$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143092.roa File: AS143092.roa (raw, json) Hash identifier: igcTSGzVIGt0BBVSced8taM9yqpV8MedBSecQ+s8jjc= Subject key identifier: 61:63:08:C5:A7:BB:B0:78:7A:8C:E4:41:FB:6C:84:BC:89:2E:B9:CE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4633CA001AE4226FE86B31FBB879C19044A558F0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143092.roa Signing time: Wed 04 Mar 2026 06:06:20 +0000 ROA not before: Wed 04 Mar 2026 06:01:20 +0000 ROA not after: Wed 03 Mar 2027 06:06:20 +0000 asID: 143092 IP address blocks: 240a:a1ba::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:33:ca:00:1a:e4:22:6f:e8:6b:31:fb:b8:79:c1:90:44:a5:58:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:20 2026 GMT Not After : Mar 3 06:06:20 2027 GMT Subject: CN=616308C5A7BBB0787A8CE441FB6C84BC892EB9CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:ff:ca:f3:ba:d6:39:e7:0a:f6:11:6e:8a: 3e:a9:96:cf:d5:b6:8d:85:fd:26:8e:6c:1c:e2:44: ab:e4:e4:56:e6:d1:fc:b1:94:6a:c3:84:58:e5:6b: 14:d5:45:7c:f7:70:fa:d2:1f:1d:ed:48:f3:4c:da: ba:32:a2:59:be:a8:cc:33:67:3e:54:a5:f4:8a:1c: c5:4b:83:fe:48:b4:ac:af:8a:a2:9f:e7:23:98:06: 62:58:49:98:47:3b:26:69:27:47:bf:6e:9c:94:05: f4:58:be:5e:c1:ab:83:a8:6b:eb:24:c4:f0:94:3e: cd:ed:3e:48:00:6d:5e:82:78:ef:61:a7:4c:3f:c4: 7b:8d:27:26:25:21:1f:32:58:da:4d:e7:d1:ce:d4: ef:70:1f:f2:d1:ad:f8:90:9a:c2:f1:93:aa:b1:14: 2a:5a:6b:c2:3f:b6:bb:59:8b:c5:d2:1c:16:73:d8: 2b:97:2c:8d:45:77:b8:91:26:c9:20:05:7f:39:e1: e7:34:0f:13:52:99:e9:2e:05:ee:03:63:fe:7d:c4: 07:68:12:8b:68:31:51:58:47:c2:90:74:8a:40:ce: 07:9f:b6:6f:ca:79:07:8b:94:bb:54:54:97:bf:0c: 94:03:f3:4a:ca:6e:82:19:a7:75:22:e6:31:78:32: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:63:08:C5:A7:BB:B0:78:7A:8C:E4:41:FB:6C:84:BC:89:2E:B9:CE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1ba::/32 Signature Algorithm: sha256WithRSAEncryption 93:3d:b1:b6:22:a1:c1:7c:3f:e1:8f:5e:17:31:e6:58:f9:70: b6:84:a9:79:54:81:3b:26:47:ee:09:41:55:9d:16:d0:3a:b5: fe:e8:b7:fc:5b:ae:66:e0:1b:0b:df:64:06:73:5c:a7:89:83: bf:5a:b4:d6:9f:5f:b6:a9:b2:89:e6:9b:78:d0:4c:d2:bc:6d: 93:de:73:8b:82:05:86:d5:5e:8b:63:ca:d3:1e:c9:7a:6c:b5: dd:92:f9:7b:37:e2:23:38:c3:04:bf:cf:51:3d:f2:4d:64:5c: 88:25:fb:0f:a7:46:bb:6c:81:03:b2:0d:09:ca:af:89:79:6c: 39:7f:9e:79:09:ac:2d:1e:f1:2b:97:a5:55:1b:d2:6d:fe:de: 97:be:17:98:ba:57:1b:86:15:85:5a:85:ae:bc:48:d9:87:ab: 73:3b:6f:85:14:26:8d:b3:cb:cc:17:b1:a6:71:0f:37:72:2c: 1f:9b:f5:83:da:55:94:90:b1:5c:16:4a:ad:15:15:c5:4c:15: 3e:2f:5a:9a:bc:83:8e:dc:91:eb:86:98:b5:9f:05:41:58:f5: 7c:a6:1b:e9:44:79:c3:60:83:a7:e6:90:99:36:57:24:61:47: 79:69:1b:04:12:cf:07:97:fb:2d:e9:51:10:b5:75:be:a2:1e: 20:21:d3:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURjPKABrkIm/oazH7uHnBkESlWPAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyMFoX DTI3MDMwMzA2MDYyMFowMzExMC8GA1UEAxMoNjE2MzA4QzVBN0JCQjA3ODdBOENF NDQxRkI2Qzg0QkM4OTJFQjlDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLA/8rzutY55wr2EW6KPqmWz9W2jYX9Jo5sHOJEq+TkVubR/LGUasOEWOVr FNVFfPdw+tIfHe1I80zaujKiWb6ozDNnPlSl9IocxUuD/ki0rK+Kop/nI5gGYlhJ mEc7JmknR79unJQF9Fi+XsGrg6hr6yTE8JQ+ze0+SABtXoJ472GnTD/Ee40nJiUh HzJY2k3n0c7U73Af8tGt+JCawvGTqrEUKlprwj+2u1mLxdIcFnPYK5csjUV3uJEm ySAFfznh5zQPE1KZ6S4F7gNj/n3EB2gSi2gxUVhHwpB0ikDOB5+2b8p5B4uUu1RU l78MlAPzSspughmndSLmMXgyIzECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRhYwjF p7uweHqM5EH7bIS8iS65zjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK obowDQYJKoZIhvcNAQELBQADggEBAJM9sbYiocF8P+GPXhcx5lj5cLaEqXlUgTsm R+4JQVWdFtA6tf7ot/xbrmbgGwvfZAZzXKeJg79atNafX7apsonmm3jQTNK8bZPe c4uCBYbVXotjytMeyXpstd2S+Xs34iM4wwS/z1E98k1kXIgl+w+nRrtsgQOyDQnK r4l5bDl/nnkJrC0e8SuXpVUb0m3+3pe+F5i6VxuGFYVaha68SNmHq3M7b4UUJo2z y8wXsaZxDzdyLB+b9YPaVZSQsVwWSq0VFcVMFT4vWpq8g47ckeuGmLWfBUFY9Xym G+lEecNgg6fmkJk2VyRhR3lpGwQSzweX+y3pURC1db6iHiAh078= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:21 2026 by rpki-client