$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143291.roa File: AS143291.roa (raw, json) Hash identifier: B0Dgt7mhfqBClnfs6CYfTZY+8/FnHCMd4eYRfiJsPYA= Subject key identifier: E1:BE:7A:8E:1B:7E:FA:4A:7F:D4:AA:AF:04:BB:94:B2:F9:6C:E5:84 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7112F833B43F388423C2E16F194034CF01F7FB3B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143291.roa Signing time: Wed 04 Mar 2026 06:05:26 +0000 ROA not before: Wed 04 Mar 2026 06:00:26 +0000 ROA not after: Wed 03 Mar 2027 06:05:26 +0000 asID: 143291 IP address blocks: 240a:a281::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:12:f8:33:b4:3f:38:84:23:c2:e1:6f:19:40:34:cf:01:f7:fb:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:26 2026 GMT Not After : Mar 3 06:05:26 2027 GMT Subject: CN=E1BE7A8E1B7EFA4A7FD4AAAF04BB94B2F96CE584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:fb:82:97:6e:33:f9:e1:2d:17:15:58:8a: 31:2f:4b:1f:31:40:37:f3:d7:b7:d8:db:cb:07:7e: 95:ba:96:c1:07:46:e1:8c:22:35:9d:b7:d1:84:ce: 82:50:11:3b:37:d8:07:33:a7:0e:3f:7e:50:00:f1: 93:c6:3b:b1:9b:2d:6c:91:1c:95:0f:86:bb:d5:9f: 18:05:7f:f1:3a:d1:fc:d4:33:1d:6a:f5:ee:d0:44: 83:f6:e5:a7:93:fb:54:69:1f:d9:f8:06:42:bf:a1: 85:81:de:62:51:38:30:32:0b:3d:d1:8d:26:12:b3: 62:8f:d3:e8:33:02:f4:46:1f:94:d7:b4:10:22:ba: 43:d0:eb:50:a2:d1:0a:22:0f:3d:b5:f4:77:1b:ec: be:a6:3e:f2:29:16:b6:e1:32:4d:4b:5f:97:c5:a3: 2b:5a:93:a2:e0:c1:1b:cb:e0:61:21:67:34:b3:50: 61:28:c5:0f:a6:23:e9:e0:d6:38:7d:f3:c9:32:20: 97:f7:c0:a2:f9:04:f4:01:3f:98:4b:84:f3:98:21: 1b:59:d9:51:56:d5:17:a5:4e:77:4f:88:00:92:79: f6:96:97:52:fc:75:ad:0f:78:1a:c9:ab:93:67:8b: 3f:ec:1a:be:57:55:a2:f0:b9:af:57:d6:09:f6:99: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BE:7A:8E:1B:7E:FA:4A:7F:D4:AA:AF:04:BB:94:B2:F9:6C:E5:84 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a281::/32 Signature Algorithm: sha256WithRSAEncryption bf:fc:93:8b:5f:e6:d6:85:c6:e6:3a:c8:47:f4:7a:bf:fe:c1: fa:5e:57:4e:bd:46:73:a0:5e:f7:bd:2c:cb:e5:49:c0:fe:4f: 32:5d:32:32:79:a3:33:34:67:f3:76:94:27:7e:3d:2c:f4:76: 13:2c:0a:a5:bd:69:ea:d6:67:95:a6:d5:03:2c:68:73:47:67: 04:32:85:82:d9:07:d1:09:79:cf:c8:23:28:28:39:32:f0:04: 88:d5:fb:5d:3a:72:75:29:67:d9:a8:b0:9c:5b:db:87:d6:aa: c4:a1:c1:51:61:da:eb:4b:08:4c:35:46:6e:95:4a:e6:1c:0d: f6:dd:91:05:c5:fe:40:41:89:90:dc:e9:b6:9b:07:07:65:ee: 51:f5:04:fd:f2:8e:94:c0:52:7a:92:f4:e5:de:48:85:e5:81: 01:46:d0:5a:92:02:56:aa:bd:fe:82:43:58:9c:7c:d7:c7:70: 0a:b0:5e:eb:8b:5c:c3:aa:de:25:a5:ae:6c:e5:ca:85:37:4c: 78:ea:a7:82:1c:6e:7b:b0:c5:09:48:6c:8d:b2:55:15:2a:d4: b7:93:ce:b7:79:17:d9:20:bc:41:a0:77:e6:e5:4b:fe:a8:3f: 48:b4:4b:c9:e5:40:7e:cd:37:7e:3e:7d:bb:ab:f6:d5:ad:ab: c5:3c:1c:e6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcRL4M7Q/OIQjwuFvGUA0zwH3+zswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyNloX DTI3MDMwMzA2MDUyNlowMzExMC8GA1UEAxMoRTFCRTdBOEUxQjdFRkE0QTdGRDRB QUFGMDRCQjk0QjJGOTZDRTU4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwt+4KXbjP54S0XFViKMS9LHzFAN/PXt9jbywd+lbqWwQdG4YwiNZ230YTO glAROzfYBzOnDj9+UADxk8Y7sZstbJEclQ+Gu9WfGAV/8TrR/NQzHWr17tBEg/bl p5P7VGkf2fgGQr+hhYHeYlE4MDILPdGNJhKzYo/T6DMC9EYflNe0ECK6Q9DrUKLR CiIPPbX0dxvsvqY+8ikWtuEyTUtfl8WjK1qTouDBG8vgYSFnNLNQYSjFD6Yj6eDW OH3zyTIgl/fAovkE9AE/mEuE85ghG1nZUVbVF6VOd0+IAJJ59paXUvx1rQ94Gsmr k2eLP+wavldVovC5r1fWCfaZN+ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBThvnqO G376Sn/Uqq8Eu5Sy+WzlhDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ooEwDQYJKoZIhvcNAQELBQADggEBAL/8k4tf5taFxuY6yEf0er/+wfpeV069RnOg Xve9LMvlScD+TzJdMjJ5ozM0Z/N2lCd+PSz0dhMsCqW9aerWZ5Wm1QMsaHNHZwQy hYLZB9EJec/IIygoOTLwBIjV+106cnUpZ9mosJxb24fWqsShwVFh2utLCEw1Rm6V SuYcDfbdkQXF/kBBiZDc6babBwdl7lH1BP3yjpTAUnqS9OXeSIXlgQFG0FqSAlaq vf6CQ1icfNfHcAqwXuuLXMOq3iWlrmzlyoU3THjqp4IcbnuwxQlIbI2yVRUq1LeT zrd5F9kgvEGgd+blS/6oP0i0S8nlQH7NN34+fbur9tWtq8U8HOY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:57 2026 by rpki-client