$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143834.roa File: AS143834.roa (raw, json) Hash identifier: g5jhJaADWAVYareXyXDjreHt7xzc8ltm+U4T9vkYfZg= Subject key identifier: 15:C6:35:AF:10:A2:A7:73:48:60:A6:72:09:05:48:78:F9:D2:D0:C0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5CA8C98402FC12F13465118B8C8166C8B17FA70E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143834.roa Signing time: Wed 04 Mar 2026 06:15:21 +0000 ROA not before: Wed 04 Mar 2026 06:10:21 +0000 ROA not after: Wed 03 Mar 2027 06:15:21 +0000 asID: 143834 IP address blocks: 240a:a4a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a8:c9:84:02:fc:12:f1:34:65:11:8b:8c:81:66:c8:b1:7f:a7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:21 2026 GMT Not After : Mar 3 06:15:21 2027 GMT Subject: CN=15C635AF10A2A7734860A67209054878F9D2D0C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8f:ae:da:5c:f6:35:bb:9a:d5:ee:6b:8d:57: 96:56:df:c3:0d:11:4b:bd:a3:9d:2c:4a:70:88:0d: 5e:8b:07:be:f7:13:68:ee:0b:4c:14:77:5b:fd:5f: 7b:8d:f8:97:16:5d:b9:17:41:33:09:21:f3:54:15: 4c:e7:5f:31:d4:16:3d:f1:7d:5d:90:27:8e:5b:76: 29:7d:89:bd:b5:ed:61:d7:15:c3:a8:37:04:6b:8b: 4b:41:4b:60:1a:2d:21:6b:0b:cc:42:83:4f:1d:cf: f2:c8:ca:51:60:f7:1b:cd:17:6e:7d:2c:9f:b7:c1: 1d:58:07:01:15:a6:91:2d:3b:90:47:ee:57:2d:31: 13:be:7f:01:b9:f4:65:87:8d:dd:b1:f7:53:c6:73: 9a:18:f5:0e:39:bf:3c:3d:17:de:65:02:ba:86:db: 63:a1:4e:95:6e:7d:06:58:ad:bd:1b:9a:72:9a:2d: 74:30:7f:9a:ad:3a:53:75:17:92:2d:fd:ce:df:0f: b2:b1:17:67:40:73:89:4b:a8:6d:0d:c9:8b:82:2b: b2:39:d9:0f:13:bb:22:be:55:77:c5:2d:81:f2:35: 57:5c:a3:58:87:d9:5a:45:05:3e:75:11:1e:8c:97: a2:63:31:64:b6:a7:f4:24:fc:62:85:6b:db:49:aa: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C6:35:AF:10:A2:A7:73:48:60:A6:72:09:05:48:78:F9:D2:D0:C0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4a0::/32 Signature Algorithm: sha256WithRSAEncryption 58:37:ab:3a:0f:1b:ea:50:26:52:8e:93:99:c0:1f:98:78:f6: ea:fb:94:e2:0b:94:46:8e:2f:19:cc:e6:81:d2:b0:a5:cf:77: 51:65:65:94:51:a5:1a:94:3b:81:e1:94:6e:d3:ee:68:7c:60: 5d:26:ed:47:1c:ce:5d:10:33:76:ed:ab:46:ae:f1:3f:c8:ee: 46:2d:bd:43:52:eb:df:84:eb:f0:2f:c6:d1:56:3d:a0:82:b8: b6:88:f0:6f:13:28:31:fc:b8:3f:48:42:e8:4e:dc:ed:73:f7: 6a:ad:fd:47:de:dc:58:72:d9:32:90:b0:14:0d:b0:10:43:9c: 31:89:27:43:5a:cb:95:82:9d:3b:e3:fa:8d:c5:c0:6e:0a:ce: 83:08:e3:d4:86:5d:2a:9f:53:94:17:41:e0:21:df:f7:b7:e4: c4:8a:f3:d2:36:dd:35:22:e8:c8:bb:7b:ab:17:c0:77:ac:84: 31:64:3f:69:52:f2:99:d5:0d:80:e1:3a:cb:17:55:99:af:5d: 62:f8:77:38:0e:5c:61:da:f4:1e:43:ce:93:d5:ca:ad:46:e0: e3:63:07:d8:1f:bf:9a:6c:d1:82:81:ca:41:58:82:a5:30:c9: 4a:8c:63:7a:8c:71:49:10:f7:b1:57:68:8e:80:96:34:23:b4: 06:f2:b0:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXKjJhAL8EvE0ZRGLjIFmyLF/pw4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyMVoX DTI3MDMwMzA2MTUyMVowMzExMC8GA1UEAxMoMTVDNjM1QUYxMEEyQTc3MzQ4NjBB NjcyMDkwNTQ4NzhGOUQyRDBDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuPrtpc9jW7mtXua41Xllbfww0RS72jnSxKcIgNXosHvvcTaO4LTBR3W/1f e434lxZduRdBMwkh81QVTOdfMdQWPfF9XZAnjlt2KX2JvbXtYdcVw6g3BGuLS0FL YBotIWsLzEKDTx3P8sjKUWD3G80Xbn0sn7fBHVgHARWmkS07kEfuVy0xE75/Abn0 ZYeN3bH3U8Zzmhj1Djm/PD0X3mUCuobbY6FOlW59BlitvRuacpotdDB/mq06U3UX ki39zt8PsrEXZ0BziUuobQ3Ji4IrsjnZDxO7Ir5Vd8UtgfI1V1yjWIfZWkUFPnUR HoyXomMxZLan9CT8YoVr20mqsZUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQVxjWv EKKnc0hgpnIJBUh4+dLQwDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzgzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pKAwDQYJKoZIhvcNAQELBQADggEBAFg3qzoPG+pQJlKOk5nAH5h49ur7lOILlEaO LxnM5oHSsKXPd1FlZZRRpRqUO4HhlG7T7mh8YF0m7Ucczl0QM3btq0au8T/I7kYt vUNS69+E6/AvxtFWPaCCuLaI8G8TKDH8uD9IQuhO3O1z92qt/Ufe3Fhy2TKQsBQN sBBDnDGJJ0Nay5WCnTvj+o3FwG4KzoMI49SGXSqfU5QXQeAh3/e35MSK89I23TUi 6Mi7e6sXwHeshDFkP2lS8pnVDYDhOssXVZmvXWL4dzgOXGHa9B5DzpPVyq1G4ONj B9gfv5ps0YKBykFYgqUwyUqMY3qMcUkQ97FXaI6AljQjtAbysJ8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:16 2026 by rpki-client