$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143853.roa File: AS143853.roa (raw, json) Hash identifier: EpAkwVCf/IKaKSU/tSAmEr00/OtQbdlCfk8z9Oq2Lro= Subject key identifier: 9A:26:09:B0:77:84:49:25:C9:B8:DF:E8:41:F9:AF:D0:DA:B3:21:8F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3BC2F23448F5C3C0DC25D77F4C829CF55DF75A82 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143853.roa Signing time: Wed 04 Mar 2026 06:13:22 +0000 ROA not before: Wed 04 Mar 2026 06:08:22 +0000 ROA not after: Wed 03 Mar 2027 06:13:22 +0000 asID: 143853 IP address blocks: 240a:a4b3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c2:f2:34:48:f5:c3:c0:dc:25:d7:7f:4c:82:9c:f5:5d:f7:5a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:22 2026 GMT Not After : Mar 3 06:13:22 2027 GMT Subject: CN=9A2609B077844925C9B8DFE841F9AFD0DAB3218F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:7c:40:a5:50:ad:98:2d:58:0a:85:1d:42: fd:a4:b2:99:df:c4:89:ff:b9:c9:1a:cf:07:58:bf: 37:82:05:16:af:3e:bc:f9:8a:a5:6e:47:49:14:44: 59:86:fd:fa:94:f9:1d:2f:3c:23:32:74:5f:2c:66: 67:3c:30:ad:60:8f:b4:fa:cd:d5:7d:77:42:c9:a0: 17:eb:72:ea:3b:a7:c5:e6:e9:09:5f:e4:8c:32:59: 72:74:e0:a4:fd:68:2b:1c:67:c6:6e:9c:c1:3b:1c: ea:28:37:6a:a0:23:7f:e4:16:83:1f:4b:cb:57:e9: f0:6d:70:be:23:28:b2:7b:61:8f:f9:25:1d:1e:09: fc:fa:dc:ed:80:79:ca:80:f8:c0:3b:3a:67:0b:f6: a9:c0:0f:29:34:24:25:b2:39:a1:78:a4:1a:3a:c8: 26:0f:f0:e3:f5:3e:91:cb:88:07:76:2d:90:0e:46: 28:92:ab:16:57:35:f8:11:db:17:af:04:78:dc:48: 08:ec:a2:11:32:30:a2:3d:f1:17:08:cb:e8:f3:3c: 86:9c:ec:f5:9f:2f:1a:32:16:9a:a5:f2:b0:cd:64: 82:2a:d8:de:60:69:5f:6b:14:5d:84:2a:e9:be:ed: 00:f2:b2:6d:29:20:d5:f8:b1:aa:20:f5:bc:69:d5: 56:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:26:09:B0:77:84:49:25:C9:B8:DF:E8:41:F9:AF:D0:DA:B3:21:8F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143853.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4b3::/32 Signature Algorithm: sha256WithRSAEncryption c8:5b:c1:d6:57:bd:b8:4a:1c:1f:d0:f4:f5:1b:5b:81:23:09: 48:cf:7a:6a:85:27:f8:98:7e:86:a6:f3:61:f1:a0:47:fa:46: 37:35:06:aa:38:05:88:6e:4a:b9:1f:56:9f:28:9b:e7:7e:49: b9:03:f9:5a:20:9a:78:ff:6b:78:6f:22:ef:e0:02:86:92:84: 2e:f2:c4:30:4c:9c:d3:9b:63:1e:36:8d:7e:49:c6:f8:95:7c: a5:c4:4e:75:ac:42:22:5e:f5:31:e0:9f:c0:b5:52:b4:f6:a0: 96:28:f4:6f:18:d2:7a:98:3f:63:65:86:13:06:32:a4:78:62: de:de:8c:80:ba:78:09:be:b2:aa:99:7d:b4:c7:37:e6:72:e2: ce:3d:84:43:10:7b:bc:74:47:8e:47:bb:0d:c5:79:b1:d7:25: 3d:e6:19:32:22:de:08:28:12:78:8e:0e:0b:75:17:b4:57:63: 7d:aa:b1:8f:ea:8c:69:37:eb:79:eb:eb:4e:1b:40:a2:ac:30: de:51:ea:ba:dc:0f:68:75:9a:23:71:77:ec:08:66:0b:47:2d: 68:b4:c4:29:e4:92:b8:7f:01:45:92:28:19:c3:50:d6:a9:d8: 16:a1:85:ba:01:9e:e3:df:7f:eb:d5:7a:0d:14:e4:f5:24:30: f0:96:fd:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUO8LyNEj1w8DcJdd/TIKc9V33WoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyMloX DTI3MDMwMzA2MTMyMlowMzExMC8GA1UEAxMoOUEyNjA5QjA3Nzg0NDkyNUM5QjhE RkU4NDFGOUFGRDBEQUIzMjE4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsMfEClUK2YLVgKhR1C/aSymd/Eif+5yRrPB1i/N4IFFq8+vPmKpW5HSRRE WYb9+pT5HS88IzJ0XyxmZzwwrWCPtPrN1X13QsmgF+ty6junxebpCV/kjDJZcnTg pP1oKxxnxm6cwTsc6ig3aqAjf+QWgx9Ly1fp8G1wviMosnthj/klHR4J/Prc7YB5 yoD4wDs6Zwv2qcAPKTQkJbI5oXikGjrIJg/w4/U+kcuIB3YtkA5GKJKrFlc1+BHb F68EeNxICOyiETIwoj3xFwjL6PM8hpzs9Z8vGjIWmqXysM1kgirY3mBpX2sUXYQq 6b7tAPKybSkg1fixqiD1vGnVVnsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSaJgmw d4RJJcm43+hB+a/Q2rMhjzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pLMwDQYJKoZIhvcNAQELBQADggEBAMhbwdZXvbhKHB/Q9PUbW4EjCUjPemqFJ/iY foam82HxoEf6Rjc1Bqo4BYhuSrkfVp8om+d+SbkD+Vogmnj/a3hvIu/gAoaShC7y xDBMnNObYx42jX5JxviVfKXETnWsQiJe9THgn8C1UrT2oJYo9G8Y0nqYP2NlhhMG MqR4Yt7ejIC6eAm+sqqZfbTHN+Zy4s49hEMQe7x0R45Huw3FebHXJT3mGTIi3ggo EniODgt1F7RXY32qsY/qjGk363nr604bQKKsMN5R6rrcD2h1miNxd+wIZgtHLWi0 xCnkkrh/AUWSKBnDUNap2BahhboBnuPff+vVeg0U5PUkMPCW/X8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:33 2026 by rpki-client