$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143913.roa File: AS143913.roa (raw, json) Hash identifier: fs94QSV8B2b6hXLg4mGa7r/WYyX6w+GrbaTsFs959lA= Subject key identifier: 83:90:DB:5D:58:01:F5:88:B9:17:AC:61:9C:E5:38:3C:D0:55:F6:9B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2D522D2ED3046AD407567A8B2A8F4579ED4A1079 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143913.roa Signing time: Wed 04 Mar 2026 06:12:28 +0000 ROA not before: Wed 04 Mar 2026 06:07:28 +0000 ROA not after: Wed 03 Mar 2027 06:12:28 +0000 asID: 143913 IP address blocks: 240a:a4ef::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:52:2d:2e:d3:04:6a:d4:07:56:7a:8b:2a:8f:45:79:ed:4a:10:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:28 2026 GMT Not After : Mar 3 06:12:28 2027 GMT Subject: CN=8390DB5D5801F588B917AC619CE5383CD055F69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:56:79:6c:73:e6:23:e4:94:6e:2d:e1:a1: f4:09:5e:f9:6a:5f:59:f4:19:f9:4b:db:0a:e9:ed: 9c:54:23:84:22:11:49:b3:6b:05:ae:4c:e7:63:af: c4:67:fd:ef:4a:22:4f:0f:7e:21:36:a9:f9:c9:51: fa:a7:56:99:6a:e9:ad:af:89:68:d4:66:2f:98:e4: 95:21:9b:5f:03:d0:7a:b3:8c:91:2c:ee:3b:dd:a5: d4:fd:bf:a0:c2:dd:f5:1d:ae:fc:08:5b:c6:30:93: 44:0e:80:af:d8:19:d3:8d:41:b5:e9:27:39:20:5a: 3a:9d:ff:4a:78:bb:46:a4:98:7b:00:3f:9b:2c:b9: 46:af:fc:72:84:28:a5:d7:8f:57:ee:3d:02:f5:a4: 41:ad:86:94:cd:de:32:1c:20:57:3f:20:82:48:41: a4:b5:50:b7:29:84:d5:28:a9:8d:ab:ca:74:50:e8: 23:f7:6e:80:af:42:5c:64:6d:66:27:95:07:9a:c0: 16:cf:10:f2:e6:b9:e7:1d:b2:fb:22:47:54:c2:4d: 89:06:9f:f9:1f:8f:ae:08:b0:68:85:cb:27:bf:94: b5:35:03:9c:39:3e:5a:c1:ba:78:93:fc:d3:04:20: 35:ce:a6:97:5e:2a:a2:df:97:77:a6:8b:52:17:1c: a9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:90:DB:5D:58:01:F5:88:B9:17:AC:61:9C:E5:38:3C:D0:55:F6:9B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143913.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4ef::/32 Signature Algorithm: sha256WithRSAEncryption 73:b8:df:6b:8f:13:0f:b6:bd:22:38:fa:3b:38:ad:25:41:6a: 95:6b:98:67:72:67:2c:5a:6c:99:26:4d:98:f0:e2:40:72:a8: 29:07:a2:4f:53:6a:d6:24:f8:e2:d6:de:ea:7f:3d:2a:6d:70: af:90:3e:1d:7d:c2:31:4b:91:2a:9f:50:1b:9d:ca:01:fb:d3: 49:6c:d0:7c:6c:f5:66:1f:bc:bb:a2:03:0e:c8:13:15:1b:13: 79:b2:10:a9:45:dc:7d:e4:c2:6e:ef:d2:c7:9c:c2:6a:94:22: 98:c0:74:30:c0:d7:06:7c:fa:89:94:83:b2:5a:ca:32:e4:19: f2:d6:26:48:8b:72:dc:cc:ed:7f:cd:f1:35:9a:f6:94:71:16: a4:26:ae:71:43:10:8a:47:87:5b:7e:ea:6a:b5:ac:1e:3f:51: 31:ad:04:bb:f1:c6:94:41:12:a0:08:13:bc:76:42:e8:b1:36: cd:4d:4c:dd:42:e0:9f:f3:17:84:d9:2e:4f:bb:00:02:19:47: 68:1c:6c:a9:e2:0b:f8:c1:36:93:ea:44:a0:0e:88:fb:01:c1: 42:85:1b:0d:bd:ee:8c:a4:44:32:c8:8c:d3:6b:36:1d:7c:0e: 2e:18:1c:33:80:48:27:e8:57:42:73:54:91:94:d3:c4:b1:fb: 5b:c7:aa:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULVItLtMEatQHVnqLKo9Fee1KEHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDcyOFoX DTI3MDMwMzA2MTIyOFowMzExMC8GA1UEAxMoODM5MERCNUQ1ODAxRjU4OEI5MTdB QzYxOUNFNTM4M0NEMDU1RjY5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOklVnlsc+Yj5JRuLeGh9Ale+WpfWfQZ+UvbCuntnFQjhCIRSbNrBa5M52Ov xGf970oiTw9+ITap+clR+qdWmWrpra+JaNRmL5jklSGbXwPQerOMkSzuO92l1P2/ oMLd9R2u/AhbxjCTRA6Ar9gZ041BteknOSBaOp3/Sni7RqSYewA/myy5Rq/8coQo pdePV+49AvWkQa2GlM3eMhwgVz8ggkhBpLVQtymE1SipjavKdFDoI/dugK9CXGRt ZieVB5rAFs8Q8ua55x2y+yJHVMJNiQaf+R+PrgiwaIXLJ7+UtTUDnDk+WsG6eJP8 0wQgNc6ml14qot+Xd6aLUhccqQMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSDkNtd WAH1iLkXrGGc5Tg80FX2mzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pO8wDQYJKoZIhvcNAQELBQADggEBAHO432uPEw+2vSI4+js4rSVBapVrmGdyZyxa bJkmTZjw4kByqCkHok9TatYk+OLW3up/PSptcK+QPh19wjFLkSqfUBudygH700ls 0Hxs9WYfvLuiAw7IExUbE3myEKlF3H3kwm7v0secwmqUIpjAdDDA1wZ8+omUg7Ja yjLkGfLWJkiLctzM7X/N8TWa9pRxFqQmrnFDEIpHh1t+6mq1rB4/UTGtBLvxxpRB EqAIE7x2QuixNs1NTN1C4J/zF4TZLk+7AAIZR2gcbKniC/jBNpPqRKAOiPsBwUKF Gw297oykRDLIjNNrNh18Di4YHDOASCfoV0JzVJGU08Sx+1vHqgY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:45 2026 by rpki-client