$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143900.roa File: AS143900.roa (raw, json) Hash identifier: lEXjl3oQszWDTk3JEDwqmBvkvpSzJ70h0Dj3z2yhNRk= Subject key identifier: 25:A9:52:10:52:3A:FA:6A:19:E1:96:F4:77:F9:22:D0:02:BB:49:5E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1A9FB975CEFAC394A28BD0F8B291A039AEB85D61 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143900.roa Signing time: Wed 04 Mar 2026 06:15:46 +0000 ROA not before: Wed 04 Mar 2026 06:10:46 +0000 ROA not after: Wed 03 Mar 2027 06:15:46 +0000 asID: 143900 IP address blocks: 240a:a4e2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9f:b9:75:ce:fa:c3:94:a2:8b:d0:f8:b2:91:a0:39:ae:b8:5d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:46 2026 GMT Not After : Mar 3 06:15:46 2027 GMT Subject: CN=25A95210523AFA6A19E196F477F922D002BB495E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:9d:ff:98:f6:a2:2b:68:49:1f:4a:47:e6: 2d:cd:7d:4d:fb:e0:f0:53:d6:fe:16:89:bc:51:b0: 5b:f9:df:21:56:ca:04:12:cf:26:9d:cc:05:cb:5f: 1f:6f:51:12:8f:7f:d9:ac:13:22:80:2e:f1:a2:96: 64:a3:5e:67:c0:f9:28:91:e8:43:6f:f1:76:66:7b: 92:2f:47:60:df:20:95:d8:3e:a1:55:37:1f:9b:52: f4:4d:f6:e7:99:e3:4e:0d:46:59:5f:2c:00:a5:40: 51:87:6a:b0:d2:aa:61:49:99:3c:e2:d8:b9:67:06: e7:c7:2c:17:91:46:79:dc:c0:af:3c:9d:3c:dd:4f: b1:91:16:bd:98:0a:9d:34:4f:c3:c8:e0:ab:3d:24: 4a:bc:75:9c:f2:7c:04:21:54:aa:2e:b4:44:ee:85: b6:2a:34:5e:f7:b3:2f:a0:7e:b8:38:f3:0d:5e:b4: c8:3c:9b:68:a2:44:af:db:05:13:c1:48:6b:25:2a: d9:7b:21:c5:21:e0:9e:64:a1:bf:e8:0b:a3:b9:ea: ae:54:87:09:de:4b:2b:c7:dc:0b:2c:aa:27:08:96: a0:96:f7:15:d3:0f:e2:e4:97:99:27:f0:a8:f9:7c: ee:4d:5a:cf:21:66:9a:49:5a:e6:64:bd:86:45:eb: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A9:52:10:52:3A:FA:6A:19:E1:96:F4:77:F9:22:D0:02:BB:49:5E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143900.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4e2::/32 Signature Algorithm: sha256WithRSAEncryption c7:57:e3:30:2a:cb:92:c2:07:c4:5b:2b:c1:69:80:f2:bd:89: 89:73:e2:34:ec:b6:f8:6f:09:00:ff:6a:ca:5c:69:9c:12:9a: fd:3c:2c:d8:d2:ca:23:79:54:df:97:49:9b:d5:af:97:a4:f1: 2b:76:8d:11:01:91:e2:00:56:9d:03:7d:72:61:eb:42:55:45: e8:88:65:d8:c8:49:e7:45:46:d8:00:36:7d:05:d3:c9:24:fa: 60:2b:6f:dc:4c:42:2d:65:83:88:9d:df:53:de:50:04:a0:ad: 3e:65:b1:d9:89:66:2f:25:00:b7:43:5c:ba:9a:00:69:f4:ec: b5:77:16:cd:1b:fb:cd:87:31:6a:8c:0d:64:3f:7b:33:ac:68: db:48:df:dd:0c:c8:f0:68:0f:2b:ed:34:12:40:19:8f:de:ff: 4b:6a:15:f4:32:37:a9:cf:4a:dc:7a:d0:e8:bb:de:dc:94:a9: f5:28:92:e4:78:3e:0f:78:70:9e:6c:15:88:ef:b4:92:fe:43: 59:95:c6:3f:9d:b9:49:88:0f:72:bd:90:3f:59:60:13:db:67: e1:8b:ef:7e:be:27:82:03:c1:35:92:cb:aa:75:5a:df:50:b8: 8a:75:ce:e0:6f:cd:d4:f2:02:dc:6b:b8:59:ca:d3:9c:c5:02: 2d:65:d6:5d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGp+5dc76w5Sii9D4spGgOa64XWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0NloX DTI3MDMwMzA2MTU0NlowMzExMC8GA1UEAxMoMjVBOTUyMTA1MjNBRkE2QTE5RTE5 NkY0NzdGOTIyRDAwMkJCNDk1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMB2nf+Y9qIraEkfSkfmLc19Tfvg8FPW/haJvFGwW/nfIVbKBBLPJp3MBctf H29REo9/2awTIoAu8aKWZKNeZ8D5KJHoQ2/xdmZ7ki9HYN8gldg+oVU3H5tS9E32 55njTg1GWV8sAKVAUYdqsNKqYUmZPOLYuWcG58csF5FGedzArzydPN1PsZEWvZgK nTRPw8jgqz0kSrx1nPJ8BCFUqi60RO6Ftio0XvezL6B+uDjzDV60yDybaKJEr9sF E8FIayUq2XshxSHgnmShv+gLo7nqrlSHCd5LK8fcCyyqJwiWoJb3FdMP4uSXmSfw qPl87k1azyFmmkla5mS9hkXrytsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQlqVIQ Ujr6ahnhlvR3+SLQArtJXjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pOIwDQYJKoZIhvcNAQELBQADggEBAMdX4zAqy5LCB8RbK8FpgPK9iYlz4jTstvhv CQD/aspcaZwSmv08LNjSyiN5VN+XSZvVr5ek8St2jREBkeIAVp0DfXJh60JVReiI ZdjISedFRtgANn0F08kk+mArb9xMQi1lg4id31PeUASgrT5lsdmJZi8lALdDXLqa AGn07LV3Fs0b+82HMWqMDWQ/ezOsaNtI390MyPBoDyvtNBJAGY/e/0tqFfQyN6nP Stx60Oi73tyUqfUokuR4Pg94cJ5sFYjvtJL+Q1mVxj+duUmID3K9kD9ZYBPbZ+GL 736+J4IDwTWSy6p1Wt9QuIp1zuBvzdTyAtxruFnK05zFAi1l1l0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:37 2026 by rpki-client