$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143877.roa File: AS143877.roa (raw, json) Hash identifier: JBBv4uDypGaSrE5SwqHW2Oc2usOxQSVsTh3EyaUXa4Q= Subject key identifier: 71:0D:75:39:06:B7:B9:70:30:57:C9:E2:02:A1:DC:66:57:D6:9B:8B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 47E01E57CEA3F3AB0E7ABA80A94D53C88E8849CD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143877.roa Signing time: Wed 04 Mar 2026 06:14:41 +0000 ROA not before: Wed 04 Mar 2026 06:09:41 +0000 ROA not after: Wed 03 Mar 2027 06:14:41 +0000 asID: 143877 IP address blocks: 240a:a4cb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e0:1e:57:ce:a3:f3:ab:0e:7a:ba:80:a9:4d:53:c8:8e:88:49:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:41 2026 GMT Not After : Mar 3 06:14:41 2027 GMT Subject: CN=710D753906B7B9703057C9E202A1DC6657D69B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:28:f0:96:44:c8:ac:5a:bd:93:94:ad:07: 0f:ba:17:99:1d:83:95:de:a0:dd:3a:8d:b8:ef:11: 5e:08:28:26:60:5e:da:1b:82:35:78:40:ae:b1:4c: 7c:a4:e0:25:ce:43:a7:02:68:3d:70:9a:17:77:2b: ae:90:d8:59:e5:84:76:1a:5c:23:e2:fb:06:48:68: 9f:4a:1c:e7:67:6e:67:ab:cd:64:ae:21:13:76:c8: de:36:1c:e2:ff:59:a7:f8:3a:44:f0:65:02:56:0c: 46:83:b2:75:3b:f5:28:a0:f3:8b:23:2e:e5:fa:5f: e2:8a:f3:36:fd:9f:f3:6e:6d:60:e1:62:54:fc:5f: 95:bf:5e:ce:5d:52:60:a2:78:d2:36:15:fc:03:31: 14:50:ae:68:27:b9:55:94:97:a2:64:21:99:3c:5a: ce:75:0c:94:0f:f0:ff:db:1e:1f:aa:8d:2f:57:dd: fc:bd:c0:d1:49:b6:3f:ec:bf:b3:b3:cc:43:ac:9b: 97:d5:22:72:9a:50:89:d6:f8:58:e1:63:88:9b:b0: 91:9a:76:d4:b8:c7:6d:88:e6:a0:ed:8d:0c:25:88: ff:10:56:42:eb:c1:b9:57:2e:cf:33:7e:89:98:c4: fd:68:01:c9:00:8c:ca:87:65:58:a8:3c:29:ff:0e: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:75:39:06:B7:B9:70:30:57:C9:E2:02:A1:DC:66:57:D6:9B:8B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143877.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4cb::/32 Signature Algorithm: sha256WithRSAEncryption ce:20:11:5a:da:a9:27:2a:23:77:e8:22:ba:aa:91:eb:20:79: 06:d4:ad:e5:42:dd:01:7b:1d:e1:22:5b:a6:29:3a:b4:49:9a: 68:71:0c:09:c1:78:12:1c:32:65:3a:c3:da:24:07:c3:62:9c: 66:54:95:a5:38:1b:86:cc:d7:9d:d3:71:43:6d:51:73:b9:9c: 65:bd:3e:c7:eb:37:fc:ec:42:d2:39:57:e8:2b:ba:08:8d:9d: 84:07:31:57:23:ea:99:f5:d3:8a:89:5a:f7:07:1d:da:ce:76: 14:0b:21:f8:6b:32:35:df:e2:e8:e3:20:e7:b7:cc:58:d8:4f: f8:e5:72:13:25:fa:22:d4:8b:af:cf:41:98:be:b0:4c:53:86: 28:80:54:73:cc:66:03:69:65:0f:95:85:8d:6a:b5:0f:7e:c9: 39:c5:07:a5:61:e7:8e:3e:a4:00:f5:b3:2e:c9:ed:d0:2d:bf: d5:cb:8c:ba:9a:05:d0:54:ac:8b:26:88:5b:14:f6:de:cd:04: 7b:70:be:d3:00:6f:ff:fe:ab:8d:9f:0b:06:c0:57:c0:0e:9f: 37:3f:f7:08:0b:e9:ae:b9:87:b4:35:0b:c3:64:01:2f:a0:ac: cc:98:37:1a:f5:7c:10:e4:24:30:88:37:32:a8:c0:cc:2a:39: 8a:11:6d:73 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR+AeV86j86sOerqAqU1TyI6ISc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0MVoX DTI3MDMwMzA2MTQ0MVowMzExMC8GA1UEAxMoNzEwRDc1MzkwNkI3Qjk3MDMwNTdD OUUyMDJBMURDNjY1N0Q2OUI4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKL/KPCWRMisWr2TlK0HD7oXmR2Dld6g3TqNuO8RXggoJmBe2huCNXhArrFM fKTgJc5DpwJoPXCaF3crrpDYWeWEdhpcI+L7Bkhon0oc52duZ6vNZK4hE3bI3jYc 4v9Zp/g6RPBlAlYMRoOydTv1KKDziyMu5fpf4orzNv2f825tYOFiVPxflb9ezl1S YKJ40jYV/AMxFFCuaCe5VZSXomQhmTxaznUMlA/w/9seH6qNL1fd/L3A0Um2P+y/ s7PMQ6ybl9UicppQidb4WOFjiJuwkZp21LjHbYjmoO2NDCWI/xBWQuvBuVcuzzN+ iZjE/WgByQCMyodlWKg8Kf8OqeMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRxDXU5 Bre5cDBXyeICodxmV9abizAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pMswDQYJKoZIhvcNAQELBQADggEBAM4gEVraqScqI3foIrqqkesgeQbUreVC3QF7 HeEiW6YpOrRJmmhxDAnBeBIcMmU6w9okB8NinGZUlaU4G4bM153TcUNtUXO5nGW9 PsfrN/zsQtI5V+grugiNnYQHMVcj6pn104qJWvcHHdrOdhQLIfhrMjXf4ujjIOe3 zFjYT/jlchMl+iLUi6/PQZi+sExThiiAVHPMZgNpZQ+VhY1qtQ9+yTnFB6Vh544+ pAD1sy7J7dAtv9XLjLqaBdBUrIsmiFsU9t7NBHtwvtMAb//+q42fCwbAV8AOnzc/ 9wgL6a65h7Q1C8NkAS+grMyYNxr1fBDkJDCINzKowMwqOYoRbXM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:28 2026 by rpki-client