$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143828.roa File: AS143828.roa (raw, json) Hash identifier: 6Dav4qxqrvDXfZVolKgyYTM3NzHAW7NxCJK8tNiYYUo= Subject key identifier: E1:47:D1:DD:E6:5F:B0:4B:B3:AE:72:E4:CE:F0:DB:D2:F8:77:AE:28 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7A6C7E6742728C83ABA8E9D70AAEAF82FA629309 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143828.roa Signing time: Wed 04 Mar 2026 06:13:38 +0000 ROA not before: Wed 04 Mar 2026 06:08:38 +0000 ROA not after: Wed 03 Mar 2027 06:13:38 +0000 asID: 143828 IP address blocks: 240a:a49a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6c:7e:67:42:72:8c:83:ab:a8:e9:d7:0a:ae:af:82:fa:62:93:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:38 2026 GMT Not After : Mar 3 06:13:38 2027 GMT Subject: CN=E147D1DDE65FB04BB3AE72E4CEF0DBD2F877AE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9c:4e:35:fe:a9:05:34:c0:e3:97:5a:5e:20: 7c:9c:f3:a1:6e:95:96:49:6c:f3:63:8d:56:b0:95: e5:31:75:c3:98:12:c7:96:ff:bd:4a:92:c4:83:37: dd:b1:34:4a:cf:c3:c0:c4:49:c9:86:af:d8:1a:87: b4:c9:33:05:c7:27:39:d7:82:dc:fd:b0:82:69:d0: 80:84:d6:9d:f8:c2:5e:34:ed:76:a0:c2:ed:cd:8f: de:52:d0:ec:9e:ca:72:26:4e:03:55:7e:f6:6e:cb: 77:e0:0c:b4:c2:78:21:89:e0:a8:3a:11:fc:0c:81: c4:e3:58:c1:4d:0f:a2:98:fe:f7:36:e2:88:62:27: 04:72:63:a0:d7:db:d6:77:1f:04:2b:6b:89:11:3f: b3:33:1f:20:c2:3e:06:22:e1:94:da:08:bc:6f:78: 9b:37:d4:48:9f:cb:2e:7c:90:05:fb:94:98:42:d3: 57:17:d6:e3:8c:77:15:31:d2:81:30:f6:f7:63:9a: 79:de:9d:70:e3:d4:60:ba:c3:a1:18:d0:6a:a6:ca: 1d:a9:6f:94:ea:a1:5f:e4:45:cf:db:54:9b:e2:19: a5:47:b9:f6:14:56:83:a4:e3:14:bf:72:ee:21:e7: 49:e3:d2:48:36:b7:87:d3:c7:f9:2e:4e:42:79:6a: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:47:D1:DD:E6:5F:B0:4B:B3:AE:72:E4:CE:F0:DB:D2:F8:77:AE:28 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143828.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a49a::/32 Signature Algorithm: sha256WithRSAEncryption 67:06:ee:b2:0a:a9:ed:17:06:98:c2:0a:66:d1:cc:49:56:6e: b3:42:16:27:29:55:b1:69:4e:88:5f:6f:08:60:f1:96:df:e1: 3a:c4:d8:ac:c0:bb:9c:0d:a6:0c:65:77:1c:51:4e:8c:48:86: 55:e0:81:b1:8f:aa:4d:43:4e:97:3d:32:1b:ff:ce:94:8f:86: ac:69:9b:9e:b5:c3:22:e3:39:ab:e1:f7:bb:9e:70:9a:05:74: 08:71:b4:aa:9a:6c:52:e6:4e:55:85:ca:c1:eb:aa:c3:d2:0d: f7:87:76:51:47:ee:18:8f:38:7b:6b:2d:47:97:4e:f7:4f:f4: 65:e1:e9:61:5e:57:65:bc:70:f3:87:a2:fb:f2:32:c9:a8:cf: 33:c1:ea:5c:3a:67:2f:00:18:0d:cb:c9:c2:47:a5:f3:93:77: 0a:51:f4:43:a5:a8:55:e3:f2:b7:b2:86:d1:ec:d0:f0:15:fe: be:c3:0e:2e:9c:c0:8f:e1:23:84:07:b4:bc:85:20:7d:b1:f6: 17:b9:08:b8:f5:9b:7c:62:08:8e:da:41:2b:6c:59:aa:9d:a0: b8:94:e6:d5:4a:c4:37:29:f1:e4:3d:67:57:de:34:c8:3f:d8: 1a:07:f9:b2:91:60:32:46:d5:af:67:18:41:c2:fa:e8:30:be: 1c:b1:b6:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUemx+Z0JyjIOrqOnXCq6vgvpikwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzOFoX DTI3MDMwMzA2MTMzOFowMzExMC8GA1UEAxMoRTE0N0QxRERFNjVGQjA0QkIzQUU3 MkU0Q0VGMERCRDJGODc3QUUyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN2cTjX+qQU0wOOXWl4gfJzzoW6Vlkls82ONVrCV5TF1w5gSx5b/vUqSxIM3 3bE0Ss/DwMRJyYav2BqHtMkzBccnOdeC3P2wgmnQgITWnfjCXjTtdqDC7c2P3lLQ 7J7KciZOA1V+9m7Ld+AMtMJ4IYngqDoR/AyBxONYwU0Popj+9zbiiGInBHJjoNfb 1ncfBCtriRE/szMfIMI+BiLhlNoIvG94mzfUSJ/LLnyQBfuUmELTVxfW44x3FTHS gTD292Oaed6dcOPUYLrDoRjQaqbKHalvlOqhX+RFz9tUm+IZpUe59hRWg6TjFL9y 7iHnSePSSDa3h9PH+S5OQnlqfhkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBThR9Hd 5l+wS7OucuTO8NvS+HeuKDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzgyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pJowDQYJKoZIhvcNAQELBQADggEBAGcG7rIKqe0XBpjCCmbRzElWbrNCFicpVbFp Tohfbwhg8Zbf4TrE2KzAu5wNpgxldxxRToxIhlXggbGPqk1DTpc9Mhv/zpSPhqxp m561wyLjOavh97uecJoFdAhxtKqabFLmTlWFysHrqsPSDfeHdlFH7hiPOHtrLUeX TvdP9GXh6WFeV2W8cPOHovvyMsmozzPB6lw6Zy8AGA3LycJHpfOTdwpR9EOlqFXj 8reyhtHs0PAV/r7DDi6cwI/hI4QHtLyFIH2x9he5CLj1m3xiCI7aQStsWaqdoLiU 5tVKxDcp8eQ9Z1feNMg/2BoH+bKRYDJG1a9nGEHC+ugwvhyxtnU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:39 2026 by rpki-client