$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143862.roa File: AS143862.roa (raw, json) Hash identifier: x+xkmV8JIegj69/2OcZj09DgQipCwO0EMZqC5+QYQNw= Subject key identifier: E9:0A:80:1F:DF:FC:BD:01:AB:0F:11:F3:17:15:F4:37:D2:EC:50:B3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 37AA95B7B5B8B25595F20E233FCD43240F87B4CC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143862.roa Signing time: Wed 04 Mar 2026 06:13:04 +0000 ROA not before: Wed 04 Mar 2026 06:08:04 +0000 ROA not after: Wed 03 Mar 2027 06:13:04 +0000 asID: 143862 IP address blocks: 240a:a4bc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:aa:95:b7:b5:b8:b2:55:95:f2:0e:23:3f:cd:43:24:0f:87:b4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:04 2026 GMT Not After : Mar 3 06:13:04 2027 GMT Subject: CN=E90A801FDFFCBD01AB0F11F31715F437D2EC50B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:37:fc:f5:52:fd:75:91:29:4b:e7:9a:94: 01:ac:0a:f9:6b:ad:cb:f6:86:4e:45:ef:f1:4d:cd: 6f:c7:61:b7:68:4b:70:27:80:69:99:cb:03:47:b8: b5:31:97:57:64:af:d0:5b:2a:65:69:bb:cf:4f:5c: 67:28:51:cf:87:f0:a9:2d:2d:38:6b:5c:48:fb:15: 2e:2e:84:6d:25:67:6b:92:07:9c:ba:e5:12:a5:61: 80:6a:c6:c7:a2:1c:01:37:4b:ea:cf:40:2c:8f:8f: a7:71:e0:53:27:81:97:e5:c2:dc:4b:24:bd:3f:53: 35:20:58:32:5b:a8:7a:9c:07:ea:c3:06:16:0d:30: 66:fb:bb:1a:91:79:d3:f9:84:e8:20:dc:2e:94:63: 21:63:b2:ca:3e:65:a8:4e:41:3b:07:6e:e6:81:71: 91:e1:f4:0c:db:48:1e:8d:ec:a1:89:59:90:a4:a2: d5:ea:65:df:de:c1:63:aa:89:85:0f:78:2c:48:9f: 31:e7:fe:1f:5a:4a:84:87:06:03:f4:a9:bf:36:70: 49:85:6d:c3:8b:12:32:5e:14:0b:77:c0:ae:36:b8: 2b:03:45:d4:83:7e:d7:d8:0c:6b:cf:e4:9b:17:dc: 82:10:cd:ad:af:8c:53:7f:24:6f:7d:bb:0c:30:12: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0A:80:1F:DF:FC:BD:01:AB:0F:11:F3:17:15:F4:37:D2:EC:50:B3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143862.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4bc::/32 Signature Algorithm: sha256WithRSAEncryption 12:4b:26:92:13:1b:5d:4c:49:cb:ba:d8:11:4a:00:37:b0:db: 83:e3:90:34:c5:15:b2:c7:2b:11:e4:77:ca:97:f0:43:aa:f6: e4:3d:cf:5d:d4:48:64:b4:13:40:1f:f6:34:5d:56:1a:8c:8c: 3e:7b:ba:fd:69:4a:57:57:ec:35:dd:53:10:48:21:f2:47:3c: 63:62:a9:29:09:0e:3c:8f:cd:43:58:48:6b:1a:2b:d5:9b:38: 51:7e:26:d3:e7:2c:e1:06:06:74:a1:6c:c6:56:c5:bd:18:6a: 3c:f3:5d:4e:78:0e:50:c9:1e:68:68:41:33:fe:88:70:47:58: f8:d4:a6:c2:4e:6e:d4:3c:3f:19:5d:d2:57:bd:91:9a:5a:36: 8d:56:4a:aa:40:a9:8d:1e:57:1f:d2:1f:fa:ab:f4:d7:e1:68: 65:de:12:d0:f4:51:80:84:e6:83:15:99:10:fd:0f:48:ac:9c: fd:b9:a2:04:33:3a:d9:07:5e:f7:13:ba:2e:3b:88:a6:a2:f7: c0:71:49:c5:fb:d7:b2:44:e4:76:0e:6f:84:de:04:a3:46:39: 2a:19:a1:9c:55:1c:3f:40:8e:a1:5e:d2:00:c9:73:9f:a1:f8: 06:23:87:c8:57:48:9f:c6:f8:c4:22:c8:15:9e:aa:03:e8:3b: 87:91:a1:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN6qVt7W4slWV8g4jP81DJA+HtMwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwNFoX DTI3MDMwMzA2MTMwNFowMzExMC8GA1UEAxMoRTkwQTgwMUZERkZDQkQwMUFCMEYx MUYzMTcxNUY0MzdEMkVDNTBCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5NN/z1Uv11kSlL55qUAawK+Wuty/aGTkXv8U3Nb8dht2hLcCeAaZnLA0e4 tTGXV2Sv0FsqZWm7z09cZyhRz4fwqS0tOGtcSPsVLi6EbSVna5IHnLrlEqVhgGrG x6IcATdL6s9ALI+Pp3HgUyeBl+XC3EskvT9TNSBYMluoepwH6sMGFg0wZvu7GpF5 0/mE6CDcLpRjIWOyyj5lqE5BOwdu5oFxkeH0DNtIHo3soYlZkKSi1epl397BY6qJ hQ94LEifMef+H1pKhIcGA/SpvzZwSYVtw4sSMl4UC3fArja4KwNF1IN+19gMa8/k mxfcghDNra+MU38kb327DDAS1I8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTpCoAf 3/y9AasPEfMXFfQ30uxQszAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pLwwDQYJKoZIhvcNAQELBQADggEBABJLJpITG11MScu62BFKADew24PjkDTFFbLH KxHkd8qX8EOq9uQ9z13USGS0E0Af9jRdVhqMjD57uv1pSldX7DXdUxBIIfJHPGNi qSkJDjyPzUNYSGsaK9WbOFF+JtPnLOEGBnShbMZWxb0YajzzXU54DlDJHmhoQTP+ iHBHWPjUpsJObtQ8Pxld0le9kZpaNo1WSqpAqY0eVx/SH/qr9NfhaGXeEtD0UYCE 5oMVmRD9D0isnP25ogQzOtkHXvcTui47iKai98BxScX717JE5HYOb4TeBKNGOSoZ oZxVHD9AjqFe0gDJc5+h+AYjh8hXSJ/G+MQiyBWeqgPoO4eRoTc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:06:15 2026 by rpki-client