$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143390.roa File: AS143390.roa (raw, json) Hash identifier: I+sNoqa8GEnc/BpReDb+NVM/rqvr90BbxOX1uxk/gPw= Subject key identifier: 92:75:42:8A:3C:95:47:D7:92:94:30:D8:2B:C9:80:FA:19:37:E6:B1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 22A03DAD492B46848551CA7F13CCA502910DEF69 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143390.roa Signing time: Wed 04 Mar 2026 06:07:54 +0000 ROA not before: Wed 04 Mar 2026 06:02:54 +0000 ROA not after: Wed 03 Mar 2027 06:07:54 +0000 asID: 143390 IP address blocks: 240a:a2e4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a0:3d:ad:49:2b:46:84:85:51:ca:7f:13:cc:a5:02:91:0d:ef:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:54 2026 GMT Not After : Mar 3 06:07:54 2027 GMT Subject: CN=9275428A3C9547D7929430D82BC980FA1937E6B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:90:7c:54:d6:b1:84:0d:06:c9:c1:77:2f: de:f9:48:c1:02:9e:be:c6:a0:8f:cf:84:9b:21:d5: 53:94:47:ce:6a:ca:e9:26:38:7f:37:08:65:e0:d4: b0:68:3f:ba:6f:94:a5:5f:bf:5d:ce:9e:b7:79:c8: 91:c0:08:fb:cf:87:da:15:86:c5:0d:c4:1b:1e:47: 90:db:72:0d:30:8e:b4:ad:c6:fa:01:21:1f:93:20: 10:4c:65:5c:11:04:23:63:87:fe:c4:45:2e:94:d5: ba:af:a3:27:3c:61:11:c0:a6:83:73:c5:fa:16:23: 50:d4:66:48:24:b7:15:c4:43:12:86:93:ca:1b:a9: 50:14:d3:b8:97:fc:20:c1:2d:75:77:22:b2:82:87: 2d:31:f4:91:87:b2:ff:64:5f:c9:ab:fd:63:31:46: cb:39:b2:d7:88:47:6c:be:37:a5:c8:b0:7e:24:e3: 43:96:80:4d:10:b6:c9:74:56:9b:c5:f8:82:dd:d0: ed:59:5b:d5:82:9b:2c:a5:eb:c1:c9:35:66:0a:95: 75:eb:69:33:67:eb:87:d2:8a:d8:57:de:71:8d:92: aa:e8:35:0e:b6:8d:d5:2d:9c:ce:64:e0:81:ae:f7: 04:94:9e:a3:48:8c:51:a3:e1:be:ff:35:f5:97:17: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:75:42:8A:3C:95:47:D7:92:94:30:D8:2B:C9:80:FA:19:37:E6:B1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143390.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2e4::/32 Signature Algorithm: sha256WithRSAEncryption 2f:9b:b8:8b:18:dc:42:34:61:0b:0c:5e:49:67:a6:29:6c:d6: 51:0f:b7:04:f0:46:31:83:be:0d:79:4e:66:a1:7b:34:3e:15: bf:95:6d:ec:64:b0:76:e9:16:33:a9:14:28:27:6a:25:17:31: 0b:ed:de:46:81:9c:61:29:77:12:9d:68:8b:00:99:fe:cc:f0: ae:43:62:3a:ef:1b:f5:5d:53:1a:fc:1c:cc:2a:d4:c2:6a:51: 23:61:1f:12:36:0b:5e:e9:bc:5d:f9:72:f9:a5:a9:86:b6:ba: 7b:87:72:35:27:18:d8:bc:83:cd:6e:8d:0c:ef:be:2f:18:1e: 9e:ed:ac:37:2b:db:30:5d:5c:b9:cb:51:d8:de:2e:8d:94:ad: 72:b3:83:3c:27:51:eb:0a:5d:a1:0f:61:96:e7:0e:b0:49:98: be:74:b2:36:22:8f:f8:b5:f3:a9:13:8f:d3:a5:be:7c:9d:0d: cc:6c:28:8d:66:27:b2:09:3d:01:63:c4:c9:b7:05:74:a4:c2: 75:25:e9:2b:40:30:ea:85:96:40:8f:f2:5c:23:e3:70:46:7c: db:b3:d4:23:cb:68:8f:64:18:f0:91:a2:c7:86:8e:b7:8d:ba: 9e:67:6e:50:5a:e6:43:69:87:10:88:0b:a8:ed:60:63:91:11: 00:aa:57:55 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIqA9rUkrRoSFUcp/E8ylApEN72kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1NFoX DTI3MDMwMzA2MDc1NFowMzExMC8GA1UEAxMoOTI3NTQyOEEzQzk1NDdENzkyOTQz MEQ4MkJDOTgwRkExOTM3RTZCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzzkHxU1rGEDQbJwXcv3vlIwQKevsagj8+EmyHVU5RHzmrK6SY4fzcIZeDU sGg/um+UpV+/Xc6et3nIkcAI+8+H2hWGxQ3EGx5HkNtyDTCOtK3G+gEhH5MgEExl XBEEI2OH/sRFLpTVuq+jJzxhEcCmg3PF+hYjUNRmSCS3FcRDEoaTyhupUBTTuJf8 IMEtdXcisoKHLTH0kYey/2Rfyav9YzFGyzmy14hHbL43pciwfiTjQ5aATRC2yXRW m8X4gt3Q7Vlb1YKbLKXrwck1ZgqVdetpM2frh9KK2FfecY2Squg1DraN1S2czmTg ga73BJSeo0iMUaPhvv819ZcXfkMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSdUKK PJVH15KUMNgryYD6GTfmsTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ouQwDQYJKoZIhvcNAQELBQADggEBAC+buIsY3EI0YQsMXklnpils1lEPtwTwRjGD vg15TmahezQ+Fb+VbexksHbpFjOpFCgnaiUXMQvt3kaBnGEpdxKdaIsAmf7M8K5D YjrvG/VdUxr8HMwq1MJqUSNhHxI2C17pvF35cvmlqYa2unuHcjUnGNi8g81ujQzv vi8YHp7trDcr2zBdXLnLUdjeLo2UrXKzgzwnUesKXaEPYZbnDrBJmL50sjYij/i1 86kTj9OlvnydDcxsKI1mJ7IJPQFjxMm3BXSkwnUl6StAMOqFlkCP8lwj43BGfNuz 1CPLaI9kGPCRoseGjreNup5nblBa5kNphxCIC6jtYGOREQCqV1U= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:56 2026 by rpki-client