$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143903.roa File: AS143903.roa (raw, json) Hash identifier: laEQZfyLxPzyUcuiuRh7oaKuGjIYa+2WV7PGaCWGk+w= Subject key identifier: 1D:53:62:77:73:53:B2:E6:71:79:C7:ED:B0:A1:B5:9E:7B:16:75:55 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0897E3687A30E927CB7F96CE2072242683D0EF5C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143903.roa Signing time: Wed 04 Mar 2026 06:12:39 +0000 ROA not before: Wed 04 Mar 2026 06:07:39 +0000 ROA not after: Wed 03 Mar 2027 06:12:39 +0000 asID: 143903 IP address blocks: 240a:a4e5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:97:e3:68:7a:30:e9:27:cb:7f:96:ce:20:72:24:26:83:d0:ef:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:39 2026 GMT Not After : Mar 3 06:12:39 2027 GMT Subject: CN=1D5362777353B2E67179C7EDB0A1B59E7B167555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:a2:70:a6:62:2e:2b:d2:58:4b:33:50:02: 8f:b6:6d:24:cc:5d:03:1b:88:04:96:37:f5:9e:e3: a9:54:6a:2f:1d:75:93:3a:60:c0:55:0a:73:bc:ac: 3d:7f:5c:17:d4:46:8d:12:26:3a:35:1e:fa:a1:6e: 03:ab:9c:a2:c1:81:68:9f:74:4e:50:a1:15:9c:8e: 0c:93:a9:3c:75:a1:02:fb:e8:c9:e4:56:6f:31:1a: c2:c7:4b:b4:9e:8d:40:6a:d6:f0:bb:ba:ca:63:eb: 2b:b8:c9:53:8e:03:13:1e:31:3d:ef:bb:1e:e6:9d: b9:e8:7a:e1:7a:c2:1f:6d:1e:97:d7:fb:67:56:bc: f6:60:a4:60:ff:db:73:80:05:c4:3d:92:d2:5f:2d: a4:3d:5b:06:24:a1:65:66:4f:5a:d5:00:45:dd:cf: 09:d8:5c:28:12:ec:d7:6f:9f:99:5d:c0:27:a9:e1: ff:e7:17:2f:6e:be:20:c1:a6:7e:3e:ef:37:d8:d0: 6f:94:6c:6b:50:72:b9:fe:1b:b0:1c:e0:c9:9f:f0: c5:e5:44:6e:cc:64:97:1a:b3:ca:db:b8:43:fa:fc: 94:f9:5d:4b:53:c4:56:be:5f:4c:2c:7c:1e:b6:40: 90:23:0e:ca:6d:c8:f3:1b:3f:75:0a:04:ff:e3:45: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:53:62:77:73:53:B2:E6:71:79:C7:ED:B0:A1:B5:9E:7B:16:75:55 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4e5::/32 Signature Algorithm: sha256WithRSAEncryption a0:ea:b7:73:92:bf:4d:50:36:3f:3b:70:fd:d2:f1:b6:83:cc: 8b:5e:15:b6:d3:da:bb:02:ab:b4:b1:1f:5e:79:79:47:f5:99: 87:67:21:86:7f:91:2e:63:2a:a0:92:04:76:0d:ce:60:bc:13: 60:a2:70:90:56:c7:61:c5:7d:a6:af:bc:d0:c5:4d:53:e6:fc: 2d:59:3a:93:e1:17:e0:a6:85:0f:73:1c:f0:db:37:0a:0c:7b: 5d:73:b0:22:95:6e:2b:a9:48:85:3f:c0:ef:98:0a:b7:36:1b: 5e:bf:d1:bc:2d:44:e1:e4:22:31:37:e1:21:1c:20:24:6c:ee: a9:59:e3:05:76:05:1c:b8:2d:42:78:3b:9d:75:17:15:71:86: 8d:b7:ad:a3:c6:ff:0f:22:e4:51:97:b5:e3:a7:13:22:bd:22: 43:bf:b5:78:22:ee:96:75:09:25:a1:6e:ae:ae:12:fc:8c:e4: 9a:c2:8b:d7:28:f7:aa:89:fe:d8:ed:e5:8c:cb:69:80:19:29: d5:07:10:01:d6:cc:ea:33:b8:61:9c:d7:8e:bd:9e:ce:ea:19: a9:02:6e:6f:04:72:60:27:d2:74:bd:13:90:e8:5c:54:d5:02: 57:27:9d:48:2e:ad:2b:c0:d7:6d:4a:98:da:7c:e5:c4:8e:9e: f9:8b:53:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCJfjaHow6SfLf5bOIHIkJoPQ71wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczOVoX DTI3MDMwMzA2MTIzOVowMzExMC8GA1UEAxMoMUQ1MzYyNzc3MzUzQjJFNjcxNzlD N0VEQjBBMUI1OUU3QjE2NzU1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMzonCmYi4r0lhLM1ACj7ZtJMxdAxuIBJY39Z7jqVRqLx11kzpgwFUKc7ys PX9cF9RGjRImOjUe+qFuA6ucosGBaJ90TlChFZyODJOpPHWhAvvoyeRWbzEawsdL tJ6NQGrW8Lu6ymPrK7jJU44DEx4xPe+7Huadueh64XrCH20el9f7Z1a89mCkYP/b c4AFxD2S0l8tpD1bBiShZWZPWtUARd3PCdhcKBLs12+fmV3AJ6nh/+cXL26+IMGm fj7vN9jQb5Rsa1Byuf4bsBzgyZ/wxeVEbsxklxqzytu4Q/r8lPldS1PEVr5fTCx8 HrZAkCMOym3I8xs/dQoE/+NF/50CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQdU2J3 c1Oy5nF5x+2wobWeexZ1VTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pOUwDQYJKoZIhvcNAQELBQADggEBAKDqt3OSv01QNj87cP3S8baDzIteFbbT2rsC q7SxH155eUf1mYdnIYZ/kS5jKqCSBHYNzmC8E2CicJBWx2HFfaavvNDFTVPm/C1Z OpPhF+CmhQ9zHPDbNwoMe11zsCKVbiupSIU/wO+YCrc2G16/0bwtROHkIjE34SEc ICRs7qlZ4wV2BRy4LUJ4O511FxVxho23raPG/w8i5FGXteOnEyK9IkO/tXgi7pZ1 CSWhbq6uEvyM5JrCi9co96qJ/tjt5YzLaYAZKdUHEAHWzOozuGGc1469ns7qGakC bm8EcmAn0nS9E5DoXFTVAlcnnUgurSvA121KmNp85cSOnvmLUzc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:20 2026 by rpki-client