$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143910.roa File: AS143910.roa (raw, json) Hash identifier: kXFVEaSe/DbeipWNDjNOSLzgQSwiGgVU6Uwe+OXrqi8= Subject key identifier: D5:7D:53:2F:88:4A:A5:CA:BA:B6:BA:BE:63:FB:9C:2E:2C:54:CD:83 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4A95CE39D05A6A8C866EAB9E7CCB8E7FC73E32B4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143910.roa Signing time: Wed 04 Mar 2026 06:15:31 +0000 ROA not before: Wed 04 Mar 2026 06:10:31 +0000 ROA not after: Wed 03 Mar 2027 06:15:31 +0000 asID: 143910 IP address blocks: 240a:a4ec::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:95:ce:39:d0:5a:6a:8c:86:6e:ab:9e:7c:cb:8e:7f:c7:3e:32:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:31 2026 GMT Not After : Mar 3 06:15:31 2027 GMT Subject: CN=D57D532F884AA5CABAB6BABE63FB9C2E2C54CD83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:fb:fe:0a:0c:d3:82:db:7b:1b:53:89:70: ad:70:24:e7:77:46:c0:26:27:42:2e:96:c7:ae:29: ea:b0:5b:a3:8d:62:04:fa:db:b1:11:80:c7:6f:06: 3a:2a:eb:a1:7b:d3:d6:4e:10:58:22:28:e4:8b:f7: 86:fd:93:70:67:4f:88:f4:bd:13:40:cc:c9:08:97: ec:ed:f0:34:c0:09:26:da:c5:50:fb:ef:ff:66:b5: 28:48:72:03:c9:85:31:d8:df:63:bb:42:02:a3:68: 7a:05:55:04:7a:92:0f:0d:80:cc:e3:39:47:b5:aa: ad:c7:88:b2:b3:be:6d:26:e7:2f:92:8b:f1:84:f1: 75:6a:f4:ae:77:05:82:63:12:dc:c2:0a:56:ef:14: b1:a8:a2:0f:5e:2c:1e:e7:04:1b:7e:ba:e7:15:44: d8:96:2f:ce:46:8e:0c:59:b8:07:53:2d:b0:3b:89: 27:f1:26:f7:8a:ae:f3:f3:91:4c:fb:eb:19:6a:ff: ae:a3:f0:27:bf:ae:55:29:2d:4d:90:67:d0:ea:48: 75:46:24:25:86:eb:77:a6:c5:b4:fe:52:7f:ea:e4: c6:23:bd:90:b9:27:b8:36:2c:8a:88:a0:dd:06:6e: d6:c3:50:30:0c:23:c8:ea:e2:8f:a0:e0:75:3d:2d: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7D:53:2F:88:4A:A5:CA:BA:B6:BA:BE:63:FB:9C:2E:2C:54:CD:83 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143910.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4ec::/32 Signature Algorithm: sha256WithRSAEncryption 9b:64:0d:ee:bf:af:80:2b:74:0a:95:5c:12:37:d7:c4:2f:cd: 4f:fc:b4:3d:00:cf:09:77:44:a1:e7:ad:4d:10:94:01:b1:51: a8:c3:e7:45:87:89:78:eb:c9:fc:cb:cc:1e:18:23:bc:eb:0f: a3:5a:14:53:2a:dc:f3:8d:32:b5:28:1f:77:68:36:7d:d6:39: d8:7c:b0:91:1e:51:6b:3e:c9:8a:a5:ff:b0:73:59:df:f4:fe: 2d:ad:30:fa:50:5b:5b:65:e7:dc:57:d6:ac:3f:26:57:bc:93: 6c:de:78:04:a6:c4:20:a2:c1:61:62:e5:55:3c:db:a1:c6:ff: 16:4b:ff:d7:2e:d7:07:a7:9d:2f:f8:5e:3d:d4:d4:7c:67:48: c7:13:aa:4c:d8:da:28:ed:a6:17:c1:6f:30:ee:01:e1:79:f5: 87:94:cd:f2:28:70:4f:c8:92:0f:75:c9:c1:2a:34:07:55:21: 34:56:a8:77:93:61:d6:3f:20:ba:68:4b:95:1d:8f:d6:20:b4: e6:52:e4:c2:7c:e5:0c:97:d6:51:cf:dd:14:47:bd:6f:5f:56: 26:07:65:65:11:e4:5e:e7:68:5c:86:3d:f7:0b:25:ea:e8:6f: 4a:09:5d:6f:12:c1:51:4f:1a:a1:12:df:b8:37:d9:14:86:1e: a9:4f:14:72 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSpXOOdBaaoyGbquefMuOf8c+MrQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzMVoX DTI3MDMwMzA2MTUzMVowMzExMC8GA1UEAxMoRDU3RDUzMkY4ODRBQTVDQUJBQjZC QUJFNjNGQjlDMkUyQzU0Q0Q4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSG+/4KDNOC23sbU4lwrXAk53dGwCYnQi6Wx64p6rBbo41iBPrbsRGAx28G OirroXvT1k4QWCIo5Iv3hv2TcGdPiPS9E0DMyQiX7O3wNMAJJtrFUPvv/2a1KEhy A8mFMdjfY7tCAqNoegVVBHqSDw2AzOM5R7WqrceIsrO+bSbnL5KL8YTxdWr0rncF gmMS3MIKVu8UsaiiD14sHucEG3665xVE2JYvzkaODFm4B1MtsDuJJ/Em94qu8/OR TPvrGWr/rqPwJ7+uVSktTZBn0OpIdUYkJYbrd6bFtP5Sf+rkxiO9kLknuDYsioig 3QZu1sNQMAwjyOrij6DgdT0tNbcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTVfVMv iEqlyrq2ur5j+5wuLFTNgzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pOwwDQYJKoZIhvcNAQELBQADggEBAJtkDe6/r4ArdAqVXBI318QvzU/8tD0Azwl3 RKHnrU0QlAGxUajD50WHiXjryfzLzB4YI7zrD6NaFFMq3PONMrUoH3doNn3WOdh8 sJEeUWs+yYql/7BzWd/0/i2tMPpQW1tl59xX1qw/Jle8k2zeeASmxCCiwWFi5VU8 26HG/xZL/9cu1wennS/4Xj3U1HxnSMcTqkzY2ijtphfBbzDuAeF59YeUzfIocE/I kg91ycEqNAdVITRWqHeTYdY/ILpoS5Udj9YgtOZS5MJ85QyX1lHP3RRHvW9fViYH ZWUR5F7naFyGPfcLJerob0oJXW8SwVFPGqES37g32RSGHqlPFHI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:41 2026 by rpki-client