$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143999.roa File: AS143999.roa (raw, json) Hash identifier: P5YbMvwEg6DYiQmSxBSrXhSJ4AHvR5GHpU7/zkC/o+I= Subject key identifier: 10:80:A1:E1:D1:43:C5:31:FD:8D:47:78:74:AF:C7:40:E0:A9:8C:DE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1A5A0E6242852D5C8D75731178185FF60CDB8541 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143999.roa Signing time: Wed 04 Mar 2026 06:14:30 +0000 ROA not before: Wed 04 Mar 2026 06:09:30 +0000 ROA not after: Wed 03 Mar 2027 06:14:30 +0000 asID: 143999 IP address blocks: 240a:a545::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5a:0e:62:42:85:2d:5c:8d:75:73:11:78:18:5f:f6:0c:db:85:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:30 2026 GMT Not After : Mar 3 06:14:30 2027 GMT Subject: CN=1080A1E1D143C531FD8D477874AFC740E0A98CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:79:63:ed:37:31:b2:1b:68:d5:e4:83:25: 45:2a:82:26:b0:b9:ac:45:a0:80:d1:19:7c:25:c1: b5:cc:29:12:05:df:20:0a:e1:78:33:59:5a:56:a6: 95:7f:f0:37:31:8a:24:d6:db:c2:df:df:a7:4d:62: f3:f3:27:40:d6:75:3f:ff:96:2d:90:df:61:4e:58: 06:5f:d9:22:d9:a4:00:78:57:4f:3d:5a:56:ce:0a: 85:fa:67:3c:41:93:c8:d2:a0:3d:89:01:43:72:c2: 63:9b:7b:06:24:30:37:70:ea:0d:7c:54:fd:d1:14: f4:e9:96:fc:29:28:93:65:cf:49:09:00:ed:67:4b: 71:6b:ea:14:ed:a5:da:63:d2:2c:49:89:67:ee:63: a2:12:46:63:5c:53:76:0a:37:2d:78:42:ad:8a:3b: 5e:49:a6:26:9e:03:93:bf:17:59:3d:27:3c:f4:fb: 04:10:db:58:74:e1:c2:8b:4d:11:92:98:18:04:f0: 0a:99:64:13:63:53:f3:53:c4:58:4e:6b:e5:01:1a: c7:0e:71:9a:a4:66:40:1e:4d:f7:a2:97:0a:c4:c2: 33:6f:f6:09:21:d4:f9:94:6b:59:07:6e:b9:22:80: 57:b2:91:cc:fb:eb:e5:4a:07:16:12:97:af:ef:46: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:80:A1:E1:D1:43:C5:31:FD:8D:47:78:74:AF:C7:40:E0:A9:8C:DE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143999.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a545::/32 Signature Algorithm: sha256WithRSAEncryption bd:ac:88:e4:f1:87:ae:78:19:16:cc:ee:a1:58:56:ef:0e:09: 4f:8b:8f:ec:55:62:36:dd:ae:a4:3b:ec:85:27:8d:05:18:ab: cb:73:dd:47:e5:76:7c:72:e5:6e:48:cc:f2:51:90:f3:8f:df: 1f:9c:aa:ff:66:93:74:87:24:b1:58:b2:d1:35:20:5c:88:5e: 80:e1:c4:51:35:92:91:ec:38:bc:50:08:84:3e:ee:00:5c:7f: 85:83:d9:1f:3d:4f:42:11:1e:fa:23:72:24:5b:1b:11:8d:2e: 67:1d:22:90:67:40:15:af:91:5b:99:8b:63:b3:23:27:dd:a6: 45:13:3d:16:de:e6:40:94:2e:c4:41:6b:74:46:5e:4f:90:f5: 16:05:b1:4a:3b:fa:e1:2c:5b:c2:90:03:18:75:af:c5:f9:5b: 12:fb:bb:fa:ac:97:8f:55:83:c7:24:30:8c:dc:ca:49:bd:78: 65:fe:7d:c3:27:24:d5:d9:12:11:08:35:4a:33:7a:6e:46:80: 1a:37:3a:2f:e8:ab:6e:3d:4f:dc:a7:0d:24:53:62:66:a0:fb: 56:c6:ec:76:46:7f:c2:92:aa:02:93:de:b9:fc:a4:cf:80:63: db:14:e6:ee:34:7e:65:8c:0b:53:df:8e:8b:df:00:98:2e:6b: a4:67:b0:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGloOYkKFLVyNdXMReBhf9gzbhUEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzMFoX DTI3MDMwMzA2MTQzMFowMzExMC8GA1UEAxMoMTA4MEExRTFEMTQzQzUzMUZEOEQ0 Nzc4NzRBRkM3NDBFMEE5OENERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMm9eWPtNzGyG2jV5IMlRSqCJrC5rEWggNEZfCXBtcwpEgXfIArheDNZWlam lX/wNzGKJNbbwt/fp01i8/MnQNZ1P/+WLZDfYU5YBl/ZItmkAHhXTz1aVs4Khfpn PEGTyNKgPYkBQ3LCY5t7BiQwN3DqDXxU/dEU9OmW/Ckok2XPSQkA7WdLcWvqFO2l 2mPSLEmJZ+5johJGY1xTdgo3LXhCrYo7XkmmJp4Dk78XWT0nPPT7BBDbWHThwotN EZKYGATwCplkE2NT81PEWE5r5QEaxw5xmqRmQB5N96KXCsTCM2/2CSHU+ZRrWQdu uSKAV7KRzPvr5UoHFhKXr+9G1RMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQQgKHh 0UPFMf2NR3h0r8dA4KmM3jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pUUwDQYJKoZIhvcNAQELBQADggEBAL2siOTxh654GRbM7qFYVu8OCU+Lj+xVYjbd rqQ77IUnjQUYq8tz3Ufldnxy5W5IzPJRkPOP3x+cqv9mk3SHJLFYstE1IFyIXoDh xFE1kpHsOLxQCIQ+7gBcf4WD2R89T0IRHvojciRbGxGNLmcdIpBnQBWvkVuZi2Oz IyfdpkUTPRbe5kCULsRBa3RGXk+Q9RYFsUo7+uEsW8KQAxh1r8X5WxL7u/qsl49V g8ckMIzcykm9eGX+fcMnJNXZEhEINUozem5GgBo3Oi/oq249T9ynDSRTYmag+1bG 7HZGf8KSqgKT3rn8pM+AY9sU5u40fmWMC1PfjovfAJgua6RnsLg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:34 2026 by rpki-client