$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143095.roa File: AS143095.roa (raw, json) Hash identifier: Lb6HkBj2/leJFuK4gHh04aKxF81rMGCvsVwvU8je82g= Subject key identifier: ED:79:08:39:02:E3:4E:25:97:54:5A:BB:5D:31:C4:67:0A:D1:5C:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1BBFA4E97DFE9B461AD14D8909EFD75CAF1C0C82 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143095.roa Signing time: Wed 04 Mar 2026 06:06:56 +0000 ROA not before: Wed 04 Mar 2026 06:01:56 +0000 ROA not after: Wed 03 Mar 2027 06:06:56 +0000 asID: 143095 IP address blocks: 240a:a1bd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bf:a4:e9:7d:fe:9b:46:1a:d1:4d:89:09:ef:d7:5c:af:1c:0c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:56 2026 GMT Not After : Mar 3 06:06:56 2027 GMT Subject: CN=ED79083902E34E2597545ABB5D31C4670AD15C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:05:bf:d0:00:4a:b3:da:c7:28:f7:3d:df: 15:00:05:07:14:d1:9e:e1:38:de:79:13:c4:4b:2f: cc:c3:77:49:0b:35:ed:c3:b8:fa:fa:9f:58:64:0a: f5:82:ec:30:67:48:69:2c:73:cd:8c:5a:7f:80:e1: 1c:1f:5f:45:1b:dc:ae:31:7d:24:46:c0:a7:a8:c6: f9:c6:6f:5f:b3:4c:a4:4f:7b:c1:8f:f6:17:24:19: 50:60:f6:04:cb:d0:d2:17:94:67:0d:ac:f1:42:18: a8:9e:5c:1d:8e:e9:c1:67:58:ae:5c:2b:3b:1c:34: e6:01:33:dc:77:95:5a:d8:b2:59:f3:32:26:b9:16: 53:28:af:74:4c:31:56:ea:b7:e7:95:63:62:5a:5f: b8:b2:11:aa:af:33:17:e6:2b:d8:ff:c7:07:35:0b: 41:18:c2:4a:c5:2b:11:87:26:00:81:72:dc:be:8a: b4:e4:e2:2f:d8:55:11:cf:5a:0f:73:1f:af:2c:0d: 9a:2e:1a:c9:0c:b9:c8:cb:a8:a3:97:43:28:b3:f7: 30:4c:18:7d:5c:57:35:7c:f3:b5:c0:f1:5b:ed:fe: 4e:5c:d2:78:8a:97:a5:94:15:a2:94:5a:8e:56:71: 9e:38:70:0f:ac:85:94:df:3f:cd:c4:a1:19:c4:ad: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:79:08:39:02:E3:4E:25:97:54:5A:BB:5D:31:C4:67:0A:D1:5C:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1bd::/32 Signature Algorithm: sha256WithRSAEncryption 63:40:8d:a1:9a:36:82:77:e7:4e:b6:d2:dd:98:38:a3:f0:4c: 54:60:de:13:01:45:53:2b:40:3d:15:91:32:3e:6b:9f:d5:e6: af:9e:4e:75:70:72:39:43:da:4b:da:ba:f4:cc:41:5b:df:a8: b5:bc:01:bb:85:a2:b4:85:cd:48:20:33:a4:a2:c8:16:dd:67: 29:46:27:14:c0:9b:f6:b9:c9:63:3e:36:ea:e1:f1:4f:fa:29: ed:df:ee:fc:fb:0f:64:fe:05:1f:0b:af:19:73:22:0a:e5:a2: a4:11:51:d1:b0:7a:57:1b:e0:ef:ac:b2:a4:6b:d8:7a:18:46: 63:8f:d7:50:2e:c6:33:de:f4:c6:73:10:28:fa:6d:63:55:f7: cb:35:c2:11:bf:37:5b:8f:94:c1:8a:a2:5e:ef:5c:aa:38:50: d1:28:f5:07:84:92:5e:66:c7:17:bb:87:cb:17:1d:0f:12:40: 43:a0:c4:77:b9:dc:a9:c1:89:27:b9:eb:1e:c4:0c:2c:90:86: 5c:a5:1f:33:44:3c:ba:63:de:86:0d:ae:2c:34:a0:6f:77:46: 54:7c:8e:2b:aa:0d:b5:dd:7a:f4:fd:47:14:f5:bf:48:57:7f: 94:c5:b4:2f:b2:b7:5f:71:2d:f2:40:3c:ab:a8:6d:bf:dc:31: e9:be:b5:e6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG7+k6X3+m0Ya0U2JCe/XXK8cDIIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1NloX DTI3MDMwMzA2MDY1NlowMzExMC8GA1UEAxMoRUQ3OTA4MzkwMkUzNEUyNTk3NTQ1 QUJCNUQzMUM0NjcwQUQxNUMxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWEBb/QAEqz2sco9z3fFQAFBxTRnuE43nkTxEsvzMN3SQs17cO4+vqfWGQK 9YLsMGdIaSxzzYxaf4DhHB9fRRvcrjF9JEbAp6jG+cZvX7NMpE97wY/2FyQZUGD2 BMvQ0heUZw2s8UIYqJ5cHY7pwWdYrlwrOxw05gEz3HeVWtiyWfMyJrkWUyivdEwx Vuq355VjYlpfuLIRqq8zF+Yr2P/HBzULQRjCSsUrEYcmAIFy3L6KtOTiL9hVEc9a D3MfrywNmi4ayQy5yMuoo5dDKLP3MEwYfVxXNXzztcDxW+3+TlzSeIqXpZQVopRa jlZxnjhwD6yFlN8/zcShGcStM88CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTteQg5 AuNOJZdUWrtdMcRnCtFcHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ob0wDQYJKoZIhvcNAQELBQADggEBAGNAjaGaNoJ350620t2YOKPwTFRg3hMBRVMr QD0VkTI+a5/V5q+eTnVwcjlD2kvauvTMQVvfqLW8AbuForSFzUggM6SiyBbdZylG JxTAm/a5yWM+Nurh8U/6Ke3f7vz7D2T+BR8LrxlzIgrloqQRUdGwelcb4O+ssqRr 2HoYRmOP11AuxjPe9MZzECj6bWNV98s1whG/N1uPlMGKol7vXKo4UNEo9QeEkl5m xxe7h8sXHQ8SQEOgxHe53KnBiSe56x7EDCyQhlylHzNEPLpj3oYNriw0oG93RlR8 jiuqDbXdevT9RxT1v0hXf5TFtC+yt19xLfJAPKuobb/cMem+teY= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:43 2026 by rpki-client