$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143785.roa File: AS143785.roa (raw, json) Hash identifier: VWOvRS+51KQn3rqRPAtp4j4PH/KslVHB+Cz6dHXFjQE= Subject key identifier: CC:02:A5:C2:35:CC:90:E7:33:EA:F3:88:FC:D0:90:29:1C:04:45:5A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08C29C8B6716BC369B716FC4EC2DB321FE5BC157 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143785.roa Signing time: Wed 04 Mar 2026 06:14:20 +0000 ROA not before: Wed 04 Mar 2026 06:09:20 +0000 ROA not after: Wed 03 Mar 2027 06:14:20 +0000 asID: 143785 IP address blocks: 240a:a46f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c2:9c:8b:67:16:bc:36:9b:71:6f:c4:ec:2d:b3:21:fe:5b:c1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:20 2026 GMT Not After : Mar 3 06:14:20 2027 GMT Subject: CN=CC02A5C235CC90E733EAF388FCD090291C04455A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:82:a6:1b:8b:0d:0f:9a:b6:76:85:40:8d: 44:49:b8:ee:7e:55:55:cc:35:ae:10:1e:bd:93:94: 36:ad:eb:c9:d7:13:2e:4e:20:72:25:a5:3b:2a:7c: 0c:1f:8e:bc:6e:1e:bd:20:b3:c1:10:6c:1a:11:b0: c2:7f:1c:35:96:b7:69:a6:8e:8c:fb:64:a4:68:e2: 13:f9:8c:3f:af:fb:f4:17:51:05:23:66:6d:cc:be: a4:d6:a0:4c:2f:4a:dc:03:e0:c9:ad:09:e0:d9:f5: d7:4a:0b:40:13:19:1f:a9:bd:90:d9:7a:66:0c:d4: e0:2a:94:00:89:30:fc:f0:88:43:c1:9d:3a:f9:41: d7:d0:10:38:bb:f6:6c:c1:c7:1f:fe:d4:24:7f:d0: 22:c2:eb:34:5d:bb:aa:34:26:56:6b:b9:c8:41:0f: f2:5d:ab:33:83:64:ea:2f:73:a8:90:aa:5b:db:3f: 9e:bd:93:3c:e7:24:f7:75:8d:9d:dc:f7:8f:17:06: 9d:53:60:64:e5:15:41:1d:6a:ad:5c:c3:31:af:b6: e2:00:72:4d:2b:20:c1:a2:d4:7c:9c:ce:ce:e4:08: cf:84:b3:4d:d4:65:b0:d4:e8:f1:46:b1:72:30:9a: 95:32:1d:6b:0e:73:38:b2:8b:8c:b6:46:8f:dc:24: f8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:02:A5:C2:35:CC:90:E7:33:EA:F3:88:FC:D0:90:29:1C:04:45:5A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143785.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a46f::/32 Signature Algorithm: sha256WithRSAEncryption 81:9f:a5:af:96:a7:c0:f5:32:bb:5c:e5:ca:c0:45:1b:b2:20: ee:a2:3e:6e:92:3b:44:d7:4d:4b:cc:95:a2:24:9b:d6:c4:c0: dc:5a:75:1c:44:1c:31:54:f3:f2:fe:ae:d6:13:21:bc:f0:78: 92:52:b1:79:60:aa:ac:ca:9f:12:d1:68:2a:dd:f4:b2:f1:16: 4f:f1:15:d6:1b:83:b1:d1:f9:9c:0e:03:8f:3e:74:01:79:c4: 3c:63:52:05:03:3f:7f:fc:a6:34:21:56:97:96:41:57:8e:56: b2:b6:27:af:79:02:1d:8a:22:f7:29:44:cb:48:0a:03:43:3d: 04:4d:1b:47:85:b6:74:45:e2:ec:9e:68:27:f4:86:70:54:51: 8b:62:93:3c:07:a4:f5:bb:f1:3f:cf:10:f4:ea:ba:00:c5:53: dd:a2:47:b2:64:7b:21:0d:4a:47:24:67:8a:2c:e7:47:ce:f6: 2e:4e:18:d7:b4:4c:71:13:d8:ea:07:b0:9b:e8:6f:24:01:33: a1:02:8a:05:ed:8b:01:00:74:07:14:da:29:53:f9:8e:86:b5: e1:9d:dc:66:50:47:14:16:ed:b4:4e:13:aa:ba:ad:98:43:d7: 86:aa:2a:a2:de:88:69:a1:8b:f9:d2:d9:af:8d:bd:a0:34:e7: 06:e5:e7:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCMKci2cWvDabcW/E7C2zIf5bwVcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyMFoX DTI3MDMwMzA2MTQyMFowMzExMC8GA1UEAxMoQ0MwMkE1QzIzNUNDOTBFNzMzRUFG Mzg4RkNEMDkwMjkxQzA0NDU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx5gqYbiw0PmrZ2hUCNREm47n5VVcw1rhAevZOUNq3rydcTLk4gciWlOyp8 DB+OvG4evSCzwRBsGhGwwn8cNZa3aaaOjPtkpGjiE/mMP6/79BdRBSNmbcy+pNag TC9K3APgya0J4Nn110oLQBMZH6m9kNl6ZgzU4CqUAIkw/PCIQ8GdOvlB19AQOLv2 bMHHH/7UJH/QIsLrNF27qjQmVmu5yEEP8l2rM4Nk6i9zqJCqW9s/nr2TPOck93WN ndz3jxcGnVNgZOUVQR1qrVzDMa+24gByTSsgwaLUfJzOzuQIz4SzTdRlsNTo8Uax cjCalTIdaw5zOLKLjLZGj9wk+EMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTMAqXC NcyQ5zPq84j80JApHARFWjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pG8wDQYJKoZIhvcNAQELBQADggEBAIGfpa+Wp8D1Mrtc5crARRuyIO6iPm6SO0TX TUvMlaIkm9bEwNxadRxEHDFU8/L+rtYTIbzweJJSsXlgqqzKnxLRaCrd9LLxFk/x FdYbg7HR+ZwOA48+dAF5xDxjUgUDP3/8pjQhVpeWQVeOVrK2J695Ah2KIvcpRMtI CgNDPQRNG0eFtnRF4uyeaCf0hnBUUYtikzwHpPW78T/PEPTqugDFU92iR7JkeyEN SkckZ4os50fO9i5OGNe0THET2OoHsJvobyQBM6ECigXtiwEAdAcU2ilT+Y6GteGd 3GZQRxQW7bROE6q6rZhD14aqKqLeiGmhi/nS2a+NvaA05wbl50g= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:39 2026 by rpki-client