$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143979.roa File: AS143979.roa (raw, json) Hash identifier: iF4vgEHrFh3GzQhM+T0FEh3rIda3jj40ohJg9gU8+hs= Subject key identifier: 8E:45:C1:1B:15:A0:CE:60:F9:EB:AE:B8:AD:B0:89:23:6A:C4:A0:72 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E82E3A9D8621DE3494F4226F16620DC0152C677 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143979.roa Signing time: Wed 04 Mar 2026 06:13:36 +0000 ROA not before: Wed 04 Mar 2026 06:08:36 +0000 ROA not after: Wed 03 Mar 2027 06:13:36 +0000 asID: 143979 IP address blocks: 240a:a531::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:82:e3:a9:d8:62:1d:e3:49:4f:42:26:f1:66:20:dc:01:52:c6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:36 2026 GMT Not After : Mar 3 06:13:36 2027 GMT Subject: CN=8E45C11B15A0CE60F9EBAEB8ADB089236AC4A072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:17:43:57:52:9a:e8:6c:5b:a2:92:13:42: e3:f7:8c:b3:d3:3c:56:14:93:e1:67:8c:82:a2:ad: b1:b1:53:09:00:2d:85:ed:24:eb:89:5b:ab:7b:22: 37:ef:08:94:41:3a:3d:ad:94:c1:c3:6a:1c:35:69: a0:a1:8b:ec:86:a6:2f:f4:20:f6:5c:d8:88:b2:2a: 90:4e:f0:11:3f:44:96:b5:a0:10:a7:53:4c:b7:82: 50:ad:af:a1:4c:31:0b:b3:7e:58:5d:ae:91:40:c6: e2:49:bc:21:29:7a:af:e5:86:c8:cc:ac:f9:81:6d: 25:33:43:71:a8:30:26:86:bf:54:a4:db:59:1b:f3: db:4a:e2:df:a8:e5:d1:21:dc:38:8b:c7:9d:e7:a6: 97:ff:35:35:28:b6:df:96:b6:e6:7c:4d:f3:26:00: 66:fd:46:4f:30:95:b6:f0:8e:6c:9f:a2:84:65:48: ef:8e:c1:0d:9b:cd:c4:d2:57:a9:a7:c0:ab:c3:d9: 55:9d:0d:41:75:cc:7e:3f:bb:24:ab:a4:84:f8:5d: f4:05:75:53:95:5e:a5:73:98:c1:60:14:5c:e1:26: 07:c5:f6:75:a3:df:6b:0d:c0:dd:18:8c:f1:56:be: c7:aa:b1:5c:d0:76:de:85:9b:b3:9a:25:1d:ae:02: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:45:C1:1B:15:A0:CE:60:F9:EB:AE:B8:AD:B0:89:23:6A:C4:A0:72 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143979.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a531::/32 Signature Algorithm: sha256WithRSAEncryption 83:5a:66:cc:be:92:a5:20:a0:55:de:e6:ae:8b:87:63:43:e6: be:10:c7:b2:ef:05:4c:e8:04:4c:a2:c5:6a:5d:95:bf:74:37: 4a:d5:b5:1e:50:e1:d6:67:32:95:10:d7:a3:a0:39:2f:c1:3d: d9:aa:78:5b:30:e9:98:3c:20:83:54:69:95:94:50:44:33:63: 1f:b3:19:7e:59:85:ef:f1:0c:98:9f:93:10:48:97:a0:39:1a: 30:52:03:d6:3c:dc:86:ea:f6:81:cf:00:c4:31:56:60:2d:67: d1:00:a4:ec:e6:55:ac:74:8b:e7:a1:df:b1:cd:69:18:f7:e7: 7d:10:c0:85:8e:55:94:91:cc:d2:78:69:ed:84:62:22:6c:e9: 71:33:8d:fc:7b:0b:34:9d:4d:b7:52:27:e6:c3:3f:3b:42:e6: 27:e3:0b:97:b6:07:1e:6b:db:99:a0:02:48:42:1f:28:8c:de: 5a:4d:1b:7b:79:53:28:88:cd:91:8c:3c:00:ed:87:d0:38:25: 3d:23:48:57:1b:39:f8:c4:eb:13:18:26:8e:93:ee:8a:17:92: e1:c4:d8:c8:89:93:07:fe:84:ad:2c:9e:37:4d:ef:4a:73:a5: ed:84:20:53:0d:70:8c:2a:be:d4:9e:8a:4f:63:eb:e2:ad:d0: ab:85:14:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULoLjqdhiHeNJT0Im8WYg3AFSxncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzNloX DTI3MDMwMzA2MTMzNlowMzExMC8GA1UEAxMoOEU0NUMxMUIxNUEwQ0U2MEY5RUJB RUI4QURCMDg5MjM2QUM0QTA3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjTF0NXUprobFuikhNC4/eMs9M8VhST4WeMgqKtsbFTCQAthe0k64lbq3si N+8IlEE6Pa2UwcNqHDVpoKGL7IamL/Qg9lzYiLIqkE7wET9ElrWgEKdTTLeCUK2v oUwxC7N+WF2ukUDG4km8ISl6r+WGyMys+YFtJTNDcagwJoa/VKTbWRvz20ri36jl 0SHcOIvHneeml/81NSi235a25nxN8yYAZv1GTzCVtvCObJ+ihGVI747BDZvNxNJX qafAq8PZVZ0NQXXMfj+7JKukhPhd9AV1U5VepXOYwWAUXOEmB8X2daPfaw3A3RiM 8Va+x6qxXNB23oWbs5olHa4Ctg8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSORcEb FaDOYPnrrritsIkjasSgcjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pTEwDQYJKoZIhvcNAQELBQADggEBAINaZsy+kqUgoFXe5q6Lh2ND5r4Qx7LvBUzo BEyixWpdlb90N0rVtR5Q4dZnMpUQ16OgOS/BPdmqeFsw6Zg8IINUaZWUUEQzYx+z GX5Zhe/xDJifkxBIl6A5GjBSA9Y83Ibq9oHPAMQxVmAtZ9EApOzmVax0i+eh37HN aRj3530QwIWOVZSRzNJ4ae2EYiJs6XEzjfx7CzSdTbdSJ+bDPztC5ifjC5e2Bx5r 25mgAkhCHyiM3lpNG3t5UyiIzZGMPADth9A4JT0jSFcbOfjE6xMYJo6T7ooXkuHE 2MiJkwf+hK0snjdN70pzpe2EIFMNcIwqvtSeik9j6+Kt0KuFFGE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:05 2026 by rpki-client