$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143980.roa File: AS143980.roa (raw, json) Hash identifier: 1cDOaofpW4Tx8JjAUQc37KolHbXsgJFIxo+Dy82XHMo= Subject key identifier: 37:FC:94:9B:0E:43:6E:7A:0B:B2:30:98:8A:54:40:BF:5D:72:5B:25 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 73A624EBCC24FBF4E5A8B3FFC5808C9F557859AF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143980.roa Signing time: Wed 04 Mar 2026 06:12:45 +0000 ROA not before: Wed 04 Mar 2026 06:07:45 +0000 ROA not after: Wed 03 Mar 2027 06:12:45 +0000 asID: 143980 IP address blocks: 240a:a532::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a6:24:eb:cc:24:fb:f4:e5:a8:b3:ff:c5:80:8c:9f:55:78:59:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:45 2026 GMT Not After : Mar 3 06:12:45 2027 GMT Subject: CN=37FC949B0E436E7A0BB230988A5440BF5D725B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:53:52:bf:88:87:96:33:3a:b0:45:8c:1c: 3a:34:83:b8:84:9c:97:7d:94:e7:b8:50:45:19:d8: af:d0:f9:ac:b1:c1:06:ef:83:46:05:65:6b:c9:51: d3:c4:4b:4f:ca:de:06:81:09:7e:99:1b:77:36:07: e9:29:c1:a6:2c:bf:34:ca:2f:2d:58:10:fb:dd:89: 27:0d:2c:e6:f9:9d:24:4f:15:47:bc:6c:6a:bf:47: 23:0b:a8:d8:c5:42:70:2e:23:c5:25:f3:c4:fa:cc: ba:33:4f:38:f7:d1:e9:d3:8f:75:74:86:b6:00:52: e9:5a:eb:79:d0:2e:16:4d:17:e9:7c:64:23:66:cd: 7b:ee:6d:58:f2:cb:d5:ec:a8:1d:22:ba:56:46:93: 2d:d7:1b:a3:f7:44:ec:e7:b6:b2:f5:9c:66:78:11: 4b:6e:64:cc:85:79:10:b4:ca:15:c2:70:08:e8:83: 6b:7f:26:a4:11:f6:27:39:38:08:b9:09:cf:8a:24: ec:0f:db:63:54:e2:16:17:a8:28:19:47:b9:68:57: 88:42:40:fe:06:35:fb:bc:d0:86:d2:96:24:56:0a: cf:29:20:3b:9c:7b:6a:69:fc:08:94:2f:e5:81:bb: a7:e3:fe:1e:42:e6:f3:ed:6f:1f:de:ec:83:67:ac: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:94:9B:0E:43:6E:7A:0B:B2:30:98:8A:54:40:BF:5D:72:5B:25 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143980.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a532::/32 Signature Algorithm: sha256WithRSAEncryption 29:b2:f0:65:07:3c:87:79:36:79:33:2e:e5:99:89:2a:20:ad: 7a:5b:7c:a8:c6:d6:00:7a:ad:d1:d2:f3:01:0e:eb:22:94:b3: 78:09:3d:82:fd:ee:6b:9c:ae:c7:57:14:ea:b5:d7:40:51:34: 54:a4:ad:3f:b5:ff:d5:a3:d5:cd:e5:95:b0:25:8e:f3:44:40: b2:f9:29:e5:6f:5c:4e:ec:6b:71:ee:5c:8b:70:d4:7d:95:bc: e1:b8:54:e4:8a:9d:c4:fb:fa:95:b9:4e:c0:55:7d:34:3e:88: 35:c7:f9:9c:8f:fa:88:21:a2:83:5d:18:d7:f6:ec:df:91:62: f1:12:30:9d:52:14:75:27:9a:2b:e8:3f:7d:fd:82:3c:2b:36: cf:bf:4c:ed:bd:c1:90:f9:46:fe:be:71:b5:25:0c:d7:43:16: 8e:42:c3:06:64:a7:d0:dd:13:d4:29:4f:bc:58:2a:36:eb:c6: fb:38:16:5d:95:24:f5:a0:42:00:ea:7e:75:68:7e:52:7a:d3: d6:5c:0c:e5:7d:47:39:fb:c0:e5:bd:f6:68:8a:f7:8f:6d:33: 57:f0:72:a5:10:b4:72:0e:1d:33:b9:57:02:f0:ce:36:28:9c: dc:0b:2d:3b:ad:0b:b5:3f:a1:5a:ea:59:00:93:59:05:ee:05: 0d:94:f0:8f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUc6Yk68wk+/TlqLP/xYCMn1V4Wa8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0NVoX DTI3MDMwMzA2MTI0NVowMzExMC8GA1UEAxMoMzdGQzk0OUIwRTQzNkU3QTBCQjIz MDk4OEE1NDQwQkY1RDcyNUIyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZwU1K/iIeWMzqwRYwcOjSDuIScl32U57hQRRnYr9D5rLHBBu+DRgVla8lR 08RLT8reBoEJfpkbdzYH6SnBpiy/NMovLVgQ+92JJw0s5vmdJE8VR7xsar9HIwuo 2MVCcC4jxSXzxPrMujNPOPfR6dOPdXSGtgBS6VrredAuFk0X6XxkI2bNe+5tWPLL 1eyoHSK6VkaTLdcbo/dE7Oe2svWcZngRS25kzIV5ELTKFcJwCOiDa38mpBH2Jzk4 CLkJz4ok7A/bY1TiFheoKBlHuWhXiEJA/gY1+7zQhtKWJFYKzykgO5x7amn8CJQv 5YG7p+P+HkLm8+1vH97sg2esnrECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ3/JSb DkNueguyMJiKVEC/XXJbJTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pTIwDQYJKoZIhvcNAQELBQADggEBACmy8GUHPId5NnkzLuWZiSogrXpbfKjG1gB6 rdHS8wEO6yKUs3gJPYL97mucrsdXFOq110BRNFSkrT+1/9Wj1c3llbAljvNEQLL5 KeVvXE7sa3HuXItw1H2VvOG4VOSKncT7+pW5TsBVfTQ+iDXH+ZyP+oghooNdGNf2 7N+RYvESMJ1SFHUnmivoP339gjwrNs+/TO29wZD5Rv6+cbUlDNdDFo5CwwZkp9Dd E9QpT7xYKjbrxvs4Fl2VJPWgQgDqfnVoflJ609ZcDOV9Rzn7wOW99miK949tM1fw cqUQtHIOHTO5VwLwzjYonNwLLTutC7U/oVrqWQCTWQXuBQ2U8I8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:43 2026 by rpki-client