$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143406.roa File: AS143406.roa (raw, json) Hash identifier: 7/iVyrUpV03jheT95+fPon5fVeyru+t+lhuKqUj1na0= Subject key identifier: 7D:CA:E8:49:57:75:74:81:15:C3:95:64:CA:F2:6F:87:D2:92:86:B2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 200C49E200E8757003DAE94B1A026D48D26CE1E3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143406.roa Signing time: Wed 04 Mar 2026 06:06:21 +0000 ROA not before: Wed 04 Mar 2026 06:01:21 +0000 ROA not after: Wed 03 Mar 2027 06:06:21 +0000 asID: 143406 IP address blocks: 240a:a2f4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0c:49:e2:00:e8:75:70:03:da:e9:4b:1a:02:6d:48:d2:6c:e1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:21 2026 GMT Not After : Mar 3 06:06:21 2027 GMT Subject: CN=7DCAE8495775748115C39564CAF26F87D29286B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:a6:12:66:b9:33:9a:f5:7b:97:67:ae:8b: 27:88:5a:85:9f:9a:80:f4:6a:3d:03:41:24:9b:9d: 8a:63:ef:64:3d:77:58:cd:77:da:83:c1:59:dd:17: 16:72:de:eb:42:41:eb:2f:52:15:3e:02:e7:82:bf: 83:e2:5e:a7:44:de:23:49:71:9a:f2:6b:48:8e:02: a2:44:b8:c3:d2:f3:8f:53:22:8d:4f:7f:cd:1f:79: c8:52:52:68:e7:ae:7c:3d:2d:ad:52:a9:8d:71:12: 7e:8f:77:02:2b:6b:6a:89:28:2f:80:48:b5:43:2d: 15:b7:25:57:cc:cc:61:6f:d8:7d:45:91:7f:d6:ae: cd:e6:91:88:53:0a:7b:c3:9a:48:54:74:90:e3:f6: a3:b8:eb:05:96:35:0c:75:ea:24:6b:31:03:d7:40: 5f:b0:46:b3:c8:cd:28:3e:23:a6:62:2a:b3:f9:92: 50:23:a3:f3:1c:1e:6d:29:3d:dd:f9:60:ea:b3:5d: bb:e7:bd:a4:20:b4:bc:fd:7e:bb:96:d1:f4:21:f4: 5b:8f:84:a1:49:e1:2a:74:93:e1:40:e0:d5:26:80: fe:4a:9a:ba:9e:dc:e7:85:b7:fc:79:e0:ba:f5:e5: 5d:1c:bd:37:f3:f1:de:c0:10:32:22:b1:9a:b3:88: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CA:E8:49:57:75:74:81:15:C3:95:64:CA:F2:6F:87:D2:92:86:B2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143406.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2f4::/32 Signature Algorithm: sha256WithRSAEncryption 67:f8:3c:43:26:c9:53:a3:ba:68:09:57:30:af:e4:27:de:7b: 51:cd:9f:31:8c:be:6b:c3:57:dc:5a:56:04:5b:d4:6b:19:5f: d6:f1:b5:c9:bd:1d:03:8d:a3:d6:5e:03:09:6d:af:1b:5b:37: 8f:f9:35:ee:fa:c8:1c:27:e2:55:d0:f7:6e:b4:5a:a8:48:28: e6:d8:9f:a5:b6:1c:e2:10:51:39:73:51:c8:71:62:79:88:78: cf:e7:81:09:a2:9f:9d:c8:d1:80:9f:8f:4e:9c:c4:39:73:47: af:38:fa:a7:86:c6:41:e4:2c:53:6b:52:95:53:4a:c6:b8:e5: f1:19:ed:5d:06:be:18:f8:70:b3:1d:0c:2d:5a:99:25:bd:25: f5:33:00:1e:f0:d8:1c:df:fe:95:d7:d9:d2:21:88:24:c5:4a: 4d:d8:19:95:54:27:0a:98:0f:36:13:52:be:74:2f:46:7c:2f: 36:c5:89:d3:8d:f4:7f:0d:14:57:6b:e9:b0:21:78:b6:9b:d0: 63:72:ee:8a:3e:09:1c:05:1c:f2:b5:65:c6:a1:00:aa:ef:ba: 3f:27:92:88:ac:29:b2:da:d7:59:0b:6a:98:c6:fe:d6:ac:f2: 61:46:b4:60:23:89:1c:bd:bb:83:df:b1:94:67:36:39:0b:e4: 50:05:e2:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIAxJ4gDodXAD2ulLGgJtSNJs4eMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyMVoX DTI3MDMwMzA2MDYyMVowMzExMC8GA1UEAxMoN0RDQUU4NDk1Nzc1NzQ4MTE1QzM5 NTY0Q0FGMjZGODdEMjkyODZCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYSphJmuTOa9XuXZ66LJ4hahZ+agPRqPQNBJJudimPvZD13WM132oPBWd0X FnLe60JB6y9SFT4C54K/g+Jep0TeI0lxmvJrSI4CokS4w9Lzj1MijU9/zR95yFJS aOeufD0trVKpjXESfo93AitraokoL4BItUMtFbclV8zMYW/YfUWRf9auzeaRiFMK e8OaSFR0kOP2o7jrBZY1DHXqJGsxA9dAX7BGs8jNKD4jpmIqs/mSUCOj8xwebSk9 3flg6rNdu+e9pCC0vP1+u5bR9CH0W4+EoUnhKnST4UDg1SaA/kqaup7c54W3/Hng uvXlXRy9N/Px3sAQMiKxmrOIEc0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR9yuhJ V3V0gRXDlWTK8m+H0pKGsjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ovQwDQYJKoZIhvcNAQELBQADggEBAGf4PEMmyVOjumgJVzCv5Cfee1HNnzGMvmvD V9xaVgRb1GsZX9bxtcm9HQONo9ZeAwltrxtbN4/5Ne76yBwn4lXQ9260WqhIKObY n6W2HOIQUTlzUchxYnmIeM/ngQmin53I0YCfj06cxDlzR684+qeGxkHkLFNrUpVT Ssa45fEZ7V0Gvhj4cLMdDC1amSW9JfUzAB7w2Bzf/pXX2dIhiCTFSk3YGZVUJwqY DzYTUr50L0Z8LzbFidON9H8NFFdr6bAheLab0GNy7oo+CRwFHPK1ZcahAKrvuj8n koisKbLa11kLapjG/tas8mFGtGAjiRy9u4PfsZRnNjkL5FAF4lY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:16 2026 by rpki-client