$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143415.roa File: AS143415.roa (raw, json) Hash identifier: urT6UtVpnlBu+T4h5W0AFQFk+uxkmz5Qckfa5asYQn0= Subject key identifier: 95:F6:9E:A6:E0:B3:5F:47:B3:2E:FB:29:56:A3:0F:9F:F5:39:7F:BC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0B1A4AAE9B2B0D6E41BA67A78F9BD3177E02C84C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143415.roa Signing time: Wed 04 Mar 2026 06:07:30 +0000 ROA not before: Wed 04 Mar 2026 06:02:30 +0000 ROA not after: Wed 03 Mar 2027 06:07:30 +0000 asID: 143415 IP address blocks: 240a:a2fd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1a:4a:ae:9b:2b:0d:6e:41:ba:67:a7:8f:9b:d3:17:7e:02:c8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:30 2026 GMT Not After : Mar 3 06:07:30 2027 GMT Subject: CN=95F69EA6E0B35F47B32EFB2956A30F9FF5397FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:2a:0c:17:fa:61:37:39:e6:d7:ec:f6:63: ad:fe:1c:2e:9e:64:33:3c:7f:c7:1c:61:99:51:b1: d7:d5:85:83:a1:02:19:5f:7b:a2:8d:fd:1c:96:57: ff:a2:13:85:d2:3d:07:da:65:5e:8a:9b:b9:1a:7a: 61:94:c6:0e:50:3a:56:d5:2a:f6:0c:44:74:29:e8: 2c:b6:2c:5c:b9:92:5b:66:f4:13:60:e8:92:48:85: ec:c6:a9:f7:ee:f6:3c:d4:2e:86:a4:2c:f5:e8:f9: 51:e2:64:a4:c7:28:92:37:fe:94:9c:46:f9:4a:6b: 2c:ce:d7:77:ed:6d:80:b2:37:7e:6d:fb:7c:bc:f6: 43:0e:4f:a6:20:b9:2b:b0:ff:24:c4:4f:9d:5b:80: fc:75:b6:10:13:25:f5:cc:22:16:a1:4a:e8:9e:fe: d8:00:2f:cd:5d:60:4d:fd:e8:31:d0:92:55:8a:e4: 22:ed:fb:8a:e3:16:6e:c9:91:b3:6a:04:1c:a0:d8: 92:9a:96:a3:15:3a:1a:82:b5:ae:c1:bf:53:55:3f: be:78:9a:1f:61:e4:bf:42:85:56:09:68:97:6f:47: b8:66:62:6b:08:7c:8b:c0:73:dd:9f:98:02:5a:fb: 14:1b:9a:e9:97:0a:52:ed:16:cc:2b:01:44:e8:b1: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F6:9E:A6:E0:B3:5F:47:B3:2E:FB:29:56:A3:0F:9F:F5:39:7F:BC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143415.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2fd::/32 Signature Algorithm: sha256WithRSAEncryption 67:2f:95:a0:f5:90:e3:92:e1:78:ef:c6:5c:d3:89:3a:57:39: ff:4d:7d:52:46:d6:b6:ee:27:e4:bf:d3:8e:3a:50:13:98:0e: c0:a2:00:5b:f8:49:22:4f:e8:80:b2:5a:3e:7d:b7:4f:c0:8a: 26:04:05:df:ef:15:29:67:7f:77:b8:16:ad:9e:ce:0f:d9:3f: 55:cb:1e:fb:cb:14:65:a6:d5:19:e4:a0:23:5f:d3:ff:cb:17: a2:44:11:3a:e9:ce:c6:40:ef:a2:5e:72:ae:4e:d4:1d:0d:c4: 56:7b:53:e0:6b:7e:67:d9:23:2c:8b:d8:45:43:3e:5e:e5:4c: 60:ae:0c:8b:cc:22:7e:76:3d:3a:f7:4e:5a:6d:33:b7:56:91: d8:ef:be:5d:2d:09:2b:54:25:05:81:3f:a2:22:ae:5d:00:24: 8c:5c:76:aa:49:95:ba:0c:7a:cc:f0:c1:30:1c:d2:17:cf:c6: a6:65:2a:66:47:b4:fe:1f:30:f4:85:e8:fa:74:44:24:de:92: 20:2a:a9:33:1d:57:a3:85:d7:3a:f0:15:d1:3d:00:d0:cc:f2: f2:33:90:c7:79:b6:61:74:2c:4b:54:05:71:1a:72:b7:16:31: 71:3c:57:68:3a:72:e8:55:c0:23:a0:cb:03:73:1a:b0:db:a0: 88:56:f7:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCxpKrpsrDW5Bumenj5vTF34CyEwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzMFoX DTI3MDMwMzA2MDczMFowMzExMC8GA1UEAxMoOTVGNjlFQTZFMEIzNUY0N0IzMkVG QjI5NTZBMzBGOUZGNTM5N0ZCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1uKgwX+mE3OebX7PZjrf4cLp5kMzx/xxxhmVGx19WFg6ECGV97oo39HJZX /6IThdI9B9plXoqbuRp6YZTGDlA6VtUq9gxEdCnoLLYsXLmSW2b0E2DokkiF7Map 9+72PNQuhqQs9ej5UeJkpMcokjf+lJxG+UprLM7Xd+1tgLI3fm37fLz2Qw5PpiC5 K7D/JMRPnVuA/HW2EBMl9cwiFqFK6J7+2AAvzV1gTf3oMdCSVYrkIu37iuMWbsmR s2oEHKDYkpqWoxU6GoK1rsG/U1U/vniaH2Hkv0KFVglol29HuGZiawh8i8Bz3Z+Y Alr7FBua6ZcKUu0WzCsBROix/50CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSV9p6m 4LNfR7Mu+ylWow+f9Tl/vDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ov0wDQYJKoZIhvcNAQELBQADggEBAGcvlaD1kOOS4XjvxlzTiTpXOf9NfVJG1rbu J+S/0446UBOYDsCiAFv4SSJP6ICyWj59t0/AiiYEBd/vFSlnf3e4Fq2ezg/ZP1XL HvvLFGWm1RnkoCNf0//LF6JEETrpzsZA76Jecq5O1B0NxFZ7U+BrfmfZIyyL2EVD Pl7lTGCuDIvMIn52PTr3TlptM7dWkdjvvl0tCStUJQWBP6Iirl0AJIxcdqpJlboM eszwwTAc0hfPxqZlKmZHtP4fMPSF6Pp0RCTekiAqqTMdV6OF1zrwFdE9ANDM8vIz kMd5tmF0LEtUBXEacrcWMXE8V2g6cuhVwCOgywNzGrDboIhW9wI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:58 2026 by rpki-client