$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143894.roa File: AS143894.roa (raw, json) Hash identifier: uq4Dtzb1j+EZovUXY1Zmlm0Mm87kZljQd/C4tOj0LcI= Subject key identifier: C9:92:D7:AC:DF:7C:F4:13:72:9C:86:BD:6C:51:CC:75:CC:A3:B1:8C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0766ADCF207B85A76F15DFBE126AC64EBD00B18B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143894.roa Signing time: Wed 04 Mar 2026 06:15:15 +0000 ROA not before: Wed 04 Mar 2026 06:10:15 +0000 ROA not after: Wed 03 Mar 2027 06:15:15 +0000 asID: 143894 IP address blocks: 240a:a4dc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:66:ad:cf:20:7b:85:a7:6f:15:df:be:12:6a:c6:4e:bd:00:b1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:15 2026 GMT Not After : Mar 3 06:15:15 2027 GMT Subject: CN=C992D7ACDF7CF413729C86BD6C51CC75CCA3B18C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:32:ee:da:39:cf:ec:00:a3:25:3f:d8:ac: 79:60:c6:3e:9a:57:51:39:97:cf:75:ab:5e:ed:02: b6:fa:95:ea:83:72:97:a1:38:af:cd:a4:4f:63:42: e3:80:9c:04:0a:da:b7:b1:d1:1b:04:0e:55:9c:e2: 22:0a:7a:53:87:b4:ba:74:2b:50:04:09:d9:cb:62: 3b:dd:5b:e0:a2:1e:7f:6d:02:83:5f:3b:20:f4:bc: c0:60:1c:32:97:a8:48:6c:eb:6b:c3:86:ae:44:61: 6c:17:94:cc:01:8a:70:68:5a:0a:42:19:5d:84:99: b6:ea:7b:ac:ea:8c:89:e5:0a:77:45:13:f6:4f:4c: 4b:9f:27:37:91:40:b9:2d:92:3e:e1:b5:52:1c:a9: 12:e4:90:4c:c8:55:c9:e1:46:c9:92:7d:eb:ac:04: 5f:16:fb:83:43:01:fa:c4:51:c5:ee:6b:00:91:77: 12:1c:5e:ff:bb:ba:32:67:0b:06:dd:b7:32:b6:31: 97:ba:b3:16:4d:52:21:6a:f9:a3:89:f4:1b:ff:84: 45:15:88:c9:f7:18:a4:0a:75:34:9b:89:7a:81:4e: 10:c0:02:bd:c7:2b:0a:2b:9e:d6:f2:14:21:bb:92: 2e:52:6b:e4:f8:d8:db:8f:78:d9:e6:4b:42:9f:01: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:92:D7:AC:DF:7C:F4:13:72:9C:86:BD:6C:51:CC:75:CC:A3:B1:8C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143894.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4dc::/32 Signature Algorithm: sha256WithRSAEncryption 4c:31:14:b8:2a:ed:cf:ec:dc:5d:2e:65:da:64:c0:57:d6:15: 61:70:cd:58:6a:14:10:fe:e4:81:1f:30:88:eb:c9:27:98:fe: ba:e8:45:1a:df:cd:ec:6a:eb:e6:0b:7d:98:22:0d:54:75:ef: da:78:d7:99:91:d5:91:33:2c:97:96:c4:0e:f8:e8:96:4c:97: 45:f6:40:d9:73:b1:6a:57:21:f1:f1:c2:53:ca:30:d7:04:10: d7:f0:e7:3f:33:e9:08:07:ae:c5:38:3f:0f:8f:b2:86:34:48: e8:d6:d8:b7:81:73:3a:a7:2c:a8:86:df:ab:bb:cf:bd:57:cd: 45:25:f8:52:53:91:d6:37:16:c2:e2:ce:8c:d2:c1:17:85:7d: 47:de:ce:b3:e8:93:85:1c:78:09:30:81:9e:7e:9c:d0:fe:71: ab:76:f2:ac:bd:74:b8:64:4c:b6:43:37:a9:7f:b4:f7:c1:8a: 5e:14:f1:cc:4e:3b:63:c2:db:e3:2d:56:85:59:0e:47:dd:3a: e6:e8:60:38:bc:77:aa:af:e9:10:40:16:85:d7:c7:3c:cf:17: 1b:70:b8:07:e8:bf:c1:dd:a4:0d:03:97:d0:fe:10:99:29:50: a1:74:38:f1:a8:1f:cf:29:d9:71:26:0f:99:90:e1:a9:93:1e: 7d:a5:2a:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB2atzyB7hadvFd++EmrGTr0AsYswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxNVoX DTI3MDMwMzA2MTUxNVowMzExMC8GA1UEAxMoQzk5MkQ3QUNERjdDRjQxMzcyOUM4 NkJENkM1MUNDNzVDQ0EzQjE4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIRMu7aOc/sAKMlP9iseWDGPppXUTmXz3WrXu0CtvqV6oNyl6E4r82kT2NC 44CcBArat7HRGwQOVZziIgp6U4e0unQrUAQJ2ctiO91b4KIef20Cg187IPS8wGAc MpeoSGzra8OGrkRhbBeUzAGKcGhaCkIZXYSZtup7rOqMieUKd0UT9k9MS58nN5FA uS2SPuG1UhypEuSQTMhVyeFGyZJ966wEXxb7g0MB+sRRxe5rAJF3Ehxe/7u6MmcL Bt23MrYxl7qzFk1SIWr5o4n0G/+ERRWIyfcYpAp1NJuJeoFOEMACvccrCiue1vIU IbuSLlJr5PjY24942eZLQp8B0BsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTJktes 33z0E3Kchr1sUcx1zKOxjDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pNwwDQYJKoZIhvcNAQELBQADggEBAEwxFLgq7c/s3F0uZdpkwFfWFWFwzVhqFBD+ 5IEfMIjrySeY/rroRRrfzexq6+YLfZgiDVR179p415mR1ZEzLJeWxA746JZMl0X2 QNlzsWpXIfHxwlPKMNcEENfw5z8z6QgHrsU4Pw+PsoY0SOjW2LeBczqnLKiG36u7 z71XzUUl+FJTkdY3FsLizozSwReFfUfezrPok4UceAkwgZ5+nND+cat28qy9dLhk TLZDN6l/tPfBil4U8cxOO2PC2+MtVoVZDkfdOuboYDi8d6qv6RBAFoXXxzzPFxtw uAfov8HdpA0Dl9D+EJkpUKF0OPGoH88p2XEmD5mQ4amTHn2lKnE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:03 2026 by rpki-client