$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143299.roa File: AS143299.roa (raw, json) Hash identifier: Qlbp7hpbpa8S4V4u7YHCAUqSlFATA8cIIob1QYTz99A= Subject key identifier: 2F:F0:3B:55:27:7E:29:23:83:13:84:AF:7C:21:10:6C:F2:CE:42:47 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7CA9F54AC907BC8662F4E6E7F21F07CF0AB4320F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143299.roa Signing time: Wed 04 Mar 2026 06:05:58 +0000 ROA not before: Wed 04 Mar 2026 06:00:58 +0000 ROA not after: Wed 03 Mar 2027 06:05:58 +0000 asID: 143299 IP address blocks: 240a:a289::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a9:f5:4a:c9:07:bc:86:62:f4:e6:e7:f2:1f:07:cf:0a:b4:32:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:58 2026 GMT Not After : Mar 3 06:05:58 2027 GMT Subject: CN=2FF03B55277E2923831384AF7C21106CF2CE4247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:cb:c6:4f:27:c0:6c:ae:54:23:bd:8e:9d: a6:92:ad:8b:c9:7f:28:dd:2d:1c:f5:2a:2c:21:f4: c2:a3:36:0a:9f:d8:b3:b9:23:f4:c4:4a:8b:cc:8b: 62:6d:16:57:c3:0d:ec:41:13:c0:aa:8f:dc:58:2e: 83:29:74:24:b4:77:aa:56:85:b9:69:cb:a5:ae:ca: 43:bf:3b:d8:09:a3:12:a6:d5:ee:70:50:20:e0:98: b4:6b:92:9a:56:00:8a:82:93:f8:55:7d:f4:ad:8a: 49:d6:8b:bf:1d:68:de:5b:3d:08:a2:ad:ec:e3:0f: f9:91:09:b6:15:b7:f8:cc:79:b4:d2:c4:3c:18:cb: 93:28:d4:06:bf:35:7d:16:53:71:6e:3a:7e:aa:c1: e2:9b:e3:17:65:f1:a4:38:74:a0:1e:9d:6b:e6:ed: 66:48:4d:2f:06:4d:b9:20:e0:9d:3b:07:9a:41:f9: 7e:3a:86:0d:5d:f1:d7:34:42:b9:f9:bb:8c:fb:bc: c5:ea:ad:83:18:d5:8f:d6:ec:e7:d2:5b:d9:71:f3: 36:70:b7:d7:d4:9e:f1:cf:42:c8:f8:94:03:77:96: 64:4e:82:de:cf:a0:6c:44:68:f1:8d:d8:df:71:d7: ee:60:09:32:a4:a5:5f:f2:8d:33:ef:b5:a0:43:85: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F0:3B:55:27:7E:29:23:83:13:84:AF:7C:21:10:6C:F2:CE:42:47 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a289::/32 Signature Algorithm: sha256WithRSAEncryption 4c:59:25:d0:21:a6:20:92:00:7b:ff:cb:e6:3b:b0:f5:50:25: a2:c8:51:03:45:14:04:60:68:dd:0d:8d:a9:3e:99:50:3c:7b: ef:18:97:0a:8e:39:4c:27:6f:9b:e9:39:31:d2:e6:1c:5a:9b: 48:8a:98:bf:3b:49:71:c9:e0:ab:2e:1a:39:66:d7:c3:d5:02: 9a:36:27:bd:ef:d5:4b:b2:40:45:26:c4:01:d5:1e:e3:bb:37: 9c:cf:da:30:0e:c6:b9:e2:7c:85:c6:8b:b7:08:15:f5:11:9f: 7a:75:10:57:19:b9:e8:dd:5d:bc:21:21:e6:41:c1:8b:30:50: 81:da:bd:0f:91:69:0f:89:d9:72:a7:48:46:24:c7:1d:9f:4f: fc:e8:6c:9d:3b:35:90:41:3d:2e:d9:69:c7:dd:89:b0:24:33: 12:11:3e:b8:bb:0c:bf:43:47:be:7c:25:19:a6:c7:3d:af:e0: 86:8d:de:92:0e:8b:0c:e6:6b:31:bc:46:2b:37:51:81:76:79: 8e:f7:03:9c:36:92:07:53:1f:c8:ca:9f:6c:9c:70:1f:45:c7: 34:57:84:c1:65:97:22:5c:b1:b3:83:ac:2e:62:d3:c6:14:b0: 08:25:9a:eb:48:be:41:18:be:05:87:5e:5c:ab:0e:bf:95:4e: 13:25:7e:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfKn1SskHvIZi9Obn8h8Hzwq0Mg8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1OFoX DTI3MDMwMzA2MDU1OFowMzExMC8GA1UEAxMoMkZGMDNCNTUyNzdFMjkyMzgzMTM4 NEFGN0MyMTEwNkNGMkNFNDI0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGRy8ZPJ8BsrlQjvY6dppKti8l/KN0tHPUqLCH0wqM2Cp/Ys7kj9MRKi8yL Ym0WV8MN7EETwKqP3Fgugyl0JLR3qlaFuWnLpa7KQ7872AmjEqbV7nBQIOCYtGuS mlYAioKT+FV99K2KSdaLvx1o3ls9CKKt7OMP+ZEJthW3+Mx5tNLEPBjLkyjUBr81 fRZTcW46fqrB4pvjF2XxpDh0oB6da+btZkhNLwZNuSDgnTsHmkH5fjqGDV3x1zRC ufm7jPu8xeqtgxjVj9bs59Jb2XHzNnC319Se8c9CyPiUA3eWZE6C3s+gbERo8Y3Y 33HX7mAJMqSlX/KNM++1oEOFoMkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQv8DtV J34pI4MThK98IRBs8s5CRzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ookwDQYJKoZIhvcNAQELBQADggEBAExZJdAhpiCSAHv/y+Y7sPVQJaLIUQNFFARg aN0Njak+mVA8e+8YlwqOOUwnb5vpOTHS5hxam0iKmL87SXHJ4KsuGjlm18PVApo2 J73v1UuyQEUmxAHVHuO7N5zP2jAOxrnifIXGi7cIFfURn3p1EFcZuejdXbwhIeZB wYswUIHavQ+RaQ+J2XKnSEYkxx2fT/zobJ07NZBBPS7ZacfdibAkMxIRPri7DL9D R758JRmmxz2v4IaN3pIOiwzmazG8Ris3UYF2eY73A5w2kgdTH8jKn2yccB9FxzRX hMFllyJcsbODrC5i08YUsAglmutIvkEYvgWHXlyrDr+VThMlfpU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:19 2026 by rpki-client