$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143765.roa File: AS143765.roa (raw, json) Hash identifier: bUxiRCx+n4Hkh72c9nFDHBHXkD2Dip8jr2ceTcLPsho= Subject key identifier: 26:AD:52:C8:2C:A1:C3:49:99:E1:CA:DA:6D:7D:B8:AA:C7:E1:E8:A7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 271247EA5C25C6E2B6646D71A1D35979A3B6180E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143765.roa Signing time: Wed 04 Mar 2026 06:13:15 +0000 ROA not before: Wed 04 Mar 2026 06:08:15 +0000 ROA not after: Wed 03 Mar 2027 06:13:15 +0000 asID: 143765 IP address blocks: 240a:a45b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:12:47:ea:5c:25:c6:e2:b6:64:6d:71:a1:d3:59:79:a3:b6:18:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:15 2026 GMT Not After : Mar 3 06:13:15 2027 GMT Subject: CN=26AD52C82CA1C34999E1CADA6D7DB8AAC7E1E8A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:0f:a5:2a:ec:c1:39:ef:40:a1:ae:69:b0: 41:f1:60:39:b0:d8:a6:bf:d1:26:c0:84:3f:5b:ba: e4:28:d0:96:07:9b:b2:e8:50:ac:fb:24:21:bc:1d: 57:14:2b:19:06:49:52:ec:36:5a:fe:ca:17:18:9c: 8e:7e:8d:ab:42:87:a0:15:87:ec:35:bb:aa:f9:2f: f1:2b:bf:f3:9d:89:e2:d3:1d:77:52:46:d3:f4:da: 58:7b:ca:f6:12:7b:d9:15:5c:8b:c3:8f:1d:b4:3c: 18:2d:3c:9b:24:02:0e:38:4e:fc:49:18:b5:a2:f5: d6:28:46:cd:37:f2:66:31:d3:ec:ae:dd:eb:55:bc: 10:05:8b:42:50:ff:01:9b:d9:04:fd:98:31:8f:dc: 87:30:f7:dd:60:bc:aa:60:bb:0b:12:1a:0e:c0:ca: 4e:ce:66:16:12:71:be:d8:94:c4:19:23:43:35:c9: d4:86:1c:cc:8c:03:4a:59:05:cf:d0:00:dc:10:de: 3a:80:f9:e1:f2:ce:d9:d0:24:12:12:66:02:54:82: 5f:5e:b3:2c:c9:93:df:0c:5e:d7:5d:6b:65:45:d8: 3b:e7:86:1f:b9:b7:06:96:b8:35:3c:fd:13:40:e3: 23:94:ef:23:6c:71:9d:02:24:ef:51:41:b5:ad:70: b0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AD:52:C8:2C:A1:C3:49:99:E1:CA:DA:6D:7D:B8:AA:C7:E1:E8:A7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143765.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a45b::/32 Signature Algorithm: sha256WithRSAEncryption 79:55:1b:88:ff:78:96:79:60:10:89:07:52:3b:89:f0:be:a4: 30:2b:f1:77:78:8c:4d:53:95:55:ce:0b:b4:f0:21:31:64:29: 7d:fd:fc:33:40:32:57:0b:b8:58:09:ac:fb:37:bb:09:39:1f: ea:c0:e9:7c:d3:d9:fd:42:b1:df:b0:1c:1e:de:91:bc:2a:be: 4e:58:5f:13:30:a1:cd:8e:35:bf:d6:d5:18:03:a1:79:6e:e8: 56:79:8d:c4:b4:e3:ca:4e:ea:40:f5:b5:d3:22:57:af:10:da: 60:9d:4d:de:ed:80:c4:c2:f6:76:af:70:cf:09:a9:02:6e:36: 11:43:2c:ae:26:c8:7a:c0:67:80:ef:4a:de:3b:28:4d:5f:fa: 83:db:05:9f:e7:0c:7f:f9:56:5c:07:75:14:7b:86:13:e6:41: 98:13:d3:47:d0:89:ce:63:41:73:b3:7f:d0:9b:f2:04:1e:ee: a1:32:c2:8a:57:1c:29:c2:e6:c7:8c:49:f4:6c:1a:6e:cf:16: 85:84:93:58:5f:69:7c:77:01:21:f2:11:67:30:44:0f:18:e1: db:52:20:1d:71:9f:00:c6:65:86:2b:e6:88:8d:38:e6:1f:91: 16:7f:2e:2c:09:6a:16:e5:57:45:eb:b1:17:f5:ee:34:46:26: 50:51:a0:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJxJH6lwlxuK2ZG1xodNZeaO2GA4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNVoX DTI3MDMwMzA2MTMxNVowMzExMC8GA1UEAxMoMjZBRDUyQzgyQ0ExQzM0OTk5RTFD QURBNkQ3REI4QUFDN0UxRThBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJSHD6Uq7ME570ChrmmwQfFgObDYpr/RJsCEP1u65CjQlgebsuhQrPskIbwd VxQrGQZJUuw2Wv7KFxicjn6Nq0KHoBWH7DW7qvkv8Su/852J4tMdd1JG0/TaWHvK 9hJ72RVci8OPHbQ8GC08myQCDjhO/EkYtaL11ihGzTfyZjHT7K7d61W8EAWLQlD/ AZvZBP2YMY/chzD33WC8qmC7CxIaDsDKTs5mFhJxvtiUxBkjQzXJ1IYczIwDSlkF z9AA3BDeOoD54fLO2dAkEhJmAlSCX16zLMmT3wxe111rZUXYO+eGH7m3Bpa4NTz9 E0DjI5TvI2xxnQIk71FBta1wsG0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQmrVLI LKHDSZnhytptfbiqx+HopzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pFswDQYJKoZIhvcNAQELBQADggEBAHlVG4j/eJZ5YBCJB1I7ifC+pDAr8Xd4jE1T lVXOC7TwITFkKX39/DNAMlcLuFgJrPs3uwk5H+rA6XzT2f1Csd+wHB7ekbwqvk5Y XxMwoc2ONb/W1RgDoXlu6FZ5jcS048pO6kD1tdMiV68Q2mCdTd7tgMTC9navcM8J qQJuNhFDLK4myHrAZ4DvSt47KE1f+oPbBZ/nDH/5VlwHdRR7hhPmQZgT00fQic5j QXOzf9Cb8gQe7qEywopXHCnC5seMSfRsGm7PFoWEk1hfaXx3ASHyEWcwRA8Y4dtS IB1xnwDGZYYr5oiNOOYfkRZ/LiwJahblV0XrsRf17jRGJlBRoEo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:56 2026 by rpki-client