$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143696.roa File: AS143696.roa (raw, json) Hash identifier: 6pC2/o0/TU4YhTfUHkhVFABSWDY+0ZO/GswBidRTRoY= Subject key identifier: 81:3C:2F:8E:A1:C1:B8:04:95:5E:D8:88:71:03:71:5D:EB:E2:B7:76 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4D3B4A25E2C60629F83C3127B8BFB362D40EF375 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143696.roa Signing time: Wed 04 Mar 2026 06:15:12 +0000 ROA not before: Wed 04 Mar 2026 06:10:12 +0000 ROA not after: Wed 03 Mar 2027 06:15:12 +0000 asID: 143696 IP address blocks: 240a:a416::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3b:4a:25:e2:c6:06:29:f8:3c:31:27:b8:bf:b3:62:d4:0e:f3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:12 2026 GMT Not After : Mar 3 06:15:12 2027 GMT Subject: CN=813C2F8EA1C1B804955ED8887103715DEBE2B776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:a4:da:9a:f9:59:a2:f9:a6:f4:76:68:11: 20:aa:7d:f0:74:39:7c:d9:cd:48:f1:3c:ce:78:4e: f6:0c:81:ce:4c:81:ad:89:ca:a1:cb:85:89:3b:46: 97:19:81:c8:40:ad:fe:8c:e2:9b:b4:a8:b3:50:40: 6f:6f:17:ce:0c:f5:50:b1:70:d0:cd:73:2b:9c:db: db:41:ea:dd:6e:3c:ad:4d:40:30:71:01:a8:f8:62: 0b:e3:43:f6:c6:20:f3:f1:15:fc:5f:f4:02:80:ec: a5:97:1e:30:4c:82:9d:12:01:7e:aa:73:ce:7e:84: a6:90:46:02:1a:8b:c2:80:35:1b:00:ce:15:0a:7b: 2e:e0:f2:96:75:f5:16:df:7d:fd:8c:df:06:9a:52: d7:54:73:e9:8f:f7:1c:96:dd:1b:44:e6:12:e6:4d: c4:fa:d1:c1:d2:8e:06:81:0a:a7:71:c5:d4:b0:47: d6:d6:97:aa:d0:3e:f2:1c:15:a8:61:18:9b:5d:34: 1e:5c:c4:0f:db:4e:d1:23:89:89:08:ba:71:55:2e: 0b:c8:47:ae:1b:80:bf:ce:9e:77:8c:da:62:cd:49: 4c:3b:fc:0a:9e:0e:70:c9:50:9d:5e:b9:c2:a9:61: 59:95:2d:d3:b2:d1:9f:a6:f7:19:ab:cc:d2:82:af: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3C:2F:8E:A1:C1:B8:04:95:5E:D8:88:71:03:71:5D:EB:E2:B7:76 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143696.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a416::/32 Signature Algorithm: sha256WithRSAEncryption 14:21:6e:12:16:9d:ad:a0:b0:3d:5a:5d:60:79:2f:2f:b1:12: fa:b0:4d:96:ac:32:85:49:95:6d:2a:5b:de:32:8b:31:e0:a2: 30:1e:ce:2c:88:c5:fb:49:a7:2f:cc:ae:20:60:28:c5:a6:70: 85:b7:a1:b0:1b:21:33:d7:22:55:6e:8c:f7:ef:aa:51:a5:70: 20:05:a4:a1:33:80:70:2b:9c:d4:de:d1:f3:75:04:22:e2:08: ef:6f:83:e3:18:c0:c7:4f:57:7a:d0:61:86:da:5c:96:f2:0e: 47:87:cb:26:9b:89:28:61:be:33:f0:a8:b2:72:87:ea:a2:3d: ea:46:f2:1e:69:0a:5e:c5:79:16:8c:85:3c:55:a7:bc:89:8f: 15:7b:31:ac:50:60:2d:ca:69:f5:fa:6c:90:a6:41:2e:ce:b3: a4:e4:3a:16:e3:d2:97:e2:67:a3:43:73:17:a2:2d:c6:72:11: 1c:f8:b9:ee:60:45:53:85:b1:04:67:d5:ed:27:44:83:3c:7d: 75:d3:5d:9b:1a:c8:66:a8:61:e3:32:68:1e:f8:8c:c6:9f:69: a5:ee:0f:37:58:71:a9:a4:ea:18:8b:b7:8d:9f:97:67:8f:02: 87:3f:66:c5:5b:f0:a3:c8:ac:5f:ff:e9:27:be:68:87:f0:7c: 1a:7b:40:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTTtKJeLGBin4PDEnuL+zYtQO83UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxMloX DTI3MDMwMzA2MTUxMlowMzExMC8GA1UEAxMoODEzQzJGOEVBMUMxQjgwNDk1NUVE ODg4NzEwMzcxNURFQkUyQjc3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZrpNqa+Vmi+ab0dmgRIKp98HQ5fNnNSPE8znhO9gyBzkyBrYnKocuFiTtG lxmByECt/ozim7Sos1BAb28Xzgz1ULFw0M1zK5zb20Hq3W48rU1AMHEBqPhiC+ND 9sYg8/EV/F/0AoDspZceMEyCnRIBfqpzzn6EppBGAhqLwoA1GwDOFQp7LuDylnX1 Ft99/YzfBppS11Rz6Y/3HJbdG0TmEuZNxPrRwdKOBoEKp3HF1LBH1taXqtA+8hwV qGEYm100HlzED9tO0SOJiQi6cVUuC8hHrhuAv86ed4zaYs1JTDv8Cp4OcMlQnV65 wqlhWZUt07LRn6b3GavM0oKvZP8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSBPC+O ocG4BJVe2IhxA3Fd6+K3djAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pBYwDQYJKoZIhvcNAQELBQADggEBABQhbhIWna2gsD1aXWB5Ly+xEvqwTZasMoVJ lW0qW94yizHgojAeziyIxftJpy/MriBgKMWmcIW3obAbITPXIlVujPfvqlGlcCAF pKEzgHArnNTe0fN1BCLiCO9vg+MYwMdPV3rQYYbaXJbyDkeHyyabiShhvjPwqLJy h+qiPepG8h5pCl7FeRaMhTxVp7yJjxV7MaxQYC3KafX6bJCmQS7Os6TkOhbj0pfi Z6NDcxeiLcZyERz4ue5gRVOFsQRn1e0nRIM8fXXTXZsayGaoYeMyaB74jMafaaXu DzdYcamk6hiLt42fl2ePAoc/ZsVb8KPIrF//6Se+aIfwfBp7QNI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:48 2026 by rpki-client