$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143967.roa File: AS143967.roa (raw, json) Hash identifier: A0FzYFHfzuO3EGUK10A//5kV3+33aEv08em2qQ8oLwo= Subject key identifier: E1:63:BA:C7:71:AD:8D:81:AE:DB:55:1E:16:DE:01:96:8E:87:EF:F1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 21AA7CD2572019A237DFDFE9A2377F3C60F907E2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143967.roa Signing time: Wed 04 Mar 2026 06:15:16 +0000 ROA not before: Wed 04 Mar 2026 06:10:16 +0000 ROA not after: Wed 03 Mar 2027 06:15:16 +0000 asID: 143967 IP address blocks: 240a:a525::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:aa:7c:d2:57:20:19:a2:37:df:df:e9:a2:37:7f:3c:60:f9:07:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:16 2026 GMT Not After : Mar 3 06:15:16 2027 GMT Subject: CN=E163BAC771AD8D81AEDB551E16DE01968E87EFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:16:3d:a3:a2:87:78:0e:40:e9:0e:7c:6d:d6: 28:e0:70:09:8a:7f:83:6e:db:71:b9:f1:25:6b:34: 8c:ae:0d:62:27:3a:f1:75:7b:61:88:32:02:88:b2: df:2a:a2:8e:2a:c9:64:e7:7a:bd:8f:d6:3b:92:e0: 8e:83:fd:ab:ee:f2:46:ba:f5:c4:36:c0:e7:28:ad: db:80:78:10:12:d1:e0:fd:f4:ea:ca:55:37:1b:64: 8b:79:1c:f2:c2:00:0e:27:b8:57:01:a5:f0:34:77: a5:3a:f6:50:02:8e:4e:2f:c1:66:d4:e2:01:e1:51: 94:27:63:68:60:9a:62:97:2c:ef:47:be:23:70:4e: df:ce:b1:5c:f3:1a:06:46:2c:1f:c1:20:47:2a:60: cd:3d:86:a8:a4:5d:80:44:2a:ed:b7:73:f2:b6:76: 76:ee:7e:bf:0f:5d:f5:a1:c3:4b:7a:68:7c:b7:85: 0f:97:8a:9b:ef:c0:2f:14:5a:28:e5:61:5e:9e:9b: 75:e2:fa:70:df:cb:46:a3:35:23:d4:30:b5:38:4b: 7d:11:98:81:4c:f7:71:6d:34:e8:23:d0:a7:82:81: aa:1d:67:af:56:a7:f0:f5:54:d8:16:98:f2:d3:8e: 7f:ef:82:f6:6b:d7:2c:9c:bd:42:ce:cd:48:d1:c5: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:BA:C7:71:AD:8D:81:AE:DB:55:1E:16:DE:01:96:8E:87:EF:F1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a525::/32 Signature Algorithm: sha256WithRSAEncryption d7:f9:a9:e7:32:d2:a3:ca:18:bb:96:0d:1b:50:19:74:1f:bb: 37:45:fa:a9:37:f7:d6:f7:fa:76:76:16:19:5a:ca:fb:79:f8: 41:c1:79:aa:79:86:e8:43:10:0d:17:65:0f:f4:a5:97:15:0b: c2:31:d4:17:47:fb:79:f1:6a:d6:95:32:01:41:62:9e:1a:76: ce:e0:07:7f:4e:a4:8c:ce:82:ef:92:60:ef:ac:46:5e:8d:2e: 78:a3:36:57:7b:91:c3:41:34:ac:03:e4:85:5b:21:b1:4b:98: ad:6d:10:54:37:db:d6:40:b9:94:74:ce:db:00:6c:c7:e4:17: 1d:50:c4:33:51:b3:36:aa:f2:df:b4:02:8d:cc:b1:06:c1:2d: 42:f9:c4:e4:09:a4:74:0a:fd:4e:ae:7b:ca:b9:cb:af:af:82: 7e:dd:2c:7d:c3:43:cc:bc:9a:af:84:4e:d4:9b:e3:d8:08:d5: 4d:b1:a8:46:12:e8:7f:08:e9:7e:c6:4d:b0:88:f2:18:37:df: df:a0:09:b9:1a:a1:bf:9e:b0:79:a7:93:88:d0:5a:95:e2:59: 13:eb:54:a1:84:54:e0:1a:f2:4c:07:5f:79:c1:db:5a:d6:7a: 02:53:44:55:cc:83:8c:f8:23:94:95:5a:c1:cb:bb:63:28:24: 48:b2:44:8e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIap80lcgGaI339/pojd/PGD5B+IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxNloX DTI3MDMwMzA2MTUxNlowMzExMC8GA1UEAxMoRTE2M0JBQzc3MUFEOEQ4MUFFREI1 NTFFMTZERTAxOTY4RTg3RUZGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJUWPaOih3gOQOkOfG3WKOBwCYp/g27bcbnxJWs0jK4NYic68XV7YYgyAoiy 3yqijirJZOd6vY/WO5LgjoP9q+7yRrr1xDbA5yit24B4EBLR4P306spVNxtki3kc 8sIADie4VwGl8DR3pTr2UAKOTi/BZtTiAeFRlCdjaGCaYpcs70e+I3BO386xXPMa BkYsH8EgRypgzT2GqKRdgEQq7bdz8rZ2du5+vw9d9aHDS3pofLeFD5eKm+/ALxRa KOVhXp6bdeL6cN/LRqM1I9QwtThLfRGYgUz3cW006CPQp4KBqh1nr1an8PVU2BaY 8tOOf++C9mvXLJy9Qs7NSNHFXYUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBThY7rH ca2Nga7bVR4W3gGWjofv8TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pSUwDQYJKoZIhvcNAQELBQADggEBANf5qecy0qPKGLuWDRtQGXQfuzdF+qk399b3 +nZ2Fhlayvt5+EHBeap5huhDEA0XZQ/0pZcVC8Ix1BdH+3nxataVMgFBYp4ads7g B39OpIzOgu+SYO+sRl6NLnijNld7kcNBNKwD5IVbIbFLmK1tEFQ329ZAuZR0ztsA bMfkFx1QxDNRszaq8t+0Ao3MsQbBLUL5xOQJpHQK/U6ue8q5y6+vgn7dLH3DQ8y8 mq+ETtSb49gI1U2xqEYS6H8I6X7GTbCI8hg339+gCbkaob+esHmnk4jQWpXiWRPr VKGEVOAa8kwHX3nB21rWegJTRFXMg4z4I5SVWsHLu2MoJEiyRI4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:49 2026 by rpki-client