$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143408.roa File: AS143408.roa (raw, json) Hash identifier: jxAjusGq2yQIE262VqQ8hbmYwHGZdX7cOpakXdW7pPI= Subject key identifier: C0:78:DC:6A:A5:D0:FE:63:45:D9:13:8E:63:89:E3:CD:9B:8C:AC:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2FB795BCAD49AF573A2FD1553B7CCD6B7CF0FFAD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143408.roa Signing time: Wed 04 Mar 2026 06:08:02 +0000 ROA not before: Wed 04 Mar 2026 06:03:02 +0000 ROA not after: Wed 03 Mar 2027 06:08:02 +0000 asID: 143408 IP address blocks: 240a:a2f6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b7:95:bc:ad:49:af:57:3a:2f:d1:55:3b:7c:cd:6b:7c:f0:ff:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:02 2026 GMT Not After : Mar 3 06:08:02 2027 GMT Subject: CN=C078DC6AA5D0FE6345D9138E6389E3CD9B8CAC48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:7f:72:b4:66:6d:92:8f:97:89:01:4c:1b: 8a:86:41:6b:30:43:72:6a:7b:ca:a2:10:6d:99:50: 9d:96:1b:64:d4:49:38:66:db:84:fc:14:0c:ce:da: 5a:f1:b7:76:97:61:e4:a6:fb:90:04:19:cc:d8:7c: dd:ad:a4:82:3e:3d:dc:83:a1:5a:21:1c:f5:64:ad: 6c:0a:a5:7e:2c:aa:98:33:0b:a4:c9:b3:30:a2:25: 18:1c:04:3b:7e:ac:89:58:8a:70:d1:b2:fa:b4:d2: a0:af:4b:1a:fa:92:3f:1a:b6:8d:ed:d6:45:ef:6d: d4:ae:cc:e9:61:34:fc:02:5c:c6:d7:38:88:1c:fa: 76:d0:97:7c:12:e8:94:b5:71:a8:d1:8c:11:33:c5: 50:3a:a2:e3:3b:db:05:90:95:b1:af:3a:1d:6a:83: 5a:ad:d0:6f:a3:21:76:c0:a1:22:b8:dd:01:47:f7: 71:4f:7a:f9:7d:d3:13:1b:80:66:5e:5f:26:2a:1b: 88:79:d6:a7:ee:f7:f0:28:ca:14:a3:4d:59:a5:75: 13:3c:ab:85:99:4a:22:97:d1:d8:26:82:03:5e:a1: 9c:d4:c1:4f:9f:4c:f4:7a:b0:f2:4f:1b:60:70:7f: 57:45:3f:8c:78:75:9f:a5:48:a8:cf:c3:18:70:64: 66:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:78:DC:6A:A5:D0:FE:63:45:D9:13:8E:63:89:E3:CD:9B:8C:AC:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143408.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2f6::/32 Signature Algorithm: sha256WithRSAEncryption 78:1b:26:3a:7d:0f:f9:47:83:b5:b6:9b:be:c0:8c:85:e4:63: 73:72:ef:c1:f5:9c:b6:34:9f:eb:1f:6a:5d:aa:e1:d0:41:4d: 56:dd:12:ff:3a:2d:9f:13:29:c7:51:55:81:64:57:aa:64:88: 57:29:47:69:b7:fd:c9:b0:a1:34:03:43:11:c6:c3:84:90:42: 58:ce:f0:df:6c:ab:2c:51:40:02:5c:ab:27:f5:0a:4b:df:4f: 03:f0:98:e6:ed:e5:7e:b6:39:d6:16:47:b2:9e:55:2c:d3:b7: 28:7b:54:22:58:22:cc:6b:f6:70:3c:7f:1e:18:fc:79:0d:f1: 56:f6:e6:eb:38:ba:13:4d:d8:8a:1a:ea:03:16:5e:2d:82:e7: 88:fd:25:89:1b:49:3a:66:e6:ff:de:8b:58:a3:a3:ac:4d:46: 4f:dc:69:14:df:9c:eb:d2:b0:24:99:5e:88:af:1e:4b:49:3d: df:8e:1a:bb:cb:4f:9b:38:9c:6b:c7:7c:0f:62:ce:eb:11:df: 21:08:ce:be:b8:50:f9:f3:de:e0:55:7b:bd:43:12:32:54:f2: 0e:b5:f4:e0:9f:14:75:c7:d3:6b:a5:e1:86:bc:25:44:d3:6d: 74:3f:67:5c:c8:9b:a3:10:5c:4a:50:73:fc:09:75:3c:80:36: c7:39:80:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUL7eVvK1Jr1c6L9FVO3zNa3zw/60wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwMloX DTI3MDMwMzA2MDgwMlowMzExMC8GA1UEAxMoQzA3OERDNkFBNUQwRkU2MzQ1RDkx MzhFNjM4OUUzQ0Q5QjhDQUM0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5Wf3K0Zm2Sj5eJAUwbioZBazBDcmp7yqIQbZlQnZYbZNRJOGbbhPwUDM7a WvG3dpdh5Kb7kAQZzNh83a2kgj493IOhWiEc9WStbAqlfiyqmDMLpMmzMKIlGBwE O36siViKcNGy+rTSoK9LGvqSPxq2je3WRe9t1K7M6WE0/AJcxtc4iBz6dtCXfBLo lLVxqNGMETPFUDqi4zvbBZCVsa86HWqDWq3Qb6MhdsChIrjdAUf3cU96+X3TExuA Zl5fJiobiHnWp+738CjKFKNNWaV1EzyrhZlKIpfR2CaCA16hnNTBT59M9Hqw8k8b YHB/V0U/jHh1n6VIqM/DGHBkZk8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTAeNxq pdD+Y0XZE45jiePNm4ysSDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ovYwDQYJKoZIhvcNAQELBQADggEBAHgbJjp9D/lHg7W2m77AjIXkY3Ny78H1nLY0 n+sfal2q4dBBTVbdEv86LZ8TKcdRVYFkV6pkiFcpR2m3/cmwoTQDQxHGw4SQQljO 8N9sqyxRQAJcqyf1CkvfTwPwmObt5X62OdYWR7KeVSzTtyh7VCJYIsxr9nA8fx4Y /HkN8Vb25us4uhNN2Ioa6gMWXi2C54j9JYkbSTpm5v/ei1ijo6xNRk/caRTfnOvS sCSZXoivHktJPd+OGrvLT5s4nGvHfA9izusR3yEIzr64UPnz3uBVe71DEjJU8g61 9OCfFHXH02ul4Ya8JUTTbXQ/Z1zIm6MQXEpQc/wJdTyANsc5gFs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:05 2026 by rpki-client