$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143875.roa File: AS143875.roa (raw, json) Hash identifier: pVjEZEP3p4afp20BZoLK+vGH3TE2EBzKCskH6IqthEA= Subject key identifier: 04:2A:25:69:DF:CE:DA:BD:CA:0F:51:40:AC:6E:F8:DE:3B:BF:37:2C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1705F7D9EC345DF21852F37C9551FF06C42DE841 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143875.roa Signing time: Wed 04 Mar 2026 06:15:22 +0000 ROA not before: Wed 04 Mar 2026 06:10:22 +0000 ROA not after: Wed 03 Mar 2027 06:15:22 +0000 asID: 143875 IP address blocks: 240a:a4c9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:05:f7:d9:ec:34:5d:f2:18:52:f3:7c:95:51:ff:06:c4:2d:e8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:22 2026 GMT Not After : Mar 3 06:15:22 2027 GMT Subject: CN=042A2569DFCEDABDCA0F5140AC6EF8DE3BBF372C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:13:37:d3:11:40:bb:f8:ba:e7:ce:b7:71: 0c:6f:10:bd:54:6b:4b:0e:6a:a9:8a:cd:80:1d:5f: 3c:9e:88:ed:fe:ad:7d:4a:20:e3:11:f4:43:19:2e: 52:9c:df:7d:67:b5:cc:43:a0:9d:b6:d7:2a:93:65: 1e:fd:64:67:f7:33:5d:6a:db:e1:46:88:43:a8:8c: 74:df:27:10:09:72:1e:90:7c:b7:bd:a8:1a:e2:38: 61:04:1c:06:78:77:3e:bb:b8:fd:89:8f:43:d2:69: 0f:db:b6:23:9e:15:c3:a7:25:f6:0b:e8:df:a9:18: 1a:61:b9:db:e2:ed:45:1c:22:d7:9a:82:ea:73:b8: db:d7:8f:71:d9:84:39:cc:0f:5e:cc:bc:9a:fa:dc: 19:77:d9:2a:92:f1:ca:8a:e1:e4:bd:e8:85:59:72: a9:7d:53:7e:a2:e6:4d:9f:02:db:df:c4:7f:cc:12: d3:8f:a0:3f:2c:38:7c:66:dc:2f:23:19:31:2a:65: 61:ca:f7:29:1f:09:ea:28:92:ad:a9:87:4e:24:14: af:2f:37:3a:44:8b:c2:18:92:41:8b:a2:f5:bb:92: 76:2b:a2:11:84:d3:81:c6:66:3a:49:d1:bc:c9:a3: d4:52:b1:9f:4a:94:ae:a9:57:90:e0:a7:42:2e:1c: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2A:25:69:DF:CE:DA:BD:CA:0F:51:40:AC:6E:F8:DE:3B:BF:37:2C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143875.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4c9::/32 Signature Algorithm: sha256WithRSAEncryption 39:f0:c2:72:e5:29:6e:0f:b2:a5:0f:81:a0:59:f1:71:3a:30: 76:f3:13:fe:26:b9:74:05:15:d7:bb:57:b2:41:8f:53:8b:6b: dc:89:8a:ce:e9:b3:0b:0b:5f:1a:92:c4:c9:e6:06:33:3f:63: f4:53:d6:e4:fd:6e:d4:2f:36:4d:10:0d:96:d9:31:69:79:db: 18:e8:c2:23:7d:2c:a0:ab:51:6b:e6:f8:e2:2f:72:90:29:ac: 58:fe:8d:f6:39:9c:99:e8:ac:28:31:66:bf:19:94:93:e6:46: 02:8b:16:72:55:9b:d8:da:cb:34:6e:5e:45:dd:5e:cb:7c:36: 6d:0c:ab:d2:84:e0:a2:8f:bf:63:e4:29:b0:93:2d:4c:33:30: a2:fb:6e:7f:df:ae:a3:5c:7f:50:da:e5:26:c2:a1:2f:37:77: fd:08:89:41:a7:06:e5:69:18:89:55:72:d5:7a:bb:0f:c3:fa: 2b:2d:9a:53:b6:e1:b8:1b:64:d5:bf:29:b7:66:b5:7f:4a:cf: a7:45:9a:e3:ab:e9:2e:f5:5c:12:63:54:39:24:35:c8:3e:4d: a3:97:6b:47:69:2a:9b:40:9c:ce:03:fd:4c:38:27:b0:9a:fb: 64:80:26:6d:52:0c:66:94:e6:8f:ea:3d:af:42:de:12:2e:bc: 7b:a3:17:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFwX32ew0XfIYUvN8lVH/BsQt6EEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyMloX DTI3MDMwMzA2MTUyMlowMzExMC8GA1UEAxMoMDQyQTI1NjlERkNFREFCRENBMEY1 MTQwQUM2RUY4REUzQkJGMzcyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvmEzfTEUC7+LrnzrdxDG8QvVRrSw5qqYrNgB1fPJ6I7f6tfUog4xH0Qxku UpzffWe1zEOgnbbXKpNlHv1kZ/czXWrb4UaIQ6iMdN8nEAlyHpB8t72oGuI4YQQc Bnh3Pru4/YmPQ9JpD9u2I54Vw6cl9gvo36kYGmG52+LtRRwi15qC6nO429ePcdmE OcwPXsy8mvrcGXfZKpLxyorh5L3ohVlyqX1TfqLmTZ8C29/Ef8wS04+gPyw4fGbc LyMZMSplYcr3KR8J6iiSramHTiQUry83OkSLwhiSQYui9buSdiuiEYTTgcZmOknR vMmj1FKxn0qUrqlXkOCnQi4c5MMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQEKiVp 387avcoPUUCsbvjeO783LDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pMkwDQYJKoZIhvcNAQELBQADggEBADnwwnLlKW4PsqUPgaBZ8XE6MHbzE/4muXQF Fde7V7JBj1OLa9yJis7pswsLXxqSxMnmBjM/Y/RT1uT9btQvNk0QDZbZMWl52xjo wiN9LKCrUWvm+OIvcpAprFj+jfY5nJnorCgxZr8ZlJPmRgKLFnJVm9jayzRuXkXd Xst8Nm0Mq9KE4KKPv2PkKbCTLUwzMKL7bn/frqNcf1Da5SbCoS83d/0IiUGnBuVp GIlVctV6uw/D+istmlO24bgbZNW/KbdmtX9Kz6dFmuOr6S71XBJjVDkkNcg+TaOX a0dpKptAnM4D/Uw4J7Ca+2SAJm1SDGaU5o/qPa9C3hIuvHujF80= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:37 2026 by rpki-client