$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143976.roa File: AS143976.roa (raw, json) Hash identifier: OeOJwp7iCjMS6bQMG0ZnaFpQsAHG8IO0dRBuerzrxuc= Subject key identifier: DC:98:C5:83:CD:D9:2A:A6:5E:A9:3C:8D:D4:2F:A6:3E:93:A8:CD:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5DFA28E286FA8366839488B2BE21DF280293DC8A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143976.roa Signing time: Wed 04 Mar 2026 06:13:54 +0000 ROA not before: Wed 04 Mar 2026 06:08:54 +0000 ROA not after: Wed 03 Mar 2027 06:13:54 +0000 asID: 143976 IP address blocks: 240a:a52e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fa:28:e2:86:fa:83:66:83:94:88:b2:be:21:df:28:02:93:dc:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:54 2026 GMT Not After : Mar 3 06:13:54 2027 GMT Subject: CN=DC98C583CDD92AA65EA93C8DD42FA63E93A8CDA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:35:ef:f8:4f:35:2f:c8:23:44:d8:23:cf: 1a:b1:64:14:72:60:0a:ed:5b:08:27:b3:2d:30:e2: 2a:17:2f:56:71:0b:0b:ad:d0:29:f1:27:9e:fd:19: 1c:ae:d9:8c:3d:8e:a1:ad:8d:4e:cf:6f:ad:a7:92: 7a:f2:43:49:48:ae:fd:43:18:d7:2d:f9:f2:fe:f1: de:7c:83:a8:82:ac:ff:31:80:d5:2a:0a:9b:eb:15: df:71:30:dd:0c:57:91:58:f7:8b:a2:eb:05:4d:80: 27:52:eb:7b:6e:d9:61:6a:4a:ce:91:65:e2:31:f8: 4e:90:cd:c3:81:81:c7:b5:93:93:ab:01:24:c2:11: 54:77:11:c5:ad:58:06:00:b5:a5:a4:e2:bd:a1:3f: f2:f9:c1:b0:a6:b9:ea:d1:b9:ff:3b:b8:72:50:73: 8d:9d:03:5a:37:01:60:17:66:db:a7:d4:73:3a:98: 07:7c:db:b3:30:68:b8:3b:bc:8a:22:58:b1:6a:09: f6:62:ea:96:e0:13:62:45:53:f2:ae:ba:f8:73:9a: 19:34:9e:73:b7:b0:d4:6d:68:6a:2b:70:85:db:e9: 32:d0:26:a0:a5:7b:56:6f:ad:ce:63:20:4d:aa:dc: 44:13:9b:28:33:b8:b6:9b:1a:e7:7c:b2:f2:19:fc: 04:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:98:C5:83:CD:D9:2A:A6:5E:A9:3C:8D:D4:2F:A6:3E:93:A8:CD:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143976.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a52e::/32 Signature Algorithm: sha256WithRSAEncryption d9:df:6c:91:bf:e6:be:32:c2:fd:3e:36:2f:7c:77:9a:d2:7f: b5:ed:9b:dd:35:e3:bd:c4:6a:5c:7a:53:af:59:50:fb:41:3c: e3:4f:71:01:67:3a:b2:90:f4:af:fb:6b:62:97:25:41:5a:50: 28:3c:a0:de:f4:66:65:ed:9b:56:6e:07:bf:13:01:1f:57:6f: c6:19:4b:02:bf:e0:3f:be:9c:2d:e4:dc:21:a7:1d:2f:6a:91: 85:f8:8e:30:b3:f0:76:dd:6d:19:c9:fa:50:3c:37:c6:fc:53: 61:bb:ed:9c:92:c7:d2:78:94:eb:7e:15:d5:94:71:51:88:e8: 6b:23:7c:c9:c2:5c:86:8c:26:89:88:2c:2d:28:f3:e1:27:84: 22:bd:77:f1:fa:54:d4:90:7a:d5:df:1a:e7:10:c9:47:4f:c1: 80:c4:0a:bd:a1:33:fc:59:2d:98:5d:9a:eb:2a:bf:ee:87:82: 3e:24:9f:7a:58:82:06:2a:00:78:96:73:1a:a0:fc:37:cf:e8: 70:ac:d4:a4:89:92:0a:0f:b8:45:74:5f:a4:f3:84:ac:ee:1d: b7:c4:48:8f:a9:e7:5b:14:bc:3c:19:35:e0:14:4a:ed:1d:b5: e2:08:47:90:a9:4c:50:5e:6e:f3:cd:fd:6d:06:22:e6:d8:f5: 54:72:de:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXfoo4ob6g2aDlIiyviHfKAKT3IowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1NFoX DTI3MDMwMzA2MTM1NFowMzExMC8GA1UEAxMoREM5OEM1ODNDREQ5MkFBNjVFQTkz QzhERDQyRkE2M0U5M0E4Q0RBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPfNe/4TzUvyCNE2CPPGrFkFHJgCu1bCCezLTDiKhcvVnELC63QKfEnnv0Z HK7ZjD2Ooa2NTs9vraeSevJDSUiu/UMY1y358v7x3nyDqIKs/zGA1SoKm+sV33Ew 3QxXkVj3i6LrBU2AJ1Lre27ZYWpKzpFl4jH4TpDNw4GBx7WTk6sBJMIRVHcRxa1Y BgC1paTivaE/8vnBsKa56tG5/zu4clBzjZ0DWjcBYBdm26fUczqYB3zbszBouDu8 iiJYsWoJ9mLqluATYkVT8q66+HOaGTSec7ew1G1oaitwhdvpMtAmoKV7Vm+tzmMg TarcRBObKDO4tpsa53yy8hn8BCcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTcmMWD zdkqpl6pPI3UL6Y+k6jNpTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pS4wDQYJKoZIhvcNAQELBQADggEBANnfbJG/5r4ywv0+Ni98d5rSf7Xtm901473E alx6U69ZUPtBPONPcQFnOrKQ9K/7a2KXJUFaUCg8oN70ZmXtm1ZuB78TAR9Xb8YZ SwK/4D++nC3k3CGnHS9qkYX4jjCz8HbdbRnJ+lA8N8b8U2G77ZySx9J4lOt+FdWU cVGI6GsjfMnCXIaMJomILC0o8+EnhCK9d/H6VNSQetXfGucQyUdPwYDECr2hM/xZ LZhdmusqv+6Hgj4kn3pYggYqAHiWcxqg/DfP6HCs1KSJkgoPuEV0X6TzhKzuHbfE SI+p51sUvDwZNeAUSu0dteIIR5CpTFBebvPN/W0GIubY9VRy3qw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:16 2026 by rpki-client