$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143922.roa File: AS143922.roa (raw, json) Hash identifier: heK4S39nz0WcjrLbWWhJLtgLx3MgtciqqiyMCoodXxw= Subject key identifier: 2F:93:55:AC:42:04:9F:E6:72:C0:9B:2E:C6:A8:D7:29:CB:A3:FA:D8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1D77F0380365A6797990A081D358601000E35786 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143922.roa Signing time: Wed 04 Mar 2026 06:14:56 +0000 ROA not before: Wed 04 Mar 2026 06:09:56 +0000 ROA not after: Wed 03 Mar 2027 06:14:56 +0000 asID: 143922 IP address blocks: 240a:a4f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:77:f0:38:03:65:a6:79:79:90:a0:81:d3:58:60:10:00:e3:57:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:56 2026 GMT Not After : Mar 3 06:14:56 2027 GMT Subject: CN=2F9355AC42049FE672C09B2EC6A8D729CBA3FAD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:f4:23:7d:df:63:4d:7f:b5:d0:3d:b8:ef: a6:44:15:07:36:2f:58:ec:da:02:e3:2e:54:92:fd: 6f:12:73:3b:99:6f:34:2b:ed:c4:9b:1c:ef:1f:de: fc:f0:58:37:8b:ea:8b:a8:4e:ce:9c:3f:7d:60:03: ce:19:7b:c7:1d:f9:7c:ef:5d:48:e6:33:8d:8a:07: 00:8c:90:bd:c4:b4:d4:dc:a3:67:69:ef:2c:fb:f8: 81:9a:94:79:34:7c:68:ee:8b:dc:8e:9f:8b:0d:ef: f7:36:cb:5e:f6:ee:eb:7e:dd:1a:29:41:3a:23:ec: a7:9b:b3:b9:f7:2b:aa:6a:b1:45:cf:bc:f0:29:cd: a7:39:36:67:cd:73:4f:80:34:48:0b:30:35:60:3b: b7:e9:29:d3:80:be:03:09:4e:97:4a:2c:6e:c2:a5: 1a:8c:9d:25:4e:cd:78:e6:ae:2b:5a:01:09:2f:ee: 68:0d:49:4a:8e:81:a0:a1:23:37:d0:24:5e:98:51: 6d:dc:85:ba:36:bd:a7:51:9f:8a:37:b3:47:3a:61: f0:30:7b:7c:48:70:a9:8f:04:20:3e:c7:e7:1d:cc: 29:64:09:b6:cd:ac:46:10:f8:61:d5:98:7e:e9:1d: f5:c9:df:1b:f9:31:35:29:48:01:2e:b9:b1:e5:d9: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:93:55:AC:42:04:9F:E6:72:C0:9B:2E:C6:A8:D7:29:CB:A3:FA:D8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4f8::/32 Signature Algorithm: sha256WithRSAEncryption 6b:55:7d:59:b3:06:f0:ae:8b:14:22:d3:a1:ad:d7:84:fb:c9: d2:1b:09:7e:d9:15:20:55:5c:ef:2d:97:fb:c3:40:6a:ea:16: 81:fd:47:b7:c7:0a:d9:a5:02:d4:84:c9:9c:84:63:4d:d6:36: 0f:c6:44:2f:29:8d:91:27:f5:9c:c7:cb:cd:dc:b7:5c:90:c0: 12:df:4f:bc:e8:e6:6c:9a:ed:bc:82:1a:b0:05:73:30:da:68: 87:e8:14:1f:11:1e:64:3b:ef:9e:b9:b7:f0:94:d8:90:3b:2d: f2:01:19:00:29:ec:5d:9e:1f:38:1a:13:a9:34:9a:ff:80:e2: 86:72:c7:76:66:29:78:f3:7f:d0:d3:e8:80:40:67:88:c2:b2: 3e:37:c1:44:fb:5b:73:5f:04:16:d2:07:96:9b:38:a4:d9:ea: 8a:b8:7d:05:03:c5:b2:b1:8a:26:2b:d9:73:a2:bc:00:c6:c9: 3c:db:32:e2:c6:a5:a4:ad:27:e1:17:aa:9f:e7:c3:73:a3:82: ae:16:e0:6c:83:cb:10:32:40:d8:3d:9f:da:4a:79:b1:c5:2e: 44:5d:49:6d:0f:26:36:73:44:c5:41:15:d1:9c:14:ae:2d:2d: 88:43:af:6d:ad:6b:fe:ef:61:b4:33:66:22:d3:f1:89:ae:e8: 8d:0a:26:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHXfwOANlpnl5kKCB01hgEADjV4YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1NloX DTI3MDMwMzA2MTQ1NlowMzExMC8GA1UEAxMoMkY5MzU1QUM0MjA0OUZFNjcyQzA5 QjJFQzZBOEQ3MjlDQkEzRkFEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4n9CN932NNf7XQPbjvpkQVBzYvWOzaAuMuVJL9bxJzO5lvNCvtxJsc7x/e /PBYN4vqi6hOzpw/fWADzhl7xx35fO9dSOYzjYoHAIyQvcS01NyjZ2nvLPv4gZqU eTR8aO6L3I6fiw3v9zbLXvbu637dGilBOiPsp5uzufcrqmqxRc+88CnNpzk2Z81z T4A0SAswNWA7t+kp04C+AwlOl0osbsKlGoydJU7NeOauK1oBCS/uaA1JSo6BoKEj N9AkXphRbdyFuja9p1GfijezRzph8DB7fEhwqY8EID7H5x3MKWQJts2sRhD4YdWY fukd9cnfG/kxNSlIAS65seXZfiMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQvk1Ws QgSf5nLAmy7GqNcpy6P62DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pPgwDQYJKoZIhvcNAQELBQADggEBAGtVfVmzBvCuixQi06Gt14T7ydIbCX7ZFSBV XO8tl/vDQGrqFoH9R7fHCtmlAtSEyZyEY03WNg/GRC8pjZEn9ZzHy83ct1yQwBLf T7zo5mya7byCGrAFczDaaIfoFB8RHmQ77565t/CU2JA7LfIBGQAp7F2eHzgaE6k0 mv+A4oZyx3ZmKXjzf9DT6IBAZ4jCsj43wUT7W3NfBBbSB5abOKTZ6oq4fQUDxbKx iiYr2XOivADGyTzbMuLGpaStJ+EXqp/nw3Ojgq4W4GyDyxAyQNg9n9pKebHFLkRd SW0PJjZzRMVBFdGcFK4tLYhDr22ta/7vYbQzZiLT8Ymu6I0KJls= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:42 2026 by rpki-client