$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143396.roa File: AS143396.roa (raw, json) Hash identifier: /NlP55eEF32dcOVbktVbIAj6bzoglzCkg5EybjAiAuk= Subject key identifier: 6D:97:78:CA:01:16:04:8F:C3:C9:7F:B2:08:16:EF:F3:9B:3F:23:F1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5787505DF0861FF20201A2B11A235F614029FC41 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143396.roa Signing time: Wed 04 Mar 2026 06:06:19 +0000 ROA not before: Wed 04 Mar 2026 06:01:19 +0000 ROA not after: Wed 03 Mar 2027 06:06:19 +0000 asID: 143396 IP address blocks: 240a:a2ea::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:87:50:5d:f0:86:1f:f2:02:01:a2:b1:1a:23:5f:61:40:29:fc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:19 2026 GMT Not After : Mar 3 06:06:19 2027 GMT Subject: CN=6D9778CA0116048FC3C97FB20816EFF39B3F23F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:f1:3a:81:e2:e2:5a:4e:fd:f0:41:6c:93: 6c:b5:9e:f4:57:d3:6d:74:b3:e1:82:bf:92:1a:02: de:88:37:4b:ce:42:30:11:90:4b:8f:5b:63:f9:82: 07:b4:e0:72:c8:03:8f:b6:d2:e3:9e:8f:3c:f5:45: f0:81:e3:17:f5:1c:9c:54:91:bb:2f:b5:74:64:be: b0:1a:a8:a7:98:f7:2f:16:94:3e:71:68:23:41:1b: ce:7f:9b:2c:fb:01:2f:ef:dd:b3:87:84:97:b3:06: ee:4a:dc:d3:3c:0c:c3:af:33:da:2e:04:7c:74:e3: 58:36:7a:07:96:94:81:23:57:a3:e6:e0:f5:0b:7a: 18:aa:d0:64:86:0b:df:34:2c:f5:7c:08:c2:24:51: f3:51:63:87:d1:0b:6f:6d:cc:90:59:6a:88:c7:10: f6:1f:ea:88:40:09:67:97:bb:ce:31:bc:e3:62:b7: e7:c4:6d:88:01:af:9b:47:95:e1:9b:6b:7c:39:2c: ad:aa:60:ff:00:d5:e1:2f:e7:09:d4:a6:37:6c:68: 58:c4:24:07:19:af:53:89:0d:1e:db:ba:fc:71:e9: 00:4b:1e:5d:f2:3f:a0:81:a4:f1:d7:90:92:0f:1f: 06:2f:75:22:96:4f:95:d3:12:46:5f:ee:03:35:20: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:97:78:CA:01:16:04:8F:C3:C9:7F:B2:08:16:EF:F3:9B:3F:23:F1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143396.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2ea::/32 Signature Algorithm: sha256WithRSAEncryption 80:17:60:64:d3:fc:d3:db:0e:db:9a:da:03:21:7f:43:6b:b8: ca:90:9c:db:a4:5b:4e:11:2c:dd:1e:6f:2f:91:45:6e:9e:bd: 31:ab:26:8c:cf:f3:7e:8d:1e:02:53:ac:6c:6d:2c:4d:3c:71: e5:79:b9:85:f7:8e:e0:66:0c:4b:da:07:05:0b:2d:de:f1:12: fb:49:12:7a:96:55:7e:15:40:e8:a0:08:26:59:60:10:67:bd: e5:b9:b0:6b:58:76:2d:20:ea:1b:61:d7:94:c0:7a:5d:98:80: e5:ff:1f:52:6a:d7:f2:71:69:be:e6:82:cc:05:89:62:3c:ad: d5:ea:e9:b5:c4:3a:1a:f5:f3:54:07:22:58:55:ca:96:e4:35: 22:99:6f:ab:dc:c0:44:fd:45:bf:08:ec:b0:b1:84:b7:c3:d4: e8:dc:4b:af:18:b8:0b:01:43:16:74:a5:c4:2a:46:71:ef:22: 9b:87:3f:18:cf:7b:00:8e:32:41:90:a1:39:3f:83:74:01:de: c8:45:9a:a4:71:a4:38:02:54:a5:6e:4f:0d:e8:4d:e8:d3:42: 59:8f:a5:61:58:f7:bf:39:57:4d:85:50:de:ef:15:3f:2f:d1: 59:81:75:78:18:fc:ac:3b:1f:ef:ea:ac:33:2a:f9:b0:3f:28: bc:b0:d0:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUV4dQXfCGH/ICAaKxGiNfYUAp/EEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExOVoX DTI3MDMwMzA2MDYxOVowMzExMC8GA1UEAxMoNkQ5Nzc4Q0EwMTE2MDQ4RkMzQzk3 RkIyMDgxNkVGRjM5QjNGMjNGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNc8TqB4uJaTv3wQWyTbLWe9FfTbXSz4YK/khoC3og3S85CMBGQS49bY/mC B7TgcsgDj7bS456PPPVF8IHjF/UcnFSRuy+1dGS+sBqop5j3LxaUPnFoI0Ebzn+b LPsBL+/ds4eEl7MG7krc0zwMw68z2i4EfHTjWDZ6B5aUgSNXo+bg9Qt6GKrQZIYL 3zQs9XwIwiRR81Fjh9ELb23MkFlqiMcQ9h/qiEAJZ5e7zjG842K358RtiAGvm0eV 4ZtrfDksrapg/wDV4S/nCdSmN2xoWMQkBxmvU4kNHtu6/HHpAEseXfI/oIGk8deQ kg8fBi91IpZPldMSRl/uAzUg/1UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRtl3jK ARYEj8PJf7IIFu/zmz8j8TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ouowDQYJKoZIhvcNAQELBQADggEBAIAXYGTT/NPbDtua2gMhf0NruMqQnNukW04R LN0eby+RRW6evTGrJozP836NHgJTrGxtLE08ceV5uYX3juBmDEvaBwULLd7xEvtJ EnqWVX4VQOigCCZZYBBnveW5sGtYdi0g6hth15TAel2YgOX/H1Jq1/Jxab7mgswF iWI8rdXq6bXEOhr181QHIlhVypbkNSKZb6vcwET9Rb8I7LCxhLfD1OjcS68YuAsB QxZ0pcQqRnHvIpuHPxjPewCOMkGQoTk/g3QB3shFmqRxpDgCVKVuTw3oTejTQlmP pWFY9785V02FUN7vFT8v0VmBdXgY/Kw7H+/qrDMq+bA/KLyw0N4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:41 2026 by rpki-client