$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143214.roa File: AS143214.roa (raw, json) Hash identifier: eUlfYxS9KSCxWwZ2WxogpGRKn6QPZmCzOXL/agh9iw4= Subject key identifier: 92:93:9F:4C:6A:4D:53:A2:37:60:EB:2C:1C:FA:C4:B1:6B:64:37:C7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 17FB50DA5EEE6B2E215F2D21DC47D6E545169154 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143214.roa Signing time: Wed 04 Mar 2026 06:07:10 +0000 ROA not before: Wed 04 Mar 2026 06:02:10 +0000 ROA not after: Wed 03 Mar 2027 06:07:10 +0000 asID: 143214 IP address blocks: 240a:a234::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fb:50:da:5e:ee:6b:2e:21:5f:2d:21:dc:47:d6:e5:45:16:91:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:10 2026 GMT Not After : Mar 3 06:07:10 2027 GMT Subject: CN=92939F4C6A4D53A23760EB2C1CFAC4B16B6437C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:f1:7e:28:d3:0d:fe:81:b4:a0:1c:10:2a: 70:87:ec:9d:30:7f:96:c2:e4:a1:0a:32:c1:a4:04: 3c:65:33:04:71:a8:57:e9:02:e8:bb:c9:39:53:e0: c9:ec:2a:f5:2c:34:d9:a0:1b:83:5e:c0:cc:40:a5: 2c:61:a6:d5:47:72:c0:95:a1:46:28:ef:a0:92:9e: eb:8b:42:c2:48:77:52:8a:eb:e9:b0:ba:d2:12:f0: ef:10:40:f7:6e:69:cf:f9:d6:5b:65:1d:d2:fd:45: 34:90:da:00:38:33:3b:f5:0b:a5:0d:88:70:0f:6a: 86:2d:a9:20:4a:de:a8:81:de:cd:41:4d:a1:46:b9: 62:f8:2c:62:39:4c:cb:b8:36:67:2f:42:d4:84:0d: f5:49:e0:96:f4:90:90:83:48:92:80:33:78:fd:94: af:1a:57:2c:0e:ef:06:5a:7c:c0:7c:da:fd:e4:87: 94:10:ca:04:bc:9f:9f:18:af:ca:41:a5:08:14:58: ca:f5:6d:ca:b0:4a:69:a5:a0:b2:31:1f:d1:cd:f4: bf:8c:c8:fc:3b:f5:3b:3a:b9:83:32:44:d9:ad:eb: b3:da:ec:c6:0a:f5:40:12:18:77:e9:cb:96:81:47: ed:b3:b2:2b:ea:70:f6:c6:21:bf:85:d0:62:8c:59: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:93:9F:4C:6A:4D:53:A2:37:60:EB:2C:1C:FA:C4:B1:6B:64:37:C7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143214.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a234::/32 Signature Algorithm: sha256WithRSAEncryption 43:23:97:98:ed:81:d2:b1:cd:03:75:e5:ed:b2:c0:30:52:c3: a1:44:0a:a3:fa:87:4c:c5:9b:40:6c:f1:20:77:ec:70:f8:b6: 52:1a:20:49:e4:44:28:86:14:30:d7:76:7b:06:3c:d0:74:3b: 20:34:1f:7c:f2:c2:1f:9f:4d:12:5c:bc:5e:38:88:df:6d:49: 2e:4a:a2:5c:b5:6e:6f:2e:ce:24:94:14:28:e2:a9:75:fa:88: ae:69:c9:5e:80:f9:fc:88:4a:ef:e2:d9:68:81:0f:34:d2:55: 01:07:68:2f:61:d6:8a:db:c4:48:8f:9a:ba:db:63:2f:cf:9b: 42:87:3e:a1:60:2d:7d:fd:38:9f:86:35:7f:5b:5c:43:44:51: 9b:7a:0a:aa:d7:a1:56:9a:7c:a6:23:ef:01:e5:8d:cc:0e:98: 8c:89:85:1f:c9:46:5e:f3:4a:c2:e7:06:67:d3:e9:46:2f:4b: 33:32:16:d7:8f:d3:ba:f1:5a:2f:13:8e:73:14:36:e9:92:55: 64:ce:45:5e:d0:02:06:ff:64:80:25:f5:50:3e:8b:7c:6f:af: 30:0e:86:5f:1e:2a:95:ae:66:63:07:98:57:f6:92:8a:70:45: 25:d2:ad:79:b8:b2:e4:94:b6:5c:7d:a2:3a:b5:e2:36:1a:a1: b6:e2:e0:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUF/tQ2l7uay4hXy0h3EfW5UUWkVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxMFoX DTI3MDMwMzA2MDcxMFowMzExMC8GA1UEAxMoOTI5MzlGNEM2QTRENTNBMjM3NjBF QjJDMUNGQUM0QjE2QjY0MzdDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsL8X4o0w3+gbSgHBAqcIfsnTB/lsLkoQoywaQEPGUzBHGoV+kC6LvJOVPg yewq9Sw02aAbg17AzEClLGGm1UdywJWhRijvoJKe64tCwkh3Uorr6bC60hLw7xBA 925pz/nWW2Ud0v1FNJDaADgzO/ULpQ2IcA9qhi2pIEreqIHezUFNoUa5YvgsYjlM y7g2Zy9C1IQN9UnglvSQkINIkoAzeP2UrxpXLA7vBlp8wHza/eSHlBDKBLyfnxiv ykGlCBRYyvVtyrBKaaWgsjEf0c30v4zI/Dv1Ozq5gzJE2a3rs9rsxgr1QBIYd+nL loFH7bOyK+pw9sYhv4XQYoxZoBcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSk59M ak1Tojdg6ywc+sSxa2Q3xzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzIxNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ojQwDQYJKoZIhvcNAQELBQADggEBAEMjl5jtgdKxzQN15e2ywDBSw6FECqP6h0zF m0Bs8SB37HD4tlIaIEnkRCiGFDDXdnsGPNB0OyA0H3zywh+fTRJcvF44iN9tSS5K oly1bm8uziSUFCjiqXX6iK5pyV6A+fyISu/i2WiBDzTSVQEHaC9h1orbxEiPmrrb Yy/Pm0KHPqFgLX39OJ+GNX9bXENEUZt6CqrXoVaafKYj7wHljcwOmIyJhR/JRl7z SsLnBmfT6UYvSzMyFteP07rxWi8TjnMUNumSVWTORV7QAgb/ZIAl9VA+i3xvrzAO hl8eKpWuZmMHmFf2kopwRSXSrXm4suSUtlx9ojq14jYaobbi4FM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:00 2026 by rpki-client