$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143386.roa File: AS143386.roa (raw, json) Hash identifier: 2XE1nI4g8lkY03cs2eGv7/j1UZUgrUEIo4muLsdN7wc= Subject key identifier: 61:CE:28:EA:34:F5:AA:67:79:D4:FB:26:AA:C3:07:DD:A7:29:A0:7D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51D12A8BFDBD0E4E401A09CF2F3DF3A6B2F4137F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143386.roa Signing time: Wed 04 Mar 2026 06:07:40 +0000 ROA not before: Wed 04 Mar 2026 06:02:40 +0000 ROA not after: Wed 03 Mar 2027 06:07:40 +0000 asID: 143386 IP address blocks: 240a:a2e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d1:2a:8b:fd:bd:0e:4e:40:1a:09:cf:2f:3d:f3:a6:b2:f4:13:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:40 2026 GMT Not After : Mar 3 06:07:40 2027 GMT Subject: CN=61CE28EA34F5AA6779D4FB26AAC307DDA729A07D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:76:29:06:2a:96:26:3d:08:c4:cc:20:11:a3: ab:c5:19:8b:95:5f:e5:43:43:95:1c:64:12:a1:e7: b9:8a:10:4c:7f:95:1d:7a:21:cc:ad:54:ba:b8:84: 94:20:90:40:b8:d8:71:c4:37:00:1c:9a:73:59:6f: 4a:e2:b6:8a:65:26:a3:e4:53:b4:e1:33:4e:3d:4b: cb:97:90:4b:cd:fa:1d:79:d1:c8:68:4c:0d:dd:12: e2:37:8f:20:3b:6a:ff:cb:35:5c:48:fa:28:02:b2: c9:63:c0:9c:6d:ff:02:2f:32:4b:e6:e6:d0:ac:01: 0b:b8:d4:3c:fb:cd:4c:06:8e:4f:dc:0c:a8:43:0c: 23:64:14:b9:ec:00:6b:2e:07:ce:85:23:ba:26:61: 43:e7:99:20:4e:72:ab:a7:41:28:7a:b9:18:ed:bb: d8:2e:f9:2d:a3:99:20:7d:ae:7c:cf:fc:e2:9d:c1: aa:d2:ce:77:9b:7f:c7:8b:c4:33:b7:62:45:71:6b: ac:bc:e9:eb:92:04:28:fa:db:99:ac:40:4b:aa:e4: 47:10:7a:cf:70:92:16:c6:1f:30:b4:68:8b:0a:ec: fe:ff:e2:7a:60:85:2b:dd:75:8c:b1:6a:48:e0:b9: dc:bf:33:10:44:af:4c:7b:b5:51:d4:35:02:03:c9: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CE:28:EA:34:F5:AA:67:79:D4:FB:26:AA:C3:07:DD:A7:29:A0:7D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143386.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2e0::/32 Signature Algorithm: sha256WithRSAEncryption 07:b7:bb:a2:b5:4c:f7:1d:ef:05:5f:c0:3c:99:74:ed:6d:01: 25:dd:3a:de:44:a6:a4:4f:6d:76:d8:8e:c7:63:3f:fb:37:e4: 9b:21:3f:57:1a:35:37:09:ee:30:69:0d:68:0e:67:6b:17:f1: c0:fc:fe:2a:e7:76:98:e4:a9:24:90:49:c8:60:34:9c:61:70: 86:da:8b:f9:d6:a4:b5:20:8d:6d:18:ff:2a:26:4b:27:e4:de: 5b:1b:9d:f4:aa:03:83:71:71:2f:c1:b4:61:ad:b0:22:c4:b3: a7:41:f0:7c:0b:e4:57:bc:86:15:9d:b2:77:9b:d2:55:81:b4: b1:b6:3a:36:32:19:c1:e8:e7:2a:16:2d:71:00:f8:40:34:77: 61:59:0e:dc:67:a2:3d:c7:2c:9f:e6:39:c0:c0:98:8f:ca:23: 39:9b:4a:67:c2:41:9d:e7:48:8c:e5:fa:5b:8b:7a:d1:06:5d: 9e:e4:11:2f:22:7c:3b:83:b5:5b:62:fa:27:31:66:98:8a:7f: 3d:85:00:94:39:28:f2:cf:c9:4b:18:3e:3e:b7:36:4b:db:04: 79:7b:f5:2f:2d:a4:88:6b:7f:90:9a:da:ec:85:c6:dd:9b:d2: 02:0f:40:c4:74:f4:8c:7d:1b:6f:78:1e:48:ee:41:fe:69:7c: b2:95:e6:df -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUdEqi/29Dk5AGgnPLz3zprL0E38wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0MFoX DTI3MDMwMzA2MDc0MFowMzExMC8GA1UEAxMoNjFDRTI4RUEzNEY1QUE2Nzc5RDRG QjI2QUFDMzA3RERBNzI5QTA3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAON2KQYqliY9CMTMIBGjq8UZi5Vf5UNDlRxkEqHnuYoQTH+VHXohzK1UuriE lCCQQLjYccQ3AByac1lvSuK2imUmo+RTtOEzTj1Ly5eQS836HXnRyGhMDd0S4jeP IDtq/8s1XEj6KAKyyWPAnG3/Ai8yS+bm0KwBC7jUPPvNTAaOT9wMqEMMI2QUuewA ay4HzoUjuiZhQ+eZIE5yq6dBKHq5GO272C75LaOZIH2ufM/84p3BqtLOd5t/x4vE M7diRXFrrLzp65IEKPrbmaxAS6rkRxB6z3CSFsYfMLRoiwrs/v/iemCFK911jLFq SOC53L8zEESvTHu1UdQ1AgPJ4MMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRhzijq NPWqZ3nU+yaqwwfdpymgfTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ouAwDQYJKoZIhvcNAQELBQADggEBAAe3u6K1TPcd7wVfwDyZdO1tASXdOt5EpqRP bXbYjsdjP/s35JshP1caNTcJ7jBpDWgOZ2sX8cD8/irndpjkqSSQSchgNJxhcIba i/nWpLUgjW0Y/yomSyfk3lsbnfSqA4NxcS/BtGGtsCLEs6dB8HwL5Fe8hhWdsneb 0lWBtLG2OjYyGcHo5yoWLXEA+EA0d2FZDtxnoj3HLJ/mOcDAmI/KIzmbSmfCQZ3n SIzl+luLetEGXZ7kES8ifDuDtVti+icxZpiKfz2FAJQ5KPLPyUsYPj63NkvbBHl7 9S8tpIhrf5Ca2uyFxt2b0gIPQMR09Ix9G294HkjuQf5pfLKV5t8= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:45 2026 by rpki-client