$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143577.roa File: AS143577.roa (raw, json) Hash identifier: KP5Ko3RI/FpghuK7YLjOZJKh/PzjRzV13j4ZVe88PY0= Subject key identifier: 4B:36:53:D8:0F:04:D5:D0:C9:BF:BF:EC:3C:07:E1:F5:A8:74:C0:0B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 37B8F2F59D2C57B0E72C8275932B9E2759D45483 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143577.roa Signing time: Wed 04 Mar 2026 06:13:45 +0000 ROA not before: Wed 04 Mar 2026 06:08:45 +0000 ROA not after: Wed 03 Mar 2027 06:13:45 +0000 asID: 143577 IP address blocks: 240a:a39f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b8:f2:f5:9d:2c:57:b0:e7:2c:82:75:93:2b:9e:27:59:d4:54:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:45 2026 GMT Not After : Mar 3 06:13:45 2027 GMT Subject: CN=4B3653D80F04D5D0C9BFBFEC3C07E1F5A874C00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:8d:47:4b:98:54:20:62:71:f6:35:cb:7f: 73:c3:ba:e9:c4:d2:04:c8:56:21:78:c2:61:f3:0a: 5f:32:b0:5d:c9:b7:3b:95:08:bd:50:a5:0b:3d:b3: c0:62:09:c9:b2:e0:43:4f:47:87:99:12:55:1e:0d: ed:11:c3:3b:e7:7c:2b:cb:a0:46:32:16:40:c6:75: 8c:06:70:b9:87:ee:83:7b:64:99:38:52:f8:0d:49: fd:93:66:c7:05:07:2b:a7:3a:f2:28:b0:95:4b:af: ba:a6:a3:02:b1:66:37:61:bd:25:c3:ea:b2:51:aa: 10:ba:df:b9:0e:06:91:86:37:fc:a7:9f:5b:ac:4e: 13:ea:e2:8a:30:63:67:cb:cb:99:43:68:a6:a1:6e: 8d:d9:32:3b:a6:dc:3f:40:37:bb:fb:63:c0:9c:00: 93:71:7f:06:b6:6a:f9:44:dd:a5:c0:7a:e5:b7:50: 9a:a0:54:db:1d:c9:5a:9e:8b:d2:20:80:32:3c:55: 08:eb:97:eb:6a:5b:c1:19:56:b7:5a:4b:21:df:3b: e8:4e:42:13:99:c9:7d:9f:d8:10:09:fe:9a:18:dc: 38:91:e4:b3:d7:3e:08:39:92:26:5a:03:4e:91:b5: 04:a8:24:c5:0c:4e:ed:83:cf:62:84:c1:7f:99:6e: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:36:53:D8:0F:04:D5:D0:C9:BF:BF:EC:3C:07:E1:F5:A8:74:C0:0B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143577.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a39f::/32 Signature Algorithm: sha256WithRSAEncryption 26:69:0e:87:11:ea:ec:79:6b:bc:5b:93:1b:dc:f0:2b:5e:e0: 69:b6:68:e8:3d:6c:22:21:13:b9:5d:4f:20:59:a6:bc:99:2e: 4c:bd:9e:c1:f2:2e:8e:5d:ea:e8:2c:a1:91:fc:a7:1f:e0:a8: 0a:8d:61:98:1d:2b:b0:11:f6:2f:b5:78:bd:b2:37:b5:bb:5b: fb:a0:b6:c6:e5:47:e7:ec:57:af:21:db:9b:a7:c7:2b:16:97: cf:da:97:e4:df:ca:f3:3d:ba:b9:88:dd:71:7b:6a:57:1d:21: 57:1e:33:52:c6:14:f2:5b:fb:59:64:61:c0:cb:8e:4a:7f:15: 3d:96:60:8f:0d:73:76:2e:ca:75:54:8f:7f:5b:f6:83:86:10: 44:a7:50:e6:50:ef:a4:6e:97:51:13:98:0f:b8:a7:67:b1:42: 9e:d8:77:be:ab:13:d1:38:7e:17:94:69:ee:77:bc:41:40:84: d3:b3:be:77:45:08:2a:2c:da:a2:f4:a0:d0:39:c4:b0:be:bd: 92:14:1d:b4:12:e3:46:cb:5f:80:63:fe:96:22:f3:5a:33:b1: e2:0d:8a:15:21:c7:44:83:1d:4d:7e:dc:6c:38:f4:a8:0c:92: 22:16:ff:9b:bc:92:66:68:8d:68:16:c9:d4:f6:66:b7:58:53: 03:1d:45:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN7jy9Z0sV7DnLIJ1kyueJ1nUVIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0NVoX DTI3MDMwMzA2MTM0NVowMzExMC8GA1UEAxMoNEIzNjUzRDgwRjA0RDVEMEM5QkZC RkVDM0MwN0UxRjVBODc0QzAwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUGjUdLmFQgYnH2Nct/c8O66cTSBMhWIXjCYfMKXzKwXcm3O5UIvVClCz2z wGIJybLgQ09Hh5kSVR4N7RHDO+d8K8ugRjIWQMZ1jAZwuYfug3tkmThS+A1J/ZNm xwUHK6c68iiwlUuvuqajArFmN2G9JcPqslGqELrfuQ4GkYY3/KefW6xOE+riijBj Z8vLmUNopqFujdkyO6bcP0A3u/tjwJwAk3F/BrZq+UTdpcB65bdQmqBU2x3JWp6L 0iCAMjxVCOuX62pbwRlWt1pLId876E5CE5nJfZ/YEAn+mhjcOJHks9c+CDmSJloD TpG1BKgkxQxO7YPPYoTBf5luaBkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRLNlPY DwTV0Mm/v+w8B+H1qHTACzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o58wDQYJKoZIhvcNAQELBQADggEBACZpDocR6ux5a7xbkxvc8Cte4Gm2aOg9bCIh E7ldTyBZpryZLky9nsHyLo5d6ugsoZH8px/gqAqNYZgdK7AR9i+1eL2yN7W7W/ug tsblR+fsV68h25unxysWl8/al+TfyvM9urmI3XF7alcdIVceM1LGFPJb+1lkYcDL jkp/FT2WYI8Nc3YuynVUj39b9oOGEESnUOZQ76Rul1ETmA+4p2exQp7Yd76rE9E4 fheUae53vEFAhNOzvndFCCos2qL0oNA5xLC+vZIUHbQS40bLX4Bj/pYi81ozseIN ihUhx0SDHU1+3Gw49KgMkiIW/5u8kmZojWgWydT2ZrdYUwMdRdA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:17 2026 by rpki-client