$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143207.roa File: AS143207.roa (raw, json) Hash identifier: eiKXi5XtnoGd7wW5rRvvVts/s0kY2cxeXvppp+GEy24= Subject key identifier: C2:99:78:C7:56:33:C5:A3:C1:3A:1A:C3:96:32:81:91:6C:09:59:18 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4E773D81E72911F6FAE9E532894B45E1CC356B25 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143207.roa Signing time: Wed 04 Mar 2026 06:06:17 +0000 ROA not before: Wed 04 Mar 2026 06:01:17 +0000 ROA not after: Wed 03 Mar 2027 06:06:17 +0000 asID: 143207 IP address blocks: 240a:a22d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:77:3d:81:e7:29:11:f6:fa:e9:e5:32:89:4b:45:e1:cc:35:6b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:17 2026 GMT Not After : Mar 3 06:06:17 2027 GMT Subject: CN=C29978C75633C5A3C13A1AC3963281916C095918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:ce:bc:b0:43:28:32:31:2c:ac:eb:25:09: 69:38:e0:bf:e4:5f:5a:e1:2b:a7:0e:13:5a:38:3b: fa:9f:ca:8b:46:b4:40:bc:22:09:1e:c6:4f:22:07: 80:75:5d:7b:44:47:48:23:19:fd:e1:2f:00:4a:7d: 6a:b7:77:97:20:64:81:da:37:ff:df:55:7c:d7:9d: ad:b1:86:0d:58:b1:f8:d5:ae:4c:2f:9b:cf:4c:ab: bc:23:02:dc:d3:69:5f:67:b4:d9:39:d7:99:77:91: 5b:3a:f5:be:ce:0e:ba:c5:c4:46:47:75:f9:2a:0b: 0c:c7:fc:ba:16:6a:67:09:a3:ba:0f:06:94:12:e4: 96:40:d0:92:b8:d3:e4:90:0b:15:2f:f3:83:6d:48: 7b:aa:20:74:30:b6:dd:2c:8f:04:49:44:15:6a:3b: ff:4a:de:45:19:94:cf:e2:78:07:aa:b6:19:3c:21: c8:6b:43:b1:a4:a6:b2:02:01:17:6d:a8:62:50:f4: b5:70:2f:c6:b8:88:fc:13:24:ca:0d:67:2a:30:b0: 70:5a:53:1f:21:58:1b:eb:68:53:4d:84:aa:fd:3d: 3f:20:5f:e8:84:09:52:1f:b1:96:b5:98:cc:fd:e1: a6:20:03:35:92:09:a5:07:22:c2:50:49:ba:a2:98: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:99:78:C7:56:33:C5:A3:C1:3A:1A:C3:96:32:81:91:6C:09:59:18 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143207.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a22d::/32 Signature Algorithm: sha256WithRSAEncryption a3:ef:96:df:3f:f9:2c:db:c0:90:76:eb:0f:46:de:d7:33:f8: 6a:54:77:4f:f4:de:e6:ee:17:88:b6:cf:cc:ef:1f:a5:8e:73: cc:d4:92:d9:a9:9e:0e:85:d9:7d:14:de:85:02:d9:d4:29:51: f7:72:ff:be:0f:5a:fd:d5:dc:16:a5:8d:92:1f:b6:8b:e0:1e: 69:bd:87:7e:bb:6f:79:ff:7e:37:e3:27:b1:16:21:d2:cf:4f: db:5c:42:4b:ec:5e:eb:55:d2:91:73:7f:f6:2b:47:14:08:d0: 85:a3:a7:05:c9:73:9b:cf:da:16:18:db:1e:9a:54:f0:51:89: 27:a6:2a:f2:24:ae:c0:55:ff:83:13:e3:00:2f:1f:50:32:79: 42:c1:c4:61:70:55:da:2d:a8:50:d3:9c:a6:9c:28:08:65:72: 3d:34:29:07:b0:2f:09:54:15:91:28:ea:60:40:26:72:62:36: 22:a8:a2:6d:40:18:c2:f2:54:94:09:ab:d8:00:f2:89:43:32: b7:ac:1a:29:ec:f5:45:08:6c:8c:65:2f:99:ae:d0:35:6d:2e: 9c:c0:f8:20:39:52:d5:bc:72:67:83:0b:a9:81:fc:a6:fb:bb: 00:ee:51:1b:92:aa:09:4a:41:0b:08:15:c7:89:4c:25:ae:87: 1f:cd:fa:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTnc9gecpEfb66eUyiUtF4cw1ayUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExN1oX DTI3MDMwMzA2MDYxN1owMzExMC8GA1UEAxMoQzI5OTc4Qzc1NjMzQzVBM0MxM0Ex QUMzOTYzMjgxOTE2QzA5NTkxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKo/zrywQygyMSys6yUJaTjgv+RfWuErpw4TWjg7+p/Ki0a0QLwiCR7GTyIH gHVde0RHSCMZ/eEvAEp9ard3lyBkgdo3/99VfNedrbGGDVix+NWuTC+bz0yrvCMC 3NNpX2e02TnXmXeRWzr1vs4OusXERkd1+SoLDMf8uhZqZwmjug8GlBLklkDQkrjT 5JALFS/zg21Ie6ogdDC23SyPBElEFWo7/0reRRmUz+J4B6q2GTwhyGtDsaSmsgIB F22oYlD0tXAvxriI/BMkyg1nKjCwcFpTHyFYG+toU02Eqv09PyBf6IQJUh+xlrWY zP3hpiADNZIJpQciwlBJuqKYgl0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTCmXjH VjPFo8E6GsOWMoGRbAlZGDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oi0wDQYJKoZIhvcNAQELBQADggEBAKPvlt8/+SzbwJB26w9G3tcz+GpUd0/03ubu F4i2z8zvH6WOc8zUktmpng6F2X0U3oUC2dQpUfdy/74PWv3V3BaljZIftovgHmm9 h367b3n/fjfjJ7EWIdLPT9tcQkvsXutV0pFzf/YrRxQI0IWjpwXJc5vP2hYY2x6a VPBRiSemKvIkrsBV/4MT4wAvH1AyeULBxGFwVdotqFDTnKacKAhlcj00KQewLwlU FZEo6mBAJnJiNiKoom1AGMLyVJQJq9gA8olDMresGins9UUIbIxlL5mu0DVtLpzA +CA5UtW8cmeDC6mB/Kb7uwDuURuSqglKQQsIFceJTCWuhx/N+vA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:07 2026 by rpki-client