$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143791.roa File: AS143791.roa (raw, json) Hash identifier: 6kdwPSWcn/1wn1x96/o2C0omQ0ndVcLAYBWigphpB98= Subject key identifier: 2D:10:DE:A1:DC:88:77:6E:52:BB:4E:23:C2:A3:0B:DB:CE:82:24:30 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 34A1602DD5A9E999BA71DD0A923FB60A1C054C1F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143791.roa Signing time: Wed 04 Mar 2026 06:13:16 +0000 ROA not before: Wed 04 Mar 2026 06:08:16 +0000 ROA not after: Wed 03 Mar 2027 06:13:16 +0000 asID: 143791 IP address blocks: 240a:a475::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a1:60:2d:d5:a9:e9:99:ba:71:dd:0a:92:3f:b6:0a:1c:05:4c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:16 2026 GMT Not After : Mar 3 06:13:16 2027 GMT Subject: CN=2D10DEA1DC88776E52BB4E23C2A30BDBCE822430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:7c:d7:31:2a:98:62:4a:1a:01:e7:46:72: 30:77:d2:d3:0e:15:41:8d:3f:54:ec:47:57:ca:e1: 23:6e:81:e4:0a:aa:66:fa:95:91:6b:d6:0d:16:ce: 20:d2:5b:38:f2:f0:8e:21:d9:3b:bd:83:fe:d9:59: 59:b7:d0:47:2a:5f:94:69:2a:1f:b4:17:0a:e5:ed: 82:61:c3:ea:e2:42:f6:ed:32:f8:1b:c4:4a:ff:70: 7f:68:b8:04:bb:30:e7:fd:1e:b5:cf:41:6e:b2:2c: 65:1e:b4:60:58:17:b9:65:e0:5e:7c:79:3a:f4:a4: 6d:23:10:22:8b:59:f9:83:04:e3:ca:5b:02:13:5f: 98:7a:68:02:6f:26:06:5a:d7:d7:06:f8:6d:01:b3: de:27:fa:2a:99:c1:68:eb:ec:b2:c5:7b:91:a7:90: ec:4d:02:91:c1:d8:fa:46:5e:7b:99:86:8f:89:de: b0:8d:2c:8f:65:ad:cb:04:dc:f9:a5:82:c7:cc:c5: f4:65:e1:5e:3b:18:ba:2b:12:2e:b4:e2:b4:c9:3a: 51:d3:db:e0:6a:51:19:bf:0c:fa:65:f1:0e:5c:ea: ef:35:e7:2c:f3:37:34:e3:01:93:35:a6:92:9f:a0: a9:40:12:a2:90:d7:28:9a:29:1e:6f:f0:06:b4:12: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:10:DE:A1:DC:88:77:6E:52:BB:4E:23:C2:A3:0B:DB:CE:82:24:30 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143791.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a475::/32 Signature Algorithm: sha256WithRSAEncryption 28:30:3f:8f:47:79:ce:a1:e0:55:c6:33:f2:e3:bd:ec:f8:f6: be:33:f0:6d:bf:f9:ba:3a:c9:d4:f8:fc:0a:90:1f:8b:66:5c: bb:80:40:ef:21:4c:ec:ed:23:e2:4a:7b:e8:a4:77:ab:17:24: 6a:59:ae:70:70:a0:d6:e1:f2:42:a0:fe:c3:8f:58:52:40:90: 59:47:ee:69:5c:d1:0b:4c:d9:eb:b9:ab:59:b3:4a:fa:26:62: 33:3e:86:df:52:0e:1b:e7:8f:47:10:ce:6b:50:f9:42:cc:57: f1:ee:e1:c3:0d:02:6c:71:68:bd:81:b2:ab:56:2a:eb:6b:27: 44:0d:b0:53:c0:c2:99:ae:f9:19:fc:2e:57:d9:fb:e3:94:61: df:9c:05:34:34:a9:97:19:bd:c1:ea:8b:1b:6b:d4:a2:ba:8b: b7:21:67:cd:41:9a:a1:3e:97:50:6a:54:8a:01:60:b6:30:26: d3:19:d5:76:c7:67:94:a0:51:42:19:a7:51:cc:58:25:d1:55: 5e:c1:14:87:a3:ba:34:80:b1:7b:7f:41:60:24:8b:2c:d1:0d: a8:55:f3:6d:1c:0e:69:d0:8f:49:8b:c6:7c:0d:e5:15:c9:a3: 9c:b3:c1:e6:a4:fd:c5:bc:32:b0:ee:40:ce:51:34:3e:4c:82: df:83:3e:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNKFgLdWp6Zm6cd0Kkj+2ChwFTB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNloX DTI3MDMwMzA2MTMxNlowMzExMC8GA1UEAxMoMkQxMERFQTFEQzg4Nzc2RTUyQkI0 RTIzQzJBMzBCREJDRTgyMjQzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWmfNcxKphiShoB50ZyMHfS0w4VQY0/VOxHV8rhI26B5AqqZvqVkWvWDRbO INJbOPLwjiHZO72D/tlZWbfQRypflGkqH7QXCuXtgmHD6uJC9u0y+BvESv9wf2i4 BLsw5/0etc9BbrIsZR60YFgXuWXgXnx5OvSkbSMQIotZ+YME48pbAhNfmHpoAm8m BlrX1wb4bQGz3if6KpnBaOvsssV7kaeQ7E0CkcHY+kZee5mGj4nesI0sj2WtywTc +aWCx8zF9GXhXjsYuisSLrTitMk6UdPb4GpRGb8M+mXxDlzq7zXnLPM3NOMBkzWm kp+gqUASopDXKJopHm/wBrQS/p0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQtEN6h 3Ih3blK7TiPCowvbzoIkMDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pHUwDQYJKoZIhvcNAQELBQADggEBACgwP49Hec6h4FXGM/Ljvez49r4z8G2/+bo6 ydT4/AqQH4tmXLuAQO8hTOztI+JKe+ikd6sXJGpZrnBwoNbh8kKg/sOPWFJAkFlH 7mlc0QtM2eu5q1mzSvomYjM+ht9SDhvnj0cQzmtQ+ULMV/Hu4cMNAmxxaL2BsqtW KutrJ0QNsFPAwpmu+Rn8LlfZ++OUYd+cBTQ0qZcZvcHqixtr1KK6i7chZ81BmqE+ l1BqVIoBYLYwJtMZ1XbHZ5SgUUIZp1HMWCXRVV7BFIejujSAsXt/QWAkiyzRDahV 820cDmnQj0mLxnwN5RXJo5yzweak/cW8MrDuQM5RND5Mgt+DPpQ= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:36 2026 by rpki-client