$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143094.roa File: AS143094.roa (raw, json) Hash identifier: YqWIz1f3QuQ4ofo4Z+4AdetSkesu7aFijqXwDiBurI0= Subject key identifier: AC:A7:3D:91:D5:7A:F9:13:1E:5A:AE:F5:72:1F:9C:C8:88:DD:D3:8A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5DFBE5DFCC48D147F26F76AE51A0DA390131BBD4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143094.roa Signing time: Wed 04 Mar 2026 06:05:17 +0000 ROA not before: Wed 04 Mar 2026 06:00:17 +0000 ROA not after: Wed 03 Mar 2027 06:05:17 +0000 asID: 143094 IP address blocks: 240a:a1bc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fb:e5:df:cc:48:d1:47:f2:6f:76:ae:51:a0:da:39:01:31:bb:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:17 2026 GMT Not After : Mar 3 06:05:17 2027 GMT Subject: CN=ACA73D91D57AF9131E5AAEF5721F9CC888DDD38A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:31:b8:77:15:00:79:4b:4b:61:5e:fa:31:ee: 58:da:db:72:a5:f8:b3:d6:04:1e:c5:c2:f7:98:00: ab:6c:e8:b0:fe:79:97:1c:6e:ae:ad:3b:c6:e8:e4: 61:f1:1b:54:e0:22:4e:7e:18:fc:3a:17:a4:ec:02: 9c:b6:7d:85:88:fb:18:84:8d:b4:a5:ee:a2:48:65: 69:77:cb:e4:f1:44:df:fa:92:33:9b:cf:c0:b4:27: b2:77:56:00:57:35:63:87:e3:58:e5:be:30:01:d5: b5:e9:4a:99:f9:56:f3:01:1a:3d:c6:cf:57:22:ac: 25:55:b3:db:17:0b:fc:80:f3:f3:be:77:6e:d3:b3: 51:1f:09:f3:d3:56:05:f1:56:fa:47:ca:20:31:b8: 2c:3b:c4:07:98:77:35:d8:d9:58:a2:5f:87:aa:11: b9:2e:48:19:6e:ba:50:2e:bf:70:71:df:07:a3:03: 19:c3:50:01:f7:71:4c:21:16:6d:41:be:eb:ea:ea: 7e:a7:87:dd:2b:59:d2:ec:22:6d:52:bd:a3:b6:0c: 64:a4:45:d3:71:4d:db:27:97:89:0d:a4:45:ff:f7: d9:f0:1c:3a:e9:46:d7:b6:4f:06:81:52:79:fd:51: bd:9c:15:d8:47:ef:94:8b:5a:f1:f9:83:22:a7:60: a9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:3D:91:D5:7A:F9:13:1E:5A:AE:F5:72:1F:9C:C8:88:DD:D3:8A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143094.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1bc::/32 Signature Algorithm: sha256WithRSAEncryption da:ac:b1:ea:93:9c:d6:39:34:4d:5d:51:6b:3b:68:d8:12:4f: 22:07:e7:40:f1:93:0b:bd:3d:58:59:ef:59:9c:31:a1:c7:25: b0:75:74:58:15:b4:cc:25:7f:3a:94:5d:32:9a:40:58:d0:8a: 9c:67:c5:9e:2c:61:15:b7:e8:2e:e5:b3:ef:7f:6c:13:8f:ee: db:25:2c:03:7a:ac:dc:6a:ed:62:f9:6d:36:cb:42:4e:30:14: 27:09:90:ff:1d:8c:e7:75:34:7d:1d:21:5f:3f:21:68:94:80: 96:52:d2:55:08:f4:49:c3:cb:ae:c6:0f:20:78:a9:d6:f8:76: 0c:b1:d4:6c:60:15:39:98:ff:57:0c:47:94:3f:e7:a1:a3:cd: 6a:46:38:93:2d:49:a7:4b:0a:69:62:78:a2:e1:b1:70:d6:f7: f4:27:f2:df:09:1f:7d:f2:ba:19:17:c6:af:ca:3d:bc:d9:1d: a6:8f:d4:ce:31:bc:bd:34:37:01:ff:06:fb:66:9a:25:e1:dd: 3c:6c:77:c3:ad:2f:ab:59:d9:db:f8:ba:ce:7b:91:5d:a7:46: b8:96:49:6c:3f:57:88:59:7e:29:1c:54:06:ac:ec:26:8a:d5: 55:be:1f:ae:57:05:dc:29:81:c7:1f:94:66:a5:e9:86:9e:f2: 38:6a:8d:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXfvl38xI0Ufyb3auUaDaOQExu9QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxN1oX DTI3MDMwMzA2MDUxN1owMzExMC8GA1UEAxMoQUNBNzNEOTFENTdBRjkxMzFFNUFB RUY1NzIxRjlDQzg4OERERDM4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPYxuHcVAHlLS2Fe+jHuWNrbcqX4s9YEHsXC95gAq2zosP55lxxurq07xujk YfEbVOAiTn4Y/DoXpOwCnLZ9hYj7GISNtKXuokhlaXfL5PFE3/qSM5vPwLQnsndW AFc1Y4fjWOW+MAHVtelKmflW8wEaPcbPVyKsJVWz2xcL/IDz8753btOzUR8J89NW BfFW+kfKIDG4LDvEB5h3NdjZWKJfh6oRuS5IGW66UC6/cHHfB6MDGcNQAfdxTCEW bUG+6+rqfqeH3StZ0uwibVK9o7YMZKRF03FN2yeXiQ2kRf/32fAcOulG17ZPBoFS ef1RvZwV2EfvlIta8fmDIqdgqdsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSspz2R 1Xr5Ex5arvVyH5zIiN3TijAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK obwwDQYJKoZIhvcNAQELBQADggEBANqsseqTnNY5NE1dUWs7aNgSTyIH50Dxkwu9 PVhZ71mcMaHHJbB1dFgVtMwlfzqUXTKaQFjQipxnxZ4sYRW36C7ls+9/bBOP7tsl LAN6rNxq7WL5bTbLQk4wFCcJkP8djOd1NH0dIV8/IWiUgJZS0lUI9EnDy67GDyB4 qdb4dgyx1GxgFTmY/1cMR5Q/56GjzWpGOJMtSadLCmlieKLhsXDW9/Qn8t8JH33y uhkXxq/KPbzZHaaP1M4xvL00NwH/BvtmmiXh3Txsd8OtL6tZ2dv4us57kV2nRriW SWw/V4hZfikcVAas7CaK1VW+H65XBdwpgccflGal6Yae8jhqjdQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:19 2026 by rpki-client