$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143039.roa File: AS143039.roa (raw, json) Hash identifier: ujyjWLm8ovxTtDJzQXdfr/aQ9VXaQacY+E9LlUQWIKI= Subject key identifier: 86:98:0D:84:1B:FF:AD:7B:A9:3D:FC:18:80:E6:EA:0B:81:6B:DA:87 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1DFC136384DD42AA64D1664A999D05BEB1EDAC4D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143039.roa Signing time: Wed 04 Mar 2026 06:05:30 +0000 ROA not before: Wed 04 Mar 2026 06:00:30 +0000 ROA not after: Wed 03 Mar 2027 06:05:30 +0000 asID: 143039 IP address blocks: 240a:a185::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fc:13:63:84:dd:42:aa:64:d1:66:4a:99:9d:05:be:b1:ed:ac:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:30 2026 GMT Not After : Mar 3 06:05:30 2027 GMT Subject: CN=86980D841BFFAD7BA93DFC1880E6EA0B816BDA87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:c6:1b:fe:fe:7c:d5:80:ca:e2:9e:5c:de: 61:07:83:48:bd:d6:36:f8:0c:f6:46:d4:c5:ea:78: f9:1b:13:44:3c:e6:03:7d:09:d1:f7:40:45:36:8f: 4e:6a:09:73:44:d5:25:53:3e:0d:d4:6b:79:3e:75: 4e:42:63:37:49:99:86:a5:06:0a:a7:18:b8:96:d0: 9b:5e:cb:a8:5a:5b:b0:c6:e5:37:d5:04:a8:a0:a2: 91:37:24:14:90:3d:3e:9c:1a:b9:94:09:9b:0c:29: f4:f5:06:df:03:76:41:7f:c6:31:f5:a6:f5:2a:ca: 01:77:b7:c2:ae:c9:90:28:4c:39:b0:e2:53:1e:15: 74:bd:43:cb:b3:ba:33:11:70:b0:88:15:d6:94:d3: b8:1c:89:56:f9:28:f7:00:b9:8d:39:33:da:bc:15: af:7c:18:b8:4d:1b:6f:6e:12:35:f8:df:d1:ec:dc: 57:01:5e:a7:5f:65:f8:9e:0e:00:16:35:de:8e:0d: 2e:a1:75:d1:48:a0:38:3d:ef:49:63:1d:64:c9:e6: eb:e3:63:3d:94:0f:c5:fa:ab:ac:bf:68:93:0f:bf: cd:ef:3a:46:9d:5d:45:20:7d:35:76:e4:c5:cd:76: d6:85:0b:2a:fe:58:ae:0e:f0:4d:26:00:52:59:26: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:98:0D:84:1B:FF:AD:7B:A9:3D:FC:18:80:E6:EA:0B:81:6B:DA:87 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a185::/32 Signature Algorithm: sha256WithRSAEncryption 13:4e:b9:79:e2:d3:69:74:5d:1e:2c:dc:1f:ff:66:d8:b0:56: de:7c:fa:85:06:8d:aa:c7:81:cc:09:d1:51:d0:6f:d0:84:50: 00:4d:fd:c1:e6:ec:1c:8b:4e:ed:c6:c1:86:e3:20:f6:d7:e8: 50:99:58:ce:f5:1f:06:7c:28:68:5c:b6:15:40:85:a5:ea:df: c0:34:5e:9d:ed:a9:01:16:8a:99:e5:9e:7f:aa:d0:41:c4:90: b2:ff:24:1b:a6:f0:19:cf:22:8f:6e:91:c9:f3:70:b6:7d:e6: f5:9a:73:11:33:9e:6d:3e:f8:af:87:cf:88:0c:04:e8:76:40: ee:a3:55:c0:bb:bb:97:34:1a:7b:e9:e1:c7:a6:02:38:27:f6: ac:e9:b3:2d:22:ca:18:38:bc:2e:a3:fe:af:71:7e:6c:5b:27: 15:30:2e:81:00:30:b4:98:39:53:8e:4c:2d:42:2b:8e:56:6f: 2f:c3:64:27:27:76:7a:25:80:1f:f4:4c:be:82:97:5f:de:22: 9a:8a:e2:ae:5e:12:78:64:39:78:02:72:9d:73:c0:48:da:37: 77:45:f1:eb:39:8e:b9:3d:48:a5:c4:82:e2:4a:a2:c6:9c:01: e2:c4:a3:ae:a3:ac:d1:40:19:58:a8:d1:ff:7b:fc:8f:e9:75: 53:e9:51:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHfwTY4TdQqpk0WZKmZ0FvrHtrE0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzMFoX DTI3MDMwMzA2MDUzMFowMzExMC8GA1UEAxMoODY5ODBEODQxQkZGQUQ3QkE5M0RG QzE4ODBFNkVBMEI4MTZCREE4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeHxhv+/nzVgMrinlzeYQeDSL3WNvgM9kbUxep4+RsTRDzmA30J0fdARTaP TmoJc0TVJVM+DdRreT51TkJjN0mZhqUGCqcYuJbQm17LqFpbsMblN9UEqKCikTck FJA9PpwauZQJmwwp9PUG3wN2QX/GMfWm9SrKAXe3wq7JkChMObDiUx4VdL1Dy7O6 MxFwsIgV1pTTuByJVvko9wC5jTkz2rwVr3wYuE0bb24SNfjf0ezcVwFep19l+J4O ABY13o4NLqF10UigOD3vSWMdZMnm6+NjPZQPxfqrrL9okw+/ze86Rp1dRSB9NXbk xc121oULKv5Yrg7wTSYAUlkm39UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSGmA2E G/+te6k9/BiA5uoLgWvahzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oYUwDQYJKoZIhvcNAQELBQADggEBABNOuXni02l0XR4s3B//ZtiwVt58+oUGjarH gcwJ0VHQb9CEUABN/cHm7ByLTu3GwYbjIPbX6FCZWM71HwZ8KGhcthVAhaXq38A0 Xp3tqQEWipnlnn+q0EHEkLL/JBum8BnPIo9ukcnzcLZ95vWacxEznm0++K+Hz4gM BOh2QO6jVcC7u5c0Gnvp4cemAjgn9qzpsy0iyhg4vC6j/q9xfmxbJxUwLoEAMLSY OVOOTC1CK45Wby/DZCcndnolgB/0TL6Cl1/eIpqK4q5eEnhkOXgCcp1zwEjaN3dF 8es5jrk9SKXEguJKosacAeLEo66jrNFAGVio0f97/I/pdVPpUdw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:29 2026 by rpki-client