$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143500.roa File: AS143500.roa (raw, json) Hash identifier: zA9w5HayHAMAfQCyxnd156UpaGVCCsPMtTHIQJeMrds= Subject key identifier: 9D:C5:34:D9:2D:09:6C:4A:46:86:84:82:A1:EB:4F:21:D5:CF:65:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4A82F8290045EDFE8516EBBA6FD3D51F28463216 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143500.roa Signing time: Wed 04 Mar 2026 06:05:09 +0000 ROA not before: Wed 04 Mar 2026 06:00:09 +0000 ROA not after: Wed 03 Mar 2027 06:05:09 +0000 asID: 143500 IP address blocks: 240a:a352::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:82:f8:29:00:45:ed:fe:85:16:eb:ba:6f:d3:d5:1f:28:46:32:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:09 2026 GMT Not After : Mar 3 06:05:09 2027 GMT Subject: CN=9DC534D92D096C4A46868482A1EB4F21D5CF659D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:cf:6b:ac:0a:4f:cc:87:d7:15:67:71:42: 59:32:d3:55:8d:2d:c2:ff:f2:9b:a5:0e:80:5a:c1: f6:9d:f2:16:47:12:06:9b:15:9f:a9:01:97:6e:60: 84:c6:3c:2d:16:e3:dd:c9:df:05:93:b1:4a:49:83: 03:40:ed:84:b9:1d:88:4e:be:0d:7e:d1:36:b2:d3: 95:8b:1c:74:1e:f0:51:f3:da:97:62:d9:78:5f:dc: 21:f1:00:fe:39:2b:bf:4d:b8:f5:7e:b5:7f:94:84: ae:eb:2f:3c:18:16:71:94:2a:4b:66:49:f3:ef:4d: ff:26:9f:45:29:1f:3e:97:8b:8e:07:6c:c5:76:4b: 0d:dc:19:a7:a3:62:43:1b:fd:4c:26:de:f7:74:15: 0b:87:aa:86:2d:bc:8d:8f:54:2a:45:e6:fd:a3:e0: 91:2b:b3:8d:87:1d:25:ad:0a:d9:27:17:70:fe:21: 04:3e:ac:34:e9:c4:15:4c:92:e2:2b:37:32:13:ce: a3:59:b7:02:a3:46:7e:df:72:e5:5e:c7:e0:fa:72: da:e3:0a:ab:08:97:59:1b:63:1e:24:6b:ba:65:36: 03:3a:87:ee:9a:15:e5:60:2c:7e:d0:e5:00:61:d8: 82:3b:66:ef:cd:dc:eb:20:b2:95:dc:06:d0:eb:a0: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C5:34:D9:2D:09:6C:4A:46:86:84:82:A1:EB:4F:21:D5:CF:65:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143500.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a352::/32 Signature Algorithm: sha256WithRSAEncryption 82:7f:4d:73:5e:f6:b4:ad:31:a5:b1:06:eb:ce:cc:ba:16:4c: ee:6b:db:fa:81:dd:8f:0b:42:b4:7a:77:73:fc:01:6f:09:b6: 3f:42:e0:60:3e:77:6e:e8:73:00:82:d2:96:6c:ce:c4:dd:11: 4a:38:6e:f4:63:b7:9d:96:02:d6:ff:b9:53:d5:7f:85:f1:f6: aa:33:ac:68:f6:a5:57:c3:15:ab:cd:d8:c1:ec:d9:67:fb:c9: d4:8b:aa:84:d1:55:94:64:0f:1b:2b:f9:ec:94:25:0d:a5:f5: 23:5d:fd:ba:48:8f:dd:0d:50:a2:b1:33:b6:fc:aa:ce:7f:4b: 56:ce:3a:ee:c0:4f:28:28:f6:ec:10:25:22:b8:9c:e0:2c:f2: bc:d0:98:85:ee:fd:23:f6:e4:7e:cc:c2:f5:e6:8e:30:c3:3b: 84:b0:1c:01:66:90:11:30:2d:d3:98:9b:a5:14:60:d8:99:58: 12:fe:cb:b8:b9:b0:b2:9f:ae:f6:56:85:e0:e9:78:65:0a:a8: ec:85:ab:29:41:8b:cb:31:1e:12:60:b8:ea:02:0c:52:16:c0: d4:df:45:c5:00:92:74:fd:ff:42:e0:3e:76:a0:a0:bd:a6:fb: 0a:ff:7a:da:16:a9:2c:11:f2:4d:59:e6:f2:b4:8e:f3:ad:60: b8:e0:9c:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSoL4KQBF7f6FFuu6b9PVHyhGMhYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAwOVoX DTI3MDMwMzA2MDUwOVowMzExMC8GA1UEAxMoOURDNTM0RDkyRDA5NkM0QTQ2ODY4 NDgyQTFFQjRGMjFENUNGNjU5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrCz2usCk/Mh9cVZ3FCWTLTVY0twv/ym6UOgFrB9p3yFkcSBpsVn6kBl25g hMY8LRbj3cnfBZOxSkmDA0DthLkdiE6+DX7RNrLTlYscdB7wUfPal2LZeF/cIfEA /jkrv0249X61f5SErusvPBgWcZQqS2ZJ8+9N/yafRSkfPpeLjgdsxXZLDdwZp6Ni Qxv9TCbe93QVC4eqhi28jY9UKkXm/aPgkSuzjYcdJa0K2ScXcP4hBD6sNOnEFUyS 4is3MhPOo1m3AqNGft9y5V7H4Ppy2uMKqwiXWRtjHiRrumU2AzqH7poV5WAsftDl AGHYgjtm783c6yCyldwG0Oug7SMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSdxTTZ LQlsSkaGhIKh608h1c9lnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzUwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o1IwDQYJKoZIhvcNAQELBQADggEBAIJ/TXNe9rStMaWxBuvOzLoWTO5r2/qB3Y8L QrR6d3P8AW8Jtj9C4GA+d27ocwCC0pZszsTdEUo4bvRjt52WAtb/uVPVf4Xx9qoz rGj2pVfDFavN2MHs2Wf7ydSLqoTRVZRkDxsr+eyUJQ2l9SNd/bpIj90NUKKxM7b8 qs5/S1bOOu7ATygo9uwQJSK4nOAs8rzQmIXu/SP25H7MwvXmjjDDO4SwHAFmkBEw LdOYm6UUYNiZWBL+y7i5sLKfrvZWheDpeGUKqOyFqylBi8sxHhJguOoCDFIWwNTf RcUAknT9/0LgPnagoL2m+wr/etoWqSwR8k1Z5vK0jvOtYLjgnPk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:38 2026 by rpki-client