$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143924.roa File: AS143924.roa (raw, json) Hash identifier: DE/uXXZ+Y31rvs8oe4LL05t9FX+ZcwEQJK7OwWGwGQE= Subject key identifier: 52:28:8F:89:8B:5A:33:55:F9:2B:EF:10:0E:07:58:BB:9B:20:B8:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 678C722DDCC90C4ECC2FF4CC88D9E54B327F188E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143924.roa Signing time: Wed 04 Mar 2026 06:15:11 +0000 ROA not before: Wed 04 Mar 2026 06:10:11 +0000 ROA not after: Wed 03 Mar 2027 06:15:11 +0000 asID: 143924 IP address blocks: 240a:a4fa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8c:72:2d:dc:c9:0c:4e:cc:2f:f4:cc:88:d9:e5:4b:32:7f:18:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:11 2026 GMT Not After : Mar 3 06:15:11 2027 GMT Subject: CN=52288F898B5A3355F92BEF100E0758BB9B20B89D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:3c:90:05:94:a6:4a:05:8b:b6:fc:2e:ef: de:09:ed:4c:9c:14:57:ce:08:66:f2:ec:f4:48:56: 90:5b:ef:52:46:ca:b6:a4:99:a7:6e:29:4f:cb:b6: 0c:ff:f8:cd:4f:f1:3d:d1:b7:1b:41:af:49:2d:73: 3b:17:3d:27:f0:6c:f0:82:ee:89:76:ff:3f:0d:ac: b5:1d:52:8f:94:d3:9e:e2:f5:68:3a:f1:c9:24:28: ae:4b:7c:de:5c:ef:31:ba:17:d1:f4:02:ef:ea:af: 24:31:2d:cf:41:96:ba:7f:8a:59:6c:8e:e8:5b:36: b5:e1:b7:23:41:d4:50:0e:61:3d:2b:c2:9a:0d:26: ff:2d:46:c9:36:0a:87:63:75:b1:f7:1c:bc:6e:e2: 97:13:29:ce:6d:43:a6:ef:8b:bb:c8:5d:4e:eb:7a: b9:da:5e:1a:0b:ee:35:d0:b8:a6:b4:7d:b3:f5:56: c4:f7:b6:4b:0d:c9:79:32:74:6d:e2:40:fe:e1:61: d0:5e:29:38:76:c0:ef:9f:6e:fe:6d:f0:4f:da:6f: aa:70:4e:90:ad:5a:80:5c:e0:15:20:73:3c:89:78: e0:d1:35:29:f7:69:28:79:85:d5:83:e9:30:0c:83: 78:3d:ed:41:0b:3d:61:2c:6d:2e:f2:e4:86:8e:5b: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:28:8F:89:8B:5A:33:55:F9:2B:EF:10:0E:07:58:BB:9B:20:B8:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4fa::/32 Signature Algorithm: sha256WithRSAEncryption 63:c4:9d:71:28:ec:ca:dd:ba:79:f5:cf:0f:b3:6f:df:44:00: e3:a6:03:5d:76:b0:f9:6c:5d:e7:c2:f7:0f:24:91:00:03:1b: f8:64:0a:81:2b:25:ab:3a:4d:67:7b:6a:4b:3b:fc:9f:24:5e: f6:5d:90:16:f1:12:4b:57:2d:68:66:e2:d9:18:16:2e:d2:19: b3:39:13:54:0d:62:fe:6b:aa:0a:0f:bf:39:02:c6:10:3f:b5: be:43:68:4b:69:74:fd:6e:34:af:62:33:2b:0a:84:7b:a0:5a: e6:3f:d6:d4:ca:f4:1f:60:7a:0b:4e:86:bf:49:3d:11:01:f1: 75:0f:60:e8:0a:ea:c2:9b:17:23:9a:db:98:33:47:a3:1a:41: 11:96:9e:ea:51:4f:01:2c:3e:26:89:6c:29:91:dd:b5:38:64: f4:27:9b:76:d8:62:5f:04:e6:7b:9c:c3:f3:2b:02:af:53:a4: 42:d3:c5:23:af:8f:60:cd:4a:1a:c4:a7:58:27:3f:87:58:19: e1:3b:1d:ae:96:14:b2:53:e6:62:50:9d:90:bf:14:16:38:54: 36:2f:b3:da:8e:c5:36:20:b7:98:d9:d6:50:f4:de:54:7f:af: 97:c9:3d:fb:65:a9:3e:17:dd:4c:fd:f4:d7:47:fe:5c:63:35: 07:50:15:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZ4xyLdzJDE7ML/TMiNnlSzJ/GI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxMVoX DTI3MDMwMzA2MTUxMVowMzExMC8GA1UEAxMoNTIyODhGODk4QjVBMzM1NUY5MkJF RjEwMEUwNzU4QkI5QjIwQjg5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJEPJAFlKZKBYu2/C7v3gntTJwUV84IZvLs9EhWkFvvUkbKtqSZp24pT8u2 DP/4zU/xPdG3G0GvSS1zOxc9J/Bs8ILuiXb/Pw2stR1Sj5TTnuL1aDrxySQorkt8 3lzvMboX0fQC7+qvJDEtz0GWun+KWWyO6Fs2teG3I0HUUA5hPSvCmg0m/y1GyTYK h2N1sfccvG7ilxMpzm1Dpu+Lu8hdTut6udpeGgvuNdC4prR9s/VWxPe2Sw3JeTJ0 beJA/uFh0F4pOHbA759u/m3wT9pvqnBOkK1agFzgFSBzPIl44NE1KfdpKHmF1YPp MAyDeD3tQQs9YSxtLvLkho5bNVECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRSKI+J i1ozVfkr7xAOB1i7myC4nTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pPowDQYJKoZIhvcNAQELBQADggEBAGPEnXEo7Mrdunn1zw+zb99EAOOmA112sPls XefC9w8kkQADG/hkCoErJas6TWd7aks7/J8kXvZdkBbxEktXLWhm4tkYFi7SGbM5 E1QNYv5rqgoPvzkCxhA/tb5DaEtpdP1uNK9iMysKhHugWuY/1tTK9B9gegtOhr9J PREB8XUPYOgK6sKbFyOa25gzR6MaQRGWnupRTwEsPiaJbCmR3bU4ZPQnm3bYYl8E 5nucw/MrAq9TpELTxSOvj2DNShrEp1gnP4dYGeE7Ha6WFLJT5mJQnZC/FBY4VDYv s9qOxTYgt5jZ1lD03lR/r5fJPftlqT4X3Uz99NdH/lxjNQdQFSs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:01 2026 by rpki-client