$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143394.roa File: AS143394.roa (raw, json) Hash identifier: JR5UJnF7rU/uszo66oTadq6vAMZEqUl7VrFDGYHh8AQ= Subject key identifier: 9C:61:FB:40:29:71:31:7D:F2:A3:1D:0F:BC:67:E7:B0:25:7B:BA:7D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3A66E0EC5F3CF541ACEAF5CE6257E1E3D94D813A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143394.roa Signing time: Wed 04 Mar 2026 06:07:54 +0000 ROA not before: Wed 04 Mar 2026 06:02:54 +0000 ROA not after: Wed 03 Mar 2027 06:07:54 +0000 asID: 143394 IP address blocks: 240a:a2e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:66:e0:ec:5f:3c:f5:41:ac:ea:f5:ce:62:57:e1:e3:d9:4d:81:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:54 2026 GMT Not After : Mar 3 06:07:54 2027 GMT Subject: CN=9C61FB402971317DF2A31D0FBC67E7B0257BBA7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:c9:5f:b6:70:05:80:66:3d:bc:1f:11:69: f4:45:ec:c5:f9:1a:a9:d6:3c:b4:7e:70:47:e7:7a: b8:01:b8:04:43:87:66:d0:a8:02:b4:1b:da:22:d5: 45:c0:4d:6a:cc:11:5e:2f:91:84:89:b2:ab:bc:ca: 8c:b7:f6:de:17:f6:45:8d:99:37:94:6b:15:f2:1e: 67:c0:78:68:6e:17:0f:40:8d:4b:c9:c8:73:dd:1c: 72:77:3a:70:c1:fa:79:55:e5:d2:34:60:fb:2d:c9: b7:6e:3b:79:d8:2a:90:ea:65:fe:c9:a2:e3:5c:3e: 43:68:89:fb:c4:05:e1:c8:32:c5:31:40:d3:51:e9: c0:7d:a6:77:45:b9:45:48:b0:76:b4:89:db:0d:46: 95:f6:c3:e1:25:bc:a0:40:a2:a2:57:65:26:88:cd: 9b:47:8d:58:24:a1:1f:e9:bc:a4:58:df:f6:68:92: 69:07:67:65:49:06:f7:a8:ee:0e:35:08:35:22:b3: 79:f2:12:e6:01:2a:bc:1f:86:47:51:ad:bc:8e:2a: 91:eb:51:cb:7e:ad:9c:d4:72:2c:7f:d7:90:8f:50: 69:44:e7:a7:a9:b5:6f:3b:c2:21:09:03:aa:36:64: c5:de:2b:55:09:4d:c1:93:7d:7f:0b:a3:2d:8c:cd: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:61:FB:40:29:71:31:7D:F2:A3:1D:0F:BC:67:E7:B0:25:7B:BA:7D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2e8::/32 Signature Algorithm: sha256WithRSAEncryption 1a:78:f7:f6:08:14:60:fe:91:c0:86:eb:24:b7:63:e4:45:6d: 4d:e9:27:04:3d:9b:8d:bc:27:0b:73:61:0a:36:78:10:34:68: 9c:8f:5d:59:bd:35:f8:9c:68:8f:28:f3:0a:13:e3:05:94:68: cb:95:5a:b2:0c:19:97:20:06:d3:9f:27:aa:b5:b1:4b:3a:06: e2:ee:61:8c:82:6f:8e:2a:37:74:4d:21:d4:37:5b:38:da:44: 5b:33:e2:48:13:2c:89:09:3c:b5:89:f5:df:09:e2:dc:db:50: 77:7c:b1:bc:bf:42:cf:d0:4e:45:1d:f2:19:e8:bf:53:8e:d5: f1:66:57:bc:77:fc:30:bf:25:a4:f6:0b:47:46:c4:10:6c:99: 39:75:54:3a:41:60:0b:af:fe:ca:22:9f:27:b4:53:ce:9b:c8: 49:1e:58:b5:ac:cd:96:a9:78:1f:50:ec:83:01:1f:79:d4:45: f1:e9:69:ed:cf:fa:60:bf:c6:25:56:62:57:e4:2a:8d:2e:87: 7c:2b:1c:15:18:09:14:c1:f6:74:40:99:d5:93:a8:da:48:da: 31:58:bf:69:df:59:3d:5c:73:57:ff:92:2e:a1:e6:ec:b6:89: 34:b9:08:a0:0e:f8:15:f4:95:01:85:a1:c9:93:50:b4:91:a7: 55:0a:67:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOmbg7F889UGs6vXOYlfh49lNgTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1NFoX DTI3MDMwMzA2MDc1NFowMzExMC8GA1UEAxMoOUM2MUZCNDAyOTcxMzE3REYyQTMx RDBGQkM2N0U3QjAyNTdCQkE3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZoyV+2cAWAZj28HxFp9EXsxfkaqdY8tH5wR+d6uAG4BEOHZtCoArQb2iLV RcBNaswRXi+RhImyq7zKjLf23hf2RY2ZN5RrFfIeZ8B4aG4XD0CNS8nIc90ccnc6 cMH6eVXl0jRg+y3Jt247edgqkOpl/smi41w+Q2iJ+8QF4cgyxTFA01HpwH2md0W5 RUiwdrSJ2w1GlfbD4SW8oECioldlJojNm0eNWCShH+m8pFjf9miSaQdnZUkG96ju DjUINSKzefIS5gEqvB+GR1GtvI4qketRy36tnNRyLH/XkI9QaUTnp6m1bzvCIQkD qjZkxd4rVQlNwZN9fwujLYzNeXkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBScYftA KXExffKjHQ+8Z+ewJXu6fTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ougwDQYJKoZIhvcNAQELBQADggEBABp49/YIFGD+kcCG6yS3Y+RFbU3pJwQ9m428 JwtzYQo2eBA0aJyPXVm9NficaI8o8woT4wWUaMuVWrIMGZcgBtOfJ6q1sUs6BuLu YYyCb44qN3RNIdQ3WzjaRFsz4kgTLIkJPLWJ9d8J4tzbUHd8sby/Qs/QTkUd8hno v1OO1fFmV7x3/DC/JaT2C0dGxBBsmTl1VDpBYAuv/soinye0U86byEkeWLWszZap eB9Q7IMBH3nURfHpae3P+mC/xiVWYlfkKo0uh3wrHBUYCRTB9nRAmdWTqNpI2jFY v2nfWT1cc1f/ki6h5uy2iTS5CKAO+BX0lQGFocmTULSRp1UKZxA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:30 2026 by rpki-client