$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143988.roa File: AS143988.roa (raw, json) Hash identifier: wUKIpyipbQpb722IphUga9Ixnpmf/T/wUbAa6U6P/xM= Subject key identifier: CB:41:ED:63:2B:2D:AD:32:D7:AE:8F:D6:71:FB:AC:0A:0D:09:2B:4F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0C285BB39B2FF8B5E71FEB27B7463DCBB2F46DD5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143988.roa Signing time: Wed 04 Mar 2026 06:14:56 +0000 ROA not before: Wed 04 Mar 2026 06:09:56 +0000 ROA not after: Wed 03 Mar 2027 06:14:56 +0000 asID: 143988 IP address blocks: 240a:a53a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:28:5b:b3:9b:2f:f8:b5:e7:1f:eb:27:b7:46:3d:cb:b2:f4:6d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:56 2026 GMT Not After : Mar 3 06:14:56 2027 GMT Subject: CN=CB41ED632B2DAD32D7AE8FD671FBAC0A0D092B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:52:84:68:81:11:17:9a:d1:4b:1a:82:95: 69:26:8c:07:95:79:ed:e0:04:09:93:8c:a3:55:42: 7a:c9:b6:26:b2:7e:88:0a:53:ca:72:de:7b:e4:43: 9c:e3:4b:33:f9:39:5e:c9:bf:bb:cc:08:1d:f9:6d: f0:5e:75:15:ca:26:d0:12:9c:24:af:b6:44:a8:03: 18:5d:6a:77:59:c0:1c:12:3c:d9:41:ae:2f:cf:67: 9d:d7:6e:49:be:97:fe:1d:97:10:59:81:57:af:96: 2b:de:c3:79:d4:04:a4:e0:e3:d0:13:04:d3:86:be: 23:8f:ba:dd:36:66:ba:9f:f6:fb:26:52:e7:40:0b: 60:e4:bd:78:9e:6f:16:f4:56:b9:02:93:56:3a:25: 69:13:09:5d:ce:27:01:b4:13:09:33:a3:52:ef:3c: 7f:f1:44:5b:e8:5a:a5:52:a8:46:8a:88:b5:50:d5: 1b:7d:95:52:b7:f7:80:7b:5d:27:26:7d:e4:23:67: f1:d0:23:7b:a5:fa:7c:c4:5d:18:89:ea:1c:85:5e: de:5f:96:da:a1:1c:88:44:e6:f4:c9:e5:70:ae:99: 24:62:35:01:e0:0f:79:ab:56:9c:c3:fb:2e:51:46: 24:eb:b8:44:46:3e:44:76:2b:47:8a:75:57:1b:64: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:41:ED:63:2B:2D:AD:32:D7:AE:8F:D6:71:FB:AC:0A:0D:09:2B:4F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143988.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a53a::/32 Signature Algorithm: sha256WithRSAEncryption 11:56:9f:ec:71:72:3e:8f:b3:40:b4:29:56:65:c1:45:d3:d5: 0e:ba:49:9c:0e:dc:ab:f0:89:50:50:8e:62:54:68:98:f4:ff: 30:af:69:a4:90:62:ad:27:ff:58:e5:44:61:c1:60:9a:27:dd: 11:63:89:b7:68:b1:46:e3:f3:bc:34:fe:82:c1:c8:d2:a8:d2: e7:87:87:46:4f:ec:db:12:d3:30:4f:e8:e8:74:8e:72:c3:96: 82:96:0c:ee:45:c3:88:c0:dc:b7:aa:bf:02:94:53:24:6a:2c: 84:7d:63:0e:09:65:f4:5d:74:ad:d2:d7:97:d2:57:e7:6b:90: 67:ae:34:ce:42:a9:3b:88:fb:af:f8:10:3d:b7:35:a5:53:bf: c7:fa:17:a9:be:fe:05:1b:7d:f5:75:4e:d4:d8:e0:4d:c2:66: ca:a4:60:ff:1f:85:7d:31:51:03:e9:a9:de:64:14:9f:f6:71: 34:29:a5:3a:4f:09:cd:e7:51:c0:63:6d:af:a5:df:bd:6f:05: 89:b1:f2:6f:84:1b:a6:0a:be:e3:2e:5a:17:8d:38:03:ff:f5: 8f:45:8e:9f:20:29:14:ce:72:b5:51:42:fe:b6:ae:e3:87:94: 1b:57:e8:88:a9:98:1e:63:19:10:f2:94:48:47:fc:78:55:21: f0:8a:4e:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDChbs5sv+LXnH+snt0Y9y7L0bdUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1NloX DTI3MDMwMzA2MTQ1NlowMzExMC8GA1UEAxMoQ0I0MUVENjMyQjJEQUQzMkQ3QUU4 RkQ2NzFGQkFDMEEwRDA5MkI0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMI3UoRogREXmtFLGoKVaSaMB5V57eAECZOMo1VCesm2JrJ+iApTynLee+RD nONLM/k5Xsm/u8wIHflt8F51Fcom0BKcJK+2RKgDGF1qd1nAHBI82UGuL89nnddu Sb6X/h2XEFmBV6+WK97DedQEpODj0BME04a+I4+63TZmup/2+yZS50ALYOS9eJ5v FvRWuQKTVjolaRMJXc4nAbQTCTOjUu88f/FEW+hapVKoRoqItVDVG32VUrf3gHtd JyZ95CNn8dAje6X6fMRdGInqHIVe3l+W2qEciETm9MnlcK6ZJGI1AeAPeatWnMP7 LlFGJOu4REY+RHYrR4p1Vxtk8WcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTLQe1j Ky2tMteuj9Zx+6wKDQkrTzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pTowDQYJKoZIhvcNAQELBQADggEBABFWn+xxcj6Ps0C0KVZlwUXT1Q66SZwO3Kvw iVBQjmJUaJj0/zCvaaSQYq0n/1jlRGHBYJon3RFjibdosUbj87w0/oLByNKo0ueH h0ZP7NsS0zBP6Oh0jnLDloKWDO5Fw4jA3LeqvwKUUyRqLIR9Yw4JZfRddK3S15fS V+drkGeuNM5CqTuI+6/4ED23NaVTv8f6F6m+/gUbffV1TtTY4E3CZsqkYP8fhX0x UQPpqd5kFJ/2cTQppTpPCc3nUcBjba+l371vBYmx8m+EG6YKvuMuWheNOAP/9Y9F jp8gKRTOcrVRQv62ruOHlBtX6IipmB5jGRDylEhH/HhVIfCKTkE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:51 2026 by rpki-client