$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143812.roa File: AS143812.roa (raw, json) Hash identifier: NoduIMwcMUKEjKhB0FrUAdP0jnhj98y+9XCQlkGvWCU= Subject key identifier: 3D:B9:0D:26:68:01:70:F3:C5:99:E5:87:9F:6C:D1:20:A6:AC:9D:36 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 75F39B3F2BC444E43C0DA45AE40E318ED356C5BE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143812.roa Signing time: Wed 04 Mar 2026 06:12:50 +0000 ROA not before: Wed 04 Mar 2026 06:07:50 +0000 ROA not after: Wed 03 Mar 2027 06:12:50 +0000 asID: 143812 IP address blocks: 240a:a48a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f3:9b:3f:2b:c4:44:e4:3c:0d:a4:5a:e4:0e:31:8e:d3:56:c5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:50 2026 GMT Not After : Mar 3 06:12:50 2027 GMT Subject: CN=3DB90D26680170F3C599E5879F6CD120A6AC9D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:c8:c3:34:5b:a1:70:5a:25:5d:8d:fc:73: 77:82:a3:cd:5e:3f:0e:76:aa:85:52:b6:6a:f6:f1: 3b:8d:c7:76:0f:e8:ae:97:2d:ad:0e:26:31:b2:13: f7:23:af:26:fd:6c:7c:be:2a:fb:e0:bd:dc:1f:96: 4c:f9:75:0d:2b:3c:e0:f1:a1:b7:08:d2:9c:12:3f: ee:fe:35:26:a5:5b:dd:ed:d5:70:9e:d2:62:2c:28: 03:3f:bf:bb:3c:cb:db:2e:44:9a:28:78:97:dd:94: 8f:20:f0:07:fd:54:45:43:b4:c9:08:a9:a0:9e:2e: d8:eb:6d:7a:a2:55:9f:12:b0:70:94:af:1d:f8:e4: 72:9a:26:1c:7e:c7:09:72:c0:50:45:52:1d:5a:19: 31:32:48:c9:07:ce:b1:fc:7f:bb:96:db:2e:17:ef: ba:e0:83:3a:09:94:92:1e:9c:5a:63:f2:0c:e1:dd: 53:c6:0c:8a:ce:9a:bb:fb:2a:dc:cc:97:12:5f:e5: 44:44:4c:d9:a6:1f:72:2a:99:8d:90:ed:01:c9:a2: 21:d5:e9:ad:e2:c7:c0:e5:b4:92:2e:a2:c0:f0:37: ef:2e:6e:73:c3:16:4a:ab:76:9b:5f:28:0b:bf:ea: b4:79:c3:8c:cb:dc:68:84:ab:e0:eb:e8:9f:5e:b8: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B9:0D:26:68:01:70:F3:C5:99:E5:87:9F:6C:D1:20:A6:AC:9D:36 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143812.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a48a::/32 Signature Algorithm: sha256WithRSAEncryption 18:76:28:27:1b:3b:44:21:22:1a:c1:e3:95:a5:89:15:7f:7b: 72:ac:34:5f:5e:66:be:9f:bd:f0:04:9b:c1:4b:8b:ce:56:c6: ea:69:62:0b:ca:cf:84:d1:19:f6:37:c2:1f:c4:c7:a2:2a:6a: ba:00:4f:3a:2d:5e:fe:de:60:08:fa:29:75:40:b2:99:b8:1f: 17:23:0e:a4:e6:a6:3c:86:a4:ee:55:dd:6c:27:4c:34:0e:2c: d9:76:fc:a6:4d:4f:71:f9:6b:1b:63:f9:af:5c:97:dd:f0:c4: 56:b6:e0:c9:e5:b5:b9:b3:69:25:b9:a2:6d:08:40:9d:4f:aa: cf:1a:80:34:12:f9:c5:bd:c8:b7:7f:bf:ae:cf:0e:15:89:98: 74:73:fb:ea:3e:c4:74:6a:9b:e0:e8:1f:08:34:1e:e6:58:3e: 08:5f:78:39:14:d1:ee:74:b9:1d:d0:24:bc:70:8f:6a:e0:fc: 7c:ed:dd:9a:24:34:e3:11:2c:b9:fe:32:dd:b0:24:1e:29:2a: 9d:ab:dc:66:08:28:e4:bf:db:23:49:9c:26:86:16:42:a9:b9: 34:1f:25:3d:f5:5c:88:42:a6:70:05:96:a2:17:b5:93:be:be: f7:64:af:ef:4e:b1:a7:49:c3:ba:08:e6:f9:37:ea:0d:4d:42: ad:4e:ea:27 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdfObPyvEROQ8DaRa5A4xjtNWxb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1MFoX DTI3MDMwMzA2MTI1MFowMzExMC8GA1UEAxMoM0RCOTBEMjY2ODAxNzBGM0M1OTlF NTg3OUY2Q0QxMjBBNkFDOUQzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANInyMM0W6FwWiVdjfxzd4KjzV4/DnaqhVK2avbxO43Hdg/orpctrQ4mMbIT 9yOvJv1sfL4q++C93B+WTPl1DSs84PGhtwjSnBI/7v41JqVb3e3VcJ7SYiwoAz+/ uzzL2y5Emih4l92UjyDwB/1URUO0yQipoJ4u2OtteqJVnxKwcJSvHfjkcpomHH7H CXLAUEVSHVoZMTJIyQfOsfx/u5bbLhfvuuCDOgmUkh6cWmPyDOHdU8YMis6au/sq 3MyXEl/lRERM2aYfciqZjZDtAcmiIdXpreLHwOW0ki6iwPA37y5uc8MWSqt2m18o C7/qtHnDjMvcaISr4Ovon1643vcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ9uQ0m aAFw88WZ5YefbNEgpqydNjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzgxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pIowDQYJKoZIhvcNAQELBQADggEBABh2KCcbO0QhIhrB45WliRV/e3KsNF9eZr6f vfAEm8FLi85WxuppYgvKz4TRGfY3wh/Ex6IqaroATzotXv7eYAj6KXVAspm4Hxcj DqTmpjyGpO5V3WwnTDQOLNl2/KZNT3H5axtj+a9cl93wxFa24MnltbmzaSW5om0I QJ1Pqs8agDQS+cW9yLd/v67PDhWJmHRz++o+xHRqm+DoHwg0HuZYPghfeDkU0e50 uR3QJLxwj2rg/Hzt3ZokNOMRLLn+Mt2wJB4pKp2r3GYIKOS/2yNJnCaGFkKpuTQf JT31XIhCpnAFlqIXtZO+vvdkr+9OsadJw7oI5vk36g1NQq1O6ic= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:55 2026 by rpki-client