$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143693.roa File: AS143693.roa (raw, json) Hash identifier: t1TwemCZNXF8r1w0ncesjTrsrDTyc5ZQDWPPIKHTfsI= Subject key identifier: 06:0D:B3:8F:0F:D5:73:72:58:8F:41:A3:B4:BE:98:AB:D8:0F:1D:2A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 09C1FB614D7B64CD7B6FB6A1C4EE5BE21AA9A891 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143693.roa Signing time: Wed 04 Mar 2026 06:14:05 +0000 ROA not before: Wed 04 Mar 2026 06:09:05 +0000 ROA not after: Wed 03 Mar 2027 06:14:05 +0000 asID: 143693 IP address blocks: 240a:a413::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c1:fb:61:4d:7b:64:cd:7b:6f:b6:a1:c4:ee:5b:e2:1a:a9:a8:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:05 2026 GMT Not After : Mar 3 06:14:05 2027 GMT Subject: CN=060DB38F0FD57372588F41A3B4BE98ABD80F1D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8c:7b:c6:7a:f2:25:81:f4:88:74:af:e6:da: f1:de:98:74:d7:ca:e0:96:87:32:cd:d5:a4:ee:13: 31:f5:a8:fe:6b:86:81:12:4a:e5:73:49:71:8c:e7: 82:a2:eb:e0:4c:97:63:82:f7:02:4f:17:c8:d1:b3: 06:c2:d7:95:3a:88:20:e3:ec:a8:d0:eb:8b:b7:38: fe:6b:93:df:4a:47:69:1c:45:73:d4:1e:99:07:59: 4b:e8:96:3d:94:8a:5b:dc:f7:f2:13:6b:ba:0a:a3: c8:3a:79:03:0b:78:6b:cb:b4:73:93:57:32:35:bc: b3:fc:f9:6b:a3:23:a3:9d:96:dc:f8:39:21:91:0f: 74:c6:b0:b1:3f:14:16:88:9a:6d:22:41:51:6a:3d: cc:35:d1:b5:59:32:45:c3:5f:74:f4:1e:60:66:e4: 96:8e:b6:9e:a7:a5:7a:49:99:42:d6:52:0a:0b:06: 0a:19:b1:41:f4:9b:cc:4b:16:2c:3f:a4:e1:74:fe: 81:ad:ac:16:72:15:6c:87:4f:04:97:41:fd:21:04: ba:7f:24:52:5f:62:65:d5:65:30:41:d1:28:3c:9d: d3:63:6f:62:88:92:6e:37:87:37:4e:53:2c:20:06: 07:5a:3e:44:d0:7f:76:fe:ab:d4:47:91:7b:f4:e1: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0D:B3:8F:0F:D5:73:72:58:8F:41:A3:B4:BE:98:AB:D8:0F:1D:2A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143693.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a413::/32 Signature Algorithm: sha256WithRSAEncryption 12:31:6d:6a:36:2b:b0:2b:0b:fe:01:4b:3a:95:6d:d2:dd:ce: 16:d7:c4:97:1b:0d:e8:52:72:27:3a:a9:b7:75:c6:22:94:50: 58:6d:7d:bb:5b:9e:15:e5:5f:b0:da:88:f7:1d:c8:5a:42:38: 76:4f:29:04:bd:45:ce:28:11:61:d5:65:5f:88:b9:c7:10:78: bb:73:80:60:8d:4f:18:9c:48:b5:1b:5b:8a:15:ed:4c:f3:8e: 39:2b:ad:b1:94:2c:8e:eb:44:45:34:0c:2a:aa:f2:5a:ae:1a: 67:9f:80:06:bc:32:60:91:cb:4f:06:b2:28:b8:eb:fe:ec:29: d1:3d:f3:18:05:48:0e:19:ba:23:ec:68:71:39:93:c7:96:ee: a9:c5:8a:b4:84:c5:ea:d7:66:e0:61:e7:90:b8:8b:a9:92:f3: db:90:b4:1a:bb:f0:e6:a2:93:fd:eb:c2:f7:15:b8:86:f0:b0: 3f:e0:cc:53:0d:f7:d3:3a:93:fa:29:9d:76:43:50:0f:c6:d8: 72:55:d7:12:a3:b9:3a:b6:a0:a0:e9:ea:dd:41:a0:20:2e:5e: c6:79:bd:69:02:06:6f:00:5f:a4:29:a5:0f:28:12:56:43:f3: e1:ec:45:ad:4a:a5:5c:fa:48:6c:51:f0:c5:f2:5b:a3:5b:53: 95:f1:80:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCcH7YU17ZM17b7ahxO5b4hqpqJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwNVoX DTI3MDMwMzA2MTQwNVowMzExMC8GA1UEAxMoMDYwREIzOEYwRkQ1NzM3MjU4OEY0 MUEzQjRCRTk4QUJEODBGMUQyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOMe8Z68iWB9Ih0r+ba8d6YdNfK4JaHMs3VpO4TMfWo/muGgRJK5XNJcYzn gqLr4EyXY4L3Ak8XyNGzBsLXlTqIIOPsqNDri7c4/muT30pHaRxFc9QemQdZS+iW PZSKW9z38hNrugqjyDp5Awt4a8u0c5NXMjW8s/z5a6Mjo52W3Pg5IZEPdMawsT8U FoiabSJBUWo9zDXRtVkyRcNfdPQeYGbklo62nqelekmZQtZSCgsGChmxQfSbzEsW LD+k4XT+ga2sFnIVbIdPBJdB/SEEun8kUl9iZdVlMEHRKDyd02NvYoiSbjeHN05T LCAGB1o+RNB/dv6r1EeRe/Thy+sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQGDbOP D9VzcliPQaO0vpir2A8dKjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pBMwDQYJKoZIhvcNAQELBQADggEBABIxbWo2K7ArC/4BSzqVbdLdzhbXxJcbDehS cic6qbd1xiKUUFhtfbtbnhXlX7DaiPcdyFpCOHZPKQS9Rc4oEWHVZV+IuccQeLtz gGCNTxicSLUbW4oV7UzzjjkrrbGULI7rREU0DCqq8lquGmefgAa8MmCRy08Gsii4 6/7sKdE98xgFSA4ZuiPsaHE5k8eW7qnFirSExerXZuBh55C4i6mS89uQtBq78Oai k/3rwvcVuIbwsD/gzFMN99M6k/opnXZDUA/G2HJV1xKjuTq2oKDp6t1BoCAuXsZ5 vWkCBm8AX6QppQ8oElZD8+HsRa1KpVz6SGxR8MXyW6NbU5XxgOc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:45 2026 by rpki-client