$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143909.roa File: AS143909.roa (raw, json) Hash identifier: nsfMQvDcA2o7bi+cNepvHqqCi9opxYg+AdByfaUnDdA= Subject key identifier: 18:11:4F:9F:14:D0:52:90:0A:E5:25:0A:A4:6C:6C:F8:A2:13:EC:B1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 067364FC66B04F6FD6496D3D51257ED1127FCCEE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143909.roa Signing time: Wed 04 Mar 2026 06:15:18 +0000 ROA not before: Wed 04 Mar 2026 06:10:18 +0000 ROA not after: Wed 03 Mar 2027 06:15:18 +0000 asID: 143909 IP address blocks: 240a:a4eb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:73:64:fc:66:b0:4f:6f:d6:49:6d:3d:51:25:7e:d1:12:7f:cc:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:18 2026 GMT Not After : Mar 3 06:15:18 2027 GMT Subject: CN=18114F9F14D052900AE5250AA46C6CF8A213ECB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:52:75:7c:3f:69:f0:f9:89:ab:ae:7b:c9:3e: 80:cd:74:f6:7a:ab:a7:ed:aa:a4:5d:7d:02:92:17: a9:a4:dd:1b:b4:a8:7f:ba:3d:5c:eb:f1:2e:6d:e3: a0:39:fa:74:c7:9f:01:22:b7:8d:8d:d8:7d:07:fd: fa:59:43:cd:22:49:8d:eb:cb:f7:86:a6:a6:e0:1a: 67:35:b2:87:d1:57:2b:1b:12:c5:9a:ba:f9:ac:e2: 72:2c:1f:ba:c2:0b:02:84:ff:db:38:22:13:51:cc: 4e:17:57:06:c9:93:f2:45:55:1b:34:5e:95:9c:7e: 0a:c7:ae:35:df:8c:67:68:74:4b:8a:41:eb:d1:3a: 25:d2:c2:d5:c9:89:a2:33:d4:21:ac:1a:d5:2b:2a: 56:32:09:24:39:6e:99:a7:30:55:14:85:fa:15:58: 0d:44:6c:e0:e2:05:bb:48:48:79:6b:34:3f:49:ba: e7:20:b9:1d:e9:c8:95:8a:d6:d8:a5:08:bd:1d:ab: 47:8b:72:b5:fe:f0:9a:ac:cd:94:00:59:d4:f3:ad: 92:91:3f:90:3a:d5:b0:ac:05:0f:f4:30:07:d1:43: 88:f8:4e:6b:98:4d:c9:2a:28:07:bc:75:c1:8e:67: 9a:b2:62:e7:3a:b4:06:1c:eb:75:10:87:ef:5f:05: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:11:4F:9F:14:D0:52:90:0A:E5:25:0A:A4:6C:6C:F8:A2:13:EC:B1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4eb::/32 Signature Algorithm: sha256WithRSAEncryption 16:52:e7:b1:a5:4c:5e:de:53:d8:64:67:f5:cb:07:97:82:9d: ae:86:81:85:4b:5e:01:c4:88:4f:dd:42:21:03:82:b5:42:f4: a3:56:17:19:06:63:0d:20:23:34:c8:6c:c5:64:bb:3c:7a:ea: c7:4a:e4:be:c3:19:db:bb:a2:69:be:1c:b3:0b:f0:fc:d7:de: 85:f3:6a:bc:b3:1d:d1:d1:bd:d7:f1:2e:ea:c8:c5:16:ab:e9: a1:eb:7f:4b:0e:0c:0c:ad:b7:1c:50:ec:c3:c7:77:b2:d2:9f: d9:d9:44:c7:03:72:4a:fd:d6:ac:d5:c5:50:db:df:38:00:fb: e7:93:74:f6:21:41:66:c0:ab:4a:3d:96:fb:24:d7:60:6f:75: c3:6c:ce:73:0e:80:2a:ab:ea:93:7f:35:35:a4:0b:7c:08:d1: ea:c7:33:57:66:7b:b2:b4:62:91:a5:ae:3e:1a:91:7c:2a:88: dc:3f:f0:73:b9:f1:f5:17:08:5a:67:b0:46:d4:bf:ca:45:30: 08:75:3f:17:79:c0:53:9f:50:ae:49:6e:3b:a4:ed:3f:58:c5: ab:d7:c9:a6:3a:e6:58:4a:a9:9f:28:3a:a6:52:a5:2b:cb:72: aa:df:c9:9f:f5:c1:6a:5a:50:d9:5e:fc:77:eb:4d:14:de:4f: 22:66:64:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBnNk/GawT2/WSW09USV+0RJ/zO4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxOFoX DTI3MDMwMzA2MTUxOFowMzExMC8GA1UEAxMoMTgxMTRGOUYxNEQwNTI5MDBBRTUy NTBBQTQ2QzZDRjhBMjEzRUNCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPFSdXw/afD5iauue8k+gM109nqrp+2qpF19ApIXqaTdG7Sof7o9XOvxLm3j oDn6dMefASK3jY3YfQf9+llDzSJJjevL94ampuAaZzWyh9FXKxsSxZq6+aziciwf usILAoT/2zgiE1HMThdXBsmT8kVVGzRelZx+CseuNd+MZ2h0S4pB69E6JdLC1cmJ ojPUIawa1SsqVjIJJDlumacwVRSF+hVYDURs4OIFu0hIeWs0P0m65yC5HenIlYrW 2KUIvR2rR4tytf7wmqzNlABZ1POtkpE/kDrVsKwFD/QwB9FDiPhOa5hNySooB7x1 wY5nmrJi5zq0BhzrdRCH718Fy+sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQYEU+f FNBSkArlJQqkbGz4ohPssTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pOswDQYJKoZIhvcNAQELBQADggEBABZS57GlTF7eU9hkZ/XLB5eCna6GgYVLXgHE iE/dQiEDgrVC9KNWFxkGYw0gIzTIbMVkuzx66sdK5L7DGdu7omm+HLML8PzX3oXz aryzHdHRvdfxLurIxRar6aHrf0sODAyttxxQ7MPHd7LSn9nZRMcDckr91qzVxVDb 3zgA++eTdPYhQWbAq0o9lvsk12BvdcNsznMOgCqr6pN/NTWkC3wI0erHM1dme7K0 YpGlrj4akXwqiNw/8HO58fUXCFpnsEbUv8pFMAh1Pxd5wFOfUK5Jbjuk7T9YxavX yaY65lhKqZ8oOqZSpSvLcqrfyZ/1wWpaUNle/HfrTRTeTyJmZPo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:06 2026 by rpki-client