$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143984.roa File: AS143984.roa (raw, json) Hash identifier: VLTKGRHk+dp0pWMfb1iXBE18YyFfn+B1No1wJyM+ouc= Subject key identifier: 67:7F:9C:22:0B:B0:44:09:68:4A:B0:16:CB:94:24:21:82:10:A5:75 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48DDE000CE011208F2E4550F445BF94328F89DDB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143984.roa Signing time: Wed 04 Mar 2026 06:14:42 +0000 ROA not before: Wed 04 Mar 2026 06:09:42 +0000 ROA not after: Wed 03 Mar 2027 06:14:42 +0000 asID: 143984 IP address blocks: 240a:a536::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:dd:e0:00:ce:01:12:08:f2:e4:55:0f:44:5b:f9:43:28:f8:9d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:42 2026 GMT Not After : Mar 3 06:14:42 2027 GMT Subject: CN=677F9C220BB04409684AB016CB9424218210A575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:65:e7:80:18:a4:a7:e4:7a:73:95:83:6d: df:f1:fd:d0:a1:7a:ae:d5:48:05:e1:80:cd:43:26: cd:48:30:0d:7d:15:8e:95:29:37:47:1d:e8:ac:3f: 40:56:0f:22:41:3d:56:3f:52:83:2c:ad:0a:d7:3d: 6a:89:61:d5:ff:49:ea:e6:7d:5e:e9:38:fb:3e:3e: 55:f0:8e:cf:55:78:7d:4f:4d:f4:84:f5:bc:7d:b1: de:89:85:6c:e5:08:cb:45:31:4c:20:f6:fd:b3:8b: a1:19:bb:04:8e:fb:59:ef:dc:53:f9:47:91:c7:cd: 06:49:07:50:6c:65:bb:2a:5d:17:10:a6:40:fe:49: 5e:de:20:5a:c4:86:66:76:d6:4b:e7:d6:df:d8:4c: 86:ec:03:72:98:34:af:6a:e4:40:f3:04:8c:76:a0: 46:33:d2:fb:4e:ea:e0:18:1f:dc:6b:a6:3a:f3:24: 86:85:c4:e1:6e:b7:0c:83:9b:3d:09:a9:d3:10:b3: 9f:c9:e4:c4:2d:05:3b:49:1e:e0:ec:35:67:8c:91: 9b:81:d8:9e:af:b6:d2:02:fb:44:a8:05:11:79:d7: 37:1c:e3:36:7b:c6:14:85:4e:cc:8d:6a:11:84:e8: be:98:6d:9e:36:8c:95:8b:7d:42:d5:58:1b:33:97: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7F:9C:22:0B:B0:44:09:68:4A:B0:16:CB:94:24:21:82:10:A5:75 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a536::/32 Signature Algorithm: sha256WithRSAEncryption 61:8f:b8:a3:42:13:fd:de:62:08:51:f1:90:f1:e6:d2:84:55: 40:96:53:c6:a7:82:e7:8b:bf:8e:c9:23:e8:87:ba:2f:fd:86: 61:00:c5:35:61:6c:7c:01:df:e6:a8:60:55:10:1d:e5:2c:5f: b4:4a:15:e7:3d:20:35:cf:d5:de:15:12:68:93:29:7d:48:30: 4e:9a:7b:e2:32:0f:c1:50:f8:dd:3c:42:b6:2f:af:e4:65:5d: 59:90:33:b9:a2:f2:17:7c:c8:bb:dc:a6:53:1a:9f:80:f5:2e: cf:bc:45:c0:57:9a:b6:19:f1:c2:48:f5:5a:99:4d:c9:d3:37: ff:61:5a:5b:bf:fe:70:3c:ce:93:23:3c:6a:2c:02:0e:8a:0d: fe:56:ea:c2:28:47:a5:4d:43:ff:d5:b5:d6:9e:5d:ac:da:10: 59:d6:8a:f2:d2:79:b9:60:ab:04:f4:00:ea:43:68:4d:88:49: 30:23:b2:d9:8c:3f:72:cc:fe:f1:3f:dd:e5:b5:68:b9:27:e0: 2b:73:14:ff:41:2f:da:32:c6:52:25:aa:18:c4:4b:80:0c:82: 9c:b6:aa:c0:f0:93:08:0d:51:a8:06:da:09:66:00:9f:32:ed: ea:74:36:5f:3b:c3:5e:c9:ca:1d:26:63:24:21:17:ce:ff:ee: 28:2e:40:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSN3gAM4BEgjy5FUPRFv5Qyj4ndswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0MloX DTI3MDMwMzA2MTQ0MlowMzExMC8GA1UEAxMoNjc3RjlDMjIwQkIwNDQwOTY4NEFC MDE2Q0I5NDI0MjE4MjEwQTU3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdQZeeAGKSn5HpzlYNt3/H90KF6rtVIBeGAzUMmzUgwDX0VjpUpN0cd6Kw/ QFYPIkE9Vj9SgyytCtc9aolh1f9J6uZ9Xuk4+z4+VfCOz1V4fU9N9IT1vH2x3omF bOUIy0UxTCD2/bOLoRm7BI77We/cU/lHkcfNBkkHUGxluypdFxCmQP5JXt4gWsSG ZnbWS+fW39hMhuwDcpg0r2rkQPMEjHagRjPS+07q4Bgf3GumOvMkhoXE4W63DIOb PQmp0xCzn8nkxC0FO0ke4Ow1Z4yRm4HYnq+20gL7RKgFEXnXNxzjNnvGFIVOzI1q EYTovphtnjaMlYt9QtVYGzOXgIMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRnf5wi C7BECWhKsBbLlCQhghCldTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pTYwDQYJKoZIhvcNAQELBQADggEBAGGPuKNCE/3eYghR8ZDx5tKEVUCWU8angueL v47JI+iHui/9hmEAxTVhbHwB3+aoYFUQHeUsX7RKFec9IDXP1d4VEmiTKX1IME6a e+IyD8FQ+N08QrYvr+RlXVmQM7mi8hd8yLvcplMan4D1Ls+8RcBXmrYZ8cJI9VqZ TcnTN/9hWlu//nA8zpMjPGosAg6KDf5W6sIoR6VNQ//VtdaeXazaEFnWivLSeblg qwT0AOpDaE2ISTAjstmMP3LM/vE/3eW1aLkn4CtzFP9BL9oyxlIlqhjES4AMgpy2 qsDwkwgNUagG2glmAJ8y7ep0Nl87w17Jyh0mYyQhF87/7iguQL0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:19 2026 by rpki-client