$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143789.roa File: AS143789.roa (raw, json) Hash identifier: gAMXGH7qqOuNgqp8zmvn2ae12zNu81/cRNGoMbSjUIk= Subject key identifier: 05:FD:0C:3A:42:10:BC:86:DC:CB:78:00:21:77:AF:B5:44:1C:5A:C5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0D7079538BCECA5CE45B682501C5B9B672002F7C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143789.roa Signing time: Wed 04 Mar 2026 06:15:51 +0000 ROA not before: Wed 04 Mar 2026 06:10:51 +0000 ROA not after: Wed 03 Mar 2027 06:15:51 +0000 asID: 143789 IP address blocks: 240a:a473::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:70:79:53:8b:ce:ca:5c:e4:5b:68:25:01:c5:b9:b6:72:00:2f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:51 2026 GMT Not After : Mar 3 06:15:51 2027 GMT Subject: CN=05FD0C3A4210BC86DCCB78002177AFB5441C5AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:00:83:c8:9c:96:89:32:47:6a:84:2c:d0:14: a3:cf:b9:63:f1:ea:c0:f7:88:ee:50:0d:4c:30:e6: e7:e0:d2:43:ac:a8:23:1e:00:9c:22:34:4b:fc:ef: 3a:3b:a6:e1:78:16:36:65:a5:38:18:98:3a:24:76: 40:bb:18:ec:0f:82:a5:6d:95:eb:33:2f:2d:7d:c7: 7d:b7:56:f9:77:5c:a4:84:70:03:e3:38:2f:c8:f1: fa:4c:72:e2:db:5e:a5:12:be:53:6b:36:5b:0f:47: e1:e6:66:d7:11:b9:6f:80:dd:e0:85:ac:48:fb:23: 5e:30:e6:f7:f7:c2:04:e7:eb:15:89:fa:7d:40:a9: 6f:04:7c:8d:1b:0a:17:4f:2e:7a:5c:9f:91:e6:7c: 7a:fb:ed:7c:7c:89:e6:12:90:4e:64:37:80:0f:74: 6b:2f:0f:78:7e:e2:0b:43:d4:38:37:ec:a0:c7:27: 03:c9:69:b1:3a:fa:cb:66:1e:92:68:4c:e7:85:19: eb:8b:dc:97:04:ed:be:cf:19:97:0f:09:95:64:5a: 7f:d5:29:a1:f0:1b:0a:58:88:e9:3f:c0:bf:78:c5: 1b:fc:ea:d5:01:6a:14:c4:86:a2:90:58:b7:b0:5e: 1b:23:cc:0c:91:db:7d:e7:77:25:90:b2:47:55:49: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FD:0C:3A:42:10:BC:86:DC:CB:78:00:21:77:AF:B5:44:1C:5A:C5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143789.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a473::/32 Signature Algorithm: sha256WithRSAEncryption be:7a:a9:be:8d:f7:3c:cc:01:0f:64:80:29:ff:74:9e:b8:90: 58:36:2c:f7:78:22:26:f1:34:98:d0:cc:06:b3:8c:e1:bf:02: fe:72:98:fa:96:4e:90:35:8b:07:3c:92:66:38:27:39:62:7a: cb:fb:87:68:c4:52:a6:53:ce:67:99:4f:6f:f9:bc:c3:c8:b7: f4:47:a4:42:0f:cd:ed:ac:25:8d:4b:13:be:ed:a4:84:ec:c9: dd:76:0e:78:40:fa:54:e7:db:81:8a:04:3f:8b:96:bf:b2:25: 46:b1:3c:ca:45:1b:08:90:97:5b:98:f7:17:35:07:84:5d:15: 9f:f0:ef:e8:84:68:e8:4b:a8:19:de:c1:26:ed:f2:8b:2f:89: df:39:0a:66:dd:55:c7:06:0b:fe:60:5b:91:c4:d1:a8:e3:3b: a1:ff:e0:de:a1:92:27:fb:e9:55:54:a2:46:08:1c:1f:da:c2: 37:39:ba:28:f1:17:29:9c:72:13:c6:1d:cb:a9:b5:cc:41:27: fe:ed:07:e0:c3:44:75:ef:15:3c:6e:c5:99:a8:95:69:f8:90: 6c:3b:c4:ee:87:f8:d6:70:16:3c:88:4e:a3:61:6d:20:06:ba: ec:eb:d3:54:18:43:71:1b:0e:2b:1c:e5:16:e6:e4:52:e0:a4: 70:c0:04:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDXB5U4vOylzkW2glAcW5tnIAL3wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA1MVoX DTI3MDMwMzA2MTU1MVowMzExMC8GA1UEAxMoMDVGRDBDM0E0MjEwQkM4NkRDQ0I3 ODAwMjE3N0FGQjU0NDFDNUFDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0Ag8iclokyR2qELNAUo8+5Y/HqwPeI7lANTDDm5+DSQ6yoIx4AnCI0S/zv Ojum4XgWNmWlOBiYOiR2QLsY7A+CpW2V6zMvLX3HfbdW+XdcpIRwA+M4L8jx+kxy 4ttepRK+U2s2Ww9H4eZm1xG5b4Dd4IWsSPsjXjDm9/fCBOfrFYn6fUCpbwR8jRsK F08uelyfkeZ8evvtfHyJ5hKQTmQ3gA90ay8PeH7iC0PUODfsoMcnA8lpsTr6y2Ye kmhM54UZ64vclwTtvs8Zlw8JlWRaf9UpofAbCliI6T/Av3jFG/zq1QFqFMSGopBY t7BeGyPMDJHbfed3JZCyR1VJVj8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQF/Qw6 QhC8htzLeAAhd6+1RBxaxTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pHMwDQYJKoZIhvcNAQELBQADggEBAL56qb6N9zzMAQ9kgCn/dJ64kFg2LPd4Iibx NJjQzAazjOG/Av5ymPqWTpA1iwc8kmY4Jzliesv7h2jEUqZTzmeZT2/5vMPIt/RH pEIPze2sJY1LE77tpITsyd12DnhA+lTn24GKBD+Llr+yJUaxPMpFGwiQl1uY9xc1 B4RdFZ/w7+iEaOhLqBnewSbt8osvid85CmbdVccGC/5gW5HE0ajjO6H/4N6hkif7 6VVUokYIHB/awjc5uijxFymcchPGHcuptcxBJ/7tB+DDRHXvFTxuxZmolWn4kGw7 xO6H+NZwFjyITqNhbSAGuuzr01QYQ3EbDisc5Rbm5FLgpHDABG0= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:04 2026 by rpki-client