$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143934.roa File: AS143934.roa (raw, json) Hash identifier: aNb/XJGUKBzGll4ZiURsQyVcHbutXPm4TvfN63xin2s= Subject key identifier: FF:B5:E1:0C:A2:92:5F:A8:D2:F9:BD:57:4A:BF:25:02:95:1F:28:AB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6798863AC52E4BFD58D9153A2C0E75AC0FCB4323 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143934.roa Signing time: Wed 04 Mar 2026 06:12:30 +0000 ROA not before: Wed 04 Mar 2026 06:07:30 +0000 ROA not after: Wed 03 Mar 2027 06:12:30 +0000 asID: 143934 IP address blocks: 240a:a504::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:98:86:3a:c5:2e:4b:fd:58:d9:15:3a:2c:0e:75:ac:0f:cb:43:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:30 2026 GMT Not After : Mar 3 06:12:30 2027 GMT Subject: CN=FFB5E10CA2925FA8D2F9BD574ABF2502951F28AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:76:f6:d3:dd:80:d5:1d:86:8b:ba:a9:af: bb:40:25:be:3a:39:b4:ce:24:41:04:3f:c0:da:47: 49:d4:9b:75:9e:c1:c3:7f:12:2f:1b:0b:04:06:08: 52:5f:ff:cd:69:65:12:1a:ab:2d:57:68:5b:ee:3b: d9:03:45:b0:c8:ae:b2:5f:3d:0b:c4:d6:1d:de:39: 67:51:83:27:87:26:77:13:37:36:b5:3c:48:21:5e: a3:be:f2:98:35:47:f2:76:5d:77:4e:58:e4:ee:53: cb:01:43:10:ca:26:52:85:ec:67:73:54:4c:54:e0: 09:29:94:c6:83:25:3a:ab:41:d2:38:01:f4:d8:e5: 74:37:dc:1b:b5:5d:98:77:b1:d5:42:7e:b2:19:53: d5:6c:6d:97:1a:15:a4:ce:35:c9:4e:15:fc:d6:3b: 1d:82:0b:37:f2:65:2b:ed:71:fe:84:c7:ed:84:e1: 9d:ab:a2:b7:ce:d0:55:63:2b:83:d3:d8:ca:94:f9: 4d:a5:ee:9c:ba:d9:55:39:ec:06:63:fd:61:b2:39: e4:3c:9c:b5:c8:6d:56:84:49:a7:f7:64:93:e8:10: 78:e5:0f:9b:5f:70:9f:ba:10:0d:3f:75:b9:45:a4: 2c:39:89:dd:48:29:d0:7c:c8:8b:e3:db:55:93:43: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B5:E1:0C:A2:92:5F:A8:D2:F9:BD:57:4A:BF:25:02:95:1F:28:AB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a504::/32 Signature Algorithm: sha256WithRSAEncryption 83:1b:9b:d0:aa:7c:53:c8:1b:78:4e:cb:85:f3:98:32:a1:6e: 16:ea:de:f6:51:89:88:ba:2f:b6:a1:91:f4:2c:e5:57:a2:11: 7f:2d:aa:b6:c7:a1:ea:a7:45:15:1c:6c:3e:ce:e6:b5:59:f8: e8:3f:c4:1e:30:b0:75:26:3f:14:c2:99:97:e2:61:f0:28:4b: 36:8a:f8:78:e2:90:40:ea:c6:f9:d4:44:29:4d:fa:b3:1e:64: 7d:e5:25:6f:6d:b6:e7:f1:cc:e1:2a:37:54:e0:38:8e:6a:99: 32:3a:f1:3d:b5:62:92:b3:9f:2e:24:59:4b:b5:29:c3:f7:02: bf:ef:3f:9a:1b:f4:c6:82:ec:92:aa:57:43:8f:8d:21:f5:f3: 1a:c0:9e:13:e7:da:44:f8:0d:5f:73:99:b2:fa:a1:79:bb:2c: c7:ca:15:9c:b3:ba:29:5c:68:b2:85:7d:96:24:cd:9c:ee:8d: 7c:6c:69:b2:9b:12:b5:61:9d:9a:7f:71:86:e5:d5:2f:74:aa: 4d:06:d3:5a:b5:c1:03:b3:dd:76:e7:e0:76:3e:2d:be:84:64: 42:7c:a5:f6:5a:f8:44:da:8a:1f:d3:1b:e8:9b:92:c5:b7:1e: fc:1c:61:5c:cf:8a:cf:39:35:55:21:48:79:8b:15:8a:cb:b2: d5:0d:9e:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZ5iGOsUuS/1Y2RU6LA51rA/LQyMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczMFoX DTI3MDMwMzA2MTIzMFowMzExMC8GA1UEAxMoRkZCNUUxMENBMjkyNUZBOEQyRjlC RDU3NEFCRjI1MDI5NTFGMjhBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTMdvbT3YDVHYaLuqmvu0Alvjo5tM4kQQQ/wNpHSdSbdZ7Bw38SLxsLBAYI Ul//zWllEhqrLVdoW+472QNFsMiusl89C8TWHd45Z1GDJ4cmdxM3NrU8SCFeo77y mDVH8nZdd05Y5O5TywFDEMomUoXsZ3NUTFTgCSmUxoMlOqtB0jgB9NjldDfcG7Vd mHex1UJ+shlT1WxtlxoVpM41yU4V/NY7HYILN/JlK+1x/oTH7YThnauit87QVWMr g9PYypT5TaXunLrZVTnsBmP9YbI55DyctchtVoRJp/dkk+gQeOUPm19wn7oQDT91 uUWkLDmJ3Ugp0HzIi+PbVZNDsuUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT/teEM opJfqNL5vVdKvyUClR8oqzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pQQwDQYJKoZIhvcNAQELBQADggEBAIMbm9CqfFPIG3hOy4XzmDKhbhbq3vZRiYi6 L7ahkfQs5VeiEX8tqrbHoeqnRRUcbD7O5rVZ+Og/xB4wsHUmPxTCmZfiYfAoSzaK +HjikEDqxvnURClN+rMeZH3lJW9ttufxzOEqN1TgOI5qmTI68T21YpKzny4kWUu1 KcP3Ar/vP5ob9MaC7JKqV0OPjSH18xrAnhPn2kT4DV9zmbL6oXm7LMfKFZyzuilc aLKFfZYkzZzujXxsabKbErVhnZp/cYbl1S90qk0G01q1wQOz3Xbn4HY+Lb6EZEJ8 pfZa+ETaih/TG+ibksW3HvwcYVzPis85NVUhSHmLFYrLstUNnn4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:14 2026 by rpki-client