$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143295.roa File: AS143295.roa (raw, json) Hash identifier: fOnT0kdZgRQLsEL74Fy5gPM7P0yEqm7nLTZdHO+HXEk= Subject key identifier: 7D:1B:D8:DF:20:0D:42:71:A0:16:67:49:29:32:D5:86:8F:A7:B3:42 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 365F41BD98C5A4C3CF42763E3A0E5B488D5ADFDE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143295.roa Signing time: Wed 04 Mar 2026 06:08:05 +0000 ROA not before: Wed 04 Mar 2026 06:03:05 +0000 ROA not after: Wed 03 Mar 2027 06:08:05 +0000 asID: 143295 IP address blocks: 240a:a285::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5f:41:bd:98:c5:a4:c3:cf:42:76:3e:3a:0e:5b:48:8d:5a:df:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:05 2026 GMT Not After : Mar 3 06:08:05 2027 GMT Subject: CN=7D1BD8DF200D4271A01667492932D5868FA7B342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:78:f2:bc:6c:cb:3a:bb:63:36:32:75:ef: 48:44:ac:08:2d:2b:81:42:03:d4:a0:93:53:06:12: e2:d1:5c:39:27:a7:d9:ba:30:d2:d8:bd:f6:31:c6: be:fa:9d:d6:66:5b:ec:b3:50:65:b7:d8:c5:68:8b: ba:8c:d6:d5:76:d4:f8:92:40:e2:a3:5c:5e:bf:8b: 04:6c:fc:93:05:2c:3f:aa:67:30:fd:39:39:c3:3f: bc:ed:72:9a:38:54:43:2d:3c:6d:30:e2:ef:ea:80: 59:43:d0:66:e4:28:8b:e4:58:b4:2b:d0:27:c7:58: 9f:b4:27:68:5e:c4:11:fd:3f:f8:20:e5:83:70:90: f3:05:00:ce:f5:ef:aa:2e:f3:e2:2d:da:c6:dc:7b: ed:4f:24:3c:2d:d8:f1:cb:3e:9f:49:a4:59:ec:d6: 77:86:00:27:7b:35:6a:a0:2f:97:a3:0f:fb:3a:e4: ea:16:c3:70:13:83:3c:59:71:c4:47:fa:11:98:4e: fd:b8:65:59:c7:0c:d3:ae:2a:b3:60:fb:9c:0d:1f: da:89:86:69:2f:98:ce:32:05:f3:1b:0b:aa:3a:e7: 90:6f:70:e8:c4:95:17:f6:92:c8:ab:5d:3e:73:c4: de:7b:b8:80:d2:1e:40:f6:bb:7e:c6:5f:56:69:90: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1B:D8:DF:20:0D:42:71:A0:16:67:49:29:32:D5:86:8F:A7:B3:42 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143295.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a285::/32 Signature Algorithm: sha256WithRSAEncryption 2b:5e:f2:a7:55:a8:1a:d4:c2:7a:36:60:80:6c:61:74:db:5a: a7:fe:78:0d:21:b2:74:83:b7:89:8a:45:57:eb:13:4e:ef:55: 84:86:26:d0:96:ea:c3:fd:42:bf:a1:04:ac:45:2d:49:5b:6f: 64:b7:4d:74:52:4c:d7:eb:5b:13:7e:ef:79:84:20:5d:e1:9a: 8d:dd:41:85:d0:14:d2:0c:1f:98:3c:a4:40:25:98:36:8f:40: 61:97:97:58:87:e1:7f:87:a1:55:87:a4:32:ed:37:e0:3b:e6: c6:a4:1e:45:72:01:b4:a0:a4:65:4f:f9:cc:49:2c:23:57:8d: 49:ac:38:16:30:f2:66:e1:b5:1a:8d:5b:fc:4e:31:02:4d:7d: cb:85:3b:9d:ed:2f:e6:6c:75:0f:e3:8b:41:37:f4:90:c0:a9: cd:7d:37:43:c7:62:3d:af:b4:ef:21:1d:29:f9:6f:d7:45:37: d5:8f:2a:f8:da:6c:92:41:28:35:2d:31:6b:0d:7f:d1:a8:df: a5:8b:fd:ad:d6:ff:0b:78:7b:a0:4d:c0:1b:5f:92:14:d0:af: 2b:61:6c:ab:21:37:3d:a1:61:05:e8:26:b3:a3:e1:21:f5:11: 74:f0:80:8b:26:43:94:36:fa:0c:5a:79:26:cf:81:ba:e7:50: 0b:4d:de:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNl9BvZjFpMPPQnY+Og5bSI1a394wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwNVoX DTI3MDMwMzA2MDgwNVowMzExMC8GA1UEAxMoN0QxQkQ4REYyMDBENDI3MUEwMTY2 NzQ5MjkzMkQ1ODY4RkE3QjM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJWePK8bMs6u2M2MnXvSESsCC0rgUID1KCTUwYS4tFcOSen2bow0ti99jHG vvqd1mZb7LNQZbfYxWiLuozW1XbU+JJA4qNcXr+LBGz8kwUsP6pnMP05OcM/vO1y mjhUQy08bTDi7+qAWUPQZuQoi+RYtCvQJ8dYn7QnaF7EEf0/+CDlg3CQ8wUAzvXv qi7z4i3axtx77U8kPC3Y8cs+n0mkWezWd4YAJ3s1aqAvl6MP+zrk6hbDcBODPFlx xEf6EZhO/bhlWccM064qs2D7nA0f2omGaS+YzjIF8xsLqjrnkG9w6MSVF/aSyKtd PnPE3nu4gNIeQPa7fsZfVmmQhF8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR9G9jf IA1CcaAWZ0kpMtWGj6ezQjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ooUwDQYJKoZIhvcNAQELBQADggEBACte8qdVqBrUwno2YIBsYXTbWqf+eA0hsnSD t4mKRVfrE07vVYSGJtCW6sP9Qr+hBKxFLUlbb2S3TXRSTNfrWxN+73mEIF3hmo3d QYXQFNIMH5g8pEAlmDaPQGGXl1iH4X+HoVWHpDLtN+A75sakHkVyAbSgpGVP+cxJ LCNXjUmsOBYw8mbhtRqNW/xOMQJNfcuFO53tL+ZsdQ/ji0E39JDAqc19N0PHYj2v tO8hHSn5b9dFN9WPKvjabJJBKDUtMWsNf9Go36WL/a3W/wt4e6BNwBtfkhTQryth bKshNz2hYQXoJrOj4SH1EXTwgIsmQ5Q2+gxaeSbPgbrnUAtN3qw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:15 2026 by rpki-client