$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143993.roa File: AS143993.roa (raw, json) Hash identifier: AjREvf4PVNTH9w+sn221wVJ4x5KARJ4zeRYyBN4XcNg= Subject key identifier: B5:36:F9:49:22:3B:93:E5:8A:31:BD:FF:27:78:B2:AF:B8:1F:7F:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 62219E92144A35EA6F2B99E7E4E971775DED5F39 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143993.roa Signing time: Wed 04 Mar 2026 06:15:44 +0000 ROA not before: Wed 04 Mar 2026 06:10:44 +0000 ROA not after: Wed 03 Mar 2027 06:15:44 +0000 asID: 143993 IP address blocks: 240a:a53f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:21:9e:92:14:4a:35:ea:6f:2b:99:e7:e4:e9:71:77:5d:ed:5f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:44 2026 GMT Not After : Mar 3 06:15:44 2027 GMT Subject: CN=B536F949223B93E58A31BDFF2778B2AFB81F7F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:9b:4a:7e:c0:1a:0e:54:6a:83:43:8a:fd: 46:e2:0d:a3:83:de:5e:97:92:6b:54:f6:20:72:20: 7c:35:f0:f1:df:25:f4:4e:3d:58:aa:d9:8c:0f:79: 3a:62:37:2a:b4:ed:4f:2b:48:cc:98:8e:bf:b6:8d: 59:da:c8:1f:bd:89:ab:11:3f:e3:2f:8a:c1:fb:5e: 5d:12:bf:7f:c9:14:da:2a:50:b7:0a:4d:35:4d:75: 5e:87:dc:b5:32:38:ca:0d:fc:0b:59:10:e4:ef:c6: 18:f8:5a:53:14:86:24:fc:49:35:03:3f:e7:77:32: c3:77:c9:5b:36:62:be:e0:09:2c:d4:39:75:2b:7f: 42:cb:e8:44:60:1a:cc:a3:e0:4c:f8:ac:de:52:ce: bd:be:55:9f:02:aa:15:d0:17:ee:c9:71:df:b9:1e: 3d:aa:95:28:c5:27:29:e5:f0:e6:ec:61:3b:bc:d5: d2:e6:50:fd:56:e6:96:61:ba:11:b7:8c:d4:ca:9d: 3c:35:43:72:81:dd:85:ab:a9:65:f4:a5:e7:c5:8c: 14:a3:45:9c:c1:ff:9f:1a:cf:84:f6:c9:5e:c0:99: 46:e0:e7:cb:14:66:40:7c:9d:74:ae:93:0e:ff:17: 8b:db:9b:8c:0e:e6:69:43:a0:14:ec:49:06:81:6e: 29:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:36:F9:49:22:3B:93:E5:8A:31:BD:FF:27:78:B2:AF:B8:1F:7F:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143993.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a53f::/32 Signature Algorithm: sha256WithRSAEncryption a7:e6:ab:f4:2e:03:ce:df:86:2c:ec:4d:18:42:cb:d3:6d:ec: bc:ec:5f:27:8c:77:70:a1:5e:f0:24:10:d9:ba:11:33:a5:0e: d1:c0:e6:08:25:03:d9:81:f2:53:d6:be:04:30:ff:9a:39:c8: 94:70:1f:2b:c5:75:53:2f:ff:9f:25:8b:0c:d2:fe:4a:78:68: e2:bb:3f:13:d7:13:27:67:f5:01:50:f8:b6:6e:3b:2f:ec:59: 3a:a0:95:3b:9c:cb:12:80:6a:d3:dd:a3:41:b7:50:b5:48:65: 33:1a:b7:5e:f1:32:c4:7c:56:18:4b:dd:a0:ce:c3:03:99:a5: ca:3d:0e:60:88:da:68:c2:ea:6d:76:1f:6f:99:d9:cf:f3:e9: 09:2b:12:cd:81:4a:c2:af:60:27:93:80:47:24:93:55:7c:0c: db:50:6e:ba:83:d5:8a:2a:59:90:9e:6e:0f:cf:61:12:4d:fb: 94:66:a0:34:2c:3f:da:a3:21:78:5b:64:24:49:18:23:5a:00: 20:04:65:79:00:c6:c8:ab:0f:62:c5:92:42:ae:d5:ff:5b:93: f3:ef:9f:66:92:62:f9:79:33:6d:ea:92:df:5e:81:51:b0:f6: 8f:e8:2a:49:51:2c:7a:a2:ac:49:45:ff:26:c3:d0:16:bc:da: d8:d0:0d:5d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYiGekhRKNepvK5nn5Olxd13tXzkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0NFoX DTI3MDMwMzA2MTU0NFowMzExMC8GA1UEAxMoQjUzNkY5NDkyMjNCOTNFNThBMzFC REZGMjc3OEIyQUZCODFGN0YxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjrm0p+wBoOVGqDQ4r9RuINo4PeXpeSa1T2IHIgfDXw8d8l9E49WKrZjA95 OmI3KrTtTytIzJiOv7aNWdrIH72JqxE/4y+KwfteXRK/f8kU2ipQtwpNNU11Xofc tTI4yg38C1kQ5O/GGPhaUxSGJPxJNQM/53cyw3fJWzZivuAJLNQ5dSt/QsvoRGAa zKPgTPis3lLOvb5VnwKqFdAX7slx37kePaqVKMUnKeXw5uxhO7zV0uZQ/VbmlmG6 EbeM1MqdPDVDcoHdhaupZfSl58WMFKNFnMH/nxrPhPbJXsCZRuDnyxRmQHyddK6T Dv8Xi9ubjA7maUOgFOxJBoFuKXsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS1NvlJ IjuT5Yoxvf8neLKvuB9/EjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pT8wDQYJKoZIhvcNAQELBQADggEBAKfmq/QuA87fhizsTRhCy9Nt7LzsXyeMd3Ch XvAkENm6ETOlDtHA5gglA9mB8lPWvgQw/5o5yJRwHyvFdVMv/58liwzS/kp4aOK7 PxPXEydn9QFQ+LZuOy/sWTqglTucyxKAatPdo0G3ULVIZTMat17xMsR8VhhL3aDO wwOZpco9DmCI2mjC6m12H2+Z2c/z6QkrEs2BSsKvYCeTgEckk1V8DNtQbrqD1Yoq WZCebg/PYRJN+5RmoDQsP9qjIXhbZCRJGCNaACAEZXkAxsirD2LFkkKu1f9bk/Pv n2aSYvl5M23qkt9egVGw9o/oKklRLHqirElF/ybD0Ba82tjQDV0= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:32 2026 by rpki-client