$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143895.roa File: AS143895.roa (raw, json) Hash identifier: 7l6mbjdV+CoyuX1RTXCq2lx+0b3kxK8AzpikaB7DsXY= Subject key identifier: 48:62:0C:D8:FA:89:F7:99:8E:01:11:68:5A:C4:D5:DD:A5:46:45:08 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 03598FAC5B01B4DF879140115DAD1B1BB2ABB975 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143895.roa Signing time: Wed 04 Mar 2026 06:13:26 +0000 ROA not before: Wed 04 Mar 2026 06:08:26 +0000 ROA not after: Wed 03 Mar 2027 06:13:26 +0000 asID: 143895 IP address blocks: 240a:a4dd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:59:8f:ac:5b:01:b4:df:87:91:40:11:5d:ad:1b:1b:b2:ab:b9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:26 2026 GMT Not After : Mar 3 06:13:26 2027 GMT Subject: CN=48620CD8FA89F7998E0111685AC4D5DDA5464508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:7e:b8:3a:f0:33:50:47:39:ea:ab:0f:cb: 1c:14:ef:55:46:15:ee:10:f6:62:5b:f0:d8:90:70: 00:d9:f3:c7:a2:f5:3b:53:57:5f:49:f1:55:8d:ad: a9:bd:69:24:0c:5f:db:e0:0f:58:09:b0:ba:2b:aa: 34:01:90:e3:34:1b:c4:71:5c:00:d7:8d:e7:ab:00: 66:e5:66:2d:2a:1f:48:26:de:04:b6:21:f7:db:c3: 7f:ed:88:31:a5:b7:e2:17:d7:4b:f1:07:6c:4f:74: 2a:b0:00:fc:dd:d0:89:66:cc:d5:27:bf:2c:f2:88: 6f:55:a2:13:38:6a:e2:c1:5a:b8:b4:e2:af:6d:02: d7:09:cd:6d:db:86:b9:f1:f5:8f:78:b7:b6:bd:46: 44:04:d1:7b:88:a0:1f:12:87:e7:1e:6a:85:79:06: cc:27:9e:4a:37:c5:62:12:7a:76:da:f4:e6:13:01: 69:91:de:48:ac:6b:ff:14:ed:a7:18:51:4d:56:13: f8:1d:cb:fd:fc:64:70:15:34:e9:21:69:90:d4:ae: bd:94:86:f8:e0:95:b2:f4:53:0f:3f:17:56:7b:2b: ca:d8:0f:92:9a:e9:93:43:a4:0b:e9:b1:19:eb:a5: 5d:b3:94:e3:c5:80:c6:a8:26:73:fe:af:aa:9a:2d: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:62:0C:D8:FA:89:F7:99:8E:01:11:68:5A:C4:D5:DD:A5:46:45:08 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4dd::/32 Signature Algorithm: sha256WithRSAEncryption ab:4d:95:e1:55:f7:9b:0c:5d:f9:ce:e7:e1:dd:d4:63:4e:05: 3b:98:5f:3e:11:86:79:44:dc:33:5c:f9:c5:b9:59:7f:5e:ec: 77:52:d1:a7:62:c7:d8:fc:2b:50:71:3a:5c:ff:99:1d:c2:80: 2c:de:7a:33:32:68:f9:7e:3d:07:28:79:cb:9e:df:1f:0f:99: 32:79:8c:b8:09:4f:b3:14:f5:a2:fd:04:4e:11:d6:dd:33:78: d0:14:c7:53:20:c8:40:15:49:0c:c0:00:88:60:6c:e5:35:84: 92:27:c2:0b:d3:46:7f:6d:3c:07:7f:56:7e:78:c9:90:71:08: dc:d6:1f:bb:a0:81:3c:d3:21:44:c5:1c:14:31:e8:1c:4d:ee: 6f:fb:bb:1d:4c:bf:b0:8d:1f:a3:2b:3e:d7:2d:fb:8e:35:cb: 7e:13:71:a8:4e:ab:3e:2a:73:59:ef:3d:08:a0:af:11:a0:32: d8:50:e9:de:9b:86:f9:23:13:8c:01:4c:56:6a:5d:74:9b:05: 7e:a6:da:77:ce:6b:2a:1f:3c:73:43:f3:37:84:8b:35:88:2e: 13:81:ce:1a:ca:62:9f:24:58:9f:2e:1c:0b:21:d7:3e:ed:77: 42:12:fa:95:03:23:24:2b:00:2e:d4:92:93:56:ae:ec:8d:3e: 6c:a2:f5:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUA1mPrFsBtN+HkUARXa0bG7KruXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyNloX DTI3MDMwMzA2MTMyNlowMzExMC8GA1UEAxMoNDg2MjBDRDhGQTg5Rjc5OThFMDEx MTY4NUFDNEQ1RERBNTQ2NDUwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlMfrg68DNQRznqqw/LHBTvVUYV7hD2Ylvw2JBwANnzx6L1O1NXX0nxVY2t qb1pJAxf2+APWAmwuiuqNAGQ4zQbxHFcANeN56sAZuVmLSofSCbeBLYh99vDf+2I MaW34hfXS/EHbE90KrAA/N3QiWbM1Se/LPKIb1WiEzhq4sFauLTir20C1wnNbduG ufH1j3i3tr1GRATRe4igHxKH5x5qhXkGzCeeSjfFYhJ6dtr05hMBaZHeSKxr/xTt pxhRTVYT+B3L/fxkcBU06SFpkNSuvZSG+OCVsvRTDz8XVnsrytgPkprpk0OkC+mx GeulXbOU48WAxqgmc/6vqpot3bUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRIYgzY +on3mY4BEWhaxNXdpUZFCDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pN0wDQYJKoZIhvcNAQELBQADggEBAKtNleFV95sMXfnO5+Hd1GNOBTuYXz4RhnlE 3DNc+cW5WX9e7HdS0adix9j8K1BxOlz/mR3CgCzeejMyaPl+PQcoecue3x8PmTJ5 jLgJT7MU9aL9BE4R1t0zeNAUx1MgyEAVSQzAAIhgbOU1hJInwgvTRn9tPAd/Vn54 yZBxCNzWH7uggTzTIUTFHBQx6BxN7m/7ux1Mv7CNH6MrPtct+441y34TcahOqz4q c1nvPQigrxGgMthQ6d6bhvkjE4wBTFZqXXSbBX6m2nfOayofPHND8zeEizWILhOB zhrKYp8kWJ8uHAsh1z7td0IS+pUDIyQrAC7UkpNWruyNPmyi9W4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:28 2026 by rpki-client