$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143914.roa File: AS143914.roa (raw, json) Hash identifier: MIrn4WT4VOUoacZbKlbiycaXkYQmzFIQy+4PE81TZoI= Subject key identifier: AA:1E:8A:55:86:4E:7B:8F:E3:62:46:3A:BD:A7:A6:1E:33:35:CE:3D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7DFA7C19FA742F193CF1100C8701EBBFE68BFD2F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143914.roa Signing time: Wed 04 Mar 2026 06:14:00 +0000 ROA not before: Wed 04 Mar 2026 06:09:00 +0000 ROA not after: Wed 03 Mar 2027 06:14:00 +0000 asID: 143914 IP address blocks: 240a:a4f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fa:7c:19:fa:74:2f:19:3c:f1:10:0c:87:01:eb:bf:e6:8b:fd:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:00 2026 GMT Not After : Mar 3 06:14:00 2027 GMT Subject: CN=AA1E8A55864E7B8FE362463ABDA7A61E3335CE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9b:a0:de:ac:66:4c:d4:bd:ed:0d:a3:c8:08: 32:07:06:86:b8:fd:90:3d:86:61:aa:88:dd:b6:cb: b9:2e:5a:80:f4:dc:5b:fd:58:3c:f4:61:e4:95:69: ae:94:90:d2:bc:8e:9b:a5:d9:24:24:5f:e3:72:38: 9c:ca:b9:19:b9:72:0e:3a:17:ab:07:8b:b3:88:2d: 7d:2b:87:94:bd:09:58:0d:dd:b5:9a:57:a0:bd:8d: f5:ae:f1:d5:8d:58:a7:29:08:60:6a:9f:aa:3c:6d: 43:75:ad:ac:04:ca:cc:05:da:65:0d:6e:4c:94:ac: ca:4e:ce:d7:ab:f2:91:8f:db:64:47:a0:37:4a:8f: 05:0b:d2:52:17:9f:6d:75:e2:12:fb:a4:f9:e1:62: 39:ac:e7:a5:73:90:14:67:59:e8:3e:20:ea:b8:eb: cd:14:05:8f:b4:9f:bd:57:6d:26:20:b4:6e:90:2e: 78:f9:bb:47:1f:99:00:71:58:06:2a:76:fc:53:ff: 7d:8e:60:aa:c8:2e:77:61:ef:7a:e9:88:03:84:dd: 16:33:da:c3:ec:93:ee:cb:6a:96:0c:d9:ae:e8:32: 43:30:3a:f7:b9:7c:f7:ca:b9:28:ca:49:cf:dc:46: e1:7d:00:c4:1c:a5:27:6a:af:f4:76:4e:6a:39:91: 1c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1E:8A:55:86:4E:7B:8F:E3:62:46:3A:BD:A7:A6:1E:33:35:CE:3D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4f0::/32 Signature Algorithm: sha256WithRSAEncryption 9d:31:18:3e:60:98:14:b1:2d:7b:e4:98:59:b6:1e:b7:93:7d: ab:5b:ec:cd:27:52:7e:a0:5d:44:5d:eb:3b:2f:9a:5d:b7:3a: 46:44:ad:4b:72:6b:ed:9d:84:50:66:17:c5:35:5e:dc:6a:c2: 96:07:4b:fb:cd:c7:2b:11:27:48:76:4f:9d:2c:90:69:73:cc: ee:32:f8:db:d3:69:03:d5:c5:39:04:83:03:ce:ab:fe:ff:2e: 1b:92:00:f5:19:a2:96:fc:12:30:b0:db:bd:74:ec:84:99:b6: 25:2d:78:c5:57:18:5b:c2:7b:55:9a:9d:47:7e:5e:45:10:d1: 21:8c:25:44:1e:e1:df:28:8b:b5:af:b4:b9:cd:8a:88:ce:60: 5c:dc:fa:68:eb:c7:84:6b:08:c1:7e:16:14:13:a8:75:fb:b6: f2:74:a3:e9:25:d6:21:0d:16:63:b7:c1:08:c5:13:36:e8:2b: 22:2a:8c:61:23:89:e4:19:d8:51:00:fa:c2:ff:09:cd:12:17: cc:a2:c8:6b:48:85:79:bf:46:4b:8c:a6:16:d6:5a:6e:89:a6: 5d:21:76:8f:06:ce:d2:a7:13:7b:c6:6d:79:db:76:79:19:bf: 9b:99:9e:f9:44:f8:3e:d5:91:46:e9:f0:39:c4:22:35:1f:6e: de:29:a3:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUffp8Gfp0Lxk88RAMhwHrv+aL/S8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwMFoX DTI3MDMwMzA2MTQwMFowMzExMC8GA1UEAxMoQUExRThBNTU4NjRFN0I4RkUzNjI0 NjNBQkRBN0E2MUUzMzM1Q0UzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPCboN6sZkzUve0No8gIMgcGhrj9kD2GYaqI3bbLuS5agPTcW/1YPPRh5JVp rpSQ0ryOm6XZJCRf43I4nMq5GblyDjoXqweLs4gtfSuHlL0JWA3dtZpXoL2N9a7x 1Y1YpykIYGqfqjxtQ3WtrATKzAXaZQ1uTJSsyk7O16vykY/bZEegN0qPBQvSUhef bXXiEvuk+eFiOaznpXOQFGdZ6D4g6rjrzRQFj7SfvVdtJiC0bpAuePm7Rx+ZAHFY Bip2/FP/fY5gqsgud2HveumIA4TdFjPaw+yT7stqlgzZrugyQzA697l898q5KMpJ z9xG4X0AxBylJ2qv9HZOajmRHP8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSqHopV hk57j+NiRjq9p6YeMzXOPTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkxNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pPAwDQYJKoZIhvcNAQELBQADggEBAJ0xGD5gmBSxLXvkmFm2HreTfatb7M0nUn6g XURd6zsvml23OkZErUtya+2dhFBmF8U1XtxqwpYHS/vNxysRJ0h2T50skGlzzO4y +NvTaQPVxTkEgwPOq/7/LhuSAPUZopb8EjCw27107ISZtiUteMVXGFvCe1WanUd+ XkUQ0SGMJUQe4d8oi7WvtLnNiojOYFzc+mjrx4RrCMF+FhQTqHX7tvJ0o+kl1iEN FmO3wQjFEzboKyIqjGEjieQZ2FEA+sL/Cc0SF8yiyGtIhXm/RkuMphbWWm6Jpl0h do8GztKnE3vGbXnbdnkZv5uZnvlE+D7VkUbp8DnEIjUfbt4powc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:13 2026 by rpki-client