$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143982.roa File: AS143982.roa (raw, json) Hash identifier: wfefdL2XilwjyxMJoMFEvrcIj+8l9cKouxT9VTSUlE0= Subject key identifier: 28:24:DB:7C:64:20:E9:B5:8A:DB:3D:2A:65:5B:E5:A1:46:A5:2B:E2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 33BC3EE67EFB2D58933FFA9CD84B67E3447CFB77 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143982.roa Signing time: Wed 04 Mar 2026 06:14:27 +0000 ROA not before: Wed 04 Mar 2026 06:09:27 +0000 ROA not after: Wed 03 Mar 2027 06:14:27 +0000 asID: 143982 IP address blocks: 240a:a534::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:bc:3e:e6:7e:fb:2d:58:93:3f:fa:9c:d8:4b:67:e3:44:7c:fb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:27 2026 GMT Not After : Mar 3 06:14:27 2027 GMT Subject: CN=2824DB7C6420E9B58ADB3D2A655BE5A146A52BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:06:b1:54:34:2e:3c:2c:7d:db:20:90:d3:c0: 6b:7b:64:84:d3:be:11:6e:2e:d9:6e:6a:7e:35:38: a2:0c:a6:bd:8d:30:d0:96:d9:43:bc:2f:3a:d3:d9: 5e:8b:e6:8e:d1:55:3e:41:64:12:70:63:97:b9:5d: 42:bb:79:64:90:4e:ed:b5:5b:a2:7e:47:70:e8:e7: ee:6b:40:55:5a:a3:4b:b9:fc:aa:55:17:da:90:80: d8:d2:59:d5:8b:c5:6f:79:5d:eb:b3:91:61:ce:7b: 30:ec:fa:48:9d:f0:16:d0:cf:1e:8f:4b:cc:19:56: f0:58:75:62:a9:35:b6:74:05:dd:54:ca:13:b0:d3: a4:d9:f7:59:6b:39:0f:c5:09:f2:e5:40:be:5a:9b: d4:0f:28:ab:42:22:ab:5b:69:2a:aa:de:37:9c:5d: 16:89:2b:5b:46:ab:b2:9e:5b:b3:44:6d:40:e4:7f: a5:b6:9c:0a:19:9f:db:7e:bd:b4:47:b3:58:c9:60: 3a:42:11:c0:af:26:b3:e2:7c:68:06:64:47:0d:ff: 42:03:a3:34:c8:1c:12:86:05:03:42:1f:2d:ab:9f: a0:27:7b:5c:ea:37:2f:ce:39:69:08:eb:af:70:bf: 31:84:2e:35:75:7d:94:c0:ee:1f:8e:f7:85:eb:44: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:24:DB:7C:64:20:E9:B5:8A:DB:3D:2A:65:5B:E5:A1:46:A5:2B:E2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143982.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a534::/32 Signature Algorithm: sha256WithRSAEncryption 90:ff:e4:75:8b:c8:0d:1b:5f:45:01:e0:96:61:df:1e:2d:57: 71:7a:91:ee:3f:39:2a:36:6d:24:36:50:8d:5a:1a:45:ac:57: 5d:ef:fb:9e:50:4c:56:dd:c1:40:7f:f0:76:af:44:da:35:57: 31:eb:d5:11:58:3c:84:38:26:88:b7:77:19:da:e1:74:62:90: 00:b2:ad:fe:82:88:7c:ec:aa:b9:49:f7:82:f8:60:41:de:78: 9f:8b:f2:16:a3:68:1f:ca:ce:fa:b3:c0:8a:ad:3a:f4:fe:13: b1:9e:91:fd:04:d4:fa:85:7a:40:e2:cc:e6:de:94:21:79:d3: d7:35:8e:d9:86:8e:66:80:2a:48:11:d8:21:c6:23:85:04:62: 0f:83:41:d3:9a:cf:9f:27:c9:4f:9c:89:1c:34:bc:dc:a0:63: 40:b2:a0:27:f7:b9:8e:85:a5:36:35:de:57:2c:a7:48:35:30: f7:1e:95:cf:1c:55:19:82:9a:1c:55:49:9c:3e:95:34:a0:57: 83:c5:da:21:b9:28:ef:cf:57:0c:cf:42:c2:eb:b4:5d:e4:1b: ff:89:8d:20:69:38:8b:f1:8d:42:13:a3:4a:5d:3b:2f:fe:79: 99:a9:3d:a3:c0:ad:90:c6:e0:2b:97:24:79:2e:e0:a7:f9:ee: 4e:0d:c8:5c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM7w+5n77LViTP/qc2Etn40R8+3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyN1oX DTI3MDMwMzA2MTQyN1owMzExMC8GA1UEAxMoMjgyNERCN0M2NDIwRTlCNThBREIz RDJBNjU1QkU1QTE0NkE1MkJFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANoGsVQ0LjwsfdsgkNPAa3tkhNO+EW4u2W5qfjU4ogymvY0w0JbZQ7wvOtPZ XovmjtFVPkFkEnBjl7ldQrt5ZJBO7bVbon5HcOjn7mtAVVqjS7n8qlUX2pCA2NJZ 1YvFb3ld67ORYc57MOz6SJ3wFtDPHo9LzBlW8Fh1Yqk1tnQF3VTKE7DTpNn3WWs5 D8UJ8uVAvlqb1A8oq0Iiq1tpKqreN5xdFokrW0arsp5bs0RtQOR/pbacChmf2369 tEezWMlgOkIRwK8ms+J8aAZkRw3/QgOjNMgcEoYFA0IfLaufoCd7XOo3L845aQjr r3C/MYQuNXV9lMDuH473hetEJlECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQoJNt8 ZCDptYrbPSplW+WhRqUr4jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pTQwDQYJKoZIhvcNAQELBQADggEBAJD/5HWLyA0bX0UB4JZh3x4tV3F6ke4/OSo2 bSQ2UI1aGkWsV13v+55QTFbdwUB/8HavRNo1VzHr1RFYPIQ4Joi3dxna4XRikACy rf6CiHzsqrlJ94L4YEHeeJ+L8hajaB/KzvqzwIqtOvT+E7Gekf0E1PqFekDizObe lCF509c1jtmGjmaAKkgR2CHGI4UEYg+DQdOaz58nyU+ciRw0vNygY0CyoCf3uY6F pTY13lcsp0g1MPcelc8cVRmCmhxVSZw+lTSgV4PF2iG5KO/PVwzPQsLrtF3kG/+J jSBpOIvxjUITo0pdOy/+eZmpPaPArZDG4CuXJHku4Kf57k4NyFw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:03 2026 by rpki-client