$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143364.roa File: AS143364.roa (raw, json) Hash identifier: xwaM6nAellrGF/aM2uXI52dyQCwtK5PvoTBXxuoUgVI= Subject key identifier: 96:EC:85:95:70:23:E6:79:C7:21:99:A3:82:D4:18:69:E9:01:45:5B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3782FCC9D43BB567C2EB507BB4328D76FD8F81FA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143364.roa Signing time: Wed 04 Mar 2026 06:06:34 +0000 ROA not before: Wed 04 Mar 2026 06:01:34 +0000 ROA not after: Wed 03 Mar 2027 06:06:34 +0000 asID: 143364 IP address blocks: 240a:a2ca::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:82:fc:c9:d4:3b:b5:67:c2:eb:50:7b:b4:32:8d:76:fd:8f:81:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:34 2026 GMT Not After : Mar 3 06:06:34 2027 GMT Subject: CN=96EC85957023E679C72199A382D41869E901455B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:a0:37:2c:ea:f3:ca:3e:fa:e9:36:6a:a2: b0:ac:34:f1:10:b3:41:81:8f:f6:4c:2b:5c:0a:b2: 6f:fb:44:4e:60:c0:8a:c7:01:19:2f:90:a4:12:00: 76:c5:8d:b8:70:fe:7e:bf:33:0c:8f:22:83:3e:e0: 47:e7:7c:ac:76:c3:6d:2a:80:f7:38:6e:f1:e9:40: 3e:6d:a4:a8:50:41:ca:50:29:b5:2e:fb:c6:ac:2f: 5d:26:06:44:5c:09:b7:11:2e:c3:b7:17:c7:22:db: f2:52:f5:7c:a7:b8:17:c5:b5:d8:e1:cf:b1:e2:bd: 64:4f:b2:8a:9f:50:41:c3:d1:dc:16:c7:94:9c:83: 5e:af:02:23:3e:c9:21:ec:f0:a6:7b:1a:63:a9:3e: b1:a1:4c:3e:a1:95:aa:42:0d:2e:3c:bf:63:7d:a2: f6:9d:cd:1b:35:d7:9d:95:79:d1:55:4a:84:63:7c: c6:26:6e:91:33:db:97:dd:50:ff:57:19:0d:6d:13: 31:ad:05:46:42:67:3f:1a:9d:6f:af:d5:7d:e2:a9: 1c:43:1c:0c:d4:07:ab:02:2b:d8:77:ce:a0:34:ce: aa:68:f9:f6:31:c2:bb:74:58:c9:1d:5e:ec:2a:37: c0:69:ce:eb:77:ec:00:64:fc:a1:05:47:96:40:c3: 71:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EC:85:95:70:23:E6:79:C7:21:99:A3:82:D4:18:69:E9:01:45:5B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143364.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2ca::/32 Signature Algorithm: sha256WithRSAEncryption 71:40:96:88:fc:4f:4a:4a:be:5c:d0:75:00:d6:51:74:80:c0: 3e:18:3d:6a:da:be:89:65:d6:59:c8:5c:cf:41:5d:c1:b9:71: 6e:91:77:c8:96:d6:2a:c1:c6:4c:1e:b6:7e:3c:f4:82:96:86: ca:d3:db:1a:50:da:77:3a:6d:4e:89:90:ac:6c:32:fc:59:f4: c4:4f:83:4f:70:d6:a5:89:70:73:6d:f8:d6:59:a7:16:9c:c4: fe:31:30:f6:f0:da:75:49:8e:a7:14:82:06:96:d7:2f:5d:c0: 7c:85:59:fa:5d:54:df:1d:37:7f:85:8b:9e:90:42:c7:eb:b6: f4:65:85:26:f2:68:34:63:0a:b8:e8:7c:08:03:9b:35:71:e0: b0:ac:4a:eb:fd:44:00:ea:13:1d:92:32:2f:98:77:0b:27:af: fb:12:39:c4:4c:d4:0f:19:fc:60:de:e9:d5:a8:36:7a:69:3d: b5:e3:8d:22:0a:5c:38:68:f5:1f:b8:db:27:b8:62:27:48:c8: 24:23:79:a2:ae:19:4f:0a:fb:20:b0:04:1f:0a:73:e4:30:98: 79:66:86:7f:e1:14:01:a0:5b:34:55:c6:ad:1e:27:b7:c9:7f: 47:35:a8:47:9e:63:21:ac:51:f6:02:47:35:10:26:3d:54:d0: f7:9a:e9:09 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN4L8ydQ7tWfC61B7tDKNdv2PgfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzNFoX DTI3MDMwMzA2MDYzNFowMzExMC8GA1UEAxMoOTZFQzg1OTU3MDIzRTY3OUM3MjE5 OUEzODJENDE4NjlFOTAxNDU1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0toDcs6vPKPvrpNmqisKw08RCzQYGP9kwrXAqyb/tETmDAiscBGS+QpBIA dsWNuHD+fr8zDI8igz7gR+d8rHbDbSqA9zhu8elAPm2kqFBBylAptS77xqwvXSYG RFwJtxEuw7cXxyLb8lL1fKe4F8W12OHPseK9ZE+yip9QQcPR3BbHlJyDXq8CIz7J IezwpnsaY6k+saFMPqGVqkINLjy/Y32i9p3NGzXXnZV50VVKhGN8xiZukTPbl91Q /1cZDW0TMa0FRkJnPxqdb6/VfeKpHEMcDNQHqwIr2HfOoDTOqmj59jHCu3RYyR1e 7Co3wGnO63fsAGT8oQVHlkDDcWECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSW7IWV cCPmecchmaOC1Bhp6QFFWzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK osowDQYJKoZIhvcNAQELBQADggEBAHFAloj8T0pKvlzQdQDWUXSAwD4YPWravoll 1lnIXM9BXcG5cW6Rd8iW1irBxkwetn489IKWhsrT2xpQ2nc6bU6JkKxsMvxZ9MRP g09w1qWJcHNt+NZZpxacxP4xMPbw2nVJjqcUggaW1y9dwHyFWfpdVN8dN3+Fi56Q QsfrtvRlhSbyaDRjCrjofAgDmzVx4LCsSuv9RADqEx2SMi+Ydwsnr/sSOcRM1A8Z /GDe6dWoNnppPbXjjSIKXDho9R+42ye4YidIyCQjeaKuGU8K+yCwBB8Kc+QwmHlm hn/hFAGgWzRVxq0eJ7fJf0c1qEeeYyGsUfYCRzUQJj1U0Pea6Qk= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:43 2026 by rpki-client