$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143931.roa File: AS143931.roa (raw, json) Hash identifier: tZeMrjdEHmKppavCmgBXVNAOtbpb8bHe9x5mAJg5Fz8= Subject key identifier: 98:93:CA:F0:66:74:70:3B:56:FC:B0:20:1D:39:D3:CE:46:4F:F2:8A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 32CEB75E05F24FE237F3E62BDC9BC14203055745 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143931.roa Signing time: Wed 04 Mar 2026 06:15:28 +0000 ROA not before: Wed 04 Mar 2026 06:10:28 +0000 ROA not after: Wed 03 Mar 2027 06:15:28 +0000 asID: 143931 IP address blocks: 240a:a501::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ce:b7:5e:05:f2:4f:e2:37:f3:e6:2b:dc:9b:c1:42:03:05:57:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:28 2026 GMT Not After : Mar 3 06:15:28 2027 GMT Subject: CN=9893CAF06674703B56FCB0201D39D3CE464FF28A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:ef:e6:a0:1e:bc:a0:da:ca:44:e2:e1:52: be:4d:2e:dc:3a:5a:2f:3d:84:3c:84:76:4b:41:30: a1:d2:fe:cc:d9:cf:2d:48:04:42:50:1b:37:c0:46: 92:7f:38:b4:21:02:20:70:7b:48:22:56:86:c0:e8: a9:fa:cd:36:12:c0:34:c4:f9:cf:8d:c7:c3:a7:b3: 6d:24:1e:78:d7:c2:a5:31:e2:69:70:9b:b9:4a:d5: 1b:06:ad:e1:6e:4b:4d:25:d5:11:2e:c8:91:51:a3: a5:58:5b:ce:cf:c0:ff:70:27:70:5d:76:18:2a:a7: b5:b5:90:0b:84:f2:b9:9b:bb:27:aa:e6:1b:50:f5: b7:fd:e8:d3:98:37:5f:c7:c0:a8:10:d9:b4:f9:dc: d4:09:d0:30:b3:e0:73:c2:83:6a:f3:e0:4e:0c:67: 30:5a:eb:42:d9:0b:eb:77:cd:25:53:c0:9e:8f:6c: 01:22:50:fa:80:b8:78:f3:96:d1:cf:32:27:79:81: d8:6d:6e:e5:40:7c:00:83:c0:3d:85:2f:29:b6:c7: 18:4a:9e:18:23:66:f3:f0:0c:86:3b:fc:91:de:53: 0b:9a:b0:81:57:c1:76:10:c0:6f:9f:e2:fb:39:c4: 99:25:e3:19:e7:66:7c:cb:9d:c6:5e:72:7d:45:5b: c2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:93:CA:F0:66:74:70:3B:56:FC:B0:20:1D:39:D3:CE:46:4F:F2:8A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a501::/32 Signature Algorithm: sha256WithRSAEncryption 93:2b:66:0d:6d:9f:8e:04:f4:75:c8:d6:dd:e7:61:2b:99:11: d7:de:90:8a:73:40:df:fc:12:cf:20:1d:8f:17:eb:a9:91:82: a1:48:f8:16:b1:e0:fc:3f:1a:73:aa:f3:52:d8:15:1c:90:53: 8b:df:09:d4:cd:d0:4a:f6:e5:c0:d9:f6:e5:cf:2d:4e:31:5c: ed:08:ac:75:78:cb:d8:64:7d:08:c0:14:8b:82:37:f6:de:34: 6a:39:54:f1:44:e2:df:6d:2a:cb:76:35:ff:cd:3d:fe:6a:b5: 64:f5:43:80:35:06:ee:8e:9c:0f:a0:53:fb:3b:7c:5d:71:8b: 22:f5:25:87:bc:f0:76:2d:55:9e:66:75:1d:2c:43:88:13:27: 68:0c:ff:1f:a2:e2:60:cb:33:52:1a:98:e9:1e:bc:b5:43:5f: 5d:cb:f6:3c:2b:6b:2f:8d:32:e1:e0:36:ff:45:ec:b0:7c:63: f0:79:36:29:64:d0:a1:2b:6b:36:02:ae:c9:f1:60:48:6e:f2: f0:14:89:39:31:83:6c:bf:2c:fc:82:46:ae:5f:31:a7:a1:c8: 31:60:44:f9:ff:a2:18:f8:44:4a:99:c7:fc:9a:ff:e2:15:5d: 2d:55:41:1c:e9:fa:ae:a7:aa:b2:94:b2:73:67:48:c2:c9:72: de:6a:45:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMs63XgXyT+I38+Yr3JvBQgMFV0UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyOFoX DTI3MDMwMzA2MTUyOFowMzExMC8GA1UEAxMoOTg5M0NBRjA2Njc0NzAzQjU2RkNC MDIwMUQzOUQzQ0U0NjRGRjI4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNz7+agHryg2spE4uFSvk0u3DpaLz2EPIR2S0EwodL+zNnPLUgEQlAbN8BG kn84tCECIHB7SCJWhsDoqfrNNhLANMT5z43Hw6ezbSQeeNfCpTHiaXCbuUrVGwat 4W5LTSXVES7IkVGjpVhbzs/A/3AncF12GCqntbWQC4TyuZu7J6rmG1D1t/3o05g3 X8fAqBDZtPnc1AnQMLPgc8KDavPgTgxnMFrrQtkL63fNJVPAno9sASJQ+oC4ePOW 0c8yJ3mB2G1u5UB8AIPAPYUvKbbHGEqeGCNm8/AMhjv8kd5TC5qwgVfBdhDAb5/i +znEmSXjGedmfMudxl5yfUVbwssCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSYk8rw ZnRwO1b8sCAdOdPORk/yijAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pQEwDQYJKoZIhvcNAQELBQADggEBAJMrZg1tn44E9HXI1t3nYSuZEdfekIpzQN/8 Es8gHY8X66mRgqFI+Bax4Pw/GnOq81LYFRyQU4vfCdTN0Er25cDZ9uXPLU4xXO0I rHV4y9hkfQjAFIuCN/beNGo5VPFE4t9tKst2Nf/NPf5qtWT1Q4A1Bu6OnA+gU/s7 fF1xiyL1JYe88HYtVZ5mdR0sQ4gTJ2gM/x+i4mDLM1IamOkevLVDX13L9jwray+N MuHgNv9F7LB8Y/B5Nilk0KErazYCrsnxYEhu8vAUiTkxg2y/LPyCRq5fMaehyDFg RPn/ohj4REqZx/ya/+IVXS1VQRzp+q6nqrKUsnNnSMLJct5qRbM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:44 2026 by rpki-client