$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143920.roa File: AS143920.roa (raw, json) Hash identifier: 7Pso6E6+Sy13ocjzP6vUyPZo4odThpNu4f5rzQcbVgI= Subject key identifier: 17:96:4D:BB:40:31:1F:9C:1D:88:7C:5A:9E:9B:46:9E:8C:3B:DC:2F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4383F8694A3DE51B542E50A121AF40E6C364B97D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143920.roa Signing time: Wed 04 Mar 2026 06:13:29 +0000 ROA not before: Wed 04 Mar 2026 06:08:29 +0000 ROA not after: Wed 03 Mar 2027 06:13:29 +0000 asID: 143920 IP address blocks: 240a:a4f6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:83:f8:69:4a:3d:e5:1b:54:2e:50:a1:21:af:40:e6:c3:64:b9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:29 2026 GMT Not After : Mar 3 06:13:29 2027 GMT Subject: CN=17964DBB40311F9C1D887C5A9E9B469E8C3BDC2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:de:95:d7:14:f3:a5:6f:f4:2e:74:27:1a: e7:9b:2c:17:17:37:0d:13:37:d2:d6:c2:cb:1b:c7: a4:e4:9d:03:d1:e1:b3:0b:3a:2d:fa:07:d1:ba:cd: 22:2d:a7:d2:56:64:7c:12:bb:dc:82:5b:3e:ec:60: 34:88:d9:f9:1c:c6:06:1e:13:9f:63:f7:db:1c:91: e7:49:5f:ac:8d:ea:15:33:12:43:6e:83:db:3e:83: d7:b2:69:be:48:88:7c:58:89:31:a0:34:09:fb:9e: 93:a9:3a:15:46:2f:62:07:e9:e7:43:55:4b:26:6f: 5e:b5:fb:d7:2a:d1:73:c8:ca:f4:74:6a:4f:ba:36: 82:b4:d0:87:21:34:35:5c:be:b2:98:40:88:90:53: 4f:ff:87:cb:56:52:3f:f7:26:67:81:d6:ed:ba:8c: 9c:bc:07:ea:a7:22:aa:ad:2d:2e:5a:4b:94:03:28: 08:ba:51:4e:bd:4d:a9:2b:6c:30:ec:2a:06:92:e8: c2:51:a7:ad:c6:3e:51:91:57:1f:d4:88:77:c5:76: 60:67:f5:9f:d6:d0:07:9b:63:dd:e0:1c:ac:12:67: 25:dc:33:09:a8:aa:e6:7e:30:cd:ac:45:a7:ff:bd: 71:66:50:43:a2:50:6f:80:89:d3:1a:fa:07:89:9e: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:96:4D:BB:40:31:1F:9C:1D:88:7C:5A:9E:9B:46:9E:8C:3B:DC:2F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143920.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4f6::/32 Signature Algorithm: sha256WithRSAEncryption da:25:87:87:e0:aa:64:59:b0:12:55:29:ca:49:82:1a:db:b9: 73:12:90:9d:a6:2f:3b:bf:38:ca:b0:1a:b1:ba:5d:c5:d3:e7: 03:4c:4e:0e:62:eb:06:84:20:c6:2c:26:66:7e:e9:4e:7f:21: bb:75:cc:b1:53:39:77:78:c1:16:16:8e:9a:be:f8:9f:11:d6: 47:b3:0c:4a:00:90:ae:f8:28:4b:dc:53:ee:c2:b0:89:7a:f1: 83:75:f2:e9:51:35:22:dd:87:9d:7b:47:9e:92:e3:49:24:55: 4c:ae:6b:5a:04:27:25:2b:7b:bf:5e:c9:62:66:9e:c9:75:48: 51:b8:2d:71:ea:e2:b1:a7:84:7d:37:fd:a3:17:8c:45:3a:7b: b1:3f:a0:af:19:3a:f2:0b:a8:f9:ff:fc:0f:9c:6d:35:fc:74: 17:2f:df:2f:58:ae:8f:ab:06:e9:bf:e8:5e:e9:8f:7d:e0:8b: e6:f6:27:39:59:76:d7:3f:85:18:bf:ac:0f:a9:70:90:e7:5c: d5:f1:db:4e:5f:f0:b8:6e:60:7c:16:0a:aa:a0:98:b6:fb:fb: de:84:4a:19:fd:78:6b:a2:8c:6b:d3:de:8d:b5:26:d5:53:62: e9:3c:6b:53:2b:d3:33:7c:1b:5f:b1:ad:11:a4:0e:cf:65:e2: cc:ae:c5:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ4P4aUo95RtULlChIa9A5sNkuX0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyOVoX DTI3MDMwMzA2MTMyOVowMzExMC8GA1UEAxMoMTc5NjREQkI0MDMxMUY5QzFEODg3 QzVBOUU5QjQ2OUU4QzNCREMyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiH3pXXFPOlb/QudCca55ssFxc3DRM30tbCyxvHpOSdA9Hhsws6LfoH0brN Ii2n0lZkfBK73IJbPuxgNIjZ+RzGBh4Tn2P32xyR50lfrI3qFTMSQ26D2z6D17Jp vkiIfFiJMaA0Cfuek6k6FUYvYgfp50NVSyZvXrX71yrRc8jK9HRqT7o2grTQhyE0 NVy+sphAiJBTT/+Hy1ZSP/cmZ4HW7bqMnLwH6qciqq0tLlpLlAMoCLpRTr1NqSts MOwqBpLowlGnrcY+UZFXH9SId8V2YGf1n9bQB5tj3eAcrBJnJdwzCaiq5n4wzaxF p/+9cWZQQ6JQb4CJ0xr6B4me0NcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQXlk27 QDEfnB2IfFqem0aejDvcLzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pPYwDQYJKoZIhvcNAQELBQADggEBANolh4fgqmRZsBJVKcpJghrbuXMSkJ2mLzu/ OMqwGrG6XcXT5wNMTg5i6waEIMYsJmZ+6U5/Ibt1zLFTOXd4wRYWjpq++J8R1kez DEoAkK74KEvcU+7CsIl68YN18ulRNSLdh517R56S40kkVUyua1oEJyUre79eyWJm nsl1SFG4LXHq4rGnhH03/aMXjEU6e7E/oK8ZOvILqPn//A+cbTX8dBcv3y9Yro+r Bum/6F7pj33gi+b2JzlZdtc/hRi/rA+pcJDnXNXx205f8LhuYHwWCqqgmLb7+96E Shn9eGuijGvT3o21JtVTYuk8a1Mr0zN8G1+xrRGkDs9l4syuxQA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:09 2026 by rpki-client