$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143680.roa File: AS143680.roa (raw, json) Hash identifier: 8H2ha1P5uUHfW07VWR96am7vM+B+ZebnowncGMdPq/g= Subject key identifier: 92:0F:86:E5:CE:8D:11:86:C4:E5:70:6E:8F:2B:BD:0C:BC:A3:36:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2759C86283FA5B3DAD07308D0C0D9F7FBEA6CF36 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143680.roa Signing time: Wed 04 Mar 2026 06:12:40 +0000 ROA not before: Wed 04 Mar 2026 06:07:40 +0000 ROA not after: Wed 03 Mar 2027 06:12:40 +0000 asID: 143680 IP address blocks: 240a:a406::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:59:c8:62:83:fa:5b:3d:ad:07:30:8d:0c:0d:9f:7f:be:a6:cf:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:40 2026 GMT Not After : Mar 3 06:12:40 2027 GMT Subject: CN=920F86E5CE8D1186C4E5706E8F2BBD0CBCA33648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:ee:cd:b9:a4:87:68:d8:33:23:4b:ab:ab: 57:c3:84:72:c8:f2:60:52:4f:74:7b:80:94:af:6b: 72:e5:40:b6:32:d5:e6:0d:1d:0e:bb:53:9b:cf:5b: 26:9e:81:69:71:be:45:95:40:6a:5a:ae:d0:15:12: e6:f0:19:72:ee:ea:ef:6a:0f:58:10:ff:99:71:1c: b0:eb:42:7e:63:4a:3c:94:e8:bc:cc:e9:c9:95:8c: c9:08:d6:09:74:91:59:5b:f5:e2:25:a8:9b:1e:1a: 38:48:a9:89:9e:a1:ab:03:f1:39:b5:df:84:db:d2: 35:bc:9c:36:85:ef:53:76:70:e2:dc:b6:83:d1:eb: e3:7b:82:cf:17:e8:c3:c9:32:ee:9e:65:3f:eb:c4: b7:1a:de:d5:f7:3d:bc:91:2c:0e:24:2c:25:c4:b1: 3b:ea:96:7d:f2:10:33:d3:13:d0:8e:22:97:b7:f2: db:84:03:8d:37:ca:b7:47:42:43:70:7c:51:12:20: 51:86:ac:2a:30:90:dd:ae:21:ee:c2:f5:0a:7e:bb: 0f:97:85:40:7b:f5:9a:43:de:c3:97:1a:65:4b:b9: 66:f4:67:63:bf:35:71:1c:42:10:d5:1b:9c:e2:25: 41:ab:4e:73:d3:79:c6:35:cc:bb:0a:0c:0c:b7:ff: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0F:86:E5:CE:8D:11:86:C4:E5:70:6E:8F:2B:BD:0C:BC:A3:36:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143680.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a406::/32 Signature Algorithm: sha256WithRSAEncryption 16:d6:42:b5:db:e0:6d:82:26:f0:6c:59:99:f1:10:dc:57:cb: da:85:4e:af:27:ba:5e:45:21:49:bd:2c:3b:e9:f3:d7:b2:c1: 4e:f1:0c:01:d3:cb:3b:b6:07:29:d3:ad:d8:58:c4:36:aa:8f: 84:da:f5:c6:4b:da:a8:b5:22:e9:43:b7:92:49:c7:8d:97:cf: a4:c6:e0:f8:20:d5:7a:2e:43:e3:c3:ac:b0:f7:30:32:0b:aa: 9b:fb:a1:f9:7c:72:e1:c8:25:9e:9c:8a:ad:6c:5b:46:61:0b: 8f:98:c0:c1:d3:ed:36:92:f9:9d:0f:1b:8f:b2:44:ad:b9:24: 09:65:a5:5b:c2:5e:5a:72:84:a4:b7:ce:87:48:8e:7a:44:7d: bf:ff:48:f8:bc:d7:58:fe:fc:ca:7e:73:eb:ef:db:b7:f6:fd: fd:77:ec:39:a6:c5:23:15:44:fd:91:04:59:97:7a:ec:0b:08: dd:42:38:07:06:bd:56:b6:63:12:23:b1:60:8b:b0:c9:2b:fb: 15:fe:a6:dc:6d:90:e2:d5:51:99:42:67:c3:41:63:20:af:5c: 11:b6:17:1e:f2:74:db:79:43:37:b6:14:d6:4b:b0:a3:eb:b1: 09:42:a1:c8:80:b5:fd:ec:4a:8b:9f:b6:ea:ac:f2:80:57:1d: c9:1b:07:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJ1nIYoP6Wz2tBzCNDA2ff76mzzYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0MFoX DTI3MDMwMzA2MTI0MFowMzExMC8GA1UEAxMoOTIwRjg2RTVDRThEMTE4NkM0RTU3 MDZFOEYyQkJEMENCQ0EzMzY0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfF7s25pIdo2DMjS6urV8OEcsjyYFJPdHuAlK9rcuVAtjLV5g0dDrtTm89b Jp6BaXG+RZVAalqu0BUS5vAZcu7q72oPWBD/mXEcsOtCfmNKPJTovMzpyZWMyQjW CXSRWVv14iWomx4aOEipiZ6hqwPxObXfhNvSNbycNoXvU3Zw4ty2g9Hr43uCzxfo w8ky7p5lP+vEtxre1fc9vJEsDiQsJcSxO+qWffIQM9MT0I4il7fy24QDjTfKt0dC Q3B8URIgUYasKjCQ3a4h7sL1Cn67D5eFQHv1mkPew5caZUu5ZvRnY781cRxCENUb nOIlQatOc9N5xjXMuwoMDLf/XF0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSD4bl zo0RhsTlcG6PK70MvKM2SDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pAYwDQYJKoZIhvcNAQELBQADggEBABbWQrXb4G2CJvBsWZnxENxXy9qFTq8nul5F IUm9LDvp89eywU7xDAHTyzu2BynTrdhYxDaqj4Ta9cZL2qi1IulDt5JJx42Xz6TG 4Pgg1XouQ+PDrLD3MDILqpv7ofl8cuHIJZ6ciq1sW0ZhC4+YwMHT7TaS+Z0PG4+y RK25JAllpVvCXlpyhKS3zodIjnpEfb//SPi811j+/Mp+c+vv27f2/f137DmmxSMV RP2RBFmXeuwLCN1COAcGvVa2YxIjsWCLsMkr+xX+ptxtkOLVUZlCZ8NBYyCvXBG2 Fx7ydNt5Qze2FNZLsKPrsQlCociAtf3sSouftuqs8oBXHckbB6E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:39 2026 by rpki-client