$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143305.roa File: AS143305.roa (raw, json) Hash identifier: 6WSdrbqRBZWD0sqAAHtukL3Svrcc1qLZUtL0L3cOvb0= Subject key identifier: EF:C9:4C:11:43:0F:B3:F2:01:0B:35:0C:CC:50:A1:16:98:1C:28:A9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7FE1BDCCAD546CA3E4DD78F948763D8B51CC3855 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143305.roa Signing time: Wed 04 Mar 2026 06:06:50 +0000 ROA not before: Wed 04 Mar 2026 06:01:50 +0000 ROA not after: Wed 03 Mar 2027 06:06:50 +0000 asID: 143305 IP address blocks: 240a:a28f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e1:bd:cc:ad:54:6c:a3:e4:dd:78:f9:48:76:3d:8b:51:cc:38:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:50 2026 GMT Not After : Mar 3 06:06:50 2027 GMT Subject: CN=EFC94C11430FB3F2010B350CCC50A116981C28A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:86:83:a2:65:df:53:28:a5:75:b0:be:f9: 0e:dd:e7:d0:d0:0e:24:a8:54:fd:06:fc:ea:10:24: 15:e3:10:50:5e:5a:38:a7:20:5f:f6:0b:5a:30:b9: 92:98:18:f8:2c:60:73:7b:64:2e:bc:04:2a:f2:6a: b7:3f:1c:bf:ff:67:05:84:a6:e5:ef:c3:7a:ba:c0: 00:63:c3:02:ad:4d:a6:a3:fb:49:ff:39:c2:2a:91: 19:2d:44:88:82:48:86:5e:4e:34:91:fc:72:8c:49: 38:1b:32:21:fc:21:60:43:8e:b3:0e:fa:9e:64:94: 3c:c5:fc:8e:e5:f0:41:6f:91:a8:1a:9d:ef:3d:31: e5:28:85:ce:6d:a9:2a:76:64:5a:58:88:c9:f2:f0: bb:c0:7a:51:15:90:fe:31:2d:3f:47:88:c7:82:77: 6d:02:91:c4:f0:5c:a0:35:d7:0e:5b:ba:16:7f:18: e4:c2:ed:fe:e8:8c:fc:9b:a6:2b:96:e4:79:e7:dd: a0:85:1c:86:e5:7f:7b:92:51:3a:71:b5:a6:61:a0: d3:ba:f6:ad:ce:5d:6a:ea:fd:15:0f:86:6f:3a:ad: e1:7f:01:aa:5c:69:12:3d:96:d9:3c:81:80:6f:cf: 6f:4e:f3:2d:02:76:c5:df:55:71:dd:9c:93:da:f8: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C9:4C:11:43:0F:B3:F2:01:0B:35:0C:CC:50:A1:16:98:1C:28:A9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143305.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a28f::/32 Signature Algorithm: sha256WithRSAEncryption b7:a0:1a:45:ee:6f:3f:f1:44:80:a9:88:8a:b6:ae:e0:3c:e9: aa:c4:85:e6:fa:6c:70:3c:e5:94:6c:79:c2:b4:79:e0:17:0f: c7:22:b4:57:27:d0:85:7b:9f:08:ff:96:85:79:b1:21:3a:5f: 69:1d:b1:bd:13:35:a9:f9:e9:27:cb:91:2c:08:7b:cd:51:fb: d9:5a:1a:a6:ca:a2:99:87:6a:a1:c4:88:ea:cc:d8:2b:35:d8: 5e:72:eb:16:c1:1a:d8:f7:af:2d:3c:97:43:40:25:68:9c:87: bc:6f:82:ad:79:df:4c:63:a4:2f:2d:1f:2a:4b:df:36:c5:8c: c2:e1:f4:8f:c6:6f:5a:c5:bd:d0:54:fc:cb:bf:53:f0:3a:2c: 0a:8d:e6:17:52:7c:69:18:41:53:7e:7e:46:ce:58:06:c4:b6: 8c:15:88:66:01:e2:08:88:e0:2c:ab:a6:19:ba:1c:91:4f:95: bd:bf:64:8b:3f:ad:17:2f:d8:71:78:e3:c1:c3:a0:5c:ec:be: e0:eb:1f:4e:49:b8:42:6b:75:a9:39:2c:8e:a3:21:4c:4c:3e: 0c:f1:0e:09:26:43:a0:97:00:fe:5f:02:d4:90:66:8a:09:22: 96:bb:66:0d:16:17:27:2d:bf:c5:84:b1:68:a9:3b:5d:ae:88: 55:b8:64:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf+G9zK1UbKPk3Xj5SHY9i1HMOFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1MFoX DTI3MDMwMzA2MDY1MFowMzExMC8GA1UEAxMoRUZDOTRDMTE0MzBGQjNGMjAxMEIz NTBDQ0M1MEExMTY5ODFDMjhBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0bhoOiZd9TKKV1sL75Dt3n0NAOJKhU/Qb86hAkFeMQUF5aOKcgX/YLWjC5 kpgY+Cxgc3tkLrwEKvJqtz8cv/9nBYSm5e/DerrAAGPDAq1NpqP7Sf85wiqRGS1E iIJIhl5ONJH8coxJOBsyIfwhYEOOsw76nmSUPMX8juXwQW+RqBqd7z0x5SiFzm2p KnZkWliIyfLwu8B6URWQ/jEtP0eIx4J3bQKRxPBcoDXXDlu6Fn8Y5MLt/uiM/Jum K5bkeefdoIUchuV/e5JROnG1pmGg07r2rc5daur9FQ+Gbzqt4X8BqlxpEj2W2TyB gG/Pb07zLQJ2xd9Vcd2ck9r4gnUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTvyUwR Qw+z8gELNQzMUKEWmBwoqTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oo8wDQYJKoZIhvcNAQELBQADggEBALegGkXubz/xRICpiIq2ruA86arEheb6bHA8 5ZRsecK0eeAXD8citFcn0IV7nwj/loV5sSE6X2kdsb0TNan56SfLkSwIe81R+9la GqbKopmHaqHEiOrM2Cs12F5y6xbBGtj3ry08l0NAJWich7xvgq1530xjpC8tHypL 3zbFjMLh9I/Gb1rFvdBU/Mu/U/A6LAqN5hdSfGkYQVN+fkbOWAbEtowViGYB4giI 4Cyrphm6HJFPlb2/ZIs/rRcv2HF448HDoFzsvuDrH05JuEJrdak5LI6jIUxMPgzx DgkmQ6CXAP5fAtSQZooJIpa7Zg0WFyctv8WEsWipO12uiFW4ZBM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:47 2026 by rpki-client