$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143866.roa File: AS143866.roa (raw, json) Hash identifier: uvQZ9hQu4nRrRMKdzL96FSPSC3sZnTRNYejIqIDbH5Q= Subject key identifier: 6B:6E:C6:DD:54:1A:0E:3F:6A:C1:9E:D2:31:C8:8B:F8:D2:F2:45:AB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 193684FC714CB389FC99F41675945E434DB678C9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143866.roa Signing time: Wed 04 Mar 2026 06:14:36 +0000 ROA not before: Wed 04 Mar 2026 06:09:36 +0000 ROA not after: Wed 03 Mar 2027 06:14:36 +0000 asID: 143866 IP address blocks: 240a:a4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:36:84:fc:71:4c:b3:89:fc:99:f4:16:75:94:5e:43:4d:b6:78:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:36 2026 GMT Not After : Mar 3 06:14:36 2027 GMT Subject: CN=6B6EC6DD541A0E3F6AC19ED231C88BF8D2F245AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:2c:d1:a6:6c:91:25:a9:73:e8:6e:26:67: 88:f2:09:c0:b4:ee:f1:1b:b3:dd:48:f1:0d:ef:1d: ce:cc:1b:df:66:6d:0e:50:13:74:27:8f:ed:8c:33: 44:36:83:4c:f4:bb:fb:dc:a3:5f:6c:3c:76:30:06: 07:2d:2d:67:71:64:e7:96:54:ac:14:d3:2f:6f:93: 8b:91:dc:8f:29:fb:cd:35:19:d2:6f:ed:a4:64:ef: 1e:c2:01:99:ea:dd:af:b7:e5:f2:b8:15:e6:f0:b0: 37:f3:ba:3d:4f:59:55:aa:0f:6b:64:e9:6f:ee:eb: d0:9a:d8:bb:ec:52:59:da:e0:80:da:52:a7:04:03: de:34:4e:6a:de:22:1e:9c:67:56:df:ce:a8:2f:05: 74:0a:0a:51:74:b1:d6:36:01:6a:cf:60:b6:c6:42: a5:4c:11:d8:cd:4d:08:99:1b:09:d9:db:95:38:03: a4:39:e2:b3:b4:1d:da:f4:ff:62:71:26:a8:33:ef: 1e:be:c8:79:6a:44:2c:73:d9:43:7b:a3:7d:4f:af: 59:61:44:d1:a6:6d:cf:09:c2:6d:2e:08:3d:3f:c7: 2c:b2:80:7d:0b:11:84:18:9a:13:05:ca:5b:d2:38: 58:f4:82:52:e4:04:a9:b3:6c:66:dc:d8:28:4b:98: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6E:C6:DD:54:1A:0E:3F:6A:C1:9E:D2:31:C8:8B:F8:D2:F2:45:AB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4c0::/32 Signature Algorithm: sha256WithRSAEncryption d6:36:71:53:e6:6e:83:e9:e3:f4:11:f6:a0:f4:06:37:80:bc: cd:65:d2:20:5e:72:9f:59:e0:fe:e5:69:8d:bb:91:55:01:fb: 7b:a6:04:e8:ca:fb:03:9f:20:e7:9b:2c:50:69:d9:8d:25:af: a9:82:a3:6e:ea:da:ed:9f:bd:8e:e4:ec:dc:47:b5:a7:29:7b: 64:02:e2:a0:21:c0:51:ec:55:68:9e:90:48:c2:96:99:dc:30: ab:e2:93:1f:5d:8c:5c:ac:ce:03:86:46:fd:a7:4d:df:cc:f7: 69:61:aa:b1:91:21:4c:ca:51:72:c0:65:42:4b:3b:08:2b:4e: b2:8f:bb:b7:24:c7:e7:f5:82:f0:f4:a2:c3:2b:b7:f0:ae:1f: 66:8c:13:b4:22:dc:c8:5b:8c:37:29:8d:08:29:6e:39:f2:8b: 41:e3:d5:c1:f7:21:16:0a:03:b5:a4:69:b7:6c:f3:d6:2c:71: b9:e1:d5:60:af:84:83:02:64:0a:95:ea:3f:6c:93:dc:f7:b3: 69:ef:92:13:e6:01:03:c3:e6:c9:74:27:29:f4:e7:d0:74:66: 8f:2f:54:c9:56:6c:4a:21:01:5a:91:29:3f:e7:28:8e:8e:33: c9:80:63:87:d2:be:f4:ee:bd:71:10:b2:55:03:c2:f2:e2:ab: ad:7b:18:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGTaE/HFMs4n8mfQWdZReQ022eMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzNloX DTI3MDMwMzA2MTQzNlowMzExMC8GA1UEAxMoNkI2RUM2REQ1NDFBMEUzRjZBQzE5 RUQyMzFDODhCRjhEMkYyNDVBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKSTLNGmbJElqXPobiZniPIJwLTu8Ruz3UjxDe8dzswb32ZtDlATdCeP7Ywz RDaDTPS7+9yjX2w8djAGBy0tZ3Fk55ZUrBTTL2+Ti5Hcjyn7zTUZ0m/tpGTvHsIB merdr7fl8rgV5vCwN/O6PU9ZVaoPa2Tpb+7r0JrYu+xSWdrggNpSpwQD3jROat4i HpxnVt/OqC8FdAoKUXSx1jYBas9gtsZCpUwR2M1NCJkbCdnblTgDpDnis7Qd2vT/ YnEmqDPvHr7IeWpELHPZQ3ujfU+vWWFE0aZtzwnCbS4IPT/HLLKAfQsRhBiaEwXK W9I4WPSCUuQEqbNsZtzYKEuY8jUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRrbsbd VBoOP2rBntIxyIv40vJFqzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pMAwDQYJKoZIhvcNAQELBQADggEBANY2cVPmboPp4/QR9qD0BjeAvM1l0iBecp9Z 4P7laY27kVUB+3umBOjK+wOfIOebLFBp2Y0lr6mCo27q2u2fvY7k7NxHtacpe2QC 4qAhwFHsVWiekEjClpncMKvikx9djFyszgOGRv2nTd/M92lhqrGRIUzKUXLAZUJL OwgrTrKPu7ckx+f1gvD0osMrt/CuH2aME7Qi3MhbjDcpjQgpbjnyi0Hj1cH3IRYK A7Wkabds89Yscbnh1WCvhIMCZAqV6j9sk9z3s2nvkhPmAQPD5sl0Jyn059B0Zo8v VMlWbEohAVqRKT/nKI6OM8mAY4fSvvTuvXEQslUDwvLiq617GO4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:47 2026 by rpki-client