$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143907.roa File: AS143907.roa (raw, json) Hash identifier: OzrLDvH0jJWkh6tQpqJ6lHMwc6NjfNPvWDv/p1Us3dA= Subject key identifier: BB:E4:7E:62:DE:28:53:0C:4C:00:90:DC:98:BD:76:AA:9D:FE:58:E9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 25E5EDE6FA3097CDF88F630BDB2BE108DFC4E97A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143907.roa Signing time: Wed 04 Mar 2026 06:14:16 +0000 ROA not before: Wed 04 Mar 2026 06:09:16 +0000 ROA not after: Wed 03 Mar 2027 06:14:16 +0000 asID: 143907 IP address blocks: 240a:a4e9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e5:ed:e6:fa:30:97:cd:f8:8f:63:0b:db:2b:e1:08:df:c4:e9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:16 2026 GMT Not After : Mar 3 06:14:16 2027 GMT Subject: CN=BBE47E62DE28530C4C0090DC98BD76AA9DFE58E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:0b:4f:0b:fb:a9:d8:fd:b2:9c:10:bd:aa: 6a:f6:14:72:40:76:de:ff:2e:ed:51:2c:8c:0c:7e: ed:00:40:71:19:ab:30:2c:a7:b7:3b:f4:42:4a:9a: f6:f3:dd:e2:ab:f8:d3:e2:43:11:a9:34:43:39:92: f3:db:d1:05:82:fb:72:12:ee:93:54:8a:4b:7b:33: 0f:2c:44:85:c3:6b:48:6d:73:07:07:3c:03:c1:6f: d4:61:26:59:17:36:f8:d7:cd:ca:51:f4:87:ac:1d: c0:4d:10:70:5e:3f:cf:00:e3:d6:66:0c:9c:2f:7a: 51:48:df:50:a2:4e:de:8a:49:e8:4b:ab:46:c7:17: 65:5f:68:9c:b6:58:7f:8e:0b:e0:7e:75:bc:b4:56: 06:3a:4b:43:af:6e:de:bb:05:7e:2c:8e:f2:8e:4e: 85:d1:a5:30:23:32:01:6a:f9:89:2e:70:31:9d:f4: 12:6b:69:05:6d:1a:db:6c:53:68:93:93:9b:1b:cd: 06:58:91:43:93:73:75:90:e2:74:2e:88:b8:a7:fa: 98:84:d1:20:40:0e:be:95:08:55:e6:e6:ea:29:2f: 13:d3:a0:c4:11:75:24:f2:41:05:ac:9c:8f:fe:33: 94:b0:44:86:98:58:b4:75:11:27:28:7b:8f:3e:8d: 01:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:7E:62:DE:28:53:0C:4C:00:90:DC:98:BD:76:AA:9D:FE:58:E9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4e9::/32 Signature Algorithm: sha256WithRSAEncryption 7e:75:d9:de:40:c6:79:ae:8b:22:53:d4:d2:65:c2:cc:a7:00: f0:f4:0e:9c:aa:b2:63:74:a5:a2:39:b8:78:6d:23:51:4e:27: 62:20:15:11:77:bc:71:a9:b4:c4:03:ce:c4:92:4b:1e:78:e0: 7b:e7:40:00:27:17:1d:40:09:49:bd:59:37:b7:20:fa:ab:09: 61:48:86:9c:87:bc:c4:62:61:ad:e4:b4:f8:dd:35:57:90:19: eb:fb:ef:5b:aa:f7:a4:f5:34:08:46:8f:19:dc:76:cf:0b:26: cd:8a:5c:ad:d1:b5:d9:e1:f4:36:cb:de:5f:ea:63:da:ff:32: 2c:32:71:06:ec:d8:1b:f6:c4:74:5c:b1:12:68:d0:33:ef:30: 9a:d0:82:e4:5e:09:e2:e5:40:7a:8f:ed:77:9b:1c:2b:d2:04: 94:6a:4c:18:70:51:e5:07:8d:8b:0b:19:f6:b1:d1:3b:a4:d2: 73:38:d5:6e:d9:23:63:c3:d1:18:40:67:93:74:0c:9d:1e:6b: 45:83:73:ef:e2:a8:b6:97:80:48:13:35:7b:06:87:4e:d7:9f: 0d:f0:1d:98:58:2d:53:99:8d:72:35:df:64:d9:82:db:d5:77: 3a:98:ad:0b:b9:b4:da:90:40:1d:4f:ce:e0:7c:95:49:ea:7b: fc:27:7e:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJeXt5vowl834j2ML2yvhCN/E6XowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxNloX DTI3MDMwMzA2MTQxNlowMzExMC8GA1UEAxMoQkJFNDdFNjJERTI4NTMwQzRDMDA5 MERDOThCRDc2QUE5REZFNThFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJYyC08L+6nY/bKcEL2qavYUckB23v8u7VEsjAx+7QBAcRmrMCyntzv0Qkqa 9vPd4qv40+JDEak0QzmS89vRBYL7chLuk1SKS3szDyxEhcNrSG1zBwc8A8Fv1GEm WRc2+NfNylH0h6wdwE0QcF4/zwDj1mYMnC96UUjfUKJO3opJ6EurRscXZV9onLZY f44L4H51vLRWBjpLQ69u3rsFfiyO8o5OhdGlMCMyAWr5iS5wMZ30EmtpBW0a22xT aJOTmxvNBliRQ5NzdZDidC6IuKf6mITRIEAOvpUIVebm6ikvE9OgxBF1JPJBBayc j/4zlLBEhphYtHURJyh7jz6NAZMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS75H5i 3ihTDEwAkNyYvXaqnf5Y6TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pOkwDQYJKoZIhvcNAQELBQADggEBAH512d5AxnmuiyJT1NJlwsynAPD0DpyqsmN0 paI5uHhtI1FOJ2IgFRF3vHGptMQDzsSSSx544HvnQAAnFx1ACUm9WTe3IPqrCWFI hpyHvMRiYa3ktPjdNVeQGev771uq96T1NAhGjxncds8LJs2KXK3Rtdnh9DbL3l/q Y9r/MiwycQbs2Bv2xHRcsRJo0DPvMJrQguReCeLlQHqP7XebHCvSBJRqTBhwUeUH jYsLGfax0Tuk0nM41W7ZI2PD0RhAZ5N0DJ0ea0WDc+/iqLaXgEgTNXsGh07Xnw3w HZhYLVOZjXI132TZgtvVdzqYrQu5tNqQQB1PzuB8lUnqe/wnflA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:19 2026 by rpki-client