$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143692.roa File: AS143692.roa (raw, json) Hash identifier: qVSvRjWxYwQcjWqv1CBh5mTSdb0BkXBn+Idf4dCMMpQ= Subject key identifier: 6F:CE:5D:A3:85:17:E8:69:29:40:07:C8:C1:E9:0C:52:E0:3C:DC:24 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4CD50604EB758E83819D285B337C13F4EE1CCC5E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143692.roa Signing time: Wed 04 Mar 2026 06:14:58 +0000 ROA not before: Wed 04 Mar 2026 06:09:58 +0000 ROA not after: Wed 03 Mar 2027 06:14:58 +0000 asID: 143692 IP address blocks: 240a:a412::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d5:06:04:eb:75:8e:83:81:9d:28:5b:33:7c:13:f4:ee:1c:cc:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:58 2026 GMT Not After : Mar 3 06:14:58 2027 GMT Subject: CN=6FCE5DA38517E869294007C8C1E90C52E03CDC24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:b1:e8:78:d1:22:00:72:23:e2:a8:85:22: d0:11:ac:21:08:20:07:8f:4f:c9:49:f4:49:6e:a8: bd:1b:06:85:5e:27:d7:2b:7d:18:8f:80:6f:75:82: 39:8c:4f:24:05:15:4b:0e:0b:73:68:0a:16:ff:8a: a9:c4:ca:18:a9:bb:1a:21:23:52:b0:f6:1b:f2:5f: e0:83:46:8b:54:15:e3:06:e3:32:2a:1d:34:54:39: 31:9a:6a:fe:3a:12:b3:9b:48:f7:43:54:91:5b:48: 55:b6:05:60:d0:b5:4a:ed:4d:40:67:b4:d8:7e:3f: e6:e8:f6:33:17:a2:25:3a:2f:72:26:e2:43:0b:61: 57:48:aa:7d:74:a2:07:a4:4b:0b:6e:c6:de:e5:0e: 2b:2e:3f:2e:88:ad:82:0b:00:a3:fe:9a:d1:9e:01: 16:25:f0:4c:13:e5:5f:b6:f8:d8:63:17:fb:86:90: e4:c4:71:62:01:f3:54:47:e8:8e:55:80:fc:58:a1: b2:c7:34:2b:74:4f:8d:d3:b6:97:ed:66:30:cd:20: 49:d2:b2:d3:6b:3b:4c:97:7c:df:bc:99:5a:82:63: 68:d6:4f:48:65:6e:33:4f:25:ee:54:5a:8b:bc:ac: a1:e8:b8:ef:57:c4:b9:3c:0e:b1:b9:91:c6:7a:ad: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CE:5D:A3:85:17:E8:69:29:40:07:C8:C1:E9:0C:52:E0:3C:DC:24 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a412::/32 Signature Algorithm: sha256WithRSAEncryption 54:81:5b:0e:6a:57:6b:0f:3f:d6:59:71:31:b3:cb:d2:be:aa: 3a:6c:cb:43:db:54:08:45:da:89:4c:0e:05:4e:c6:63:99:60: 2f:76:d5:19:8b:ae:df:c3:6d:66:8d:e2:42:10:35:02:0e:d7: ef:f6:1b:35:08:8b:a8:b0:cf:43:e5:00:c6:df:44:26:8b:2d: 30:07:e6:d2:64:dd:69:f3:04:5a:0d:46:c4:bc:9d:5b:46:db: 4f:b6:cf:5a:2b:c1:d4:99:d9:0b:f9:4a:00:31:f1:e5:13:e6: 71:c1:38:5a:8c:31:9b:d7:4a:3c:96:e8:9a:f2:9b:8a:06:27: 24:fd:80:8f:24:27:30:29:ef:c4:00:d5:1f:e1:a9:19:b0:b4: d7:f5:a0:c9:5b:b0:35:a8:6d:c6:10:f5:39:87:37:15:e4:11: 8f:4d:55:b9:4b:ba:e4:62:d2:dd:cc:6f:e6:d9:c4:3d:5a:33: 24:0c:51:59:ff:e9:e9:a4:35:98:0e:93:e2:56:64:9a:84:97: 24:fc:b6:d6:0d:57:2a:71:f3:3a:f4:32:f4:67:21:9d:d4:c4: cb:4c:9a:f4:ce:1e:1d:1b:5e:a0:0a:42:e4:02:8c:9e:20:da: 33:df:cf:4e:d6:f9:70:b9:aa:9f:7a:d2:4c:43:6f:54:43:df: cb:4e:3c:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTNUGBOt1joOBnShbM3wT9O4czF4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1OFoX DTI3MDMwMzA2MTQ1OFowMzExMC8GA1UEAxMoNkZDRTVEQTM4NTE3RTg2OTI5NDAw N0M4QzFFOTBDNTJFMDNDREMyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3hseh40SIAciPiqIUi0BGsIQggB49PyUn0SW6ovRsGhV4n1yt9GI+Ab3WC OYxPJAUVSw4Lc2gKFv+KqcTKGKm7GiEjUrD2G/Jf4INGi1QV4wbjMiodNFQ5MZpq /joSs5tI90NUkVtIVbYFYNC1Su1NQGe02H4/5uj2MxeiJTovcibiQwthV0iqfXSi B6RLC27G3uUOKy4/LoitggsAo/6a0Z4BFiXwTBPlX7b42GMX+4aQ5MRxYgHzVEfo jlWA/Fihssc0K3RPjdO2l+1mMM0gSdKy02s7TJd837yZWoJjaNZPSGVuM08l7lRa i7ysoei471fEuTwOsbmRxnqtdV0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRvzl2j hRfoaSlAB8jB6QxS4DzcJDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pBIwDQYJKoZIhvcNAQELBQADggEBAFSBWw5qV2sPP9ZZcTGzy9K+qjpsy0PbVAhF 2olMDgVOxmOZYC921RmLrt/DbWaN4kIQNQIO1+/2GzUIi6iwz0PlAMbfRCaLLTAH 5tJk3WnzBFoNRsS8nVtG20+2z1orwdSZ2Qv5SgAx8eUT5nHBOFqMMZvXSjyW6Jry m4oGJyT9gI8kJzAp78QA1R/hqRmwtNf1oMlbsDWobcYQ9TmHNxXkEY9NVblLuuRi 0t3Mb+bZxD1aMyQMUVn/6emkNZgOk+JWZJqElyT8ttYNVypx8zr0MvRnIZ3UxMtM mvTOHh0bXqAKQuQCjJ4g2jPfz07W+XC5qp960kxDb1RD38tOPP8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:03 2026 by rpki-client