$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143911.roa File: AS143911.roa (raw, json) Hash identifier: cn+m3SkCrWYsxbLsrcPOFxVCdsAbQQFM6T5zKfzPIkY= Subject key identifier: 51:C2:5A:02:FB:3F:3D:A8:BD:2A:13:D3:FD:AE:A1:89:6E:B0:92:25 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 62E830E2FA527879B6C21D3EAD3447359A29CC1D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143911.roa Signing time: Wed 04 Mar 2026 06:13:39 +0000 ROA not before: Wed 04 Mar 2026 06:08:39 +0000 ROA not after: Wed 03 Mar 2027 06:13:39 +0000 asID: 143911 IP address blocks: 240a:a4ed::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e8:30:e2:fa:52:78:79:b6:c2:1d:3e:ad:34:47:35:9a:29:cc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:39 2026 GMT Not After : Mar 3 06:13:39 2027 GMT Subject: CN=51C25A02FB3F3DA8BD2A13D3FDAEA1896EB09225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:f4:9b:63:3d:68:c6:02:65:a3:5d:5a:38: ea:f5:de:80:23:1c:13:db:21:c8:b5:b8:28:11:c7: c3:2a:fa:38:c7:91:15:ba:f6:f2:ba:c0:5b:64:3f: 2d:8c:f8:a9:e2:d9:cd:b1:a6:fa:cf:ba:bf:3e:8e: 5d:79:04:15:77:cf:81:1c:09:cc:a9:bd:29:d8:4a: a1:a3:35:39:cf:6e:3f:9e:d7:59:86:9b:8a:26:dc: 72:f1:5a:f9:06:88:c6:b8:b0:f3:42:61:fe:34:73: 53:c4:40:2c:0f:1c:63:a0:4d:0a:0a:a6:28:7b:bf: 1b:d5:7a:2a:e4:78:27:1d:dd:9e:f8:a6:5e:88:97: 2d:25:84:86:48:8b:4e:33:a4:95:44:7d:70:14:ee: 01:ec:2f:60:25:6a:9d:13:2a:3c:64:c0:97:aa:10: 08:cf:d6:3a:8b:20:63:ec:6a:83:b0:8d:a1:91:55: 16:af:39:3d:1d:e7:21:da:47:21:a7:6f:32:b5:c2: 9d:d1:51:1b:b0:39:f2:25:4d:9d:f1:31:63:fa:cc: 64:ac:ae:9e:53:66:73:29:ef:12:19:22:e4:c3:b8: 68:ca:62:a0:02:ce:3b:91:81:44:44:33:5e:67:7b: 1c:5d:62:14:58:8c:a8:8d:d1:d4:db:7d:fa:19:53: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C2:5A:02:FB:3F:3D:A8:BD:2A:13:D3:FD:AE:A1:89:6E:B0:92:25 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143911.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4ed::/32 Signature Algorithm: sha256WithRSAEncryption 62:c8:80:a1:25:08:47:3c:02:c8:e7:1f:bf:01:80:96:f1:ee: 50:c7:8f:7b:c2:68:52:f8:1b:cd:4c:65:7d:e9:07:9a:6b:8f: bf:f8:c0:5d:4b:6b:54:e2:c6:69:69:64:d7:67:30:4c:83:8c: f7:dc:82:03:9a:c3:84:ad:79:0a:3e:1b:a7:b0:d2:fb:34:3a: 2d:2d:f8:06:04:05:c4:0c:a5:45:72:68:a6:7e:ba:83:d7:58: 2d:5b:06:0c:9a:e5:89:f1:81:27:b0:dd:9d:67:e5:90:7a:24: 9f:5d:a4:74:bc:63:ef:d3:98:aa:d1:fe:32:0b:26:f2:09:b6: f9:90:64:1c:08:f3:64:3a:a2:89:a9:bb:b3:32:8b:a1:2d:80: bc:85:40:a6:cc:4d:7a:67:41:ff:6c:82:4d:81:e1:fd:cc:87: e2:98:6a:0e:72:c9:86:5e:47:19:b0:db:36:ea:92:fc:91:f6: 4e:50:24:1f:59:f0:2a:24:eb:3c:86:21:17:a8:a7:c7:2a:2d: 9a:1f:a1:b5:70:f8:6e:ba:d4:a0:3c:02:20:c1:1d:ca:4d:7c: 2e:c4:b7:a6:11:55:1f:2d:a4:ce:9a:dc:83:9e:b3:11:d7:7c: f6:5b:e3:7d:52:56:a8:65:cb:e6:0d:54:7f:00:eb:b5:6a:2f: 34:5e:72:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYugw4vpSeHm2wh0+rTRHNZopzB0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzOVoX DTI3MDMwMzA2MTMzOVowMzExMC8GA1UEAxMoNTFDMjVBMDJGQjNGM0RBOEJEMkEx M0QzRkRBRUExODk2RUIwOTIyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdF9JtjPWjGAmWjXVo46vXegCMcE9shyLW4KBHHwyr6OMeRFbr28rrAW2Q/ LYz4qeLZzbGm+s+6vz6OXXkEFXfPgRwJzKm9KdhKoaM1Oc9uP57XWYabiibccvFa +QaIxriw80Jh/jRzU8RALA8cY6BNCgqmKHu/G9V6KuR4Jx3dnvimXoiXLSWEhkiL TjOklUR9cBTuAewvYCVqnRMqPGTAl6oQCM/WOosgY+xqg7CNoZFVFq85PR3nIdpH IadvMrXCndFRG7A58iVNnfExY/rMZKyunlNmcynvEhki5MO4aMpioALOO5GBREQz Xmd7HF1iFFiMqI3R1Nt9+hlTgb8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRRwloC +z89qL0qE9P9rqGJbrCSJTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pO0wDQYJKoZIhvcNAQELBQADggEBAGLIgKElCEc8AsjnH78BgJbx7lDHj3vCaFL4 G81MZX3pB5prj7/4wF1La1TixmlpZNdnMEyDjPfcggOaw4SteQo+G6ew0vs0Oi0t +AYEBcQMpUVyaKZ+uoPXWC1bBgya5YnxgSew3Z1n5ZB6JJ9dpHS8Y+/TmKrR/jIL JvIJtvmQZBwI82Q6oompu7Myi6EtgLyFQKbMTXpnQf9sgk2B4f3Mh+KYag5yyYZe Rxmw2zbqkvyR9k5QJB9Z8Cok6zyGIReop8cqLZofobVw+G661KA8AiDBHcpNfC7E t6YRVR8tpM6a3IOesxHXfPZb431SVqhly+YNVH8A67VqLzRecrk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:07 2026 by rpki-client