQQ3+5KoNzAChK2pO0bODAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pAUwDQYJKoZIhvcNAQELBQADggEBAH9RiHMvP1wVhTfEn1T5BBJZBNBnok1+iDjV EDeA/6MWTzn5SfKcqmLjc+0khwJl6T2pT4wtiygpjJdht0KU/tLaoynpXuTLcXGe 9Mq3E3p8EveAgq1NDsqRo36OnQYpLHQ2AesLqK3Aj9LAwSMSXe92JE+rtCsbyhUH iL5XpA8fFc0qUYNJDUrf9VGjtX/8Q2T3QdbJFi+sis3tQawrJebxNWfwreX9xbTk Wk9u5wm/hx6a7r0uMkviqa3We8vf4riYk/89nif6GtI8wXssRU0Kk+UMcCH6bzi6 IPltBtHH0lVfMvpJN2B7bF5IUQEkazbBrVAw64PhE4MZ/njWNU4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:34 2026 by rpki-client