$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143009.roa File: AS143009.roa (raw, json) Hash identifier: mD1awLM7gRS9FQhKX79P3zMrdPnwyPEz4P8Ojd/nZTU= Subject key identifier: B3:8F:75:CC:26:D2:7D:E8:A5:64:A6:AA:A8:B4:AF:E3:23:17:2C:FB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7F638B25C564AA20A9FAF212FB671CA3935A2163 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143009.roa Signing time: Wed 04 Mar 2026 06:05:18 +0000 ROA not before: Wed 04 Mar 2026 06:00:18 +0000 ROA not after: Wed 03 Mar 2027 06:05:18 +0000 asID: 143009 IP address blocks: 240a:a167::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:63:8b:25:c5:64:aa:20:a9:fa:f2:12:fb:67:1c:a3:93:5a:21:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:18 2026 GMT Not After : Mar 3 06:05:18 2027 GMT Subject: CN=B38F75CC26D27DE8A564A6AAA8B4AFE323172CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fe:a1:4c:dd:e2:4f:5b:8c:08:d7:f9:44:18: 5f:88:a8:44:03:20:01:3a:98:13:36:b0:7d:cc:cf: 93:72:0f:ec:dd:65:3a:8b:ce:7e:f2:e4:f6:f8:ab: e5:23:ad:04:c3:d1:f1:46:ed:98:89:13:b4:d4:86: 44:3e:d4:27:d8:1c:e4:44:1b:a7:44:9f:e7:e8:c2: 56:73:9e:57:b2:bd:5e:4d:b0:b5:30:9f:cc:6b:b7: fe:bb:96:78:e1:ca:00:e5:c5:13:4d:27:70:1e:e2: e9:2c:78:a7:32:f7:48:0e:28:fb:72:e6:92:61:ed: b0:89:9e:57:16:92:52:41:42:6f:29:2d:c6:b3:4f: 1a:a1:de:37:43:99:b4:ce:de:5d:8c:9e:4e:f2:93: 87:aa:2f:61:58:e3:48:e0:c3:c0:ab:80:6a:a2:d1: 75:0b:91:fc:c4:10:15:bb:5a:df:99:8d:da:76:12: ee:1d:f9:af:4a:5a:cb:17:f6:3b:b6:98:97:ce:04: cf:78:59:1a:d2:62:d5:d9:0d:b3:51:9d:12:9e:81: b8:0f:26:0a:73:a8:54:3a:0e:61:f3:cf:9e:eb:30: c6:39:ab:05:f6:32:6a:0a:9d:62:36:37:75:cd:99: 4b:85:1e:48:5a:18:95:7b:8c:bd:e0:61:c9:37:0b: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8F:75:CC:26:D2:7D:E8:A5:64:A6:AA:A8:B4:AF:E3:23:17:2C:FB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a167::/32 Signature Algorithm: sha256WithRSAEncryption 65:2a:c0:ba:da:d9:14:a2:45:c3:cc:3d:ff:c1:c9:1b:d1:45: 9a:d0:e1:9e:54:fd:49:53:5d:97:87:4d:80:44:45:58:fe:3b: ce:0f:27:b0:f3:4b:d9:40:be:51:68:d5:45:0f:07:87:40:79: ed:1f:64:5e:28:1e:0c:a8:d0:79:a7:f6:c0:f5:17:3e:17:c6: 87:b7:19:59:cf:a0:b2:2f:d9:d2:cf:6c:9c:0b:82:c2:11:1c: a6:f9:5c:87:ed:6e:d0:80:22:a1:03:b1:21:56:9a:2b:59:61: 09:d5:6d:5c:df:00:d0:8e:ef:ad:5a:47:ed:b0:16:a9:ee:2d: 42:2a:f3:6c:67:26:ae:0a:7b:84:24:3c:bb:76:54:6d:fe:e3: 8a:ff:2a:0d:ba:7c:e1:03:43:52:8d:f3:63:40:3b:3e:14:89: 5a:13:8c:89:51:64:15:cd:41:a1:ab:16:bb:4b:d6:8a:15:e5: 7e:11:cc:e9:96:7a:8e:d7:ce:a4:a2:a7:f2:5b:1c:9e:00:bb: b7:eb:74:10:2f:5f:0f:97:ba:ce:1b:2c:3f:44:a9:30:fa:b4: 82:ec:85:c8:ab:f9:99:f6:ae:c2:af:8b:77:4a:52:82:86:e8: 74:f6:b0:64:35:ef:56:93:0e:ca:c6:30:5a:12:51:95:f5:81: 2b:cd:17:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf2OLJcVkqiCp+vIS+2cco5NaIWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxOFoX DTI3MDMwMzA2MDUxOFowMzExMC8GA1UEAxMoQjM4Rjc1Q0MyNkQyN0RFOEE1NjRB NkFBQThCNEFGRTMyMzE3MkNGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKb+oUzd4k9bjAjX+UQYX4ioRAMgATqYEzawfczPk3IP7N1lOovOfvLk9vir 5SOtBMPR8UbtmIkTtNSGRD7UJ9gc5EQbp0Sf5+jCVnOeV7K9Xk2wtTCfzGu3/ruW eOHKAOXFE00ncB7i6Sx4pzL3SA4o+3LmkmHtsImeVxaSUkFCbyktxrNPGqHeN0OZ tM7eXYyeTvKTh6ovYVjjSODDwKuAaqLRdQuR/MQQFbta35mN2nYS7h35r0payxf2 O7aYl84Ez3hZGtJi1dkNs1GdEp6BuA8mCnOoVDoOYfPPnuswxjmrBfYyagqdYjY3 dc2ZS4UeSFoYlXuMveBhyTcL3w0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSzj3XM JtJ96KVkpqqotK/jIxcs+zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oWcwDQYJKoZIhvcNAQELBQADggEBAGUqwLra2RSiRcPMPf/ByRvRRZrQ4Z5U/UlT XZeHTYBERVj+O84PJ7DzS9lAvlFo1UUPB4dAee0fZF4oHgyo0Hmn9sD1Fz4Xxoe3 GVnPoLIv2dLPbJwLgsIRHKb5XIftbtCAIqEDsSFWmitZYQnVbVzfANCO761aR+2w FqnuLUIq82xnJq4Ke4QkPLt2VG3+44r/Kg26fOEDQ1KN82NAOz4UiVoTjIlRZBXN QaGrFrtL1ooV5X4RzOmWeo7XzqSip/JbHJ4Au7frdBAvXw+Xus4bLD9EqTD6tILs hcir+Zn2rsKvi3dKUoKG6HT2sGQ171aTDsrGMFoSUZX1gSvNF78= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:28 2026 by rpki-client