$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143558.roa File: AS143558.roa (raw, json) Hash identifier: T53lPVB+L93wKs+/91/Bnlj9aaGeUXRMrHUYGFmAwXw= Subject key identifier: 47:FA:82:93:8D:68:11:4D:1E:95:2B:47:A9:8C:D3:2D:9C:A0:43:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1079AEEE6AF183E2F4B7D45417A7C21409AABA33 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143558.roa Signing time: Wed 04 Mar 2026 06:12:47 +0000 ROA not before: Wed 04 Mar 2026 06:07:47 +0000 ROA not after: Wed 03 Mar 2027 06:12:47 +0000 asID: 143558 IP address blocks: 240a:a38c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:79:ae:ee:6a:f1:83:e2:f4:b7:d4:54:17:a7:c2:14:09:aa:ba:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:47 2026 GMT Not After : Mar 3 06:12:47 2027 GMT Subject: CN=47FA82938D68114D1E952B47A98CD32D9CA04312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:5f:e7:89:b9:b6:38:b8:73:46:15:6d:87: d0:12:80:30:e9:39:93:7c:87:59:b0:d4:c9:0d:c4: eb:44:5d:14:82:9f:f7:76:df:06:9c:8a:20:55:46: ef:af:f4:97:18:cb:1e:f0:42:12:f5:c8:a5:22:c7: 6f:fd:f7:20:03:24:38:26:a1:44:b6:1d:54:b7:b5: 12:6a:0f:40:ca:e2:9a:77:9d:c7:2f:0a:a8:61:ba: 11:8f:41:28:9f:4d:74:a9:86:cd:6b:b7:9b:c3:03: c2:70:3b:1b:17:77:c9:90:3c:2c:0b:fc:99:70:85: 05:4b:80:86:77:7e:6c:10:8d:5f:6c:c4:72:94:91: ad:ce:37:bb:df:be:a8:90:ca:ab:d2:ae:15:6d:86: fd:55:b2:26:5f:97:05:5d:cd:b0:84:52:a5:23:40: df:93:dc:e3:2d:94:8d:8c:86:52:1a:f8:09:d1:29: 7e:c9:55:7c:e7:44:d5:35:1c:2d:29:72:22:75:17: 9d:3d:11:a2:1d:08:aa:3b:fb:a4:bd:39:ce:7b:0b: 2d:79:7d:d6:c1:3e:f8:b5:df:8e:fd:e8:f4:a3:cf: 38:06:48:56:8c:c8:4a:d3:41:4e:7a:0e:79:3e:33: 06:50:73:c1:6e:29:9f:66:dc:d3:c9:77:8e:f9:8b: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FA:82:93:8D:68:11:4D:1E:95:2B:47:A9:8C:D3:2D:9C:A0:43:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143558.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a38c::/32 Signature Algorithm: sha256WithRSAEncryption 15:11:35:47:e1:13:8b:da:d9:21:64:6b:a2:63:c5:eb:c3:37: ad:4c:ff:b3:bb:d4:4e:a9:c1:65:59:74:50:55:65:9f:1c:24: b3:8c:3b:d6:c7:ff:17:df:8b:34:0d:c8:78:99:e3:6d:11:21: 34:fe:c0:0f:41:f9:7f:f7:9f:84:ae:12:c9:d2:5a:e6:af:6b: 42:a9:54:42:f4:29:be:f4:c3:a6:34:73:4a:61:20:7f:66:5f: ef:87:42:e1:0b:cc:16:22:1b:b6:e8:7d:e7:2c:ed:25:cc:86: f8:1d:45:dc:40:c9:45:c7:5d:7e:be:96:5c:2f:3b:0c:1c:59: 5e:3c:d0:25:03:4d:df:46:44:96:97:f3:ed:51:b9:25:4b:90: 80:5f:51:ab:eb:7f:39:80:1c:dd:37:f6:d3:c0:55:dd:3b:53: 05:b5:78:3a:24:6f:0d:e8:9e:4b:b1:d6:f1:36:13:32:ba:7b: 16:33:97:50:3e:ce:bc:32:bb:84:3f:8e:fd:ee:15:14:7d:96: ac:94:ac:38:d2:41:d7:a4:50:98:f3:82:b4:f0:cd:0a:08:b5: 46:c7:9f:8e:a3:be:da:1b:24:90:d3:5f:50:07:75:02:de:3b: 66:88:4a:93:e7:e3:5e:e8:75:ed:bd:ea:11:01:3c:ee:13:5e: 7f:f8:9d:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEHmu7mrxg+L0t9RUF6fCFAmqujMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0N1oX DTI3MDMwMzA2MTI0N1owMzExMC8GA1UEAxMoNDdGQTgyOTM4RDY4MTE0RDFFOTUy QjQ3QTk4Q0QzMkQ5Q0EwNDMxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK63X+eJubY4uHNGFW2H0BKAMOk5k3yHWbDUyQ3E60RdFIKf93bfBpyKIFVG 76/0lxjLHvBCEvXIpSLHb/33IAMkOCahRLYdVLe1EmoPQMrimnedxy8KqGG6EY9B KJ9NdKmGzWu3m8MDwnA7Gxd3yZA8LAv8mXCFBUuAhnd+bBCNX2zEcpSRrc43u9++ qJDKq9KuFW2G/VWyJl+XBV3NsIRSpSNA35Pc4y2UjYyGUhr4CdEpfslVfOdE1TUc LSlyInUXnT0Roh0Iqjv7pL05znsLLXl91sE++LXfjv3o9KPPOAZIVozIStNBTnoO eT4zBlBzwW4pn2bc08l3jvmLhCkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRH+oKT jWgRTR6VK0epjNMtnKBDEjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o4wwDQYJKoZIhvcNAQELBQADggEBABURNUfhE4va2SFka6JjxevDN61M/7O71E6p wWVZdFBVZZ8cJLOMO9bH/xffizQNyHiZ420RITT+wA9B+X/3n4SuEsnSWuava0Kp VEL0Kb70w6Y0c0phIH9mX++HQuELzBYiG7bofecs7SXMhvgdRdxAyUXHXX6+llwv OwwcWV480CUDTd9GRJaX8+1RuSVLkIBfUavrfzmAHN039tPAVd07UwW1eDokbw3o nkux1vE2EzK6exYzl1A+zrwyu4Q/jv3uFRR9lqyUrDjSQdekUJjzgrTwzQoItUbH n46jvtobJJDTX1AHdQLeO2aISpPn417ode296hEBPO4TXn/4nb0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:42 2026 by rpki-client