$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143204.roa File: AS143204.roa (raw, json) Hash identifier: Y24ws4LdrmXNfvvKnmfovd5vZH2PlboQa28JRv9fDVo= Subject key identifier: 8B:24:3B:A3:AC:B1:F6:E6:3F:89:DE:E5:0A:5F:E6:51:78:8A:97:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7F9009C901AE996D1A1220B9D5CAA50C8AA86CA3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143204.roa Signing time: Wed 04 Mar 2026 06:07:02 +0000 ROA not before: Wed 04 Mar 2026 06:02:02 +0000 ROA not after: Wed 03 Mar 2027 06:07:02 +0000 asID: 143204 IP address blocks: 240a:a22a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:90:09:c9:01:ae:99:6d:1a:12:20:b9:d5:ca:a5:0c:8a:a8:6c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:02 2026 GMT Not After : Mar 3 06:07:02 2027 GMT Subject: CN=8B243BA3ACB1F6E63F89DEE50A5FE651788A97B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:3b:2f:73:ba:b8:4a:84:a4:e5:0b:3c:43: 9f:7c:b7:af:e9:91:88:46:cd:e3:ef:c5:80:3c:63: e6:5f:c4:27:60:87:7f:4b:aa:81:29:a9:57:df:5f: 45:80:0a:69:05:d6:27:49:49:55:f3:85:6d:be:f8: ee:5d:fa:1a:0e:2f:d9:f2:98:b7:cc:90:54:3e:ce: 03:f5:d9:cf:be:6a:ae:65:c4:20:73:e5:c6:78:8e: c9:b0:17:2c:75:c3:aa:c9:ab:d8:bf:21:e3:1a:d2: 4c:c6:6c:33:e8:8d:f4:dc:be:6b:e5:b9:ce:ad:51: 48:32:73:19:46:58:06:09:24:49:28:ef:dd:ef:b6: 8f:f0:2d:06:20:4f:5a:eb:3c:b8:27:d9:2e:f4:9e: 9d:42:0d:08:b2:49:cd:56:96:da:19:6f:f1:a2:b6: ef:49:81:04:fb:74:61:4f:0c:3d:00:4b:df:fe:a7: 88:56:73:1b:1c:90:64:d6:7b:1f:e3:82:30:41:ab: 19:7e:ef:b4:35:24:55:5d:a1:89:4d:29:27:5a:b5: 66:d4:73:8e:4a:9a:2b:da:85:68:e8:14:23:d1:50: e9:65:e6:14:39:d1:c2:fb:15:9b:2f:5a:69:f7:03: b7:5b:93:a2:e7:64:cd:5c:c5:19:9e:80:53:b2:d3: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:24:3B:A3:AC:B1:F6:E6:3F:89:DE:E5:0A:5F:E6:51:78:8A:97:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143204.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a22a::/32 Signature Algorithm: sha256WithRSAEncryption d1:af:1c:7a:d0:26:62:6d:7d:7f:c1:e9:25:82:03:6e:e0:fd: 97:43:cf:7e:54:89:db:4a:58:01:04:5a:ae:0c:98:dd:3c:6d: 2c:73:08:44:e8:1f:9e:83:96:8e:34:79:46:ba:66:c4:3e:b4: 6d:e1:dc:6d:7d:d6:c5:02:c9:a5:fb:ea:94:60:14:1c:59:3c: 03:ee:8d:f3:8f:b7:4a:6f:5e:bf:26:f9:20:ed:93:35:b8:1c: ec:17:c5:2b:9f:8c:0d:8e:61:47:98:f1:09:dd:ac:71:60:e6: 9a:c5:9b:28:41:95:b4:53:ff:9f:e5:c6:46:55:d2:91:7d:c0: 16:bc:79:37:8a:33:30:5f:f3:be:02:b5:fd:bf:bb:7a:d7:39: ca:aa:be:4d:8f:ff:4d:da:c2:df:0d:ca:59:75:29:d4:98:ae: d6:e0:af:a8:41:c9:05:ef:6b:66:d3:62:a3:f0:c4:b9:01:2c: b8:ec:19:6e:45:11:ed:a9:02:56:95:77:86:9d:fd:6d:ab:c9: 44:12:dd:91:7b:51:be:86:03:dd:86:47:e3:fc:ec:b2:57:aa: ae:a7:78:c7:79:19:3c:34:21:e0:65:1e:63:8d:58:cc:4a:69: 64:b4:6e:55:56:90:57:82:d2:08:fc:86:8b:a1:ff:97:79:9e: ef:c3:0e:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf5AJyQGumW0aEiC51cqlDIqobKMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwMloX DTI3MDMwMzA2MDcwMlowMzExMC8GA1UEAxMoOEIyNDNCQTNBQ0IxRjZFNjNGODlE RUU1MEE1RkU2NTE3ODhBOTdCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVoOy9zurhKhKTlCzxDn3y3r+mRiEbN4+/FgDxj5l/EJ2CHf0uqgSmpV99f RYAKaQXWJ0lJVfOFbb747l36Gg4v2fKYt8yQVD7OA/XZz75qrmXEIHPlxniOybAX LHXDqsmr2L8h4xrSTMZsM+iN9Ny+a+W5zq1RSDJzGUZYBgkkSSjv3e+2j/AtBiBP Wus8uCfZLvSenUINCLJJzVaW2hlv8aK270mBBPt0YU8MPQBL3/6niFZzGxyQZNZ7 H+OCMEGrGX7vtDUkVV2hiU0pJ1q1ZtRzjkqaK9qFaOgUI9FQ6WXmFDnRwvsVmy9a afcDt1uToudkzVzFGZ6AU7LT0ksCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSLJDuj rLH25j+J3uUKX+ZReIqXtDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oiowDQYJKoZIhvcNAQELBQADggEBANGvHHrQJmJtfX/B6SWCA27g/ZdDz35UidtK WAEEWq4MmN08bSxzCEToH56Dlo40eUa6ZsQ+tG3h3G191sUCyaX76pRgFBxZPAPu jfOPt0pvXr8m+SDtkzW4HOwXxSufjA2OYUeY8QndrHFg5prFmyhBlbRT/5/lxkZV 0pF9wBa8eTeKMzBf874Ctf2/u3rXOcqqvk2P/03awt8Nyll1KdSYrtbgr6hByQXv a2bTYqPwxLkBLLjsGW5FEe2pAlaVd4ad/W2ryUQS3ZF7Ub6GA92GR+P87LJXqq6n eMd5GTw0IeBlHmONWMxKaWS0blVWkFeC0gj8houh/5d5nu/DDnU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:44 2026 by rpki-client