$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143395.roa File: AS143395.roa (raw, json) Hash identifier: hr9CaVa26koKCGxc1kzR4yhLxsqHDovz9UQq9kAMAoc= Subject key identifier: EA:AD:E1:AB:D4:09:8F:44:B9:07:2D:4D:73:EA:DF:D4:84:CE:88:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 44214B806EA9B8ED53A2D0CE941B429367E18553 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143395.roa Signing time: Wed 04 Mar 2026 06:05:14 +0000 ROA not before: Wed 04 Mar 2026 06:00:14 +0000 ROA not after: Wed 03 Mar 2027 06:05:14 +0000 asID: 143395 IP address blocks: 240a:a2e9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:21:4b:80:6e:a9:b8:ed:53:a2:d0:ce:94:1b:42:93:67:e1:85:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:14 2026 GMT Not After : Mar 3 06:05:14 2027 GMT Subject: CN=EAADE1ABD4098F44B9072D4D73EADFD484CE8802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:db:84:6a:db:c7:40:90:0c:8c:ce:f7:8a: fc:12:5c:9b:fd:f2:c9:16:ba:18:f0:a5:81:6a:bd: a5:3a:e3:c5:39:1f:f2:62:9f:28:b4:82:e8:44:9a: bf:ae:57:f3:64:24:7d:0f:a3:fc:16:ec:de:a0:a0: 3b:ad:0c:78:58:eb:9f:4c:08:3c:e0:e2:3d:a4:c1: 9b:75:56:90:b0:e3:84:fd:d8:10:0f:96:8a:50:44: 28:65:52:3e:3e:34:b3:3f:83:33:67:4c:48:39:35: e5:d6:b9:77:b3:5a:de:07:56:7a:6e:a6:2f:3b:da: 4a:da:e4:48:84:2b:b1:a8:22:79:23:ad:37:44:de: 3a:d6:83:58:e8:85:0d:df:99:11:95:a3:4a:69:96: 06:61:b7:42:31:1d:66:2a:ef:f0:5f:eb:4e:4f:ea: 41:e6:0b:6d:81:41:c3:db:4c:95:8e:bb:7a:69:a8: b7:32:7b:e5:10:ac:d6:3d:e5:18:0e:5d:23:d2:4e: ab:11:5e:b3:8e:8f:38:df:64:9f:e5:a1:a9:2d:63: 91:e1:41:bb:0d:56:a4:24:5a:ac:ae:0e:8e:9e:82: 71:d9:c1:95:da:8f:dc:ac:d1:e1:3f:a1:8e:b1:9e: 8c:38:32:2d:06:78:65:a3:70:53:7a:7b:d6:be:81: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AD:E1:AB:D4:09:8F:44:B9:07:2D:4D:73:EA:DF:D4:84:CE:88:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143395.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2e9::/32 Signature Algorithm: sha256WithRSAEncryption 41:0f:d0:57:65:77:b0:5c:30:e2:75:25:aa:6f:77:dd:2f:7f: de:4b:c6:5c:b4:bf:8d:bf:83:c6:d8:11:b2:bd:76:55:d4:c4: 62:c5:79:a2:0b:04:f8:fb:fc:08:6f:95:4c:5b:92:ab:e2:a3: 56:34:32:86:e3:8d:13:68:1c:5c:38:d4:8d:9f:9d:db:c5:11: b2:63:ee:d7:5a:b3:5b:5a:9f:5c:a4:ae:c4:90:4d:e1:6b:e7: 19:3e:b4:45:81:62:2a:d2:9e:79:f9:1d:13:8e:cb:4e:22:f3: 61:8e:05:ae:d7:07:1a:5b:6b:28:39:5a:1e:4c:f0:a1:bd:45: a5:a6:ee:a7:5a:bf:92:a1:0f:93:be:60:05:bc:6a:04:97:16: e5:bf:17:4c:6e:37:28:e0:e0:09:99:b2:ce:74:f7:60:2b:e2: ee:02:86:d4:e6:2f:ff:93:3b:6c:92:83:f2:0f:39:2e:91:33: ef:53:e1:d0:1e:72:fb:bd:54:30:49:7c:42:2a:e3:f0:c2:16: 28:63:a6:de:0a:a4:7b:eb:e2:93:91:d5:2a:51:34:0b:31:e2: ff:64:1a:35:8e:1f:70:60:7b:c4:51:c0:f7:a5:42:8c:45:c2: 57:ed:24:6a:5d:51:4a:08:cc:42:4e:41:d9:88:ae:f9:a4:6e: 43:3c:ef:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURCFLgG6puO1TotDOlBtCk2fhhVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxNFoX DTI3MDMwMzA2MDUxNFowMzExMC8GA1UEAxMoRUFBREUxQUJENDA5OEY0NEI5MDcy RDRENzNFQURGRDQ4NENFODgwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXG24Rq28dAkAyMzveK/BJcm/3yyRa6GPClgWq9pTrjxTkf8mKfKLSC6ESa v65X82QkfQ+j/Bbs3qCgO60MeFjrn0wIPODiPaTBm3VWkLDjhP3YEA+WilBEKGVS Pj40sz+DM2dMSDk15da5d7Na3gdWem6mLzvaStrkSIQrsagieSOtN0TeOtaDWOiF Dd+ZEZWjSmmWBmG3QjEdZirv8F/rTk/qQeYLbYFBw9tMlY67emmotzJ75RCs1j3l GA5dI9JOqxFes46PON9kn+WhqS1jkeFBuw1WpCRarK4Ojp6CcdnBldqP3KzR4T+h jrGejDgyLQZ4ZaNwU3p71r6BoTkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTqreGr 1AmPRLkHLU1z6t/UhM6IAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oukwDQYJKoZIhvcNAQELBQADggEBAEEP0Fdld7BcMOJ1Japvd90vf95Lxly0v42/ g8bYEbK9dlXUxGLFeaILBPj7/AhvlUxbkqvio1Y0MobjjRNoHFw41I2fndvFEbJj 7tdas1tan1ykrsSQTeFr5xk+tEWBYirSnnn5HROOy04i82GOBa7XBxpbayg5Wh5M 8KG9RaWm7qdav5KhD5O+YAW8agSXFuW/F0xuNyjg4AmZss5092Ar4u4ChtTmL/+T O2ySg/IPOS6RM+9T4dAecvu9VDBJfEIq4/DCFihjpt4KpHvr4pOR1SpRNAsx4v9k GjWOH3Bge8RRwPelQoxFwlftJGpdUUoIzEJOQdmIrvmkbkM87wo= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:02 2026 by rpki-client