$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143690.roa File: AS143690.roa (raw, json) Hash identifier: nwEH56CuYe96eu1gS/HL70dKPGDGxj4SBzCfAU3RwGY= Subject key identifier: C8:C2:CC:52:7F:E8:1D:3F:7A:F0:F0:99:59:A4:BE:96:1B:41:08:79 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F198475DB4761D8AB8473266E7E571592A61D82 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143690.roa Signing time: Wed 04 Mar 2026 06:13:26 +0000 ROA not before: Wed 04 Mar 2026 06:08:26 +0000 ROA not after: Wed 03 Mar 2027 06:13:26 +0000 asID: 143690 IP address blocks: 240a:a410::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:19:84:75:db:47:61:d8:ab:84:73:26:6e:7e:57:15:92:a6:1d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:26 2026 GMT Not After : Mar 3 06:13:26 2027 GMT Subject: CN=C8C2CC527FE81D3F7AF0F09959A4BE961B410879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:d8:c5:6d:e5:20:4b:1b:15:8a:e5:ba:55: e0:fc:7e:5d:92:f8:ef:74:d6:07:14:ce:d6:d6:75: dd:84:5d:b7:30:d7:5a:1b:e3:de:eb:c6:1c:0f:89: 35:66:97:57:7f:6c:39:a8:06:6c:b2:ae:98:1f:2c: 5d:85:64:cb:5f:dc:5d:26:f6:a4:14:71:15:1f:4b: cf:1f:72:2f:ea:a0:8d:48:9a:75:3f:bf:22:ac:ab: 4a:2b:c5:b1:7a:7f:0d:e1:2b:8b:d9:13:2d:e9:50: 26:3b:07:71:27:a3:2e:28:96:06:da:4d:80:e1:f5: 52:07:e8:70:16:0b:9c:41:38:93:54:2b:d2:b3:74: 99:b8:cd:c3:1f:1d:13:f4:2c:fa:f0:29:94:80:70: d0:71:a7:5a:79:c0:0a:3d:99:1a:02:4e:74:4a:f1: 53:0d:2b:84:52:da:19:c6:a7:0d:da:7c:f0:f5:5a: 72:a7:6b:d7:5c:e7:aa:5d:22:06:65:ca:4f:e7:f9: 1c:73:88:e2:57:bf:e2:29:f1:d8:ee:61:65:38:4d: 47:c0:c0:c2:6e:e5:14:3e:73:a1:39:e6:ec:78:f5: fc:a9:44:2e:a5:72:39:25:71:6b:0f:6f:79:90:39: 38:26:22:60:e7:94:3e:f3:76:78:10:ab:14:80:79: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C2:CC:52:7F:E8:1D:3F:7A:F0:F0:99:59:A4:BE:96:1B:41:08:79 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a410::/32 Signature Algorithm: sha256WithRSAEncryption 3a:6b:1a:eb:d6:c8:00:54:3f:04:63:43:9a:e1:0e:47:92:1d: 18:ee:e6:cf:71:a5:60:29:5b:9b:3a:c8:de:89:0e:ca:cc:a7: 02:c3:15:49:15:e7:e5:cd:c4:47:bd:a1:11:df:f6:ef:b0:be: c3:d5:b0:33:ce:9e:bf:ed:78:d4:83:1e:67:f6:7e:9c:a8:56: 34:e8:d7:05:0a:75:c1:51:f9:0f:b3:5b:91:8d:a5:7f:54:77: c2:4b:d0:c3:6d:68:5d:5f:a4:93:14:26:0a:7f:79:74:0e:ec: 24:e5:f4:07:e2:c8:2a:a2:8c:cf:6b:d7:01:84:d7:5c:0e:11: 0d:92:1c:da:44:f2:ac:5a:6e:a5:35:63:ce:bf:1b:a3:8d:97: 6c:01:b6:3f:72:18:a6:e5:93:3d:0c:d5:2a:cd:02:55:5b:8b: dd:de:b4:51:79:c6:3a:6c:7f:76:1f:d3:63:dd:f3:ff:10:1d: 3b:80:de:e4:0b:b2:ea:54:43:bb:64:6a:2c:87:8f:fe:6e:89: f1:d4:06:36:19:29:d7:a3:a7:12:31:7c:4d:77:11:58:f1:9f: 7f:27:20:1f:80:2a:da:ac:9e:58:51:33:7a:45:30:74:a0:75: 1a:b1:2f:f0:74:e7:8b:55:c1:7b:f4:88:eb:dd:57:45:d2:25: 60:5d:88:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPxmEddtHYdirhHMmbn5XFZKmHYIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyNloX DTI3MDMwMzA2MTMyNlowMzExMC8GA1UEAxMoQzhDMkNDNTI3RkU4MUQzRjdBRjBG MDk5NTlBNEJFOTYxQjQxMDg3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmc2MVt5SBLGxWK5bpV4Px+XZL473TWBxTO1tZ13YRdtzDXWhvj3uvGHA+J NWaXV39sOagGbLKumB8sXYVky1/cXSb2pBRxFR9Lzx9yL+qgjUiadT+/IqyrSivF sXp/DeEri9kTLelQJjsHcSejLiiWBtpNgOH1UgfocBYLnEE4k1Qr0rN0mbjNwx8d E/Qs+vAplIBw0HGnWnnACj2ZGgJOdErxUw0rhFLaGcanDdp88PVacqdr11znql0i BmXKT+f5HHOI4le/4inx2O5hZThNR8DAwm7lFD5zoTnm7Hj1/KlELqVyOSVxaw9v eZA5OCYiYOeUPvN2eBCrFIB57qkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTIwsxS f+gdP3rw8JlZpL6WG0EIeTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pBAwDQYJKoZIhvcNAQELBQADggEBADprGuvWyABUPwRjQ5rhDkeSHRju5s9xpWAp W5s6yN6JDsrMpwLDFUkV5+XNxEe9oRHf9u+wvsPVsDPOnr/teNSDHmf2fpyoVjTo 1wUKdcFR+Q+zW5GNpX9Ud8JL0MNtaF1fpJMUJgp/eXQO7CTl9AfiyCqijM9r1wGE 11wOEQ2SHNpE8qxabqU1Y86/G6ONl2wBtj9yGKblkz0M1SrNAlVbi93etFF5xjps f3Yf02Pd8/8QHTuA3uQLsupUQ7tkaiyHj/5uifHUBjYZKdejpxIxfE13EVjxn38n IB+AKtqsnlhRM3pFMHSgdRqxL/B054tVwXv0iOvdV0XSJWBdiKA= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:34 2026 by rpki-client