$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143992.roa File: AS143992.roa (raw, json) Hash identifier: /WcyKNggqwD+RNMJgmGaAllfidTLv1dJp35JAkBWYHQ= Subject key identifier: 59:4D:86:ED:23:A1:24:6D:41:45:92:5F:1B:FE:69:7C:BF:48:16:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 53FB98832D5803E99EF62F07F923A4DDA74F7A2E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143992.roa Signing time: Wed 04 Mar 2026 06:15:29 +0000 ROA not before: Wed 04 Mar 2026 06:10:29 +0000 ROA not after: Wed 03 Mar 2027 06:15:29 +0000 asID: 143992 IP address blocks: 240a:a53e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fb:98:83:2d:58:03:e9:9e:f6:2f:07:f9:23:a4:dd:a7:4f:7a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:29 2026 GMT Not After : Mar 3 06:15:29 2027 GMT Subject: CN=594D86ED23A1246D4145925F1BFE697CBF481612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:35:0b:92:73:a6:83:3a:9c:df:35:ae:5c: cd:a1:70:80:7c:4a:bd:a5:41:71:26:5e:fa:30:f3: dc:e0:02:39:07:43:20:38:dc:d8:f4:f8:3d:7e:32: 40:c6:fe:2f:1f:fd:95:dd:10:66:05:7e:f5:3b:4b: f3:b7:1a:f6:c7:d9:76:99:00:b7:94:76:49:32:6b: 75:6d:88:1f:9c:16:45:03:3c:8e:04:29:35:46:55: df:8a:4b:c0:fd:37:d8:ff:c1:f2:51:8f:34:21:aa: 17:f7:04:82:68:6b:6f:c8:4e:fe:14:16:df:9a:a8: d1:67:b1:54:84:c8:6e:e1:32:a1:e3:f8:b9:76:6c: 08:88:47:27:86:2a:6e:e4:c3:e7:96:4d:06:e8:41: dd:14:50:ef:e3:41:ac:dc:3c:ca:00:6a:71:cd:9b: 54:bb:ed:74:50:91:91:55:5a:ac:c4:a2:61:ad:6c: bd:a1:91:e4:a5:f1:1f:98:d0:39:e4:4f:57:a0:dd: 47:26:20:35:9f:6c:fe:2d:16:0b:a3:dc:47:97:ed: 7f:64:6a:d2:3f:df:0a:dc:bd:4d:7c:6d:4e:bc:41: f4:81:40:42:1e:bf:d0:8d:2f:3a:33:bb:ff:fa:87: 66:23:06:bd:35:9b:8c:eb:11:bd:a5:c8:6e:d0:9c: 33:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4D:86:ED:23:A1:24:6D:41:45:92:5F:1B:FE:69:7C:BF:48:16:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143992.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a53e::/32 Signature Algorithm: sha256WithRSAEncryption 49:72:d7:2e:f3:ff:00:c0:6a:3f:c7:f5:7f:d0:35:f8:5a:c1: 60:d1:bf:17:7c:f2:10:c5:2c:cf:1b:b2:a7:6c:17:50:5e:38: 46:1a:43:67:19:46:14:59:cc:aa:25:44:31:4a:e7:6f:af:81: 5c:56:09:94:01:be:63:f3:0c:21:31:95:4c:ac:ee:47:5e:1c: 71:38:4c:09:3f:e9:e7:1e:ce:e1:33:48:b1:db:52:58:eb:78: 25:69:73:cb:44:65:31:2f:3e:92:0a:9e:6f:92:27:2c:ff:de: 17:2c:35:67:3a:b8:25:1c:13:a1:f9:86:28:8b:5b:1b:79:f5: 87:71:de:dc:b9:00:16:4e:30:9b:13:03:77:8e:5b:f1:d0:58: f4:01:75:38:9f:e5:ef:79:a3:03:0b:1b:50:7a:9c:9b:00:61: 8a:b9:84:db:d5:b3:0f:76:d6:b0:42:12:19:43:7d:df:e0:70: 9d:d2:8c:6f:a3:0b:99:c5:b5:49:f1:8c:28:4b:f1:d4:c7:90: d5:ca:94:a1:d3:79:b8:17:ce:ca:02:b7:21:2f:cb:2b:e5:99: 38:06:9e:c9:b3:08:58:ce:4d:de:5d:3e:5f:25:fc:57:ab:6e: 01:b8:ae:58:80:f9:e0:26:83:f9:13:e5:87:ae:69:97:4d:a1: 24:6c:2f:85 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUU/uYgy1YA+me9i8H+SOk3adPei4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyOVoX DTI3MDMwMzA2MTUyOVowMzExMC8GA1UEAxMoNTk0RDg2RUQyM0ExMjQ2RDQxNDU5 MjVGMUJGRTY5N0NCRjQ4MTYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJSPNQuSc6aDOpzfNa5czaFwgHxKvaVBcSZe+jDz3OACOQdDIDjc2PT4PX4y QMb+Lx/9ld0QZgV+9TtL87ca9sfZdpkAt5R2STJrdW2IH5wWRQM8jgQpNUZV34pL wP032P/B8lGPNCGqF/cEgmhrb8hO/hQW35qo0WexVITIbuEyoeP4uXZsCIhHJ4Yq buTD55ZNBuhB3RRQ7+NBrNw8ygBqcc2bVLvtdFCRkVVarMSiYa1svaGR5KXxH5jQ OeRPV6DdRyYgNZ9s/i0WC6PcR5ftf2Rq0j/fCty9TXxtTrxB9IFAQh6/0I0vOjO7 //qHZiMGvTWbjOsRvaXIbtCcMyUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRZTYbt I6EkbUFFkl8b/ml8v0gWEjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pT4wDQYJKoZIhvcNAQELBQADggEBAEly1y7z/wDAaj/H9X/QNfhawWDRvxd88hDF LM8bsqdsF1BeOEYaQ2cZRhRZzKolRDFK52+vgVxWCZQBvmPzDCExlUys7kdeHHE4 TAk/6ecezuEzSLHbUljreCVpc8tEZTEvPpIKnm+SJyz/3hcsNWc6uCUcE6H5hiiL Wxt59Ydx3ty5ABZOMJsTA3eOW/HQWPQBdTif5e95owMLG1B6nJsAYYq5hNvVsw92 1rBCEhlDfd/gcJ3SjG+jC5nFtUnxjChL8dTHkNXKlKHTebgXzsoCtyEvyyvlmTgG nsmzCFjOTd5dPl8l/FerbgG4rliA+eAmg/kT5YeuaZdNoSRsL4U= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:28 2026 by rpki-client