$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143928.roa File: AS143928.roa (raw, json) Hash identifier: O1lApVdO/XkwKlrOd0Q42RIaO+X6ZU6nnAgQKLiPivw= Subject key identifier: A8:46:1D:92:3D:C6:A7:58:8D:24:DA:36:AD:F6:02:D3:34:AE:34:B3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 24C772ADEDC80B2E3FF71601328171D7876054A9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143928.roa Signing time: Wed 04 Mar 2026 06:14:31 +0000 ROA not before: Wed 04 Mar 2026 06:09:31 +0000 ROA not after: Wed 03 Mar 2027 06:14:31 +0000 asID: 143928 IP address blocks: 240a:a4fe::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c7:72:ad:ed:c8:0b:2e:3f:f7:16:01:32:81:71:d7:87:60:54:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:31 2026 GMT Not After : Mar 3 06:14:31 2027 GMT Subject: CN=A8461D923DC6A7588D24DA36ADF602D334AE34B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4f:09:d0:66:39:19:62:e3:ae:2c:85:a8:0b: 07:68:37:33:3b:a5:9a:44:94:7e:d1:90:2d:7c:2d: d3:5f:9e:1f:b2:bb:6f:15:d3:8b:11:fc:51:2e:38: 31:88:da:85:d0:b9:0a:9f:4b:cd:9b:5e:96:6b:38: be:c0:57:47:ba:ae:e1:db:c4:1f:c8:69:64:f9:1a: 9e:d4:f5:88:49:97:1b:e4:bb:4d:ca:d5:59:4a:21: 8c:7d:d9:a7:f8:7f:e1:ab:eb:78:70:7b:50:6c:3f: d2:e0:b7:cd:ac:e2:c9:33:8e:1f:83:71:a9:c5:8f: 7f:f8:f7:e8:d4:e7:ec:99:d4:92:e7:0e:20:55:97: 9e:0d:20:bf:15:2f:ed:ed:6f:b4:0a:84:20:01:51: 03:dd:55:74:e8:1c:0c:92:2f:be:78:35:30:06:eb: 6e:36:91:72:c3:34:9e:0b:62:cd:74:62:c8:21:3f: bb:a8:a6:e0:3c:6e:23:7a:9a:f8:3d:cb:1f:a3:e4: 78:57:0e:f3:1d:b2:79:33:32:33:32:1e:d1:13:55: 07:81:f2:f0:87:2f:bd:2b:71:4c:66:ce:5d:3a:1c: f8:63:b9:0c:d8:80:27:3b:c6:a7:af:42:ac:7e:ad: 74:ed:e8:1f:b6:8f:47:82:a2:32:fb:04:cf:f8:d9: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:46:1D:92:3D:C6:A7:58:8D:24:DA:36:AD:F6:02:D3:34:AE:34:B3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143928.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4fe::/32 Signature Algorithm: sha256WithRSAEncryption 21:50:af:a4:d3:7d:9e:ab:78:35:4d:87:c7:20:b5:86:9b:05: 23:81:64:f8:83:62:18:39:65:1c:fa:bc:26:df:a6:4d:3a:d5: 8d:aa:ee:9c:55:de:78:cf:ba:92:56:ea:09:c3:f4:3f:24:6f: c1:5f:b1:36:62:4a:4f:be:a8:2d:b6:b1:80:60:fd:79:f8:47: 67:f6:b4:5f:0a:9e:77:00:57:69:18:c4:9c:f3:ff:8a:63:b1: 34:e8:28:e2:eb:52:f1:eb:00:45:37:c6:59:83:e6:df:24:3a: 3f:bc:0f:74:ff:de:58:5d:56:89:dd:32:dc:0f:74:64:d0:4d: 1d:5f:b0:ea:9f:84:1a:96:9e:51:d9:2a:74:5c:9a:06:d7:28: e3:4f:1d:fb:6f:cd:b4:bd:51:5c:08:63:ec:d0:3c:7f:df:60: fd:24:3b:fd:32:f1:7f:ba:24:cd:dc:28:e1:2b:41:22:ac:16: 23:6a:67:1d:c6:3d:4d:8f:90:51:e5:c7:08:ef:66:d1:a7:12: 0f:44:5c:af:5c:39:da:da:74:d5:46:06:37:1e:32:88:a5:9e: 64:82:c5:f7:01:8a:18:60:94:f4:dd:8d:a3:30:66:06:a3:70: e7:3c:ba:25:c6:0f:4c:b2:3c:0e:0c:95:30:b3:97:4f:ff:7d: 70:fb:12:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJMdyre3ICy4/9xYBMoFx14dgVKkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzMVoX DTI3MDMwMzA2MTQzMVowMzExMC8GA1UEAxMoQTg0NjFEOTIzREM2QTc1ODhEMjRE QTM2QURGNjAyRDMzNEFFMzRCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOdPCdBmORli464shagLB2g3MzulmkSUftGQLXwt01+eH7K7bxXTixH8US44 MYjahdC5Cp9LzZtelms4vsBXR7qu4dvEH8hpZPkantT1iEmXG+S7TcrVWUohjH3Z p/h/4avreHB7UGw/0uC3zaziyTOOH4NxqcWPf/j36NTn7JnUkucOIFWXng0gvxUv 7e1vtAqEIAFRA91VdOgcDJIvvng1MAbrbjaRcsM0ngtizXRiyCE/u6im4DxuI3qa +D3LH6PkeFcO8x2yeTMyMzIe0RNVB4Hy8IcvvStxTGbOXToc+GO5DNiAJzvGp69C rH6tdO3oH7aPR4KiMvsEz/jZtBkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSoRh2S PcanWI0k2jat9gLTNK40szAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pP4wDQYJKoZIhvcNAQELBQADggEBACFQr6TTfZ6reDVNh8cgtYabBSOBZPiDYhg5 ZRz6vCbfpk061Y2q7pxV3njPupJW6gnD9D8kb8FfsTZiSk++qC22sYBg/Xn4R2f2 tF8KnncAV2kYxJzz/4pjsTToKOLrUvHrAEU3xlmD5t8kOj+8D3T/3lhdVondMtwP dGTQTR1fsOqfhBqWnlHZKnRcmgbXKONPHftvzbS9UVwIY+zQPH/fYP0kO/0y8X+6 JM3cKOErQSKsFiNqZx3GPU2PkFHlxwjvZtGnEg9EXK9cOdradNVGBjceMoilnmSC xfcBihhglPTdjaMwZgajcOc8uiXGD0yyPA4MlTCzl0//fXD7Eho= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:39 2026 by rpki-client