$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143997.roa File: AS143997.roa (raw, json) Hash identifier: tIGnBZvE7yM8ttpmBcBrW90JlZuAZPgs1t3kmFpugHA= Subject key identifier: 1D:88:A9:D9:FC:FC:CA:EE:1C:8D:DB:BF:7A:D7:EA:E0:28:80:4C:45 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C1EC5DAB3D0E919A87392C00AA0DC00A7347229 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143997.roa Signing time: Wed 04 Mar 2026 06:15:25 +0000 ROA not before: Wed 04 Mar 2026 06:10:25 +0000 ROA not after: Wed 03 Mar 2027 06:15:25 +0000 asID: 143997 IP address blocks: 240a:a543::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1e:c5:da:b3:d0:e9:19:a8:73:92:c0:0a:a0:dc:00:a7:34:72:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:25 2026 GMT Not After : Mar 3 06:15:25 2027 GMT Subject: CN=1D88A9D9FCFCCAEE1C8DDBBF7AD7EAE028804C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:09:10:ac:ab:b1:ae:12:bb:41:74:16:04: 79:9f:42:59:35:34:60:f0:d9:f3:93:51:7f:8c:f6: f1:23:01:52:6a:5d:63:ae:52:74:b6:6f:3e:dc:85: 28:d9:90:3a:84:27:81:f3:7e:05:08:4d:fa:6c:2a: d9:43:aa:29:ab:f7:3c:08:9a:5c:df:0e:82:ae:ae: cc:8f:cf:a4:d4:d1:50:f3:e3:ab:0e:a5:cb:c3:02: 01:4b:68:c5:08:22:3b:07:de:00:c7:e4:04:bb:35: f7:5d:21:76:c6:c1:77:87:76:46:7d:de:2e:1c:eb: 73:bc:18:bf:65:bd:c8:ca:e9:73:33:80:58:5a:0a: 91:e6:f5:93:2e:7e:fa:21:11:6e:c6:20:e7:cb:f2: 6a:36:d0:f6:90:85:3d:10:5c:25:11:9e:d8:58:73: 6c:ae:00:48:a7:e4:8a:1f:e6:45:f7:5f:6e:e7:5b: 2e:39:42:a1:ea:18:03:d9:1b:6c:87:fb:9d:b2:6f: db:08:ea:60:0c:c2:83:e6:6d:42:d6:12:64:4f:8f: de:ca:07:65:fb:0e:6d:c8:7d:99:34:1a:51:ce:f8: bd:93:bb:0f:d4:6e:58:14:ea:ec:2c:72:01:3f:92: f3:6b:56:04:1c:b2:21:62:7d:a1:50:3e:1d:93:59: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:88:A9:D9:FC:FC:CA:EE:1C:8D:DB:BF:7A:D7:EA:E0:28:80:4C:45 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a543::/32 Signature Algorithm: sha256WithRSAEncryption 64:48:95:bf:95:21:52:87:76:d9:58:d3:ca:db:c7:2b:b8:4b: 40:a7:1d:c7:fb:c2:a5:b1:73:fc:94:35:6e:62:53:35:4a:87: f5:84:04:83:53:ed:91:5e:60:27:f3:80:2b:1d:88:76:65:d4: a8:01:64:fc:ff:a3:db:fd:bc:9c:b8:f5:e0:5c:16:d9:ee:cb: 8c:c4:85:12:d8:2f:30:0a:17:aa:9a:66:fc:6c:58:29:a0:2f: 76:62:b1:75:d7:1b:be:8c:8f:22:00:26:8f:38:83:8c:d1:f7: 36:13:14:d1:82:3b:4f:80:77:cf:db:3e:22:5e:ff:ea:47:82: bd:15:66:67:c1:db:52:c2:22:db:d9:98:81:75:61:04:88:6c: a6:f8:7e:e7:62:17:4e:0b:26:32:d0:02:d2:95:5e:f9:e8:17: 17:8d:0e:89:f6:3e:84:c1:9c:24:63:cf:da:9b:72:f8:b9:b8: 22:33:7b:07:88:8f:57:8d:62:d9:fc:03:81:4b:44:54:60:39: 18:1f:1c:4b:69:1a:64:e3:a3:96:8b:92:b3:5b:26:3e:2a:52: 58:81:6f:7d:48:06:59:4e:2d:74:1a:34:18:b1:0b:70:3e:b2: c1:fa:7c:6b:b3:14:3b:a3:97:cb:2e:a7:1b:33:ea:91:5a:e1: 56:16:7c:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfB7F2rPQ6Rmoc5LACqDcAKc0cikwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyNVoX DTI3MDMwMzA2MTUyNVowMzExMC8GA1UEAxMoMUQ4OEE5RDlGQ0ZDQ0FFRTFDOERE QkJGN0FEN0VBRTAyODgwNEM0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ94CRCsq7GuErtBdBYEeZ9CWTU0YPDZ85NRf4z28SMBUmpdY65SdLZvPtyF KNmQOoQngfN+BQhN+mwq2UOqKav3PAiaXN8Ogq6uzI/PpNTRUPPjqw6ly8MCAUto xQgiOwfeAMfkBLs1910hdsbBd4d2Rn3eLhzrc7wYv2W9yMrpczOAWFoKkeb1ky5+ +iERbsYg58vyajbQ9pCFPRBcJRGe2FhzbK4ASKfkih/mRfdfbudbLjlCoeoYA9kb bIf7nbJv2wjqYAzCg+ZtQtYSZE+P3soHZfsObch9mTQaUc74vZO7D9RuWBTq7Cxy AT+S82tWBByyIWJ9oVA+HZNZrAcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQdiKnZ /PzK7hyN27961+rgKIBMRTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pUMwDQYJKoZIhvcNAQELBQADggEBAGRIlb+VIVKHdtlY08rbxyu4S0CnHcf7wqWx c/yUNW5iUzVKh/WEBINT7ZFeYCfzgCsdiHZl1KgBZPz/o9v9vJy49eBcFtnuy4zE hRLYLzAKF6qaZvxsWCmgL3ZisXXXG76MjyIAJo84g4zR9zYTFNGCO0+Ad8/bPiJe /+pHgr0VZmfB21LCItvZmIF1YQSIbKb4fudiF04LJjLQAtKVXvnoFxeNDon2PoTB nCRjz9qbcvi5uCIzeweIj1eNYtn8A4FLRFRgORgfHEtpGmTjo5aLkrNbJj4qUliB b31IBllOLXQaNBixC3A+ssH6fGuzFDujl8supxsz6pFa4VYWfJA= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:39 2026 by rpki-client