$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143865.roa File: AS143865.roa (raw, json) Hash identifier: J3yxO4MoAAA/fvDcAAZRDMyX+pOoYlha2p6dLc1214o= Subject key identifier: A7:94:1C:30:18:7C:83:3A:F8:96:6B:1D:CE:2B:8B:D5:38:56:CD:9E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 217151AFE6BFAD7129C8E54D462F10DCF868F4E5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143865.roa Signing time: Wed 04 Mar 2026 06:13:48 +0000 ROA not before: Wed 04 Mar 2026 06:08:48 +0000 ROA not after: Wed 03 Mar 2027 06:13:48 +0000 asID: 143865 IP address blocks: 240a:a4bf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:71:51:af:e6:bf:ad:71:29:c8:e5:4d:46:2f:10:dc:f8:68:f4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:48 2026 GMT Not After : Mar 3 06:13:48 2027 GMT Subject: CN=A7941C30187C833AF8966B1DCE2B8BD53856CD9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:fc:4c:e5:07:4c:b5:c1:a4:7c:e1:e9:7c: 1b:64:2d:23:2f:bb:13:e8:1a:67:ba:52:ae:44:64: 9e:7d:04:38:a1:26:34:99:98:4d:fd:61:3c:8a:0d: 6f:7a:32:81:41:b8:27:d6:5b:13:29:4a:2b:cd:2e: ca:f9:15:5d:c7:4e:7e:6d:3f:40:fa:7e:73:4e:74: 58:85:aa:37:af:2d:78:3b:f0:8b:af:70:9a:e7:26: 84:ad:9b:31:5a:a3:05:38:ba:ba:11:52:84:32:6b: 7e:59:95:9c:2d:12:ed:05:d9:5f:67:8d:59:b1:92: fd:cd:ca:99:34:16:d9:4a:4b:1c:2f:ad:f4:70:71: 82:e8:75:e3:e3:a2:2a:70:61:5f:f5:c2:ef:68:a8: 3f:d3:bf:b8:70:73:a0:bd:42:18:c8:f2:44:4d:70: 8e:04:d5:bf:19:8f:e3:cd:1a:bd:9d:b9:48:d6:e4: dd:6d:e2:76:f2:ea:2a:a4:55:71:60:1f:a5:1a:f0: 8a:6b:b4:58:89:88:8c:7f:af:16:10:34:90:b2:f9: 7e:c6:2d:30:34:66:2a:62:5f:3b:8b:13:2f:05:7b: 34:d3:8c:fb:65:90:f5:16:ca:1a:63:5f:2d:40:50: 4c:41:3a:a5:2b:7d:d9:a6:ee:b3:b3:75:1a:b7:d1: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:94:1C:30:18:7C:83:3A:F8:96:6B:1D:CE:2B:8B:D5:38:56:CD:9E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143865.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4bf::/32 Signature Algorithm: sha256WithRSAEncryption 54:7a:d8:17:2b:07:6e:f4:cf:8e:dd:d0:db:55:f7:04:0d:09: 5d:64:52:cf:29:e1:67:17:77:2c:50:e4:48:b4:f7:f5:03:77: 33:67:5a:c1:9c:39:61:4e:99:02:d6:53:ab:14:33:b6:c3:34: 78:ae:c7:95:a1:49:4d:4d:78:15:6c:34:96:e3:8a:b6:ca:8c: 49:a5:e0:54:38:6b:17:8f:6e:d6:bc:e9:84:e6:2f:7e:07:07: 8f:2e:05:11:07:49:d6:d3:fa:70:92:13:fb:71:79:a9:7f:ad: f4:d0:f3:57:5e:f7:13:b6:3b:6f:5e:86:db:41:c3:bf:a5:0c: 60:33:f7:b5:35:a9:52:1f:b9:ed:4c:56:88:52:17:b4:59:e7: a7:67:79:22:72:9e:1b:78:05:69:97:2a:89:b0:bb:76:97:79: 8a:2d:3c:06:ef:70:35:d4:1d:8f:94:e6:9b:03:17:3f:3c:7d: 43:d1:58:a5:6d:42:5b:b7:7f:7a:ad:18:24:d6:ae:6e:22:c7: c2:1c:39:68:22:13:0a:c9:75:12:e1:d8:b2:0e:1f:42:4d:7b: f3:dc:ab:7c:6f:9c:ee:16:a9:85:a7:21:b4:b4:15:31:0c:f0: b1:ca:f2:ff:b5:ab:62:7b:dd:60:9d:f6:a7:10:c0:7c:e5:89: ad:53:d1:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIXFRr+a/rXEpyOVNRi8Q3Pho9OUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0OFoX DTI3MDMwMzA2MTM0OFowMzExMC8GA1UEAxMoQTc5NDFDMzAxODdDODMzQUY4OTY2 QjFEQ0UyQjhCRDUzODU2Q0Q5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIg/EzlB0y1waR84el8G2QtIy+7E+gaZ7pSrkRknn0EOKEmNJmYTf1hPIoN b3oygUG4J9ZbEylKK80uyvkVXcdOfm0/QPp+c050WIWqN68teDvwi69wmucmhK2b MVqjBTi6uhFShDJrflmVnC0S7QXZX2eNWbGS/c3KmTQW2UpLHC+t9HBxguh14+Oi KnBhX/XC72ioP9O/uHBzoL1CGMjyRE1wjgTVvxmP480avZ25SNbk3W3idvLqKqRV cWAfpRrwimu0WImIjH+vFhA0kLL5fsYtMDRmKmJfO4sTLwV7NNOM+2WQ9RbKGmNf LUBQTEE6pSt92abus7N1GrfR5H8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSnlBww GHyDOviWax3OK4vVOFbNnjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pL8wDQYJKoZIhvcNAQELBQADggEBAFR62BcrB270z47d0NtV9wQNCV1kUs8p4WcX dyxQ5Ei09/UDdzNnWsGcOWFOmQLWU6sUM7bDNHiux5WhSU1NeBVsNJbjirbKjEml 4FQ4axePbta86YTmL34HB48uBREHSdbT+nCSE/txeal/rfTQ81de9xO2O29ehttB w7+lDGAz97U1qVIfue1MVohSF7RZ56dneSJynht4BWmXKomwu3aXeYotPAbvcDXU HY+U5psDFz88fUPRWKVtQlu3f3qtGCTWrm4ix8IcOWgiEwrJdRLh2LIOH0JNe/Pc q3xvnO4WqYWnIbS0FTEM8LHK8v+1q2J73WCd9qcQwHzlia1T0VQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:38 2026 by rpki-client