$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143883.roa File: AS143883.roa (raw, json) Hash identifier: T5Zy3XSMp39iN/b4qo2RpgFScqKhcv5SqhSiVEtzSr8= Subject key identifier: 9B:EE:8B:F3:A6:B6:98:60:62:EA:F5:C1:6C:51:DD:8E:C6:9B:A3:C4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 34BF29262F5B7F771CA4667E22EF3BF7691CADDF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143883.roa Signing time: Wed 04 Mar 2026 06:14:19 +0000 ROA not before: Wed 04 Mar 2026 06:09:19 +0000 ROA not after: Wed 03 Mar 2027 06:14:19 +0000 asID: 143883 IP address blocks: 240a:a4d1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:bf:29:26:2f:5b:7f:77:1c:a4:66:7e:22:ef:3b:f7:69:1c:ad:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:19 2026 GMT Not After : Mar 3 06:14:19 2027 GMT Subject: CN=9BEE8BF3A6B6986062EAF5C16C51DD8EC69BA3C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:0c:dd:4a:42:de:e2:d3:eb:c1:d2:fc:dd: 50:d3:ad:44:44:ae:92:6b:b4:54:ae:a0:1f:8c:86: 9b:06:1a:1b:d4:72:b8:eb:aa:dd:f4:b6:17:f0:56: 78:54:88:e1:05:05:95:6e:4e:3e:26:93:af:7d:ec: 05:43:51:12:21:15:94:8b:35:fa:ae:d1:7c:0c:4d: e9:0f:64:05:c7:83:4a:38:39:2d:52:b5:a1:6f:0f: 30:c8:8e:8b:46:92:60:fb:d5:e6:5e:8f:9d:c0:27: 4d:ea:b6:9f:84:fe:13:0d:13:e5:70:96:ad:26:f8: 54:fa:d2:3d:15:e5:41:32:e9:5f:37:2e:5f:b1:69: 73:0c:dc:f8:0c:09:27:51:41:f1:a2:9a:28:da:4a: 67:85:e7:bf:93:d0:37:d1:75:66:d7:10:63:45:5a: aa:f5:38:fe:6b:4c:8c:de:f7:2d:44:65:f6:86:6d: 11:55:98:52:c1:64:20:43:5b:88:07:f2:44:67:89: 83:ad:16:4a:03:57:2a:b5:e6:50:84:99:fa:20:58: bc:36:6d:61:ae:16:a5:6b:a2:f1:aa:23:fc:59:63: 60:64:ea:51:a8:a6:69:57:2f:71:84:4c:c3:fd:78: 0c:71:d8:0c:e2:40:57:a4:0c:6b:01:11:5b:d6:8d: 16:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EE:8B:F3:A6:B6:98:60:62:EA:F5:C1:6C:51:DD:8E:C6:9B:A3:C4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143883.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4d1::/32 Signature Algorithm: sha256WithRSAEncryption 5e:6a:c8:c8:ae:46:e0:1b:b6:06:7a:fe:c7:b0:01:3c:ba:46: 6a:84:89:6f:52:a1:70:a8:2b:78:ee:15:2e:c1:0c:32:26:bb: 9f:09:5a:8d:18:2b:14:bc:eb:e5:8c:d4:ee:10:77:d9:ec:b7: 28:2e:40:14:b5:d2:6f:73:f1:88:52:eb:fb:29:be:e7:95:ec: 42:91:ff:19:71:0e:21:29:22:66:25:0f:be:07:62:bf:78:39: 11:a8:25:e6:ea:97:b9:3c:5a:8c:24:9e:74:37:dd:d1:03:0c: 12:77:c6:8b:1e:79:f0:a0:4a:c9:e8:f5:25:e5:29:a6:23:65: 39:16:8f:4c:f5:e8:2e:48:e1:c7:95:65:2f:bd:70:0a:97:6e: f3:2d:1a:3d:bd:98:a9:9a:af:8c:50:58:43:7e:14:f8:b8:e5: 1d:3b:b8:9e:5f:d5:b7:4b:8b:79:f4:dd:1a:57:aa:32:70:25: 5c:5a:04:f5:80:5d:5d:db:de:e2:f6:b6:1d:b5:10:5a:77:34: b2:9d:23:01:a1:98:49:de:88:7e:54:0c:92:f0:f2:58:20:05: a6:d1:3f:88:49:60:36:6f:13:fa:65:bf:6e:f0:36:da:ec:06: 48:87:84:8e:66:cb:dd:c0:1c:5a:26:d0:f6:f2:b0:67:56:9f: be:37:d6:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNL8pJi9bf3ccpGZ+Iu8792kcrd8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxOVoX DTI3MDMwMzA2MTQxOVowMzExMC8GA1UEAxMoOUJFRThCRjNBNkI2OTg2MDYyRUFG NUMxNkM1MUREOEVDNjlCQTNDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQnDN1KQt7i0+vB0vzdUNOtRESukmu0VK6gH4yGmwYaG9RyuOuq3fS2F/BW eFSI4QUFlW5OPiaTr33sBUNREiEVlIs1+q7RfAxN6Q9kBceDSjg5LVK1oW8PMMiO i0aSYPvV5l6PncAnTeq2n4T+Ew0T5XCWrSb4VPrSPRXlQTLpXzcuX7Fpcwzc+AwJ J1FB8aKaKNpKZ4Xnv5PQN9F1ZtcQY0VaqvU4/mtMjN73LURl9oZtEVWYUsFkIENb iAfyRGeJg60WSgNXKrXmUISZ+iBYvDZtYa4WpWui8aoj/FljYGTqUaimaVcvcYRM w/14DHHYDOJAV6QMawERW9aNFqUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSb7ovz praYYGLq9cFsUd2OxpujxDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pNEwDQYJKoZIhvcNAQELBQADggEBAF5qyMiuRuAbtgZ6/sewATy6RmqEiW9SoXCo K3juFS7BDDImu58JWo0YKxS86+WM1O4Qd9nstyguQBS10m9z8YhS6/spvueV7EKR /xlxDiEpImYlD74HYr94ORGoJebql7k8WowknnQ33dEDDBJ3xoseefCgSsno9SXl KaYjZTkWj0z16C5I4ceVZS+9cAqXbvMtGj29mKmar4xQWEN+FPi45R07uJ5f1bdL i3n03RpXqjJwJVxaBPWAXV3b3uL2th21EFp3NLKdIwGhmEneiH5UDJLw8lggBabR P4hJYDZvE/plv27wNtrsBkiHhI5my93AHFom0PbysGdWn7431vQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:30 2026 by rpki-client