$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143904.roa File: AS143904.roa (raw, json) Hash identifier: XVUMINjrk2Vq1rVwykOa+gIk27BQxmgpzH/ORiIZfUA= Subject key identifier: D5:5B:63:9D:BD:D4:40:FC:F9:6A:CB:5C:0D:11:F5:54:C3:1B:F5:15 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F9AB988F5D51D106D8B4D78FC4AD31C71DF3F38 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143904.roa Signing time: Wed 04 Mar 2026 06:13:58 +0000 ROA not before: Wed 04 Mar 2026 06:08:58 +0000 ROA not after: Wed 03 Mar 2027 06:13:58 +0000 asID: 143904 IP address blocks: 240a:a4e6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9a:b9:88:f5:d5:1d:10:6d:8b:4d:78:fc:4a:d3:1c:71:df:3f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:58 2026 GMT Not After : Mar 3 06:13:58 2027 GMT Subject: CN=D55B639DBDD440FCF96ACB5C0D11F554C31BF515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:d0:e1:3f:62:3d:f8:96:ab:22:ee:e7:17: c5:66:cc:ac:3b:1a:32:41:ea:a0:ed:fc:ca:34:c5: 53:c9:04:13:05:2b:3e:a2:f3:ad:91:bb:45:d5:28: 0d:eb:ec:65:ec:3c:30:26:99:a6:49:7e:f0:af:c1: bb:cd:f7:d4:0a:11:6e:eb:30:27:4a:ac:b9:c4:b6: fe:fc:80:69:cb:0a:a1:41:fe:81:e1:f0:41:4c:f2: 7a:bb:76:eb:8b:47:8c:e7:37:cd:f9:fb:bb:ab:3d: 38:66:3d:79:93:82:27:e0:ce:04:94:a9:d2:32:dc: 0b:8f:e1:12:ee:35:82:14:36:50:b4:e3:0c:5f:06: 79:e0:da:42:f9:49:ed:30:82:aa:e3:40:cc:71:0b: b8:55:c5:26:bb:97:e1:51:c0:09:12:45:02:12:34: 8d:34:59:46:4f:65:cd:6e:d1:96:21:c4:63:cf:72: 70:e5:71:9e:ff:dd:1e:06:70:7c:1e:bc:16:ed:79: d5:bd:d8:28:0f:20:ff:e5:be:cd:9c:60:e4:a5:8a: 38:6d:bb:6a:21:90:c6:9b:27:27:17:dc:a7:cb:6f: 91:5b:fc:b1:81:29:0d:da:eb:93:5c:90:ac:2c:67: 3a:01:dd:d2:ea:0d:3b:33:54:b9:83:99:fb:7f:5f: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5B:63:9D:BD:D4:40:FC:F9:6A:CB:5C:0D:11:F5:54:C3:1B:F5:15 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143904.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4e6::/32 Signature Algorithm: sha256WithRSAEncryption 7f:2d:00:78:fb:c6:36:55:9c:c8:c3:b5:95:06:30:85:99:f5: 74:06:ca:a5:8c:8d:94:30:02:41:b8:08:9d:0a:89:80:41:36: 72:8a:6c:3a:79:a0:8a:ab:b9:da:13:fa:d6:1f:95:41:e2:66: 6b:56:e5:36:67:c7:60:ec:68:7c:3d:81:2f:d1:84:27:8c:fb: 92:77:53:e9:2c:66:96:de:22:19:80:08:71:19:d3:ba:08:b6: bc:5c:e8:97:98:97:95:a7:8d:07:eb:24:28:65:50:20:dc:5f: 8e:3b:79:8c:cb:96:fc:90:c2:02:fe:d1:ed:6f:7f:56:d8:dc: b1:8e:a8:5d:e6:a3:98:51:af:f7:c6:8f:bd:ea:ff:85:3d:c0: 3e:80:34:91:2d:c5:77:35:ef:c2:80:e6:46:c8:82:4f:9a:ed: 5d:ab:e6:21:b8:fc:e9:4b:c4:cc:bf:72:fe:b1:c7:a1:28:55: 90:b6:4f:64:57:bb:ec:28:a1:ee:99:49:43:7d:ea:50:ab:71: d2:c1:94:4e:61:12:12:71:e8:7b:3e:04:84:e6:e0:b1:ea:75: ca:9f:09:c9:06:53:d4:0a:b6:94:61:e4:f9:22:d6:f1:c4:57: 26:90:dd:03:55:cd:bf:67:41:16:cc:44:ad:15:5b:08:62:0d: d9:ef:5c:b5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUP5q5iPXVHRBti014/ErTHHHfPzgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1OFoX DTI3MDMwMzA2MTM1OFowMzExMC8GA1UEAxMoRDU1QjYzOURCREQ0NDBGQ0Y5NkFD QjVDMEQxMUY1NTRDMzFCRjUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3R0OE/Yj34lqsi7ucXxWbMrDsaMkHqoO38yjTFU8kEEwUrPqLzrZG7RdUo DevsZew8MCaZpkl+8K/Bu8331AoRbuswJ0qsucS2/vyAacsKoUH+geHwQUzyert2 64tHjOc3zfn7u6s9OGY9eZOCJ+DOBJSp0jLcC4/hEu41ghQ2ULTjDF8GeeDaQvlJ 7TCCquNAzHELuFXFJruX4VHACRJFAhI0jTRZRk9lzW7RliHEY89ycOVxnv/dHgZw fB68Fu151b3YKA8g/+W+zZxg5KWKOG27aiGQxpsnJxfcp8tvkVv8sYEpDdrrk1yQ rCxnOgHd0uoNOzNUuYOZ+39fgqsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTVW2Od vdRA/Plqy1wNEfVUwxv1FTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pOYwDQYJKoZIhvcNAQELBQADggEBAH8tAHj7xjZVnMjDtZUGMIWZ9XQGyqWMjZQw AkG4CJ0KiYBBNnKKbDp5oIqrudoT+tYflUHiZmtW5TZnx2DsaHw9gS/RhCeM+5J3 U+ksZpbeIhmACHEZ07oItrxc6JeYl5WnjQfrJChlUCDcX447eYzLlvyQwgL+0e1v f1bY3LGOqF3mo5hRr/fGj73q/4U9wD6ANJEtxXc178KA5kbIgk+a7V2r5iG4/OlL xMy/cv6xx6EoVZC2T2RXu+wooe6ZSUN96lCrcdLBlE5hEhJx6Hs+BITm4LHqdcqf CckGU9QKtpRh5Pki1vHEVyaQ3QNVzb9nQRbMRK0VWwhiDdnvXLU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:45 2026 by rpki-client