$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143888.roa File: AS143888.roa (raw, json) Hash identifier: fXzQnhQ+yoWALA1sGFbrg1KUg3uEna/g4W9dKE9tpj8= Subject key identifier: 5A:C0:08:52:FB:6A:5A:8A:FC:16:DD:52:93:84:07:D9:F6:79:EF:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5DBE0C02A15EA4CD9E47FDA8488E669AA0E25BB4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143888.roa Signing time: Wed 04 Mar 2026 06:15:33 +0000 ROA not before: Wed 04 Mar 2026 06:10:33 +0000 ROA not after: Wed 03 Mar 2027 06:15:33 +0000 asID: 143888 IP address blocks: 240a:a4d6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:be:0c:02:a1:5e:a4:cd:9e:47:fd:a8:48:8e:66:9a:a0:e2:5b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:33 2026 GMT Not After : Mar 3 06:15:33 2027 GMT Subject: CN=5AC00852FB6A5A8AFC16DD52938407D9F679EF1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:98:04:0e:04:88:ee:cf:a1:03:dd:52:20: c2:3a:ab:a6:d7:d3:26:77:ef:1a:b6:6c:2e:c6:06: 50:aa:92:ab:f1:8e:88:f6:ea:03:7a:ca:8b:fe:84: 46:bc:e7:a9:13:e0:60:9c:0a:b5:3b:17:a3:e5:54: 0d:22:6e:a3:f9:a9:1c:99:2c:be:9a:33:73:ac:d9: c4:5f:e2:10:89:71:b6:bd:9d:61:53:4b:ef:64:c0: ec:62:c7:51:9f:46:3d:68:fa:34:c0:9b:b6:d6:9f: 1b:57:12:26:b7:58:bf:cf:dd:c5:fc:c9:70:d6:f4: 7b:fb:e6:73:51:51:f3:47:96:53:87:dd:29:26:1c: f0:70:8d:d4:78:5d:e5:86:33:7e:04:7a:d0:6b:64: 63:46:69:1f:fb:8a:ee:e3:72:cf:9d:42:4a:d4:2e: 79:9b:39:45:20:c1:91:b6:4c:35:34:99:05:ef:c4: 2a:e3:1a:d5:35:fe:13:a4:ac:3d:61:6c:14:6c:f5: 30:71:9b:8e:06:aa:10:a7:c1:8b:1c:3f:f7:e3:3b: f7:d3:83:c3:15:6d:01:91:c0:04:13:9e:72:7d:3a: ec:ae:75:58:05:39:dd:19:35:af:9f:19:f9:f2:33: 02:8b:01:ca:97:66:67:71:e6:f9:86:41:97:24:8a: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C0:08:52:FB:6A:5A:8A:FC:16:DD:52:93:84:07:D9:F6:79:EF:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4d6::/32 Signature Algorithm: sha256WithRSAEncryption 9c:08:f5:ac:bd:74:8e:e4:e5:50:ce:56:2f:74:36:89:c4:6e: 5d:ea:9a:57:49:38:11:99:24:9b:6c:8e:32:a3:36:8d:85:a0: a9:28:a0:bd:5d:de:9d:e2:3a:ed:d1:68:69:c6:23:f9:80:76: 7b:b2:8b:82:5f:3f:14:ff:63:73:51:e8:02:2c:e7:40:35:08: 37:b0:7d:2f:26:6a:ab:18:47:8b:e4:99:9e:52:27:7e:04:bf: 0b:3a:c0:37:09:1d:15:2e:dd:d5:1f:d0:15:c9:24:da:fb:82: 82:63:fa:1d:94:9a:9c:e4:d4:da:27:de:5e:6a:9c:5a:19:18: a8:58:43:e1:d3:74:41:70:c2:b9:b5:97:0f:20:83:84:ca:40: 92:40:aa:d9:8b:77:08:2f:50:86:3d:38:7c:4a:0d:74:f0:3b: 99:91:da:53:5d:13:61:00:de:ac:c8:7b:ab:79:c1:6a:f1:a8: 3b:2e:6d:82:29:c0:22:c0:a6:b5:7d:50:0c:2d:89:63:c4:99: f3:5c:3a:ed:96:46:8d:6b:87:39:6c:9d:65:28:0e:4c:fa:6c: e6:2d:e2:a5:cc:c2:b1:40:68:3f:5b:e2:6c:a0:ef:93:65:8a: 9a:2e:42:55:79:5d:ab:44:fb:5d:81:44:e2:f2:63:a7:0a:43: 3c:22:2a:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXb4MAqFepM2eR/2oSI5mmqDiW7QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzM1oX DTI3MDMwMzA2MTUzM1owMzExMC8GA1UEAxMoNUFDMDA4NTJGQjZBNUE4QUZDMTZE RDUyOTM4NDA3RDlGNjc5RUYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwhmAQOBIjuz6ED3VIgwjqrptfTJnfvGrZsLsYGUKqSq/GOiPbqA3rKi/6E RrznqRPgYJwKtTsXo+VUDSJuo/mpHJksvpozc6zZxF/iEIlxtr2dYVNL72TA7GLH UZ9GPWj6NMCbttafG1cSJrdYv8/dxfzJcNb0e/vmc1FR80eWU4fdKSYc8HCN1Hhd 5YYzfgR60GtkY0ZpH/uK7uNyz51CStQueZs5RSDBkbZMNTSZBe/EKuMa1TX+E6Ss PWFsFGz1MHGbjgaqEKfBixw/9+M799ODwxVtAZHABBOecn067K51WAU53Rk1r58Z +fIzAosBypdmZ3Hm+YZBlySK/hcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRawAhS +2paivwW3VKThAfZ9nnvHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pNYwDQYJKoZIhvcNAQELBQADggEBAJwI9ay9dI7k5VDOVi90NonEbl3qmldJOBGZ JJtsjjKjNo2FoKkooL1d3p3iOu3RaGnGI/mAdnuyi4JfPxT/Y3NR6AIs50A1CDew fS8maqsYR4vkmZ5SJ34Evws6wDcJHRUu3dUf0BXJJNr7goJj+h2Umpzk1Non3l5q nFoZGKhYQ+HTdEFwwrm1lw8gg4TKQJJAqtmLdwgvUIY9OHxKDXTwO5mR2lNdE2EA 3qzIe6t5wWrxqDsubYIpwCLAprV9UAwtiWPEmfNcOu2WRo1rhzlsnWUoDkz6bOYt 4qXMwrFAaD9b4myg75NlipouQlV5XatE+12BROLyY6cKQzwiKjw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:42 2026 by rpki-client