$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143588.roa File: AS143588.roa (raw, json) Hash identifier: cb0RibzST71Zyu2sbCEuZq++Law6ZSabdomEFnNAimg= Subject key identifier: 5B:00:5C:91:A4:73:95:E5:99:61:48:70:90:9F:E7:A8:92:46:96:5D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 781B7BDCC5224F8B2FD77EF58271059816B5D63B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143588.roa Signing time: Wed 04 Mar 2026 06:13:14 +0000 ROA not before: Wed 04 Mar 2026 06:08:14 +0000 ROA not after: Wed 03 Mar 2027 06:13:14 +0000 asID: 143588 IP address blocks: 240a:a3aa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1b:7b:dc:c5:22:4f:8b:2f:d7:7e:f5:82:71:05:98:16:b5:d6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:14 2026 GMT Not After : Mar 3 06:13:14 2027 GMT Subject: CN=5B005C91A47395E599614870909FE7A89246965D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:30:3c:fa:aa:af:e7:63:f4:94:54:b2:56: 2d:54:ab:61:a1:6b:57:6f:cc:f4:74:a8:de:47:27: 8d:09:99:01:10:38:03:7a:f6:bd:43:da:7c:4b:1d: 21:f4:f1:82:6f:15:ae:2c:1b:f3:73:08:71:88:4d: 9f:7c:a5:9c:b9:90:85:77:53:45:06:67:61:fc:a9: 2b:5e:1f:63:08:e9:b8:97:a8:8a:56:70:44:e4:a9: e6:e3:6b:b4:3e:e6:ab:79:44:05:15:22:bc:1a:d8: 10:a1:18:8a:0b:3f:ed:bb:70:ce:7e:e8:dd:e9:54: f9:9d:34:7b:b1:22:b0:b9:86:14:80:17:c0:46:b1: b7:e4:c7:7f:3a:f5:55:fc:51:3e:7c:2c:2c:ac:f9: 9d:db:0e:18:f8:a8:4c:6b:11:6a:aa:6e:80:5c:8d: 25:b3:48:e8:56:80:37:bb:15:84:04:45:7a:c7:78: 7e:bf:d2:c3:ff:7e:79:0e:5f:a3:f5:89:c4:12:62: ad:e7:13:d7:1d:ef:54:6b:34:4a:52:d0:98:03:ff: df:f8:69:cf:bb:32:2b:99:cf:35:07:4d:63:38:54: 6e:9d:45:ef:f3:e9:c2:60:18:ed:d1:33:54:72:08: 21:f5:27:25:5b:40:94:18:45:98:63:08:35:2e:79: a0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:00:5C:91:A4:73:95:E5:99:61:48:70:90:9F:E7:A8:92:46:96:5D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143588.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3aa::/32 Signature Algorithm: sha256WithRSAEncryption 89:5b:db:27:f4:a9:c0:04:4c:0a:79:ef:82:30:86:3c:04:68: 52:26:e0:af:27:6d:41:d5:dc:35:93:80:4a:b3:66:ed:8b:9f: 95:54:58:8a:5c:b8:e0:c1:11:f8:20:77:ab:c5:46:c2:32:da: 09:a1:40:45:08:ab:5c:05:fe:45:8b:90:58:fc:11:ac:a5:7d: c1:46:68:09:9f:62:44:90:8f:c0:a6:2c:bd:9e:db:a1:3e:52: 08:0c:df:68:b2:1a:18:84:3c:de:90:02:4f:22:05:6f:39:6e: 01:40:da:4a:32:04:94:25:5b:02:f5:b1:16:62:13:6e:1d:c5: 72:e4:26:29:ee:51:8c:ad:f4:2a:27:1a:1c:c0:f8:0d:b4:dc: 8d:9b:26:49:9c:d2:13:92:9c:c9:82:c8:5a:06:fa:3b:32:46: 8f:06:97:80:7e:12:bf:1e:fd:5e:58:64:45:73:7f:21:7c:f5: 71:ba:f2:8e:70:08:e5:23:b0:2f:d9:e2:49:2f:6f:da:a4:c1: d8:c2:39:ee:44:c9:e8:1e:bd:92:d8:2d:34:17:0f:1b:5e:1b: a0:36:47:dd:b1:d6:95:55:73:8e:f3:03:0e:e5:74:35:c5:40: 0f:e8:42:73:3d:72:cf:20:96:42:fa:ac:d3:af:5f:3e:03:e8: 0f:b1:f2:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeBt73MUiT4sv1371gnEFmBa11jswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNFoX DTI3MDMwMzA2MTMxNFowMzExMC8GA1UEAxMoNUIwMDVDOTFBNDczOTVFNTk5NjE0 ODcwOTA5RkU3QTg5MjQ2OTY1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy1MDz6qq/nY/SUVLJWLVSrYaFrV2/M9HSo3kcnjQmZARA4A3r2vUPafEsd IfTxgm8Vriwb83MIcYhNn3ylnLmQhXdTRQZnYfypK14fYwjpuJeoilZwROSp5uNr tD7mq3lEBRUivBrYEKEYigs/7btwzn7o3elU+Z00e7EisLmGFIAXwEaxt+THfzr1 VfxRPnwsLKz5ndsOGPioTGsRaqpugFyNJbNI6FaAN7sVhARFesd4fr/Sw/9+eQ5f o/WJxBJirecT1x3vVGs0SlLQmAP/3/hpz7syK5nPNQdNYzhUbp1F7/PpwmAY7dEz VHIIIfUnJVtAlBhFmGMINS55oOECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRbAFyR pHOV5ZlhSHCQn+eokkaWXTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o6owDQYJKoZIhvcNAQELBQADggEBAIlb2yf0qcAETAp574IwhjwEaFIm4K8nbUHV 3DWTgEqzZu2Ln5VUWIpcuODBEfggd6vFRsIy2gmhQEUIq1wF/kWLkFj8EaylfcFG aAmfYkSQj8CmLL2e26E+UggM32iyGhiEPN6QAk8iBW85bgFA2koyBJQlWwL1sRZi E24dxXLkJinuUYyt9ConGhzA+A203I2bJkmc0hOSnMmCyFoG+jsyRo8Gl4B+Er8e /V5YZEVzfyF89XG68o5wCOUjsC/Z4kkvb9qkwdjCOe5EyegevZLYLTQXDxteG6A2 R92x1pVVc47zAw7ldDXFQA/oQnM9cs8glkL6rNOvXz4D6A+x8ik= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:04 2026 by rpki-client