$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143327.roa File: AS143327.roa (raw, json) Hash identifier: FQ2H/lIQq0DjhAgVFEK5IU1z97Q7oT0qjtldwNIrdoQ= Subject key identifier: 50:7E:BF:2C:C0:4E:77:96:DA:CC:9E:7C:1C:57:8A:AA:46:36:F4:C2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6AD088871DAF0E077F338708A3981BA53A33E2E2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143327.roa Signing time: Wed 04 Mar 2026 06:07:09 +0000 ROA not before: Wed 04 Mar 2026 06:02:09 +0000 ROA not after: Wed 03 Mar 2027 06:07:09 +0000 asID: 143327 IP address blocks: 240a:a2a5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d0:88:87:1d:af:0e:07:7f:33:87:08:a3:98:1b:a5:3a:33:e2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:09 2026 GMT Not After : Mar 3 06:07:09 2027 GMT Subject: CN=507EBF2CC04E7796DACC9E7C1C578AAA4636F4C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:8e:6f:a6:9c:5a:9f:b9:e5:bc:86:43:bd: e3:f0:7b:fe:bd:47:3b:b4:1c:b6:ba:37:fd:de:ed: 3b:f1:a9:79:9a:0d:e8:b6:ef:41:35:f2:6b:40:5e: e8:69:a0:54:ef:71:67:41:4b:28:5d:b2:e4:bd:b9: 1c:1f:3b:91:94:c2:eb:35:42:3d:c9:ad:6f:98:82: 4b:ad:23:3a:0b:54:c6:7e:da:ec:c7:d7:cc:62:1b: ab:be:e1:cb:4b:ef:a8:ab:df:15:4d:09:48:68:a3: 47:22:cb:29:9d:4f:54:a4:bb:8a:a8:bf:1c:48:99: 5b:c2:31:74:44:d5:b1:a8:36:5c:8d:d7:96:58:eb: 68:92:e4:c4:af:60:57:ca:39:38:8c:13:bc:87:05: b2:98:93:77:6b:38:3d:9e:46:f7:98:77:79:d6:17: be:53:2f:ea:f8:ce:ea:7f:f1:9e:6f:fa:bc:b3:3c: 17:b3:b5:16:9b:fc:d0:01:4f:7d:66:5f:dc:36:4d: 42:1d:b5:52:e5:ca:e1:58:93:ed:e4:9d:63:4b:6f: 8d:d4:76:56:b9:67:62:10:81:b1:32:a7:1f:08:08: 7f:0e:4c:c9:bf:9b:06:d9:38:87:a0:5b:9f:5a:23: 28:a6:ad:2e:11:2d:a7:e2:a9:98:36:02:81:71:96: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7E:BF:2C:C0:4E:77:96:DA:CC:9E:7C:1C:57:8A:AA:46:36:F4:C2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143327.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2a5::/32 Signature Algorithm: sha256WithRSAEncryption 48:f9:2a:6f:8c:e3:79:5a:ba:76:4e:fc:64:3c:15:d0:5e:0e: 74:e2:0d:e4:dc:dc:58:8c:e9:76:21:08:1f:0d:44:7c:a7:41: 01:82:e7:fb:c4:0d:27:26:73:e3:9b:c3:b0:5b:20:85:03:d3: d9:3f:35:f9:16:5a:d7:24:18:5c:d7:35:c3:bd:74:f6:a6:19: ae:4a:48:1c:d0:0c:71:94:af:fa:6a:42:21:ff:9e:d8:28:e5: 8b:37:84:79:4a:de:b0:87:5d:76:c5:f0:ac:e2:03:fd:1f:f3: 54:1a:5e:35:fd:f7:fc:8a:9b:10:56:71:b1:c3:d9:50:98:b7: f4:2e:6b:8f:b6:f2:49:71:a3:52:7b:55:42:09:f5:5e:95:b3: 80:b1:a3:66:a3:c6:c7:91:53:98:90:2f:7b:a2:78:f0:87:c9: e0:51:3b:83:9b:a4:e5:e7:2e:ce:45:1d:76:bb:07:fe:1b:89: 4a:48:6e:37:cf:b2:41:9a:8d:dc:a9:9f:bf:a8:cc:ae:61:35: a7:6a:18:bc:bf:cc:6b:69:73:65:c8:a7:f1:36:47:77:c7:d7: 0a:f4:8a:82:53:6a:91:93:eb:ff:0d:3c:33:8e:c9:51:89:ca: 35:d6:4d:89:9c:31:af:d8:27:f7:3f:c7:41:c7:35:fd:e6:f0: 47:5a:d1:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUatCIhx2vDgd/M4cIo5gbpToz4uIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwOVoX DTI3MDMwMzA2MDcwOVowMzExMC8GA1UEAxMoNTA3RUJGMkNDMDRFNzc5NkRBQ0M5 RTdDMUM1NzhBQUE0NjM2RjRDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3rjm+mnFqfueW8hkO94/B7/r1HO7Qctro3/d7tO/GpeZoN6LbvQTXya0Be 6GmgVO9xZ0FLKF2y5L25HB87kZTC6zVCPcmtb5iCS60jOgtUxn7a7MfXzGIbq77h y0vvqKvfFU0JSGijRyLLKZ1PVKS7iqi/HEiZW8IxdETVsag2XI3XlljraJLkxK9g V8o5OIwTvIcFspiTd2s4PZ5G95h3edYXvlMv6vjO6n/xnm/6vLM8F7O1Fpv80AFP fWZf3DZNQh21UuXK4ViT7eSdY0tvjdR2VrlnYhCBsTKnHwgIfw5Myb+bBtk4h6Bb n1ojKKatLhEtp+KpmDYCgXGWRDECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRQfr8s wE53ltrMnnwcV4qqRjb0wjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzMyNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oqUwDQYJKoZIhvcNAQELBQADggEBAEj5Km+M43launZO/GQ8FdBeDnTiDeTc3FiM 6XYhCB8NRHynQQGC5/vEDScmc+Obw7BbIIUD09k/NfkWWtckGFzXNcO9dPamGa5K SBzQDHGUr/pqQiH/ntgo5Ys3hHlK3rCHXXbF8KziA/0f81QaXjX99/yKmxBWcbHD 2VCYt/Qua4+28klxo1J7VUIJ9V6Vs4Cxo2ajxseRU5iQL3uiePCHyeBRO4ObpOXn Ls5FHXa7B/4biUpIbjfPskGajdypn7+ozK5hNadqGLy/zGtpc2XIp/E2R3fH1wr0 ioJTapGT6/8NPDOOyVGJyjXWTYmcMa/YJ/c/x0HHNf3m8Eda0aU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:57 2026 by rpki-client