$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143824.roa File: AS143824.roa (raw, json) Hash identifier: 5D59BTuvNfJxFrFrYaOu/q80ibsBXi866G5+oIZ45u4= Subject key identifier: 56:D8:C1:38:4A:2C:48:DC:D9:15:AA:DB:BA:FD:3D:65:80:0C:0C:25 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 018FB46326199E82D2551E3684E72F055C14B2F5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143824.roa Signing time: Wed 04 Mar 2026 06:12:38 +0000 ROA not before: Wed 04 Mar 2026 06:07:38 +0000 ROA not after: Wed 03 Mar 2027 06:12:38 +0000 asID: 143824 IP address blocks: 240a:a496::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:b4:63:26:19:9e:82:d2:55:1e:36:84:e7:2f:05:5c:14:b2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:38 2026 GMT Not After : Mar 3 06:12:38 2027 GMT Subject: CN=56D8C1384A2C48DCD915AADBBAFD3D65800C0C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:03:7a:78:fd:e3:84:be:e6:62:ab:be:d1: 20:42:e6:53:b0:02:d7:23:e2:24:15:4a:70:e0:33: ff:4a:9a:26:f5:45:36:35:70:ae:29:30:c8:2e:b8: b8:70:c8:4b:ab:d0:d9:ed:3a:27:5c:6a:fc:2f:da: cd:8e:96:6f:c7:5b:10:09:e3:0e:33:e9:e9:ca:54: d8:36:20:d1:d4:34:47:32:cb:bf:86:a4:b2:23:e1: 74:94:82:eb:60:c7:e6:ef:12:ca:e6:7a:13:9b:2b: af:49:8a:5d:70:2a:71:40:17:34:84:36:04:87:78: 82:d0:03:37:51:6b:c6:df:4b:74:b5:e1:c0:4f:d8: 6f:4c:20:00:1e:a4:49:df:4b:e6:e7:b2:73:6b:93: 36:72:38:54:3f:25:d2:5b:c9:e4:b0:26:31:3a:7a: fc:43:12:0f:22:24:9b:8e:cb:d3:5b:99:ad:dc:ff: dc:c9:8a:19:af:34:e7:c3:7d:b5:ee:95:66:8c:7c: 41:49:96:e9:1b:bb:e9:f8:a1:bd:f8:40:31:5c:14: 87:ba:ea:31:8d:89:d1:d0:86:16:e4:a6:a6:77:41: 72:5f:ee:7c:e2:f5:73:2c:e4:51:70:b7:66:d9:b3: f2:35:c9:da:9c:5d:e7:f6:74:d9:60:6f:7a:1e:66: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D8:C1:38:4A:2C:48:DC:D9:15:AA:DB:BA:FD:3D:65:80:0C:0C:25 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143824.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a496::/32 Signature Algorithm: sha256WithRSAEncryption 66:ff:2a:a9:97:c5:67:f0:d8:8f:02:9c:51:eb:00:22:71:2e: 7b:a2:0e:65:59:a7:2d:71:d8:77:a7:60:7f:cc:c0:e1:3b:da: ac:28:48:23:5a:37:8d:c5:f8:b4:fc:e3:74:44:7e:9e:59:88: 20:25:b8:7f:4c:6c:b9:43:32:0f:3a:05:ea:7d:61:2d:28:71: 49:b0:5c:93:9e:20:31:15:77:88:91:29:b5:d3:4e:10:58:d0: 39:f4:72:55:b6:07:7c:ee:2f:33:28:1a:2e:1a:b5:3c:fe:e5: 83:de:c7:01:55:ed:fe:6d:de:0c:f0:18:83:6b:c1:a3:7a:17: 26:18:d6:fa:76:93:61:5d:d0:4f:c6:f4:42:fb:b7:8b:1f:e8: 20:14:60:e6:a7:64:61:ec:86:3d:c1:13:0f:94:ce:2f:3c:a0: d1:eb:f5:96:d6:9f:c7:4c:63:47:07:aa:f7:e5:91:6b:6e:f7: 5e:84:e2:3b:51:ee:f4:13:38:ad:e8:0d:c5:68:08:bc:10:7a: 37:27:ee:b7:66:61:1a:fa:f2:c7:52:20:de:8f:07:6c:3c:31: bb:1f:1e:94:76:49:d9:ca:8e:77:60:34:96:d8:74:58:fd:45: 0a:12:4e:fa:7d:5f:f9:80:7d:e7:10:0d:10:41:7a:d5:23:15: c8:f4:ea:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAY+0YyYZnoLSVR42hOcvBVwUsvUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczOFoX DTI3MDMwMzA2MTIzOFowMzExMC8GA1UEAxMoNTZEOEMxMzg0QTJDNDhEQ0Q5MTVB QURCQkFGRDNENjU4MDBDMEMyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/IA3p4/eOEvuZiq77RIELmU7AC1yPiJBVKcOAz/0qaJvVFNjVwrikwyC64 uHDIS6vQ2e06J1xq/C/azY6Wb8dbEAnjDjPp6cpU2DYg0dQ0RzLLv4aksiPhdJSC 62DH5u8SyuZ6E5srr0mKXXAqcUAXNIQ2BId4gtADN1Frxt9LdLXhwE/Yb0wgAB6k Sd9L5ueyc2uTNnI4VD8l0lvJ5LAmMTp6/EMSDyIkm47L01uZrdz/3MmKGa8058N9 te6VZox8QUmW6Ru76fihvfhAMVwUh7rqMY2J0dCGFuSmpndBcl/ufOL1cyzkUXC3 Ztmz8jXJ2pxd5/Z02WBveh5mN3ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRW2ME4 SixI3NkVqtu6/T1lgAwMJTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzgyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pJYwDQYJKoZIhvcNAQELBQADggEBAGb/KqmXxWfw2I8CnFHrACJxLnuiDmVZpy1x 2HenYH/MwOE72qwoSCNaN43F+LT843REfp5ZiCAluH9MbLlDMg86Bep9YS0ocUmw XJOeIDEVd4iRKbXTThBY0Dn0clW2B3zuLzMoGi4atTz+5YPexwFV7f5t3gzwGINr waN6FyYY1vp2k2Fd0E/G9EL7t4sf6CAUYOanZGHshj3BEw+Uzi88oNHr9ZbWn8dM Y0cHqvflkWtu916E4jtR7vQTOK3oDcVoCLwQejcn7rdmYRr68sdSIN6PB2w8Mbsf HpR2SdnKjndgNJbYdFj9RQoSTvp9X/mAfecQDRBBetUjFcj06hY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:56 2026 by rpki-client