$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143960.roa File: AS143960.roa (raw, json) Hash identifier: IImDTBoERphsjSNg4QmuuBSoUhG1klqvSl3XKP1JwD8= Subject key identifier: 80:44:E4:CA:2C:D7:90:31:41:C4:5F:C4:22:B0:56:81:F7:C7:DA:7B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 69C4F2E79C39646099F2D04EA1F7693FF897A3ED Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143960.roa Signing time: Wed 04 Mar 2026 06:15:02 +0000 ROA not before: Wed 04 Mar 2026 06:10:02 +0000 ROA not after: Wed 03 Mar 2027 06:15:02 +0000 asID: 143960 IP address blocks: 240a:a51e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c4:f2:e7:9c:39:64:60:99:f2:d0:4e:a1:f7:69:3f:f8:97:a3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:02 2026 GMT Not After : Mar 3 06:15:02 2027 GMT Subject: CN=8044E4CA2CD7903141C45FC422B05681F7C7DA7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:ec:cd:c2:33:59:4c:1a:71:ec:7e:cf:70: 3c:3f:36:c4:95:1c:5f:0b:d3:f5:eb:eb:d8:75:2b: 94:5e:13:70:8b:aa:94:4d:f0:d5:bc:fb:1b:51:33: 15:a8:19:ba:b2:e5:cc:68:9b:79:a0:bf:83:1c:f8: 77:24:01:25:ad:f2:bc:00:a0:57:95:70:45:ef:ce: 04:d1:18:ee:a3:62:e2:0b:df:a0:57:36:6a:c2:cc: ce:2e:7a:83:d1:35:2b:e6:2e:35:1f:fd:99:8b:61: 52:a1:07:69:ab:b6:ed:50:1e:b5:b5:f7:40:a5:df: 54:ad:62:06:ac:7d:32:26:34:00:0c:1e:f5:8a:f8: 2c:43:a6:23:f0:01:2b:89:43:e5:32:8c:3d:04:d8: 6c:f0:9d:6f:b5:2a:20:d7:30:b8:88:e8:8a:9e:51: c5:c3:99:d0:c6:28:d3:d2:ec:38:ac:90:b0:1d:67: 18:6d:98:8d:13:b0:53:97:2e:03:6e:66:04:cf:3f: 23:c8:77:73:c7:d7:99:d8:a7:d3:26:d6:81:89:81: 30:3d:3b:74:b8:a7:12:f8:f7:f2:ab:ed:06:bb:8e: 40:1b:b3:0b:fa:6a:14:f1:16:f7:6f:29:42:98:d5: 03:19:2d:df:00:bd:7c:64:af:d6:93:99:3c:2e:f4: ad:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:44:E4:CA:2C:D7:90:31:41:C4:5F:C4:22:B0:56:81:F7:C7:DA:7B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143960.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a51e::/32 Signature Algorithm: sha256WithRSAEncryption 01:81:9e:9c:8e:c6:2b:f8:d8:37:60:b6:23:70:a0:e9:cc:fa: 94:0e:66:11:db:bd:a1:41:46:e2:54:db:1e:1b:96:10:75:12: 5e:da:bc:38:b7:53:41:58:46:c1:ab:fd:ab:e0:8d:72:d5:39: f5:1b:76:be:12:2a:2e:75:f1:ea:84:d0:a7:e3:31:aa:80:c5: 1b:3f:56:3c:07:8b:b9:26:7b:58:ba:8d:00:88:16:3d:c8:f7: a6:a0:5f:9e:cb:6e:57:cf:73:d7:d0:d8:73:6c:89:8d:d7:57: d7:c6:81:91:05:02:43:98:e5:14:3a:81:2f:d7:27:22:05:0b: 94:92:24:4e:c9:6d:7a:13:3e:7c:bb:72:f0:1f:ea:83:fc:40: f9:c7:10:1c:9d:af:0a:6a:a5:bb:5d:bd:37:77:55:57:e7:2c: 3b:f7:00:7e:2e:cc:2f:aa:d1:61:b4:bf:77:a2:80:d4:91:b2: 1f:c4:5f:c4:20:8e:e5:a3:3b:a3:11:7a:b7:48:04:a6:4e:af: 26:d2:33:e9:86:b5:29:d1:9f:3d:88:28:d6:e2:d4:bf:29:d6: a8:2f:9c:a3:b8:b1:7f:31:43:1b:c5:97:58:97:e9:43:8f:5d: 11:85:81:77:4d:d3:8e:2d:79:2f:d7:27:be:e9:9c:ab:11:17: fc:f3:35:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUacTy55w5ZGCZ8tBOofdpP/iXo+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwMloX DTI3MDMwMzA2MTUwMlowMzExMC8GA1UEAxMoODA0NEU0Q0EyQ0Q3OTAzMTQxQzQ1 RkM0MjJCMDU2ODFGN0M3REE3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJw87M3CM1lMGnHsfs9wPD82xJUcXwvT9evr2HUrlF4TcIuqlE3w1bz7G1Ez FagZurLlzGibeaC/gxz4dyQBJa3yvACgV5VwRe/OBNEY7qNi4gvfoFc2asLMzi56 g9E1K+YuNR/9mYthUqEHaau27VAetbX3QKXfVK1iBqx9MiY0AAwe9Yr4LEOmI/AB K4lD5TKMPQTYbPCdb7UqINcwuIjoip5RxcOZ0MYo09LsOKyQsB1nGG2YjROwU5cu A25mBM8/I8h3c8fXmdin0ybWgYmBMD07dLinEvj38qvtBruOQBuzC/pqFPEW928p QpjVAxkt3wC9fGSv1pOZPC70rR8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSAROTK LNeQMUHEX8QisFaB98faezAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pR4wDQYJKoZIhvcNAQELBQADggEBAAGBnpyOxiv42DdgtiNwoOnM+pQOZhHbvaFB RuJU2x4blhB1El7avDi3U0FYRsGr/avgjXLVOfUbdr4SKi518eqE0KfjMaqAxRs/ VjwHi7kme1i6jQCIFj3I96agX57LblfPc9fQ2HNsiY3XV9fGgZEFAkOY5RQ6gS/X JyIFC5SSJE7JbXoTPny7cvAf6oP8QPnHEBydrwpqpbtdvTd3VVfnLDv3AH4uzC+q 0WG0v3eigNSRsh/EX8QgjuWjO6MRerdIBKZOrybSM+mGtSnRnz2IKNbi1L8p1qgv nKO4sX8xQxvFl1iX6UOPXRGFgXdN044teS/XJ77pnKsRF/zzNXE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:01 2026 by rpki-client