$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143983.roa File: AS143983.roa (raw, json) Hash identifier: klriZt9AM++48jRoxh7YjxusyUZiLLw6CTTLes/Opsw= Subject key identifier: 3A:A9:57:E9:C8:87:45:1A:3D:8B:79:33:9F:08:32:58:3C:C4:53:71 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1A77D7036DE5571DDD318F37F1C8A2A743852699 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143983.roa Signing time: Wed 04 Mar 2026 06:14:14 +0000 ROA not before: Wed 04 Mar 2026 06:09:14 +0000 ROA not after: Wed 03 Mar 2027 06:14:14 +0000 asID: 143983 IP address blocks: 240a:a535::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:77:d7:03:6d:e5:57:1d:dd:31:8f:37:f1:c8:a2:a7:43:85:26:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:14 2026 GMT Not After : Mar 3 06:14:14 2027 GMT Subject: CN=3AA957E9C887451A3D8B79339F0832583CC45371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:d5:a3:7d:c8:56:d9:1f:98:9e:84:85:33: ca:df:61:b0:13:9e:35:5a:2b:62:b0:aa:61:f1:4d: cc:ba:e4:df:e7:ea:42:e0:20:92:5d:fc:32:c4:aa: d3:f1:9f:3e:d6:37:bc:60:bb:94:b6:2d:1f:d4:b6: 86:c9:e8:e4:3d:c6:fb:b6:49:cd:ef:f2:21:29:e9: f6:08:f6:f9:f7:cb:89:9f:aa:4a:9b:c8:99:08:e1: 7b:5c:40:d8:73:c4:e2:45:6d:27:eb:24:27:f0:0c: 22:2d:78:c1:44:8e:05:43:a7:70:31:fe:bf:8c:8b: 7a:e4:b9:98:f6:64:8b:69:2d:13:9e:07:c0:6d:d4: 71:95:c2:06:16:04:70:ca:a8:d6:3f:cd:70:ba:e1: c3:55:50:6f:66:4e:80:d5:91:72:b2:00:23:6e:4e: 8a:8d:a1:1e:2b:5a:0e:09:9d:44:f6:67:6e:e5:f8: 98:e6:b1:01:f9:0d:00:fa:2a:86:d2:24:ac:7f:38: f8:10:dd:31:94:f5:2b:88:ae:57:7e:f4:0e:2b:41: 2a:c4:7f:18:56:b4:f6:41:d0:87:6a:c3:fb:5e:38: fc:30:a0:a0:82:09:2e:20:ca:df:9a:37:e3:4e:dc: 04:f3:a3:23:41:f2:49:40:7a:91:6d:39:41:93:17: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A9:57:E9:C8:87:45:1A:3D:8B:79:33:9F:08:32:58:3C:C4:53:71 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143983.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a535::/32 Signature Algorithm: sha256WithRSAEncryption 38:d9:ea:aa:37:7e:7e:6b:0f:1a:73:45:be:47:3d:fd:6a:49: e7:7e:69:8f:49:ad:7c:04:cb:e1:5c:97:6d:20:93:26:ec:16: 90:95:7c:a3:3a:4d:09:19:38:60:69:f9:31:c1:7c:d7:b7:33: 11:90:77:29:75:1b:75:b2:c0:d8:21:f3:54:6e:16:4c:aa:e5: 1d:1d:f7:32:b5:d1:cc:10:a8:c1:35:df:fe:3b:8d:f8:ce:2f: bf:29:3d:9b:45:89:ed:9b:51:2a:a6:78:c1:2c:6b:1e:af:fa: 59:d2:78:51:e3:a4:2a:d9:df:0a:35:ec:78:c0:ce:fb:18:21: 75:e3:69:61:1a:20:89:68:a0:d1:a8:ae:da:35:9f:bb:dd:43: 9d:b5:bc:90:bf:ca:27:47:40:d5:c7:f7:47:d1:3a:3f:89:fd: c8:8f:a0:fc:39:bc:e4:e0:a0:c4:7b:23:ab:67:8f:7f:66:1b: 36:17:74:9c:1a:37:c3:3c:6a:4e:03:23:2c:6b:46:84:16:87: 38:24:65:10:9c:e2:68:d0:b4:7b:2e:aa:73:05:a4:d8:0e:cb: 9c:11:dd:9c:cc:53:f4:5d:5a:96:54:16:a0:70:bf:7f:ba:a5: 1e:8c:1f:a6:98:d1:2c:8a:c9:e1:88:60:1b:98:e1:e0:88:fd: 10:05:92:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGnfXA23lVx3dMY838ciip0OFJpkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxNFoX DTI3MDMwMzA2MTQxNFowMzExMC8GA1UEAxMoM0FBOTU3RTlDODg3NDUxQTNEOEI3 OTMzOUYwODMyNTgzQ0M0NTM3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKeQ1aN9yFbZH5iehIUzyt9hsBOeNVorYrCqYfFNzLrk3+fqQuAgkl38MsSq 0/GfPtY3vGC7lLYtH9S2hsno5D3G+7ZJze/yISnp9gj2+ffLiZ+qSpvImQjhe1xA 2HPE4kVtJ+skJ/AMIi14wUSOBUOncDH+v4yLeuS5mPZki2ktE54HwG3UcZXCBhYE cMqo1j/NcLrhw1VQb2ZOgNWRcrIAI25Oio2hHitaDgmdRPZnbuX4mOaxAfkNAPoq htIkrH84+BDdMZT1K4iuV370DitBKsR/GFa09kHQh2rD+144/DCgoIIJLiDK35o3 407cBPOjI0HySUB6kW05QZMXpHcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ6qVfp yIdFGj2LeTOfCDJYPMRTcTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pTUwDQYJKoZIhvcNAQELBQADggEBADjZ6qo3fn5rDxpzRb5HPf1qSed+aY9JrXwE y+Fcl20gkybsFpCVfKM6TQkZOGBp+THBfNe3MxGQdyl1G3WywNgh81RuFkyq5R0d 9zK10cwQqME13/47jfjOL78pPZtFie2bUSqmeMEsax6v+lnSeFHjpCrZ3wo17HjA zvsYIXXjaWEaIIlooNGorto1n7vdQ521vJC/yidHQNXH90fROj+J/ciPoPw5vOTg oMR7I6tnj39mGzYXdJwaN8M8ak4DIyxrRoQWhzgkZRCc4mjQtHsuqnMFpNgOy5wR 3ZzMU/RdWpZUFqBwv3+6pR6MH6aY0SyKyeGIYBuY4eCI/RAFkhY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:11 2026 by rpki-client