$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143287.roa File: AS143287.roa (raw, json) Hash identifier: J0/Fry2fFASjzBL12ClXUh4qLdrJA+sqINrYsSg8rCI= Subject key identifier: C1:73:6E:4D:BF:97:E6:24:B6:77:B8:CA:F6:2C:EB:71:68:EA:01:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 410D8C8C39644EAA6129AD1B7E2BA244452F9AC8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143287.roa Signing time: Wed 04 Mar 2026 06:07:15 +0000 ROA not before: Wed 04 Mar 2026 06:02:15 +0000 ROA not after: Wed 03 Mar 2027 06:07:15 +0000 asID: 143287 IP address blocks: 240a:a27d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0d:8c:8c:39:64:4e:aa:61:29:ad:1b:7e:2b:a2:44:45:2f:9a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:15 2026 GMT Not After : Mar 3 06:07:15 2027 GMT Subject: CN=C1736E4DBF97E624B677B8CAF62CEB7168EA0196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:93:28:6b:b9:66:eb:a4:23:56:b4:c8:70: 3d:2a:27:e6:bd:80:7f:f4:c5:62:15:fa:1e:e0:1b: ee:e6:e3:cb:e0:f6:dc:83:f6:0d:ae:e8:8d:46:40: 8a:9a:b3:34:48:33:f5:52:18:d9:87:25:1a:a0:a1: e6:3a:db:af:44:8c:15:27:20:ba:d9:57:2b:1a:af: cb:9d:44:a4:a1:ab:00:03:14:d7:22:e8:3d:e1:0f: 8e:9b:30:1f:9c:16:d9:84:3e:8a:51:ea:5f:01:a1: e6:0d:b5:a7:17:38:5d:6c:c6:8b:e2:0b:0c:9c:6f: 98:1c:19:78:9f:d5:18:d4:09:7c:0a:7a:7f:d2:f0: 9b:91:8a:66:89:5f:4c:4e:2b:2c:ab:08:3a:5b:85: 61:b2:60:c0:38:d1:e0:43:dc:08:2d:dd:ee:86:6c: fa:5a:7b:d7:88:64:5f:9a:ae:be:f9:40:41:b6:3e: 3f:c1:35:ee:b2:f3:32:e8:ed:da:51:f4:39:24:de: 7d:bb:5c:49:5b:ec:ab:a5:a5:3e:98:c2:6d:45:71: a7:7e:fa:3a:7a:2d:2a:bc:cd:4c:97:df:a3:c8:c8: 6e:0e:ef:e8:8b:fb:f0:23:64:db:05:59:e2:d8:4a: d0:a0:46:69:cb:c4:69:17:36:21:42:04:dc:37:13: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:73:6E:4D:BF:97:E6:24:B6:77:B8:CA:F6:2C:EB:71:68:EA:01:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143287.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a27d::/32 Signature Algorithm: sha256WithRSAEncryption a6:da:af:3f:d4:86:c4:da:d3:97:c0:15:67:d2:13:6f:71:38: 56:cc:8b:ab:f0:38:82:49:d0:c2:19:5b:9b:31:7e:7d:a7:ca: 97:ae:89:61:ef:e3:a4:52:da:86:6b:62:df:4d:cb:ed:5c:c8: f1:a0:d0:8e:77:5f:a7:d0:c1:28:4f:5e:c4:1d:ca:c4:0e:8f: 73:10:dd:30:1d:e4:96:e5:9b:dd:03:d1:29:54:7b:de:51:6e: 6e:55:30:74:17:1a:5f:4b:9a:fa:9e:2e:56:56:a8:14:60:6b: c5:fb:63:fe:94:3f:e1:ad:91:38:0a:df:76:eb:15:ee:82:4a: 9b:4f:22:87:da:07:04:bc:e7:85:fa:c4:ef:31:ae:20:9b:90: 82:15:4f:7b:9c:2e:67:3d:ed:00:4f:e8:ad:17:c3:7b:74:ac: 2d:9d:aa:48:9a:79:a6:cd:f9:b3:8f:9b:cf:a6:1b:e9:b7:07: cd:be:dc:0f:fc:5c:b7:d9:09:50:73:e2:69:e2:82:b0:8b:83: 70:09:59:b6:dc:d0:b0:bc:89:47:fe:21:1b:6c:72:b6:94:de: 1e:59:32:30:27:f0:64:89:07:2c:4b:af:7a:39:a5:85:b0:05: ee:a5:72:c0:1d:ef:9d:ac:a2:c6:98:4e:42:23:f0:a0:e4:7d: 9b:46:d4:86 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQQ2MjDlkTqphKa0bfiuiREUvmsgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxNVoX DTI3MDMwMzA2MDcxNVowMzExMC8GA1UEAxMoQzE3MzZFNERCRjk3RTYyNEI2NzdC OENBRjYyQ0VCNzE2OEVBMDE5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLfkyhruWbrpCNWtMhwPSon5r2Af/TFYhX6HuAb7ubjy+D23IP2Da7ojUZA ipqzNEgz9VIY2YclGqCh5jrbr0SMFScgutlXKxqvy51EpKGrAAMU1yLoPeEPjpsw H5wW2YQ+ilHqXwGh5g21pxc4XWzGi+ILDJxvmBwZeJ/VGNQJfAp6f9Lwm5GKZolf TE4rLKsIOluFYbJgwDjR4EPcCC3d7oZs+lp714hkX5quvvlAQbY+P8E17rLzMujt 2lH0OSTefbtcSVvsq6WlPpjCbUVxp376OnotKrzNTJffo8jIbg7v6Iv78CNk2wVZ 4thK0KBGacvEaRc2IUIE3DcTT3MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTBc25N v5fmJLZ3uMr2LOtxaOoBljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK on0wDQYJKoZIhvcNAQELBQADggEBAKbarz/UhsTa05fAFWfSE29xOFbMi6vwOIJJ 0MIZW5sxfn2nypeuiWHv46RS2oZrYt9Ny+1cyPGg0I53X6fQwShPXsQdysQOj3MQ 3TAd5Jblm90D0SlUe95Rbm5VMHQXGl9LmvqeLlZWqBRga8X7Y/6UP+GtkTgK33br Fe6CSptPIofaBwS854X6xO8xriCbkIIVT3ucLmc97QBP6K0Xw3t0rC2dqkiaeabN +bOPm8+mG+m3B82+3A/8XLfZCVBz4mnigrCLg3AJWbbc0LC8iUf+IRtscraU3h5Z MjAn8GSJByxLr3o5pYWwBe6lcsAd752sosaYTkIj8KDkfZtG1IY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:46 2026 by rpki-client