$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143389.roa File: AS143389.roa (raw, json) Hash identifier: qzb1Wh+R6wznpVNP1/qbQFDSlLNXxZ7wwbFxD+AiRPA= Subject key identifier: 3A:90:52:BC:3C:EA:84:84:B0:A5:E8:67:8E:21:4B:ED:D5:E2:4D:13 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7262991D43C2293DD6BF4E62DA270F5E19A60862 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143389.roa Signing time: Wed 04 Mar 2026 06:07:24 +0000 ROA not before: Wed 04 Mar 2026 06:02:24 +0000 ROA not after: Wed 03 Mar 2027 06:07:24 +0000 asID: 143389 IP address blocks: 240a:a2e3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:62:99:1d:43:c2:29:3d:d6:bf:4e:62:da:27:0f:5e:19:a6:08:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:24 2026 GMT Not After : Mar 3 06:07:24 2027 GMT Subject: CN=3A9052BC3CEA8484B0A5E8678E214BEDD5E24D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c7:d4:2b:9a:41:78:ad:b1:22:27:d8:1d:e4: 94:aa:9f:44:fb:0c:b2:49:54:94:86:88:33:d7:be: 3b:91:34:cd:58:b2:da:38:fd:cc:8b:cb:61:e4:c6: 97:be:82:2f:0b:1f:b7:a2:6c:43:3f:ba:f1:53:db: a1:8f:96:06:51:d1:ac:b1:e5:06:75:29:39:75:49: e3:d5:49:a6:27:9e:6c:56:88:d7:e6:ed:44:25:80: e2:ce:bb:52:7c:c9:76:43:9d:e2:9a:d6:0e:ba:68: ba:58:37:da:c6:c5:ec:79:37:9e:7b:90:a1:5e:0b: 6c:5d:17:36:67:9a:0d:ea:7a:5c:2f:2f:4a:a5:cf: 35:92:55:c7:b3:16:2c:4e:77:80:4a:57:b2:cc:50: d1:2b:11:d6:64:b5:42:10:d5:0e:37:db:99:c5:ca: 6b:fe:49:e5:31:bb:c8:1e:35:ec:2c:d4:e4:1d:52: 22:8a:57:cc:8f:24:33:40:a9:92:bc:a9:57:77:9e: b7:65:00:fc:f3:73:4f:46:c8:fe:2e:08:ab:c0:59: 97:d9:af:92:9b:7d:e4:47:e8:d6:86:f3:4a:fe:81: e1:d6:7b:55:10:e4:f5:b0:87:cd:b1:5f:a1:e6:4d: be:62:17:23:23:48:9c:99:e2:1d:89:e7:cc:a3:d5: 16:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:90:52:BC:3C:EA:84:84:B0:A5:E8:67:8E:21:4B:ED:D5:E2:4D:13 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143389.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2e3::/32 Signature Algorithm: sha256WithRSAEncryption cb:c7:d7:99:ef:02:ba:03:26:f8:01:dc:78:6c:64:0e:1e:ae: 45:01:8f:d1:cf:67:a3:71:99:eb:a3:7d:69:02:d1:89:9f:8d: a0:0e:6f:7c:7f:a6:86:b2:c1:51:7f:f7:c3:c0:6d:42:03:a3: 69:6a:43:00:aa:0b:6c:2f:38:ba:47:75:d4:22:88:65:a6:a7: c4:c2:7b:57:b0:95:b9:b5:8e:96:94:62:c6:4c:c0:90:e2:d6: 65:1c:aa:fb:78:2a:64:38:85:81:14:7f:f0:67:0d:4d:a5:a3: dd:20:b5:3c:0e:5d:c1:bf:57:ee:d5:7c:ed:64:33:2a:98:86: a2:f9:a1:11:3f:c8:ae:c6:b6:ce:ea:22:3c:6b:d4:ff:93:55: 8d:74:7c:68:b6:29:da:0f:71:3a:61:ed:fa:d7:3b:f8:42:42: c0:60:6d:2b:62:7f:ae:41:50:29:90:94:9b:13:69:79:1c:c0: 34:2e:17:c2:b3:ad:d1:d6:78:16:89:53:1a:5a:06:e6:80:b7: 9d:58:5d:ac:57:72:47:2b:b4:43:3b:d0:03:62:31:89:04:2c: b2:58:61:fe:20:55:ea:c3:f0:81:dc:96:82:b6:78:e1:7f:d2: c9:56:03:06:85:56:5b:c1:44:af:02:b3:55:bc:24:26:b6:a2: 86:d8:40:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcmKZHUPCKT3Wv05i2icPXhmmCGIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyNFoX DTI3MDMwMzA2MDcyNFowMzExMC8GA1UEAxMoM0E5MDUyQkMzQ0VBODQ4NEIwQTVF ODY3OEUyMTRCRURENUUyNEQxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbH1CuaQXitsSIn2B3klKqfRPsMsklUlIaIM9e+O5E0zViy2jj9zIvLYeTG l76CLwsft6JsQz+68VPboY+WBlHRrLHlBnUpOXVJ49VJpieebFaI1+btRCWA4s67 UnzJdkOd4prWDrpoulg32sbF7Hk3nnuQoV4LbF0XNmeaDep6XC8vSqXPNZJVx7MW LE53gEpXssxQ0SsR1mS1QhDVDjfbmcXKa/5J5TG7yB417CzU5B1SIopXzI8kM0Cp krypV3eet2UA/PNzT0bI/i4Iq8BZl9mvkpt95Efo1obzSv6B4dZ7VRDk9bCHzbFf oeZNvmIXIyNInJniHYnnzKPVFpECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ6kFK8 POqEhLCl6GeOIUvt1eJNEzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ouMwDQYJKoZIhvcNAQELBQADggEBAMvH15nvAroDJvgB3HhsZA4erkUBj9HPZ6Nx meujfWkC0YmfjaAOb3x/poaywVF/98PAbUIDo2lqQwCqC2wvOLpHddQiiGWmp8TC e1ewlbm1jpaUYsZMwJDi1mUcqvt4KmQ4hYEUf/BnDU2lo90gtTwOXcG/V+7VfO1k MyqYhqL5oRE/yK7Gts7qIjxr1P+TVY10fGi2KdoPcTph7frXO/hCQsBgbStif65B UCmQlJsTaXkcwDQuF8KzrdHWeBaJUxpaBuaAt51YXaxXckcrtEM70ANiMYkELLJY Yf4gVerD8IHcloK2eOF/0slWAwaFVlvBRK8Cs1W8JCa2oobYQK0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:25 2026 by rpki-client