$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143627.roa File: AS143627.roa (raw, json) Hash identifier: bBUC6GAgH53efQCJU/a9s4qWu5ab1nCwQofFPvYgZBY= Subject key identifier: 92:8A:A9:99:7E:EE:A4:94:FE:F5:EC:92:60:5A:02:53:2D:85:70:3A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2710C721A10E667F3E84A34421C7DFE3EE5C66F0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143627.roa Signing time: Wed 04 Mar 2026 06:15:50 +0000 ROA not before: Wed 04 Mar 2026 06:10:50 +0000 ROA not after: Wed 03 Mar 2027 06:15:50 +0000 asID: 143627 IP address blocks: 240a:a3d1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:10:c7:21:a1:0e:66:7f:3e:84:a3:44:21:c7:df:e3:ee:5c:66:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:50 2026 GMT Not After : Mar 3 06:15:50 2027 GMT Subject: CN=928AA9997EEEA494FEF5EC92605A02532D85703A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:55:3f:b8:6b:91:e4:9f:03:e9:67:f8:69: 47:aa:db:6e:d6:66:80:a1:48:c8:e4:b6:7b:77:35: 07:6b:fe:bc:07:d2:9e:a5:36:0d:70:2a:9c:f6:d3: ee:e5:ce:fc:a1:0d:d6:41:1a:f1:f7:99:f3:1f:d5: 98:e9:54:94:06:11:70:2c:a0:a3:a1:3f:c7:d6:27: 34:4f:5b:c8:15:ec:2b:eb:a6:7e:23:d9:2f:5b:c1: ff:7e:28:38:61:ed:01:ad:d0:e4:84:33:83:0d:56: f2:b7:58:21:82:16:ca:ea:1b:cd:6c:72:4d:fe:2d: e6:ec:c5:f0:b2:6e:dd:8a:ee:4d:34:5e:41:25:3b: 19:da:64:f2:d3:7d:27:1b:33:25:6d:21:80:b1:ba: e3:85:a8:41:a1:07:7f:92:6d:6d:db:26:58:d4:fc: 33:d0:e2:2a:43:4e:12:4b:be:a6:bf:94:5e:fe:b0: 51:fa:48:68:b4:da:a0:b9:20:af:06:09:18:21:b5: 5a:bc:fa:0c:90:5c:63:56:bf:5e:b3:a5:64:e9:c1: d4:1a:3c:17:7f:17:46:8c:71:aa:b7:71:be:2b:13: 4a:0d:a4:d5:b8:8b:22:a3:64:65:43:8a:bb:6e:9d: 87:fc:fc:e0:4b:59:f7:65:22:48:9f:b3:5f:ea:7e: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8A:A9:99:7E:EE:A4:94:FE:F5:EC:92:60:5A:02:53:2D:85:70:3A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143627.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3d1::/32 Signature Algorithm: sha256WithRSAEncryption 70:0d:1f:a0:17:e3:7e:9f:3d:3f:49:d8:48:40:e9:03:77:e4: 76:23:58:d7:61:b4:a7:75:a0:24:83:93:4c:99:7b:91:49:2b: 0e:61:21:ae:ff:c9:b7:42:ca:c2:c1:34:7e:c2:5d:37:82:0e: 69:a5:16:0a:73:5e:81:34:2d:b0:d9:82:e8:4d:15:8b:a6:ba: b3:a5:4f:c0:9a:95:4d:8f:1b:ad:f9:c3:bd:a4:c2:70:36:23: 8e:75:ba:b6:ad:68:aa:ef:4e:6f:1e:3c:f6:3d:e6:15:d4:e1: 5b:ae:c3:90:c2:47:01:a9:29:09:a8:b7:91:9a:e0:90:7f:29: 93:0f:00:f4:b5:09:cb:bb:f4:6d:0e:35:12:33:81:12:bc:7e: a2:44:49:ef:df:c9:86:1c:e6:cc:cd:50:79:1a:0f:3e:8a:48: 81:11:f4:7b:bb:0d:83:33:1b:ab:79:37:d1:9b:42:57:e4:f2: a6:26:bf:d0:1c:5a:cb:35:c1:1c:39:f0:49:b0:75:de:5e:3e: f3:41:19:10:89:ca:7f:4f:b8:8e:6e:04:b8:c2:e8:96:af:69: e6:9e:35:57:8d:37:80:54:d1:35:a0:d6:af:8a:0a:f4:22:3d: 56:a0:14:c5:6b:5b:f1:45:25:15:92:6d:93:3d:2f:dd:ad:d3: cb:e1:66:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJxDHIaEOZn8+hKNEIcff4+5cZvAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA1MFoX DTI3MDMwMzA2MTU1MFowMzExMC8GA1UEAxMoOTI4QUE5OTk3RUVFQTQ5NEZFRjVF QzkyNjA1QTAyNTMyRDg1NzAzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM15VT+4a5HknwPpZ/hpR6rbbtZmgKFIyOS2e3c1B2v+vAfSnqU2DXAqnPbT 7uXO/KEN1kEa8feZ8x/VmOlUlAYRcCygo6E/x9YnNE9byBXsK+umfiPZL1vB/34o OGHtAa3Q5IQzgw1W8rdYIYIWyuobzWxyTf4t5uzF8LJu3YruTTReQSU7Gdpk8tN9 JxszJW0hgLG644WoQaEHf5JtbdsmWNT8M9DiKkNOEku+pr+UXv6wUfpIaLTaoLkg rwYJGCG1Wrz6DJBcY1a/XrOlZOnB1Bo8F38XRoxxqrdxvisTSg2k1biLIqNkZUOK u26dh/z84EtZ92UiSJ+zX+p+LbcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSiqmZ fu6klP717JJgWgJTLYVwOjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzYyNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o9EwDQYJKoZIhvcNAQELBQADggEBAHANH6AX436fPT9J2EhA6QN35HYjWNdhtKd1 oCSDk0yZe5FJKw5hIa7/ybdCysLBNH7CXTeCDmmlFgpzXoE0LbDZguhNFYumurOl T8CalU2PG635w72kwnA2I451urataKrvTm8ePPY95hXU4Vuuw5DCRwGpKQmot5Ga 4JB/KZMPAPS1Ccu79G0ONRIzgRK8fqJESe/fyYYc5szNUHkaDz6KSIER9Hu7DYMz G6t5N9GbQlfk8qYmv9AcWss1wRw58Emwdd5ePvNBGRCJyn9PuI5uBLjC6Javaeae NVeNN4BU0TWg1q+KCvQiPVagFMVrW/FFJRWSbZM9L92t08vhZkE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:35 2026 by rpki-client