$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143810.roa File: AS143810.roa (raw, json) Hash identifier: Fnjn8yVP+jj9bNLRNSK96hCInaW4IxcaG7NZQ+6v9Lw= Subject key identifier: C9:19:FE:F1:A4:9D:B4:1E:D5:0F:F8:5B:FA:91:A4:3A:1A:D1:5B:0B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 27369402EEEF763A97F96597D1BA0970581052FD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143810.roa Signing time: Wed 04 Mar 2026 06:15:34 +0000 ROA not before: Wed 04 Mar 2026 06:10:34 +0000 ROA not after: Wed 03 Mar 2027 06:15:34 +0000 asID: 143810 IP address blocks: 240a:a488::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:36:94:02:ee:ef:76:3a:97:f9:65:97:d1:ba:09:70:58:10:52:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:34 2026 GMT Not After : Mar 3 06:15:34 2027 GMT Subject: CN=C919FEF1A49DB41ED50FF85BFA91A43A1AD15B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:e7:07:eb:bb:a6:de:f2:d0:ce:47:7e:be: 2d:ba:f7:87:8b:67:27:8b:f5:da:fe:70:1c:f4:3b: 5f:51:bf:93:f9:2a:3c:ef:e5:00:84:88:11:cb:63: 3f:44:e8:c4:4c:2c:0a:e7:51:98:51:81:08:6b:86: 20:a9:d0:80:9a:cc:3b:76:0e:f1:25:82:ee:40:63: ec:f1:8a:ec:61:c2:ce:1e:27:bb:bb:fb:71:d4:2e: ee:2a:6a:57:0e:b9:7d:ee:2a:54:30:66:05:e0:d6: e5:ce:f2:20:d4:f6:14:82:fb:f0:59:63:06:5b:cf: c1:8e:cc:80:5a:00:10:33:7e:97:17:97:78:ce:7e: 67:fa:34:31:e2:08:13:a0:f8:b6:a6:ff:70:a8:c4: 8a:af:ce:22:71:3a:b4:21:c7:3b:c2:03:9b:e1:08: 7e:d7:b0:db:fd:53:ed:ca:70:a0:86:17:d1:47:c4: 7e:3c:55:c0:11:ae:03:ec:6c:1f:95:d2:e6:13:6f: 70:82:34:2c:3d:08:00:c7:2e:5b:e8:7c:bb:54:fa: a4:3e:98:eb:d6:7f:d3:b6:3f:37:9d:ec:9b:99:7d: 31:73:c2:c1:34:f2:3e:ad:bf:3a:ee:f9:22:6f:d4: f0:70:5a:8b:74:be:fc:f1:2e:2d:0c:69:ee:e2:9d: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:19:FE:F1:A4:9D:B4:1E:D5:0F:F8:5B:FA:91:A4:3A:1A:D1:5B:0B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143810.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a488::/32 Signature Algorithm: sha256WithRSAEncryption c4:09:32:5f:98:bd:f9:b0:7c:b4:8a:40:b0:71:d0:53:16:76: bb:f7:1f:68:88:c2:85:e3:28:ff:35:f7:e1:96:59:a0:4c:f9: 4f:f6:30:9d:02:c0:b1:c7:e3:04:46:d7:d3:97:ea:4a:bb:ac: a0:b1:db:a8:c9:55:f2:0b:a4:67:20:95:8e:30:1b:f1:44:75: a5:f2:10:09:fd:ca:c3:92:a1:d8:39:70:8c:7b:ef:e2:08:46: 29:b2:5f:4e:e6:df:02:47:bc:1c:12:5b:e0:a6:2d:db:e2:d5: a7:0d:89:cf:1f:bd:77:f3:3a:97:2c:34:26:d8:1c:84:3d:4f: 36:9d:8c:35:31:ad:50:21:c1:0a:b6:36:0a:32:9b:2f:6a:b2: d4:8e:f6:5b:17:43:f1:9d:64:6c:76:ef:5b:fc:0d:31:70:4c: 13:fa:ba:90:2d:33:f3:a1:7c:fc:6b:7d:b0:da:16:d3:20:ba: 2a:49:5a:c6:2e:6d:9a:65:db:1e:98:e4:d6:ee:4f:fe:f4:a7: e0:2c:fb:c8:85:9a:b9:b6:30:fe:0b:88:8d:3e:b9:cb:78:0e: 44:b7:40:2f:c8:eb:1b:d1:e3:01:94:f2:e7:36:b4:39:05:c2: 11:52:24:66:57:21:54:06:00:a6:50:d1:23:8a:e6:ea:e5:70: ee:d2:a7:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJzaUAu7vdjqX+WWX0boJcFgQUv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzNFoX DTI3MDMwMzA2MTUzNFowMzExMC8GA1UEAxMoQzkxOUZFRjFBNDlEQjQxRUQ1MEZG ODVCRkE5MUE0M0ExQUQxNUIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMm95wfru6be8tDOR36+Lbr3h4tnJ4v12v5wHPQ7X1G/k/kqPO/lAISIEctj P0ToxEwsCudRmFGBCGuGIKnQgJrMO3YO8SWC7kBj7PGK7GHCzh4nu7v7cdQu7ipq Vw65fe4qVDBmBeDW5c7yINT2FIL78FljBlvPwY7MgFoAEDN+lxeXeM5+Z/o0MeII E6D4tqb/cKjEiq/OInE6tCHHO8IDm+EIftew2/1T7cpwoIYX0UfEfjxVwBGuA+xs H5XS5hNvcII0LD0IAMcuW+h8u1T6pD6Y69Z/07Y/N53sm5l9MXPCwTTyPq2/Ou75 Im/U8HBai3S+/PEuLQxp7uKd8TMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTJGf7x pJ20HtUP+Fv6kaQ6GtFbCzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzgxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pIgwDQYJKoZIhvcNAQELBQADggEBAMQJMl+YvfmwfLSKQLBx0FMWdrv3H2iIwoXj KP819+GWWaBM+U/2MJ0CwLHH4wRG19OX6kq7rKCx26jJVfILpGcglY4wG/FEdaXy EAn9ysOSodg5cIx77+IIRimyX07m3wJHvBwSW+CmLdvi1acNic8fvXfzOpcsNCbY HIQ9TzadjDUxrVAhwQq2Ngoymy9qstSO9lsXQ/GdZGx271v8DTFwTBP6upAtM/Oh fPxrfbDaFtMguipJWsYubZpl2x6Y5NbuT/70p+As+8iFmrm2MP4LiI0+uct4DkS3 QC/I6xvR4wGU8uc2tDkFwhFSJGZXIVQGAKZQ0SOK5urlcO7SpxY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:58 2026 by rpki-client