$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143759.roa File: AS143759.roa (raw, json) Hash identifier: awXsvLd61pwYe8zsgl5tKYLD+mTXRMr9rasNS8ZZU9w= Subject key identifier: C5:60:64:EE:71:FF:7C:3C:4B:C8:3D:53:77:22:14:94:1B:F4:4F:C4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3AB7DF1912CAFDF2DBA4476D2D02770AD9B583B9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143759.roa Signing time: Wed 04 Mar 2026 06:12:54 +0000 ROA not before: Wed 04 Mar 2026 06:07:54 +0000 ROA not after: Wed 03 Mar 2027 06:12:54 +0000 asID: 143759 IP address blocks: 240a:a455::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b7:df:19:12:ca:fd:f2:db:a4:47:6d:2d:02:77:0a:d9:b5:83:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:54 2026 GMT Not After : Mar 3 06:12:54 2027 GMT Subject: CN=C56064EE71FF7C3C4BC83D53772214941BF44FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:4d:68:54:d9:cb:63:3b:41:76:0e:1c:f3: 5b:27:9a:d4:91:fc:44:11:70:01:50:a2:25:02:d4: 86:a3:e3:b3:dd:39:e1:25:f2:aa:d5:e7:5d:68:f3: 57:a2:e4:4e:50:23:6a:68:29:82:a5:33:95:b6:1a: 58:b3:f3:22:c7:ca:3d:c1:a0:5f:b4:7f:33:fb:9c: e5:54:4a:79:4b:ec:bf:c6:5a:04:f2:54:31:7f:df: 24:86:6a:b6:c9:6f:53:ba:4b:43:95:8c:c3:9d:58: 3c:1f:1e:81:4e:7d:38:8a:f9:a7:21:d6:6c:a4:49: df:da:2c:43:32:6e:d7:3a:b3:5c:8a:78:19:a6:a0: 9b:69:9e:28:43:30:7a:e0:02:20:20:54:87:31:3b: 2b:48:77:87:64:22:e4:2a:a8:45:ec:44:dc:16:10: 9d:9e:1d:18:ba:1a:0a:91:d5:3a:b4:94:ed:b2:c4: cb:02:7f:d7:75:8e:4d:f7:71:11:0d:76:7b:f8:b0: c4:0d:47:91:40:c5:fb:25:42:1b:fe:f8:51:42:a5: 73:64:e4:ee:59:b2:1b:26:3b:56:47:8a:c3:6c:51: 8b:89:22:9e:8b:01:4f:d4:da:ce:36:8f:21:37:0e: a7:29:b2:da:0b:78:14:d4:44:af:03:72:04:ba:b6: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:60:64:EE:71:FF:7C:3C:4B:C8:3D:53:77:22:14:94:1B:F4:4F:C4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143759.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a455::/32 Signature Algorithm: sha256WithRSAEncryption 7d:63:5e:4a:35:6c:bd:ef:f1:ba:c6:aa:8e:01:0d:17:5f:f6: 68:47:8e:8e:63:78:0d:55:5d:4a:ea:7b:aa:5d:e9:fd:d0:2b: 6e:99:f7:ab:42:03:23:ac:4d:b5:08:c0:b1:2a:ed:a8:67:27: ee:bd:0e:49:62:b2:c6:84:df:74:a4:98:93:fd:90:4f:f7:ff: f7:4e:31:05:ed:42:ff:40:57:bf:51:b1:0f:92:16:15:ed:c5: 6f:f4:7c:ac:17:cf:2b:f5:bb:25:63:7e:20:66:99:09:dd:98: 46:c5:f0:5a:9a:8d:41:c9:61:62:f6:22:fe:20:bf:6e:72:7b: db:14:98:05:a9:85:e8:42:e9:4e:73:54:35:68:09:4a:be:98: aa:ef:7d:77:f9:13:d1:db:92:6e:02:3f:5a:75:64:79:72:3a: 38:c6:34:b5:8b:56:c2:0b:4b:ca:c9:fb:40:f4:f1:cb:0a:31: 6e:ff:8c:05:d8:bd:8e:e6:bf:92:8b:69:f2:3f:11:4a:1b:86: e9:05:1d:4c:50:3b:a8:3a:91:f2:39:06:4f:ad:53:79:ab:62: 90:6c:78:aa:d4:a6:a7:1b:76:6b:9d:d4:00:0c:be:bd:2b:2b: 18:c4:14:6d:fc:e7:bd:e8:39:1f:b1:4d:4b:ce:69:34:d7:58: 05:fd:53:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOrffGRLK/fLbpEdtLQJ3Ctm1g7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1NFoX DTI3MDMwMzA2MTI1NFowMzExMC8GA1UEAxMoQzU2MDY0RUU3MUZGN0MzQzRCQzgz RDUzNzcyMjE0OTQxQkY0NEZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtVTWhU2ctjO0F2DhzzWyea1JH8RBFwAVCiJQLUhqPjs9054SXyqtXnXWjz V6LkTlAjamgpgqUzlbYaWLPzIsfKPcGgX7R/M/uc5VRKeUvsv8ZaBPJUMX/fJIZq tslvU7pLQ5WMw51YPB8egU59OIr5pyHWbKRJ39osQzJu1zqzXIp4Gaagm2meKEMw euACICBUhzE7K0h3h2Qi5CqoRexE3BYQnZ4dGLoaCpHVOrSU7bLEywJ/13WOTfdx EQ12e/iwxA1HkUDF+yVCG/74UUKlc2Tk7lmyGyY7VkeKw2xRi4kinosBT9TazjaP ITcOpymy2gt4FNRErwNyBLq2Nv0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTFYGTu cf98PEvIPVN3IhSUG/RPxDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pFUwDQYJKoZIhvcNAQELBQADggEBAH1jXko1bL3v8brGqo4BDRdf9mhHjo5jeA1V XUrqe6pd6f3QK26Z96tCAyOsTbUIwLEq7ahnJ+69DklissaE33SkmJP9kE/3//dO MQXtQv9AV79RsQ+SFhXtxW/0fKwXzyv1uyVjfiBmmQndmEbF8FqajUHJYWL2Iv4g v25ye9sUmAWphehC6U5zVDVoCUq+mKrvfXf5E9Hbkm4CP1p1ZHlyOjjGNLWLVsIL S8rJ+0D08csKMW7/jAXYvY7mv5KLafI/EUobhukFHUxQO6g6kfI5Bk+tU3mrYpBs eKrUpqcbdmud1AAMvr0rKxjEFG38573oOR+xTUvOaTTXWAX9U/4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:10 2026 by rpki-client