$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143554.roa File: AS143554.roa (raw, json) Hash identifier: mUATyJ/qimQrk4i+hvsYmiRZHoNkuu+oDmViK9CIefs= Subject key identifier: C3:88:E8:B7:7F:A1:EC:DE:E4:6C:5C:49:D4:C0:9A:2A:C1:10:FD:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 558440ED7DA296C33E75A4B85C4305C8E81F7134 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143554.roa Signing time: Wed 04 Mar 2026 06:13:46 +0000 ROA not before: Wed 04 Mar 2026 06:08:46 +0000 ROA not after: Wed 03 Mar 2027 06:13:46 +0000 asID: 143554 IP address blocks: 240a:a388::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:84:40:ed:7d:a2:96:c3:3e:75:a4:b8:5c:43:05:c8:e8:1f:71:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:46 2026 GMT Not After : Mar 3 06:13:46 2027 GMT Subject: CN=C388E8B77FA1ECDEE46C5C49D4C09A2AC110FD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:cb:73:60:6e:87:0a:52:a9:a9:7d:41:6c: 60:60:56:75:d4:ff:9d:c6:b4:d8:d6:4d:71:a1:9b: a7:6d:30:1d:f8:a6:b6:cf:56:4c:dc:9d:61:41:f1: 84:f2:87:aa:f5:05:51:e5:d1:bc:08:64:32:fd:4b: b1:83:1f:40:25:7a:55:39:37:27:09:6b:01:63:c7: cb:c1:a5:a5:79:80:e5:2f:cd:af:c0:1f:29:aa:d3: 65:20:75:3e:5f:68:67:94:0f:4c:4d:b9:9a:79:35: 2f:da:11:7d:dd:5b:19:24:35:63:a5:18:ca:6c:31: ce:c9:2b:fe:84:27:29:3a:97:da:28:ae:54:9c:bc: 52:d0:91:c8:81:ca:d6:fb:fd:73:c0:30:fb:2f:98: 53:95:19:43:97:a3:b5:c6:e3:bd:2a:b3:25:80:87: 8d:fe:5b:c0:7b:49:aa:10:48:86:e8:63:c2:b9:e4: 20:65:20:b9:a3:ae:f0:bc:3a:ab:13:e0:3a:9a:b4: c9:be:1b:ed:b6:55:a9:dc:16:96:1e:59:8e:df:a2: dd:57:6b:d4:a0:39:aa:d1:d0:da:93:31:f6:7a:c6: 90:15:85:18:15:dd:3e:03:79:c9:ce:6c:f3:b8:ed: 7a:e8:af:15:97:67:1c:00:e4:88:fe:0c:fe:40:45: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:88:E8:B7:7F:A1:EC:DE:E4:6C:5C:49:D4:C0:9A:2A:C1:10:FD:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143554.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a388::/32 Signature Algorithm: sha256WithRSAEncryption 71:89:5f:d2:18:32:47:92:46:d8:a4:28:a1:dc:9a:93:9a:47: f8:4e:aa:f9:31:3f:48:ef:58:30:b9:d5:6b:54:2c:43:69:22: ea:c7:f9:76:ae:f9:7d:82:0a:3c:d8:b8:bb:43:53:16:e7:e8: c7:d1:83:5d:80:6f:d2:5e:92:4e:b5:f0:d0:35:5f:98:c4:61: 6d:c5:2f:a7:21:ae:72:19:50:b7:59:d2:aa:0d:91:1c:21:13: cd:6e:ea:75:0e:ef:d0:42:71:b7:a0:19:d9:24:15:db:c7:85: 48:c0:20:ae:c5:74:8a:89:c8:97:8d:b9:98:63:d4:da:db:9e: 8c:96:a3:06:5f:be:d6:7c:5b:96:3a:47:08:80:5b:06:2e:46: 1e:5c:66:69:a9:17:19:79:cd:f0:b1:7f:0b:44:bc:a3:ab:d2: b5:2d:25:d7:02:68:af:5f:07:4a:98:3d:9c:4c:20:73:13:b2: 94:5c:31:fd:0e:13:c7:14:ed:3d:d0:ac:3b:f8:84:67:a2:13: 33:71:08:3e:c0:06:52:54:09:be:32:a2:50:13:59:8b:b2:d6: d2:53:29:67:90:51:06:aa:43:d7:b4:fe:b5:fe:28:3b:1f:e1: 32:35:b6:21:ea:43:66:9f:e8:8d:02:31:c7:c7:6b:65:4a:96: 05:24:d0:b2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVYRA7X2ilsM+daS4XEMFyOgfcTQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0NloX DTI3MDMwMzA2MTM0NlowMzExMC8GA1UEAxMoQzM4OEU4Qjc3RkExRUNERUU0NkM1 QzQ5RDRDMDlBMkFDMTEwRkQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/Ey3NgbocKUqmpfUFsYGBWddT/nca02NZNcaGbp20wHfimts9WTNydYUHx hPKHqvUFUeXRvAhkMv1LsYMfQCV6VTk3JwlrAWPHy8GlpXmA5S/Nr8AfKarTZSB1 Pl9oZ5QPTE25mnk1L9oRfd1bGSQ1Y6UYymwxzskr/oQnKTqX2iiuVJy8UtCRyIHK 1vv9c8Aw+y+YU5UZQ5ejtcbjvSqzJYCHjf5bwHtJqhBIhuhjwrnkIGUguaOu8Lw6 qxPgOpq0yb4b7bZVqdwWlh5Zjt+i3Vdr1KA5qtHQ2pMx9nrGkBWFGBXdPgN5yc5s 87jteuivFZdnHADkiP4M/kBFWW0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTDiOi3 f6Hs3uRsXEnUwJoqwRD9ATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o4gwDQYJKoZIhvcNAQELBQADggEBAHGJX9IYMkeSRtikKKHcmpOaR/hOqvkxP0jv WDC51WtULENpIurH+Xau+X2CCjzYuLtDUxbn6MfRg12Ab9Jekk618NA1X5jEYW3F L6chrnIZULdZ0qoNkRwhE81u6nUO79BCcbegGdkkFdvHhUjAIK7FdIqJyJeNuZhj 1NrbnoyWowZfvtZ8W5Y6RwiAWwYuRh5cZmmpFxl5zfCxfwtEvKOr0rUtJdcCaK9f B0qYPZxMIHMTspRcMf0OE8cU7T3QrDv4hGeiEzNxCD7ABlJUCb4yolATWYuy1tJT KWeQUQaqQ9e0/rX+KDsf4TI1tiHqQ2af6I0CMcfHa2VKlgUk0LI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:14 2026 by rpki-client