$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143843.roa File: AS143843.roa (raw, json) Hash identifier: BkeIPmaocl2fGP7DdcxJYv13k/Jj/iQM90jec6JmG8s= Subject key identifier: EF:03:6D:70:67:A1:0D:23:04:3A:EE:10:6D:AF:42:0F:83:12:F7:40 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3E9261FFD7DBF69E5B12A7C9877D14CBB7DAD83E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143843.roa Signing time: Wed 04 Mar 2026 06:12:37 +0000 ROA not before: Wed 04 Mar 2026 06:07:37 +0000 ROA not after: Wed 03 Mar 2027 06:12:37 +0000 asID: 143843 IP address blocks: 240a:a4a9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:92:61:ff:d7:db:f6:9e:5b:12:a7:c9:87:7d:14:cb:b7:da:d8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:37 2026 GMT Not After : Mar 3 06:12:37 2027 GMT Subject: CN=EF036D7067A10D23043AEE106DAF420F8312F740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:87:8b:74:2f:cc:27:e4:92:b8:8c:72:99: 4f:c9:ca:1f:7d:aa:06:86:74:7c:71:0f:e9:c5:51: 97:ec:19:ba:25:a2:ac:dd:5c:1c:3d:7f:9c:54:c5: 1b:cb:a3:de:54:77:b4:d6:f4:4e:60:7c:6d:67:fb: 2a:77:bc:f9:63:9f:9d:d5:62:1d:e5:05:4c:81:91: bd:87:6a:af:10:42:9f:fa:ab:b9:a9:06:39:3a:cf: af:14:2a:a8:2b:cb:7b:81:6b:84:5d:db:27:49:55: 72:49:e5:b3:97:fe:bc:f9:db:15:86:22:71:ac:98: 57:7a:62:5b:c1:9e:e1:66:a2:7e:83:13:d8:33:e7: 36:52:9c:ee:6a:d1:eb:a3:8f:0a:c2:c6:f9:04:e8: 7c:5d:f5:2b:c4:02:20:1c:65:04:82:72:0a:2a:52: f6:db:63:76:68:4a:90:30:b5:b6:86:39:56:3d:a4: 11:81:b6:83:c2:22:b9:8b:00:6c:08:85:67:97:04: 03:3f:49:dd:8e:62:af:10:8f:dd:39:e6:c7:e2:f2: 82:d3:7e:88:3a:93:aa:31:0c:ce:24:ad:cf:42:63: ab:5a:32:2d:ab:37:df:95:e5:c6:4f:5b:63:bc:8b: 32:70:16:3f:1c:ad:28:2a:9f:07:79:70:19:8d:d7: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:03:6D:70:67:A1:0D:23:04:3A:EE:10:6D:AF:42:0F:83:12:F7:40 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4a9::/32 Signature Algorithm: sha256WithRSAEncryption d5:b6:63:11:85:51:33:48:75:b4:10:5c:45:66:21:ec:27:aa: 12:72:b9:99:71:b9:0a:a8:b8:69:62:59:6f:ed:1d:64:b6:cd: 53:f5:5d:ba:20:e2:00:5e:ef:bb:33:c2:24:70:98:54:63:58: 94:ca:2a:b5:9c:fe:16:97:a9:13:fb:b3:84:93:35:a1:32:26: cf:90:ba:d2:09:85:d7:00:8f:89:71:35:0c:09:82:d3:98:0b: 8c:76:c2:cb:df:aa:46:d5:28:c0:5a:42:ca:fb:3b:36:3f:24: d5:62:19:f6:86:3d:c3:e2:dc:6c:b7:78:e2:01:00:59:da:27: d9:f5:4c:32:d4:b1:34:18:42:a5:23:31:43:04:3f:a5:d5:3e: 8e:1f:ac:e7:81:75:a5:24:01:f0:a5:87:50:8e:57:76:41:bc: 7a:ea:2a:cf:9e:8f:e6:b6:5d:07:e3:dc:b6:6f:df:dd:fe:7a: d1:c5:91:7c:02:ab:14:ed:12:33:e1:5a:1d:27:8c:9d:76:d4: 90:2b:22:49:ae:5d:3d:68:6e:59:1b:36:84:c4:9d:74:68:f4: 7c:22:3f:c2:53:b7:a5:1b:9a:8d:7b:24:9f:b8:19:21:c7:4e: be:e9:54:05:fa:41:d9:05:bf:62:f3:b1:42:44:25:e2:ee:ac: 86:35:13:12 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPpJh/9fb9p5bEqfJh30Uy7fa2D4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczN1oX DTI3MDMwMzA2MTIzN1owMzExMC8GA1UEAxMoRUYwMzZENzA2N0ExMEQyMzA0M0FF RTEwNkRBRjQyMEY4MzEyRjc0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMimh4t0L8wn5JK4jHKZT8nKH32qBoZ0fHEP6cVRl+wZuiWirN1cHD1/nFTF G8uj3lR3tNb0TmB8bWf7Kne8+WOfndViHeUFTIGRvYdqrxBCn/qruakGOTrPrxQq qCvLe4FrhF3bJ0lVcknls5f+vPnbFYYicayYV3piW8Ge4WaifoMT2DPnNlKc7mrR 66OPCsLG+QTofF31K8QCIBxlBIJyCipS9ttjdmhKkDC1toY5Vj2kEYG2g8IiuYsA bAiFZ5cEAz9J3Y5irxCP3Tnmx+LygtN+iDqTqjEMziStz0Jjq1oyLas335Xlxk9b Y7yLMnAWPxytKCqfB3lwGY3XnhMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTvA21w Z6ENIwQ67hBtr0IPgxL3QDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pKkwDQYJKoZIhvcNAQELBQADggEBANW2YxGFUTNIdbQQXEVmIewnqhJyuZlxuQqo uGliWW/tHWS2zVP1Xbog4gBe77szwiRwmFRjWJTKKrWc/haXqRP7s4STNaEyJs+Q utIJhdcAj4lxNQwJgtOYC4x2wsvfqkbVKMBaQsr7OzY/JNViGfaGPcPi3Gy3eOIB AFnaJ9n1TDLUsTQYQqUjMUMEP6XVPo4frOeBdaUkAfClh1COV3ZBvHrqKs+ej+a2 XQfj3LZv393+etHFkXwCqxTtEjPhWh0njJ121JArIkmuXT1oblkbNoTEnXRo9Hwi P8JTt6Ubmo17JJ+4GSHHTr7pVAX6QdkFv2LzsUJEJeLurIY1ExI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:17 2026 by rpki-client