$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143487.roa File: AS143487.roa (raw, json) Hash identifier: lmjaaCy5jhmYyB5mQv6UnJA8foLB9Rq2yrkAby1QG3U= Subject key identifier: 8C:57:CC:5C:35:A6:8E:BC:9C:A1:D5:D8:2F:11:D1:98:91:15:28:34 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5E86782568AACB7CD5E6A9F9BD2F4CD8E3188644 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143487.roa Signing time: Wed 04 Mar 2026 06:05:14 +0000 ROA not before: Wed 04 Mar 2026 06:00:14 +0000 ROA not after: Wed 03 Mar 2027 06:05:14 +0000 asID: 143487 IP address blocks: 240a:a345::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:86:78:25:68:aa:cb:7c:d5:e6:a9:f9:bd:2f:4c:d8:e3:18:86:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:14 2026 GMT Not After : Mar 3 06:05:14 2027 GMT Subject: CN=8C57CC5C35A68EBC9CA1D5D82F11D19891152834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:62:3f:a0:18:e7:72:0c:39:7e:89:25:89: ce:be:4f:e6:8a:87:37:a0:a8:b9:ee:33:3d:3c:0b: 75:7c:af:04:ef:e8:30:5a:2c:68:21:b4:6e:cc:19: 7a:59:56:4c:1d:5a:77:b7:cd:fa:1c:fc:38:8d:42: 9d:ac:e6:b3:4c:cc:e0:4d:b5:45:29:99:60:a7:3f: 89:b9:0f:aa:59:3c:d2:b5:08:69:d1:d1:21:7c:f3: 91:2c:95:f6:77:86:40:03:f1:ba:61:c6:d8:29:11: cf:15:b7:fe:4c:c5:f5:cb:93:75:92:7a:ac:e3:61: 3b:58:10:07:0a:4c:07:30:a1:bc:83:4f:e4:83:8a: e9:02:85:fb:59:88:c1:fd:d9:24:1f:d7:24:2e:48: ff:8b:1b:ce:57:8b:6c:ab:91:12:58:94:cf:8d:4f: 99:99:12:0c:03:b0:b4:5f:00:2c:67:dd:5b:3f:84: bd:08:56:e2:e1:9d:22:45:1f:56:55:aa:d5:8f:27: 0d:31:13:be:6b:e1:45:72:83:9e:25:4a:10:e3:1d: 4f:c4:a4:b0:20:fb:71:a3:81:02:a7:85:07:d5:f8: 71:1b:03:50:78:63:a3:c5:20:36:d9:76:22:67:01: 3c:96:e2:fe:6c:fa:ae:ff:62:4d:f4:7c:be:d7:fc: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:57:CC:5C:35:A6:8E:BC:9C:A1:D5:D8:2F:11:D1:98:91:15:28:34 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143487.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a345::/32 Signature Algorithm: sha256WithRSAEncryption 21:2e:ae:e9:b8:a9:4a:22:f5:77:fe:dd:a9:67:64:11:71:c8: cb:0e:f7:ef:77:ba:75:58:47:38:20:15:74:2a:45:ce:66:4f: ac:0a:71:33:3c:0f:0e:98:09:25:69:41:fa:d9:51:9d:96:48: 6c:d5:d5:b2:1a:25:cd:8f:55:c1:32:04:7c:13:51:fd:e9:9c: 7e:e2:e3:40:83:3e:d0:20:bd:7b:bb:ae:20:64:ee:3c:a8:02: 7e:73:87:0c:30:6c:db:33:6d:74:98:40:84:b6:a8:19:d6:78: a2:d8:06:62:cb:4e:a1:12:31:0e:9f:e9:ab:fd:67:14:fb:a7: bf:bb:83:a4:5a:03:36:1a:a9:a8:d7:ba:9e:9d:82:8b:64:48: c1:cb:9c:78:cd:1f:da:b7:5b:b5:ae:89:76:aa:27:d1:5c:1e: b4:1b:04:81:82:7b:e8:e2:f6:2b:ee:f3:c3:3c:a1:11:23:34: f8:db:f8:2a:d5:eb:a1:f3:c9:57:1f:9d:58:4e:f6:af:21:e6: 46:35:09:be:9c:5c:0d:fd:42:13:19:9a:01:c8:58:2e:19:de: c0:1a:3f:68:9d:9d:df:88:4a:ce:b0:5c:5d:32:5e:f5:a3:70: 5c:66:2f:1b:6b:25:89:05:25:27:2e:24:25:c6:dd:e8:e6:5e: 17:d4:f4:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXoZ4JWiqy3zV5qn5vS9M2OMYhkQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxNFoX DTI3MDMwMzA2MDUxNFowMzExMC8GA1UEAxMoOEM1N0NDNUMzNUE2OEVCQzlDQTFE NUQ4MkYxMUQxOTg5MTE1MjgzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbrYj+gGOdyDDl+iSWJzr5P5oqHN6Coue4zPTwLdXyvBO/oMFosaCG0bswZ ellWTB1ad7fN+hz8OI1Cnazms0zM4E21RSmZYKc/ibkPqlk80rUIadHRIXzzkSyV 9neGQAPxumHG2CkRzxW3/kzF9cuTdZJ6rONhO1gQBwpMBzChvINP5IOK6QKF+1mI wf3ZJB/XJC5I/4sbzleLbKuREliUz41PmZkSDAOwtF8ALGfdWz+EvQhW4uGdIkUf VlWq1Y8nDTETvmvhRXKDniVKEOMdT8SksCD7caOBAqeFB9X4cRsDUHhjo8UgNtl2 ImcBPJbi/mz6rv9iTfR8vtf8qhcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSMV8xc NaaOvJyh1dgvEdGYkRUoNDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o0UwDQYJKoZIhvcNAQELBQADggEBACEurum4qUoi9Xf+3alnZBFxyMsO9+93unVY RzggFXQqRc5mT6wKcTM8Dw6YCSVpQfrZUZ2WSGzV1bIaJc2PVcEyBHwTUf3pnH7i 40CDPtAgvXu7riBk7jyoAn5zhwwwbNszbXSYQIS2qBnWeKLYBmLLTqESMQ6f6av9 ZxT7p7+7g6RaAzYaqajXup6dgotkSMHLnHjNH9q3W7WuiXaqJ9FcHrQbBIGCe+ji 9ivu88M8oREjNPjb+CrV66HzyVcfnVhO9q8h5kY1Cb6cXA39QhMZmgHIWC4Z3sAa P2idnd+ISs6wXF0yXvWjcFxmLxtrJYkFJScuJCXG3ejmXhfU9Ac= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:43 2026 by rpki-client