$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143553.roa File: AS143553.roa (raw, json) Hash identifier: t15rG+nPkJ06J1al+hSFfumWcx4M8ClLQrlc8O/VSuE= Subject key identifier: C8:71:E6:73:8B:04:8C:D1:60:97:60:DB:2C:A2:2F:82:09:51:98:4F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 768E48DD737DBA07EA7B999562B0DDD5DBEE7EB6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143553.roa Signing time: Wed 04 Mar 2026 06:13:48 +0000 ROA not before: Wed 04 Mar 2026 06:08:48 +0000 ROA not after: Wed 03 Mar 2027 06:13:48 +0000 asID: 143553 IP address blocks: 240a:a387::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8e:48:dd:73:7d:ba:07:ea:7b:99:95:62:b0:dd:d5:db:ee:7e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:48 2026 GMT Not After : Mar 3 06:13:48 2027 GMT Subject: CN=C871E6738B048CD1609760DB2CA22F820951984F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:0b:b3:6a:39:59:58:1d:da:5d:1a:05:2c: e6:2e:f3:1e:08:5b:48:eb:a9:1e:f9:b6:8d:35:75: 47:c0:00:d2:54:7d:ac:af:17:0c:98:b6:26:ca:8f: 82:d1:44:f5:e3:ae:cc:66:a5:27:5a:d4:a9:3d:65: fc:f3:6c:3e:29:35:7c:b4:37:27:5d:c6:89:00:32: d0:c2:75:4b:cd:c3:48:57:74:25:38:77:2e:c5:9c: 7c:35:e7:a2:b4:e8:3c:7f:bc:07:9f:15:d9:56:d2: 78:c6:c0:22:e6:77:58:fa:3a:84:97:01:9f:e4:78: e5:5e:22:0b:d5:68:48:45:7f:ae:c4:e7:98:90:c3: f2:23:14:6d:68:93:16:97:47:4b:11:5c:cd:f9:67: b0:f3:0e:ee:ba:03:bc:43:41:3a:5c:59:3d:fe:25: 06:cb:e5:79:f8:38:66:e8:fa:c8:f0:e5:7d:9d:34: 56:45:11:43:03:09:c5:c3:94:0c:4c:8a:01:ce:8c: 0f:8b:ee:f6:6d:09:69:d0:c6:d5:8c:6d:b8:2e:30: 11:9f:ba:47:3c:32:9c:4f:82:a0:28:20:6d:8a:c9: 76:fe:12:4a:f3:3b:3d:89:35:44:65:a2:38:da:41: 23:8d:9a:fd:3f:4e:8f:c5:29:51:47:e4:b1:77:05: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:71:E6:73:8B:04:8C:D1:60:97:60:DB:2C:A2:2F:82:09:51:98:4F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143553.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a387::/32 Signature Algorithm: sha256WithRSAEncryption 1c:2b:e3:66:ec:73:60:98:07:c5:70:12:19:1a:25:aa:7f:9f: b8:b5:87:2a:31:12:96:7f:72:4e:a8:e5:d7:59:96:b8:ef:1a: 01:96:a3:2a:32:03:75:98:5b:ea:3a:83:1f:5a:14:3b:b1:75: fd:84:ae:1a:d1:91:92:81:a9:d5:ac:e9:bf:0c:dc:9a:61:71: 3a:d2:7f:fe:2e:e7:23:b8:1f:10:11:6b:ed:da:37:3f:2c:7c: 97:45:4c:da:6c:25:1d:c1:2b:63:33:c2:48:fe:c1:c0:ff:9a: 66:1f:0f:d6:04:02:5f:cb:24:b6:2c:74:5a:c2:05:78:32:27: 51:64:23:ea:b5:d1:33:87:2a:f5:d1:fd:a8:14:7b:cd:dc:38: f4:02:dd:bb:64:f6:5d:a3:44:09:22:c1:07:d3:c1:e4:74:79: 60:bc:31:87:90:fb:2e:c1:37:f3:1b:f3:89:d2:5f:13:52:cf: cd:ee:08:dc:66:f1:da:9a:75:59:ee:2f:fd:3e:de:4b:12:88: da:6a:cb:b2:ae:15:8e:41:97:c9:80:21:eb:56:da:24:4c:fe: 1b:b6:0a:ff:91:dc:e6:39:a5:82:1c:21:61:9a:79:bd:66:48: 03:44:ca:25:63:66:c6:0e:9f:56:c8:df:44:34:1b:dd:39:16: b7:7f:b3:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdo5I3XN9ugfqe5mVYrDd1dvufrYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0OFoX DTI3MDMwMzA2MTM0OFowMzExMC8GA1UEAxMoQzg3MUU2NzM4QjA0OENEMTYwOTc2 MERCMkNBMjJGODIwOTUxOTg0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqtC7NqOVlYHdpdGgUs5i7zHghbSOupHvm2jTV1R8AA0lR9rK8XDJi2JsqP gtFE9eOuzGalJ1rUqT1l/PNsPik1fLQ3J13GiQAy0MJ1S83DSFd0JTh3LsWcfDXn orToPH+8B58V2VbSeMbAIuZ3WPo6hJcBn+R45V4iC9VoSEV/rsTnmJDD8iMUbWiT FpdHSxFczflnsPMO7roDvENBOlxZPf4lBsvlefg4Zuj6yPDlfZ00VkURQwMJxcOU DEyKAc6MD4vu9m0JadDG1YxtuC4wEZ+6RzwynE+CoCggbYrJdv4SSvM7PYk1RGWi ONpBI42a/T9Oj8UpUUfksXcFnEUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTIceZz iwSM0WCXYNssoi+CCVGYTzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o4cwDQYJKoZIhvcNAQELBQADggEBABwr42bsc2CYB8VwEhkaJap/n7i1hyoxEpZ/ ck6o5ddZlrjvGgGWoyoyA3WYW+o6gx9aFDuxdf2ErhrRkZKBqdWs6b8M3JphcTrS f/4u5yO4HxARa+3aNz8sfJdFTNpsJR3BK2Mzwkj+wcD/mmYfD9YEAl/LJLYsdFrC BXgyJ1FkI+q10TOHKvXR/agUe83cOPQC3btk9l2jRAkiwQfTweR0eWC8MYeQ+y7B N/Mb84nSXxNSz83uCNxm8dqadVnuL/0+3ksSiNpqy7KuFY5Bl8mAIetW2iRM/hu2 Cv+R3OY5pYIcIWGaeb1mSANEyiVjZsYOn1bI30Q0G905Frd/s1E= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:34 2026 by rpki-client