$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143987.roa File: AS143987.roa (raw, json) Hash identifier: 1kJxYj/yqLMSSPP+2xAF2H8ozoyFoo8t9/PwVIgd0a4= Subject key identifier: 55:C4:3E:5F:48:4C:F9:17:78:25:04:98:E3:1B:33:EE:E2:BD:10:A4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 268604DA257F833D1203693300233E2A1D95432A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143987.roa Signing time: Wed 04 Mar 2026 06:14:40 +0000 ROA not before: Wed 04 Mar 2026 06:09:40 +0000 ROA not after: Wed 03 Mar 2027 06:14:40 +0000 asID: 143987 IP address blocks: 240a:a539::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:86:04:da:25:7f:83:3d:12:03:69:33:00:23:3e:2a:1d:95:43:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:40 2026 GMT Not After : Mar 3 06:14:40 2027 GMT Subject: CN=55C43E5F484CF91778250498E31B33EEE2BD10A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:f8:9c:30:19:c8:4d:3b:aa:1f:6c:f2:4c: 52:71:83:2d:6f:25:df:ad:65:2d:97:47:53:f6:d4: c5:95:5f:59:c4:11:31:40:ea:79:0e:ae:47:94:d4: a8:05:77:8c:63:56:6e:fa:5d:a2:d3:d0:14:b4:e3: 6d:7e:98:c8:56:a3:40:5f:4f:db:e7:2c:17:f5:8a: bd:12:58:e6:99:1e:a7:86:27:34:7f:f7:dd:b4:73: ba:5f:72:ac:5e:72:ad:a1:62:82:b9:dd:ea:79:1f: 6c:6e:08:c1:58:79:1a:a3:87:ab:88:bc:61:25:c1: ad:ea:bb:ee:fc:99:f0:15:9b:9c:47:31:89:e7:62: 17:77:7d:bc:41:78:9f:35:b1:5f:f3:4d:4e:3c:94: 25:41:f1:ed:12:1a:ca:88:db:0d:02:0e:ad:5c:ac: 02:51:e4:1b:f2:a6:78:e3:1c:f5:95:aa:89:9e:f5: 9e:ba:ff:1a:62:21:26:79:60:e4:7f:5e:22:b8:8f: 93:5a:76:69:8c:ca:3f:f5:6c:13:9f:d3:a8:af:9b: 66:ba:fa:e3:e1:f8:53:91:c4:2a:2d:eb:7d:76:28: 9e:0c:f8:1f:93:13:ed:f9:a7:4b:6c:5a:8e:c7:43: 67:80:60:d9:2f:79:6f:ed:c8:f2:f9:8b:9b:da:f1: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C4:3E:5F:48:4C:F9:17:78:25:04:98:E3:1B:33:EE:E2:BD:10:A4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143987.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a539::/32 Signature Algorithm: sha256WithRSAEncryption 47:60:1b:b5:68:66:09:fe:93:6c:9b:61:4e:4c:d3:2b:38:dc: c8:63:61:a1:f3:3c:62:76:a6:92:c7:30:56:50:cf:ed:40:8a: e2:de:f5:81:c5:5b:c9:6d:64:fc:d3:ba:b1:1f:0a:05:7f:11: b1:8c:56:e7:fb:c5:99:ee:75:28:b1:13:66:2a:4d:6d:ec:bd: 0e:d6:86:a3:8c:02:e9:c4:a9:bc:a5:a8:46:7b:e7:ed:43:ab: 1c:a9:fa:2d:30:38:40:e5:86:50:60:bd:c6:e4:ab:e4:ff:e5: c9:e5:1f:54:1f:87:1e:19:05:8e:8e:0c:be:b1:32:30:24:63: f5:68:36:0e:a5:44:b4:2d:3a:de:92:84:bc:38:b3:12:c7:b3: 7e:0c:06:43:ee:a9:9c:24:c5:6a:42:da:f5:be:b1:a9:c3:df: be:36:dd:78:11:b0:95:d1:39:28:98:9b:12:15:52:35:8d:9d: 37:19:c4:e3:d1:55:99:00:8b:73:f6:de:a1:eb:4e:c4:13:b7: 30:4d:fa:8d:26:17:36:21:05:c3:93:c3:46:a4:95:2c:b5:d7: 9a:bb:07:e5:c2:c6:b8:a9:bb:08:90:ac:64:9a:a0:39:40:a4: 20:bf:58:da:6a:08:68:13:26:aa:a6:8e:4b:bb:e1:40:b9:f0: db:b7:f6:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJoYE2iV/gz0SA2kzACM+Kh2VQyowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0MFoX DTI3MDMwMzA2MTQ0MFowMzExMC8GA1UEAxMoNTVDNDNFNUY0ODRDRjkxNzc4MjUw NDk4RTMxQjMzRUVFMkJEMTBBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUy+JwwGchNO6ofbPJMUnGDLW8l361lLZdHU/bUxZVfWcQRMUDqeQ6uR5TU qAV3jGNWbvpdotPQFLTjbX6YyFajQF9P2+csF/WKvRJY5pkep4YnNH/33bRzul9y rF5yraFigrnd6nkfbG4IwVh5GqOHq4i8YSXBreq77vyZ8BWbnEcxiediF3d9vEF4 nzWxX/NNTjyUJUHx7RIayojbDQIOrVysAlHkG/KmeOMc9ZWqiZ71nrr/GmIhJnlg 5H9eIriPk1p2aYzKP/VsE5/TqK+bZrr64+H4U5HEKi3rfXYongz4H5MT7fmnS2xa jsdDZ4Bg2S95b+3I8vmLm9rxSgUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRVxD5f SEz5F3glBJjjGzPu4r0QpDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pTkwDQYJKoZIhvcNAQELBQADggEBAEdgG7VoZgn+k2ybYU5M0ys43MhjYaHzPGJ2 ppLHMFZQz+1AiuLe9YHFW8ltZPzTurEfCgV/EbGMVuf7xZnudSixE2YqTW3svQ7W hqOMAunEqbylqEZ75+1Dqxyp+i0wOEDlhlBgvcbkq+T/5cnlH1Qfhx4ZBY6ODL6x MjAkY/VoNg6lRLQtOt6ShLw4sxLHs34MBkPuqZwkxWpC2vW+sanD37423XgRsJXR OSiYmxIVUjWNnTcZxOPRVZkAi3P23qHrTsQTtzBN+o0mFzYhBcOTw0aklSy115q7 B+XCxripuwiQrGSaoDlApCC/WNpqCGgTJqqmjku74UC58Nu39go= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:41 2026 by rpki-client