$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143840.roa File: AS143840.roa (raw, json) Hash identifier: HmnbiIaeB9xL8DWJuylIYvk7VoqwHiuxWnyay9fnWMM= Subject key identifier: 2F:AA:97:17:31:DC:4B:60:53:7B:7E:76:E7:D0:C5:C4:C9:04:E1:7B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 27F5FF7C02C2C09477C9499C2C3360E701E9AA58 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143840.roa Signing time: Wed 04 Mar 2026 06:12:52 +0000 ROA not before: Wed 04 Mar 2026 06:07:52 +0000 ROA not after: Wed 03 Mar 2027 06:12:52 +0000 asID: 143840 IP address blocks: 240a:a4a6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f5:ff:7c:02:c2:c0:94:77:c9:49:9c:2c:33:60:e7:01:e9:aa:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:52 2026 GMT Not After : Mar 3 06:12:52 2027 GMT Subject: CN=2FAA971731DC4B60537B7E76E7D0C5C4C904E17B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fd:87:d4:56:0b:a2:54:10:42:f0:b7:7e:5d: 26:f6:47:1f:0e:fc:7e:71:3c:a8:3b:90:e4:72:33: fd:c8:70:8e:88:57:6a:9f:76:97:9f:5b:9a:45:1a: 36:a4:e2:af:ff:ea:ce:17:68:e3:0f:f9:48:2f:79: df:e2:45:c2:37:22:f3:b7:85:c1:d3:e0:9c:b7:15: e4:77:51:2a:89:0b:d2:21:2d:29:d5:67:3d:8e:c0: ea:d6:6a:23:a9:1b:e2:60:2d:92:07:9c:ce:b6:0b: 8f:ec:3f:b2:41:81:dc:e5:cb:2b:e5:12:24:f1:06: c8:ef:36:2d:33:8a:92:d2:aa:17:18:da:12:f9:4a: 95:ba:0a:49:9c:8f:dd:5a:90:ab:09:5d:d4:3c:bc: bc:6c:d1:91:5f:33:da:18:78:04:4b:21:1d:b6:9c: aa:c6:f7:32:39:1c:77:c0:62:6e:33:8a:1e:7a:95: 9a:d4:6f:32:79:ba:0a:4d:57:db:aa:1a:ce:1d:10: 5f:1a:92:41:0e:83:f1:de:01:2e:cf:23:ad:ad:8f: ad:68:20:d9:59:2a:7c:f2:6a:cc:5b:75:69:e7:9d: e3:2b:23:9b:03:a1:cb:dd:0c:46:88:1b:ee:ec:e9: 95:e9:65:50:dd:41:5c:33:a6:b1:24:04:61:66:48: 81:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AA:97:17:31:DC:4B:60:53:7B:7E:76:E7:D0:C5:C4:C9:04:E1:7B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143840.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4a6::/32 Signature Algorithm: sha256WithRSAEncryption bb:62:2e:e7:a4:89:74:77:a3:70:02:2a:33:19:2a:e3:e6:43: f8:1a:8d:f1:0d:93:a7:ce:98:f0:53:70:20:75:e8:03:41:11: da:dd:7e:41:b9:ab:4e:3e:72:be:5a:1c:63:ea:c9:47:f5:0f: 96:fe:2c:76:2a:2c:f1:38:05:93:c6:a9:94:a0:b0:5c:2d:b1: 54:c1:06:79:4d:01:5f:a6:9a:af:15:c9:d3:97:86:95:68:49: 9d:7b:f2:ed:f8:ff:66:9b:f1:3c:ff:3a:4b:a4:77:f0:df:a3: f0:ca:52:5d:a6:59:00:9c:18:99:42:41:d0:c0:22:6e:d9:4c: ac:4d:a3:6e:1f:f6:a7:11:f4:f4:91:82:8a:59:4b:23:66:61: 90:6c:82:34:f2:9a:b0:d9:0c:f8:97:e5:ef:be:0a:e9:4f:05: 36:91:e8:6a:c0:81:4c:01:2f:55:cf:2b:e0:aa:41:6e:b5:27: 33:58:02:2b:14:0a:db:5e:2c:9e:e6:6f:a2:22:be:79:e2:68: 0a:ee:48:f0:f5:6e:2a:6b:e2:e9:fd:fd:87:44:e5:8b:2c:f4: 54:06:cc:9f:6b:ce:38:01:d0:42:27:d9:23:d5:45:61:91:db: eb:f6:27:1e:0e:a9:fb:a7:72:6a:5d:e2:a7:ef:f4:9f:28:68: 30:c4:7c:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJ/X/fALCwJR3yUmcLDNg5wHpqlgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1MloX DTI3MDMwMzA2MTI1MlowMzExMC8GA1UEAxMoMkZBQTk3MTczMURDNEI2MDUzN0I3 RTc2RTdEMEM1QzRDOTA0RTE3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJD9h9RWC6JUEELwt35dJvZHHw78fnE8qDuQ5HIz/chwjohXap92l59bmkUa NqTir//qzhdo4w/5SC953+JFwjci87eFwdPgnLcV5HdRKokL0iEtKdVnPY7A6tZq I6kb4mAtkgeczrYLj+w/skGB3OXLK+USJPEGyO82LTOKktKqFxjaEvlKlboKSZyP 3VqQqwld1Dy8vGzRkV8z2hh4BEshHbacqsb3Mjkcd8BibjOKHnqVmtRvMnm6Ck1X 26oazh0QXxqSQQ6D8d4BLs8jra2PrWgg2VkqfPJqzFt1aeed4ysjmwOhy90MRogb 7uzplellUN1BXDOmsSQEYWZIgecCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQvqpcX MdxLYFN7fnbn0MXEyQThezAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pKYwDQYJKoZIhvcNAQELBQADggEBALtiLuekiXR3o3ACKjMZKuPmQ/gajfENk6fO mPBTcCB16ANBEdrdfkG5q04+cr5aHGPqyUf1D5b+LHYqLPE4BZPGqZSgsFwtsVTB BnlNAV+mmq8VydOXhpVoSZ178u34/2ab8Tz/Okukd/Dfo/DKUl2mWQCcGJlCQdDA Im7ZTKxNo24f9qcR9PSRgopZSyNmYZBsgjTymrDZDPiX5e++CulPBTaR6GrAgUwB L1XPK+CqQW61JzNYAisUCtteLJ7mb6IivnniaAruSPD1bipr4un9/YdE5Yss9FQG zJ9rzjgB0EIn2SPVRWGR2+v2Jx4Oqfuncmpd4qfv9J8oaDDEfDU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:13 2026 by rpki-client