$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143890.roa File: AS143890.roa (raw, json) Hash identifier: ylqoS253/pEs05wsRAvbKBZwVx5bXp4l/pXOT9YPyAE= Subject key identifier: AB:7D:E4:11:4D:A9:AE:93:AE:62:AE:34:53:38:C4:4F:B4:E5:00:BA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 05D25A60ABA7998F9C226FC1014AEC63B1FFF042 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143890.roa Signing time: Wed 04 Mar 2026 06:14:11 +0000 ROA not before: Wed 04 Mar 2026 06:09:11 +0000 ROA not after: Wed 03 Mar 2027 06:14:11 +0000 asID: 143890 IP address blocks: 240a:a4d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d2:5a:60:ab:a7:99:8f:9c:22:6f:c1:01:4a:ec:63:b1:ff:f0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:11 2026 GMT Not After : Mar 3 06:14:11 2027 GMT Subject: CN=AB7DE4114DA9AE93AE62AE345338C44FB4E500BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:e1:e2:06:e9:39:b7:7b:77:b4:8d:1e:b5: 26:24:b7:75:f6:a3:f4:71:b4:a1:3b:48:3d:1e:dd: 34:9b:9d:db:5a:da:de:1f:73:5b:cb:90:13:0f:ea: ff:4b:77:03:77:d9:75:a3:88:59:b1:d7:c8:dd:34: c7:04:50:1f:13:f4:ed:d6:56:e7:cd:21:38:4b:fb: 08:c6:70:18:bc:48:f0:0b:2c:ba:57:f7:ef:90:94: 56:c4:21:7a:04:06:9f:41:73:70:74:5b:b4:5d:1c: 9b:5f:a1:2d:4f:8d:ab:2d:dd:de:72:13:32:04:3b: b9:dd:bb:df:5c:85:c8:5b:89:4f:8b:78:54:c2:35: 37:ee:b2:4d:b7:c6:70:c3:da:f9:b0:a7:9f:57:b1: 31:b3:f4:da:56:ad:d8:44:8f:2a:a7:12:32:13:7f: 30:ae:e7:1a:79:80:1d:fc:eb:bc:ed:20:d1:14:82: 9c:8a:03:fd:a1:7d:84:e5:9c:4b:79:0e:63:0f:d3: 5c:92:ca:bf:6d:5c:37:f8:82:73:a9:91:3b:6c:19: 17:60:d2:61:77:ad:08:9e:85:9c:85:c1:e5:ad:d9: 37:18:9a:23:a0:f3:cd:fd:f4:3b:4f:d1:0a:26:c4: be:78:b4:30:d0:cd:f6:1a:a4:78:92:71:ae:33:4e: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:E4:11:4D:A9:AE:93:AE:62:AE:34:53:38:C4:4F:B4:E5:00:BA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143890.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4d8::/32 Signature Algorithm: sha256WithRSAEncryption b0:80:06:8c:da:d4:fc:53:b0:06:3d:16:ff:54:bd:55:cf:3c: e0:97:6b:02:ee:3f:db:a5:b8:0d:78:17:41:18:5d:93:14:1f: 5f:41:31:64:5d:6b:0a:15:85:85:f7:f1:6c:99:12:0c:73:2a: 19:88:ca:8d:59:cb:a1:5e:45:99:3a:b7:97:1d:87:64:ec:fa: 6d:cc:2a:b9:1a:fc:79:70:15:81:7b:fc:d7:26:a7:9b:f5:f2: 53:fb:4f:2f:63:e7:f7:b4:76:85:28:da:ac:b5:cb:cd:ce:e4: ef:55:dd:e2:9a:de:15:2e:5e:d9:d5:61:e8:16:df:ed:14:28: a3:a7:4c:5a:53:51:bc:e8:04:15:ea:8c:40:37:70:13:43:7d: 04:b5:b4:2d:51:79:8f:50:5b:02:65:27:46:ca:6b:f7:fe:a3: 20:6a:cf:1e:c2:92:8a:0f:c7:70:cd:4e:f3:0e:f9:8b:8c:15: 6b:b2:2e:51:0f:e4:64:fd:a9:a2:5d:5f:3d:05:2b:15:82:94: 15:04:e1:77:3f:43:07:1d:e7:9c:64:03:b6:66:73:6e:62:8d: b0:a6:6e:f5:62:69:f8:8e:1e:72:63:32:75:54:fd:2f:b6:2b: 73:69:c1:f7:a0:ce:84:12:99:d7:88:46:0b:b9:aa:38:14:70: ac:9f:30:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBdJaYKunmY+cIm/BAUrsY7H/8EIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxMVoX DTI3MDMwMzA2MTQxMVowMzExMC8GA1UEAxMoQUI3REU0MTE0REE5QUU5M0FFNjJB RTM0NTMzOEM0NEZCNEU1MDBCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5b4eIG6Tm3e3e0jR61JiS3dfaj9HG0oTtIPR7dNJud21ra3h9zW8uQEw/q /0t3A3fZdaOIWbHXyN00xwRQHxP07dZW580hOEv7CMZwGLxI8Assulf375CUVsQh egQGn0FzcHRbtF0cm1+hLU+Nqy3d3nITMgQ7ud2731yFyFuJT4t4VMI1N+6yTbfG cMPa+bCnn1exMbP02lat2ESPKqcSMhN/MK7nGnmAHfzrvO0g0RSCnIoD/aF9hOWc S3kOYw/TXJLKv21cN/iCc6mRO2wZF2DSYXetCJ6FnIXB5a3ZNxiaI6Dzzf30O0/R CibEvni0MNDN9hqkeJJxrjNOnoECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSrfeQR Tamuk65irjRTOMRPtOUAujAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pNgwDQYJKoZIhvcNAQELBQADggEBALCABoza1PxTsAY9Fv9UvVXPPOCXawLuP9ul uA14F0EYXZMUH19BMWRdawoVhYX38WyZEgxzKhmIyo1Zy6FeRZk6t5cdh2Ts+m3M Krka/HlwFYF7/Ncmp5v18lP7Ty9j5/e0doUo2qy1y83O5O9V3eKa3hUuXtnVYegW 3+0UKKOnTFpTUbzoBBXqjEA3cBNDfQS1tC1ReY9QWwJlJ0bKa/f+oyBqzx7CkooP x3DNTvMO+YuMFWuyLlEP5GT9qaJdXz0FKxWClBUE4Xc/Qwcd55xkA7Zmc25ijbCm bvViafiOHnJjMnVU/S+2K3NpwfegzoQSmdeIRgu5qjgUcKyfMB8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:09 2026 by rpki-client