$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143902.roa File: AS143902.roa (raw, json) Hash identifier: cRC+wU/1b84NX7Ji95GRAerjfYIh7rDQ41mkcOcx664= Subject key identifier: 8B:8B:99:1C:F8:E2:95:E7:54:70:27:F7:27:B6:31:3B:4D:34:00:16 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 61897A91593ABCD1BDFB1B1E08D2CD6216C881F4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143902.roa Signing time: Wed 04 Mar 2026 06:13:46 +0000 ROA not before: Wed 04 Mar 2026 06:08:46 +0000 ROA not after: Wed 03 Mar 2027 06:13:46 +0000 asID: 143902 IP address blocks: 240a:a4e4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:89:7a:91:59:3a:bc:d1:bd:fb:1b:1e:08:d2:cd:62:16:c8:81:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:46 2026 GMT Not After : Mar 3 06:13:46 2027 GMT Subject: CN=8B8B991CF8E295E7547027F727B6313B4D340016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:f9:2d:5e:99:3e:00:05:c8:e0:e7:63:f4: 3e:5e:7b:c8:83:bb:36:e1:56:b0:15:98:84:86:0f: 1d:ed:60:2c:4b:3b:f3:b7:d2:07:bc:c9:f3:9c:12: 1c:10:b5:d2:d8:89:d3:0e:68:87:d4:2e:c1:55:f9: cc:6c:ff:1e:86:4d:e3:6b:64:cd:57:f1:58:20:2b: 8f:09:b6:08:d6:1f:af:f6:6f:c4:d8:2b:1b:4a:8f: d4:23:de:d6:0e:f3:5c:42:be:ad:0e:7f:e0:0a:03: dd:75:9e:a9:2d:1a:1d:c5:0d:77:ef:f3:b4:68:c5: b4:9f:89:14:54:ad:02:d6:a2:87:a3:76:2f:07:1d: 4f:ca:f6:4d:96:f9:8a:0e:86:10:1e:d9:2e:5d:33: d2:0c:70:66:92:aa:5f:bc:9a:c5:14:30:86:de:1a: 4d:6a:dd:72:30:2f:88:1c:fd:6c:75:80:bd:9a:a8: 62:d3:15:6a:58:9c:1c:e0:56:31:d8:f0:98:ff:d4: 1b:99:4b:7d:ff:7e:a3:af:55:31:fc:de:8f:58:7b: 50:17:2a:a8:75:5f:d8:44:6f:96:41:05:f8:4d:f4: 7e:2a:5e:f6:59:c2:bd:62:9f:63:c2:e7:bb:b5:d9: e9:19:62:a3:a7:97:85:34:65:00:cd:d2:f2:f4:3d: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8B:99:1C:F8:E2:95:E7:54:70:27:F7:27:B6:31:3B:4D:34:00:16 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143902.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4e4::/32 Signature Algorithm: sha256WithRSAEncryption bb:2b:0b:b6:b6:9d:07:90:bd:f8:36:6e:33:a6:0f:09:20:9a: 5c:c6:6b:76:37:fb:f9:05:cb:0a:04:a3:99:e5:68:22:87:2b: 9b:27:e9:a3:9c:c2:e6:07:d0:1b:15:44:82:ef:30:b5:f1:36: f8:8b:6f:81:d3:05:3d:02:a1:d9:4e:5a:ef:20:7f:58:a7:90: 86:b2:02:38:d4:08:d9:d6:4b:91:93:c7:2c:8a:fb:35:45:67: 25:99:7e:db:b3:4b:97:45:5c:14:7f:a7:9f:98:bc:c8:24:dc: a8:e0:90:e0:44:2d:de:ad:da:a8:94:2c:d7:d7:db:39:df:b4: 34:c0:da:97:44:f8:e4:a2:8b:0d:ec:95:4d:b0:7d:da:9b:9e: 8b:36:06:65:db:4d:fb:cc:f9:ba:3b:9c:73:22:cc:59:ff:38: 92:9b:d9:fc:58:3e:28:7f:c4:d9:74:28:5b:6c:2d:46:ff:6f: 4c:34:cf:39:75:9b:05:00:bf:54:45:a8:71:77:50:f9:e0:03: c7:dd:58:70:3b:2b:4f:92:7e:4d:2a:4c:cf:d0:88:35:87:6e: 4a:f1:91:9b:e5:fc:7b:67:bb:cc:12:ba:76:f6:53:07:55:5e: be:cd:fd:cd:1e:65:0a:65:88:06:fd:36:d4:04:63:4a:c7:22: 4e:fa:fd:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYYl6kVk6vNG9+xseCNLNYhbIgfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0NloX DTI3MDMwMzA2MTM0NlowMzExMC8GA1UEAxMoOEI4Qjk5MUNGOEUyOTVFNzU0NzAy N0Y3MjdCNjMxM0I0RDM0MDAxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYK+S1emT4ABcjg52P0Pl57yIO7NuFWsBWYhIYPHe1gLEs787fSB7zJ85wS HBC10tiJ0w5oh9QuwVX5zGz/HoZN42tkzVfxWCArjwm2CNYfr/ZvxNgrG0qP1CPe 1g7zXEK+rQ5/4AoD3XWeqS0aHcUNd+/ztGjFtJ+JFFStAtaih6N2LwcdT8r2TZb5 ig6GEB7ZLl0z0gxwZpKqX7yaxRQwht4aTWrdcjAviBz9bHWAvZqoYtMValicHOBW MdjwmP/UG5lLff9+o69VMfzej1h7UBcqqHVf2ERvlkEF+E30fipe9lnCvWKfY8Ln u7XZ6Rlio6eXhTRlAM3S8vQ9bu0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSLi5kc +OKV51RwJ/cntjE7TTQAFjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pOQwDQYJKoZIhvcNAQELBQADggEBALsrC7a2nQeQvfg2bjOmDwkgmlzGa3Y3+/kF ywoEo5nlaCKHK5sn6aOcwuYH0BsVRILvMLXxNviLb4HTBT0CodlOWu8gf1inkIay AjjUCNnWS5GTxyyK+zVFZyWZftuzS5dFXBR/p5+YvMgk3KjgkOBELd6t2qiULNfX 2znftDTA2pdE+OSiiw3slU2wfdqbnos2BmXbTfvM+bo7nHMizFn/OJKb2fxYPih/ xNl0KFtsLUb/b0w0zzl1mwUAv1RFqHF3UPngA8fdWHA7K0+Sfk0qTM/QiDWHbkrx kZvl/Htnu8wSunb2UwdVXr7N/c0eZQpliAb9NtQEY0rHIk76/Yg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:15 2026 by rpki-client