$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143695.roa File: AS143695.roa (raw, json) Hash identifier: G/FSvsb7W+5O4+0fBZbEWpsMDgcpI5B2xQaPDaAWYvk= Subject key identifier: 65:53:8E:B2:F7:21:23:B5:34:89:BE:F8:9E:4F:4D:E6:A2:F4:49:42 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 303784E1D13D4E015BDB2FC96F4179526F9F95C8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143695.roa Signing time: Wed 04 Mar 2026 06:14:06 +0000 ROA not before: Wed 04 Mar 2026 06:09:06 +0000 ROA not after: Wed 03 Mar 2027 06:14:06 +0000 asID: 143695 IP address blocks: 240a:a415::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:37:84:e1:d1:3d:4e:01:5b:db:2f:c9:6f:41:79:52:6f:9f:95:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:06 2026 GMT Not After : Mar 3 06:14:06 2027 GMT Subject: CN=65538EB2F72123B53489BEF89E4F4DE6A2F44942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:2e:9c:39:7e:18:41:c6:57:17:72:2d:dd: a0:5f:43:fc:37:0a:47:a7:ed:4c:bc:b0:54:bc:4d: 1d:8f:be:05:29:24:7d:3b:8a:79:a4:59:de:7c:21: d2:c9:12:62:a9:45:35:4b:5c:eb:28:e8:e2:f3:db: 02:2a:28:eb:84:93:bf:d2:f8:34:c0:42:1e:15:c0: 4b:46:f9:4a:eb:ea:94:d5:b2:4a:48:42:42:42:0b: 51:bf:dc:e2:9d:80:2c:ff:53:55:19:84:e7:2f:75: 77:07:3f:9a:e4:22:ad:97:85:67:e5:7e:2e:00:00: 0c:14:83:c0:34:1d:79:66:76:41:75:c6:09:c5:81: 54:2e:4b:5d:d9:44:33:e9:1b:ab:66:12:42:7a:d2: c9:f0:c2:4d:0a:bc:c8:91:be:43:60:06:e1:c0:bb: 95:d0:e4:78:ae:35:65:9a:87:7a:f4:07:dd:fa:d8: 5e:d7:9d:95:54:36:f0:bf:45:57:9d:72:08:65:c7: 76:a3:8f:c9:e6:61:19:c0:a9:4d:78:c8:7a:3c:af: 1e:3e:04:72:6d:cd:b4:0e:4b:c8:01:f0:7e:a0:c5: 7e:ad:8e:c0:70:1b:86:9b:f1:8d:fd:dd:52:15:ac: a7:3e:10:80:6a:17:b9:2f:11:f7:12:f0:e3:cb:2d: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:53:8E:B2:F7:21:23:B5:34:89:BE:F8:9E:4F:4D:E6:A2:F4:49:42 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143695.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a415::/32 Signature Algorithm: sha256WithRSAEncryption 96:7e:ea:08:5d:a2:6e:f2:57:a5:56:cc:e5:fb:33:c7:51:cd: 0a:da:3a:50:65:f8:53:da:9b:a2:3c:a0:09:4b:25:a2:eb:cb: 51:32:45:3a:ee:15:d1:6e:47:37:43:8e:85:f5:10:4b:21:30: dd:d2:83:5b:9e:16:54:f7:09:fe:9d:32:12:12:c0:50:6d:e1: 3f:a8:1e:a6:43:55:32:51:f9:80:2c:a9:a0:d1:ed:5a:ba:a7: f8:01:36:32:29:0f:78:20:6d:6a:47:5d:e5:a1:ce:9c:e5:84: 6f:c7:57:36:12:9a:da:c2:8b:bd:84:cb:59:aa:30:f9:92:70: 0e:c2:57:0e:a2:d8:69:5b:d5:78:d6:34:5f:23:85:af:72:ae: fa:32:d2:10:d7:de:5a:49:1c:c8:d0:19:81:6a:01:d7:78:a7: 76:b4:5a:54:bc:96:79:26:db:0f:e6:30:95:b1:68:a9:85:b9: 81:55:bb:a3:b1:bf:37:dc:b9:e0:60:3a:5a:cb:f1:59:3e:e3: 03:b4:cd:54:22:1f:28:ea:f1:70:1e:6e:1a:65:db:8a:b4:5b: 0f:74:f3:7d:2c:69:db:72:c7:94:b0:6c:a6:fa:64:64:bf:fc: 15:8a:30:27:3c:15:20:b8:71:9b:99:1b:bc:85:dc:9a:82:a2: 14:28:02:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMDeE4dE9TgFb2y/Jb0F5Um+flcgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwNloX DTI3MDMwMzA2MTQwNlowMzExMC8GA1UEAxMoNjU1MzhFQjJGNzIxMjNCNTM0ODlC RUY4OUU0RjRERTZBMkY0NDk0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqbLpw5fhhBxlcXci3doF9D/DcKR6ftTLywVLxNHY++BSkkfTuKeaRZ3nwh 0skSYqlFNUtc6yjo4vPbAioo64STv9L4NMBCHhXAS0b5SuvqlNWySkhCQkILUb/c 4p2ALP9TVRmE5y91dwc/muQirZeFZ+V+LgAADBSDwDQdeWZ2QXXGCcWBVC5LXdlE M+kbq2YSQnrSyfDCTQq8yJG+Q2AG4cC7ldDkeK41ZZqHevQH3frYXtedlVQ28L9F V51yCGXHdqOPyeZhGcCpTXjIejyvHj4Ecm3NtA5LyAHwfqDFfq2OwHAbhpvxjf3d UhWspz4QgGoXuS8R9xLw48stJ88CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRlU46y 9yEjtTSJvvieT03movRJQjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pBUwDQYJKoZIhvcNAQELBQADggEBAJZ+6ghdom7yV6VWzOX7M8dRzQraOlBl+FPa m6I8oAlLJaLry1EyRTruFdFuRzdDjoX1EEshMN3Sg1ueFlT3Cf6dMhISwFBt4T+o HqZDVTJR+YAsqaDR7Vq6p/gBNjIpD3ggbWpHXeWhzpzlhG/HVzYSmtrCi72Ey1mq MPmScA7CVw6i2Glb1XjWNF8jha9yrvoy0hDX3lpJHMjQGYFqAdd4p3a0WlS8lnkm 2w/mMJWxaKmFuYFVu6OxvzfcueBgOlrL8Vk+4wO0zVQiHyjq8XAebhpl24q0Ww90 830sadtyx5SwbKb6ZGS//BWKMCc8FSC4cZuZG7yF3JqCohQoAh8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:03 2026 by rpki-client