$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143961.roa File: AS143961.roa (raw, json) Hash identifier: PxsOyM4ixCCTkPssEUHv9zfeUQ3MDajX7xB2rLiJhmo= Subject key identifier: D9:E0:F0:5A:EE:CC:8F:0E:95:FF:14:B7:FA:51:F1:D6:01:22:88:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F378DD76B4C1260E69DDDE28157518AF87CC942 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143961.roa Signing time: Wed 04 Mar 2026 06:12:56 +0000 ROA not before: Wed 04 Mar 2026 06:07:56 +0000 ROA not after: Wed 03 Mar 2027 06:12:56 +0000 asID: 143961 IP address blocks: 240a:a51f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:37:8d:d7:6b:4c:12:60:e6:9d:dd:e2:81:57:51:8a:f8:7c:c9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:56 2026 GMT Not After : Mar 3 06:12:56 2027 GMT Subject: CN=D9E0F05AEECC8F0E95FF14B7FA51F1D601228848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8b:fe:d5:3d:19:47:85:5c:21:bc:5a:bf:74: d1:14:7c:e5:8d:2b:c2:f4:67:4a:a8:43:93:f6:1f: c3:4e:03:b8:71:42:2e:0f:c8:fa:84:41:a3:4d:0e: 5f:93:04:82:9d:01:e2:51:ad:e6:66:0a:e4:c3:7c: ed:d4:97:0b:dc:74:9f:70:e3:e9:7c:0c:58:db:cb: a3:f2:e5:35:b9:94:ab:72:00:37:bb:08:f0:84:ca: d3:6b:de:b7:19:50:d7:e7:7c:c4:2a:20:17:7d:4e: 91:ce:ec:86:6c:75:de:dc:39:49:6e:a3:9f:fe:cd: 2f:ff:ca:f6:58:e1:1f:93:1b:d3:fe:50:5f:7b:7d: 45:4c:2b:1d:18:05:86:93:6a:f6:89:3c:42:cf:3d: ee:5f:cf:eb:33:ba:e1:ac:df:cf:c2:57:b5:b7:25: 18:6b:84:af:e8:a8:4d:fa:a6:6b:24:fc:2e:f6:c8: 6b:ba:51:e5:27:30:21:ca:3d:f5:bf:7c:52:15:c4: 0b:d7:d8:df:c1:00:fe:63:c5:53:44:6f:d7:a4:62: 70:74:bf:50:82:25:30:b2:b5:6e:d1:7d:88:af:65: f5:47:59:4f:5d:62:2d:53:eb:3d:d2:4d:3a:ed:3b: df:25:40:2b:4b:69:ab:d0:15:86:75:1e:1a:88:b8: f9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E0:F0:5A:EE:CC:8F:0E:95:FF:14:B7:FA:51:F1:D6:01:22:88:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143961.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a51f::/32 Signature Algorithm: sha256WithRSAEncryption 55:cf:22:cd:c5:49:3a:5e:aa:ca:2f:56:f7:32:7b:57:02:cb: 4e:81:67:dd:e1:be:1d:1f:b9:21:0f:96:2a:5c:0e:2f:a4:5a: 3b:33:ba:4d:6e:3c:13:03:9b:09:01:4f:8e:3f:be:cd:36:93: 80:47:73:a7:31:3c:84:71:4f:4f:3f:48:d8:3b:7d:5b:a9:e4: d8:4b:e5:65:56:6e:40:4b:fd:07:0d:12:7a:f8:69:2c:39:bd: ed:2a:5c:f6:1b:dc:69:86:a2:89:a6:82:ff:a9:ba:7f:ee:da: 5b:33:77:c7:ca:b3:3e:74:be:1b:4e:1c:3b:3d:b3:e8:a7:34: 5e:58:ac:4a:8d:a3:b7:ba:00:bd:22:b6:d0:09:49:c3:0e:2e: 55:9a:ed:66:31:df:bb:42:32:95:f0:e2:7e:11:c4:6e:a2:0c: f0:76:35:96:94:4d:c8:46:de:c8:a8:41:28:21:d3:4a:45:30: 86:0f:25:6e:84:da:72:33:78:ee:87:3d:b4:1c:2f:07:71:93: b6:a6:33:c4:97:4e:8a:2f:07:23:8a:0c:af:83:82:84:ee:d9: c6:a7:f4:55:7a:9e:41:e7:87:ce:9c:fa:9f:f6:63:d3:5b:af: ab:2b:11:12:a0:00:b4:cc:85:ac:94:16:57:a7:9e:31:74:bc: 57:11:c4:5c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXzeN12tMEmDmnd3igVdRivh8yUIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1NloX DTI3MDMwMzA2MTI1NlowMzExMC8GA1UEAxMoRDlFMEYwNUFFRUNDOEYwRTk1RkYx NEI3RkE1MUYxRDYwMTIyODg0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKL/tU9GUeFXCG8Wr900RR85Y0rwvRnSqhDk/Yfw04DuHFCLg/I+oRBo00O X5MEgp0B4lGt5mYK5MN87dSXC9x0n3Dj6XwMWNvLo/LlNbmUq3IAN7sI8ITK02ve txlQ1+d8xCogF31Okc7shmx13tw5SW6jn/7NL//K9ljhH5Mb0/5QX3t9RUwrHRgF hpNq9ok8Qs897l/P6zO64azfz8JXtbclGGuEr+ioTfqmayT8LvbIa7pR5ScwIco9 9b98UhXEC9fY38EA/mPFU0Rv16RicHS/UIIlMLK1btF9iK9l9UdZT11iLVPrPdJN Ou073yVAK0tpq9AVhnUeGoi4+c0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTZ4PBa 7syPDpX/FLf6UfHWASKISDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pR8wDQYJKoZIhvcNAQELBQADggEBAFXPIs3FSTpeqsovVvcye1cCy06BZ93hvh0f uSEPlipcDi+kWjszuk1uPBMDmwkBT44/vs02k4BHc6cxPIRxT08/SNg7fVup5NhL 5WVWbkBL/QcNEnr4aSw5ve0qXPYb3GmGoommgv+pun/u2lszd8fKsz50vhtOHDs9 s+inNF5YrEqNo7e6AL0ittAJScMOLlWa7WYx37tCMpXw4n4RxG6iDPB2NZaUTchG 3sioQSgh00pFMIYPJW6E2nIzeO6HPbQcLwdxk7amM8SXToovByOKDK+DgoTu2can 9FV6nkHnh86c+p/2Y9Nbr6srERKgALTMhayUFlennjF0vFcRxFw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:14 2026 by rpki-client