$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143848.roa File: AS143848.roa (raw, json) Hash identifier: ojNmx6RjTCaXxjilj3vQVT41vMBuFi/5P0SNu0empvo= Subject key identifier: A1:89:B7:DE:9F:47:EE:4A:E8:78:BF:9F:8D:BF:FC:25:EE:E7:28:CC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 63BFE50C2FB54F96E683860A52F2788E4929C597 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143848.roa Signing time: Wed 04 Mar 2026 06:13:19 +0000 ROA not before: Wed 04 Mar 2026 06:08:19 +0000 ROA not after: Wed 03 Mar 2027 06:13:19 +0000 asID: 143848 IP address blocks: 240a:a4ae::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bf:e5:0c:2f:b5:4f:96:e6:83:86:0a:52:f2:78:8e:49:29:c5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:19 2026 GMT Not After : Mar 3 06:13:19 2027 GMT Subject: CN=A189B7DE9F47EE4AE878BF9F8DBFFC25EEE728CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:f4:63:75:f7:06:20:24:a2:4e:54:87:67: 6c:4f:31:6c:d2:64:e6:88:0e:06:fc:6f:de:6b:a0: 82:93:3a:07:4f:f1:00:42:13:03:cc:7f:95:8c:ff: 5c:08:10:ab:c1:06:a3:d3:f3:31:36:c7:00:a0:62: 18:71:76:09:65:2e:84:f7:63:0b:9f:17:42:ba:4e: 66:dc:2e:9b:ef:4a:33:be:b2:13:6f:01:7c:b3:e0: 0a:f5:75:2d:34:9e:0f:c6:f0:be:f1:26:94:98:69: 96:b7:04:1d:e7:1d:08:8a:06:a8:82:d0:ad:c4:02: cf:bd:5b:45:0f:b5:16:b4:bd:0e:f6:91:f1:32:05: 1a:c4:cd:cd:12:99:18:de:b2:d7:ff:57:f6:84:75: 98:29:cf:de:81:ed:fe:a6:b4:ab:07:4b:cc:ab:ac: d4:05:aa:a6:d0:f3:93:8b:6b:b2:de:1f:f9:48:a3: 6c:ef:ad:4e:76:b2:83:67:d9:16:9f:ac:23:33:53: 0a:b1:85:88:42:a3:c7:fc:0f:2d:d6:f3:78:0d:3c: 1e:03:05:58:e2:80:c4:e1:65:7c:d1:d6:9a:12:88: b3:8a:de:11:e2:da:d8:e7:7e:8e:84:ae:91:91:cb: 3e:87:e3:65:6f:19:3f:93:d1:53:54:01:aa:0e:3d: ed:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:89:B7:DE:9F:47:EE:4A:E8:78:BF:9F:8D:BF:FC:25:EE:E7:28:CC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4ae::/32 Signature Algorithm: sha256WithRSAEncryption ac:88:62:10:52:ee:52:e4:91:3f:39:91:72:61:84:29:52:c4: 2a:39:4e:e8:b8:ae:ea:65:d0:18:07:20:54:38:49:05:2d:d4: d7:8b:8d:94:cb:d4:d5:05:0b:25:67:b4:d7:2f:fe:eb:60:a4: 0b:f7:92:11:4f:bf:c0:cd:7b:d7:a8:db:b9:7e:5e:4a:ca:25: 85:b2:04:1b:a7:1d:22:e2:42:d8:48:60:f3:d6:c1:f3:ab:53: d5:1a:d4:eb:14:3c:96:c0:f1:1c:bc:fe:b8:fc:7e:46:47:4f: bb:14:86:a2:59:04:79:f6:8b:c0:f3:0e:52:80:bb:d8:d7:b8: 06:7e:c8:94:41:32:43:00:d6:7c:43:9f:f5:25:fd:95:15:4d: b0:6e:35:4b:e8:ae:e7:87:29:95:b4:88:b3:99:5e:0f:c8:73: 36:71:6e:15:f3:51:f5:4f:09:2c:66:74:3c:33:0d:07:d3:e5: c4:67:ae:2e:72:fd:cc:49:76:9f:82:db:d5:72:8c:46:09:0d: 89:3f:f7:5c:d4:20:bf:ad:40:64:5d:86:38:33:47:b8:64:f4: 3a:9b:72:a6:5d:82:e5:14:4f:11:07:d1:55:d0:66:59:87:c8: c4:03:d3:d0:e1:cd:73:65:1d:6a:5e:a1:a7:65:aa:4a:42:00: 33:5d:85:e8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUY7/lDC+1T5bmg4YKUvJ4jkkpxZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxOVoX DTI3MDMwMzA2MTMxOVowMzExMC8GA1UEAxMoQTE4OUI3REU5RjQ3RUU0QUU4NzhC RjlGOERCRkZDMjVFRUU3MjhDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8F9GN19wYgJKJOVIdnbE8xbNJk5ogOBvxv3muggpM6B0/xAEITA8x/lYz/ XAgQq8EGo9PzMTbHAKBiGHF2CWUuhPdjC58XQrpOZtwum+9KM76yE28BfLPgCvV1 LTSeD8bwvvEmlJhplrcEHecdCIoGqILQrcQCz71bRQ+1FrS9DvaR8TIFGsTNzRKZ GN6y1/9X9oR1mCnP3oHt/qa0qwdLzKus1AWqptDzk4trst4f+UijbO+tTnayg2fZ Fp+sIzNTCrGFiEKjx/wPLdbzeA08HgMFWOKAxOFlfNHWmhKIs4reEeLa2Od+joSu kZHLPofjZW8ZP5PRU1QBqg497RMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBShibfe n0fuSuh4v5+Nv/wl7ucozDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pK4wDQYJKoZIhvcNAQELBQADggEBAKyIYhBS7lLkkT85kXJhhClSxCo5Tui4rupl 0BgHIFQ4SQUt1NeLjZTL1NUFCyVntNcv/utgpAv3khFPv8DNe9eo27l+XkrKJYWy BBunHSLiQthIYPPWwfOrU9Ua1OsUPJbA8Ry8/rj8fkZHT7sUhqJZBHn2i8DzDlKA u9jXuAZ+yJRBMkMA1nxDn/Ul/ZUVTbBuNUvorueHKZW0iLOZXg/IczZxbhXzUfVP CSxmdDwzDQfT5cRnri5y/cxJdp+C29VyjEYJDYk/91zUIL+tQGRdhjgzR7hk9Dqb cqZdguUUTxEH0VXQZlmHyMQD09DhzXNlHWpeoadlqkpCADNdheg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:04 2026 by rpki-client