$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143954.roa File: AS143954.roa (raw, json) Hash identifier: jD0zIszFifa5TkrLLqQNGT7Xp1JWPtVX3Hh379mwzOo= Subject key identifier: 29:FD:CF:44:D9:FE:0C:F2:39:8D:30:C8:08:CD:51:9F:51:64:43:06 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 29E605A481E6F13CFE1037512B141F413C84515B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143954.roa Signing time: Wed 04 Mar 2026 06:14:02 +0000 ROA not before: Wed 04 Mar 2026 06:09:02 +0000 ROA not after: Wed 03 Mar 2027 06:14:02 +0000 asID: 143954 IP address blocks: 240a:a518::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e6:05:a4:81:e6:f1:3c:fe:10:37:51:2b:14:1f:41:3c:84:51:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:02 2026 GMT Not After : Mar 3 06:14:02 2027 GMT Subject: CN=29FDCF44D9FE0CF2398D30C808CD519F51644306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:67:f9:07:77:ce:d1:97:55:d8:30:a9:f6: cd:ab:16:89:7d:85:7f:9f:e5:26:cf:03:b4:fd:f3: 96:dd:1c:5e:92:da:fc:57:b5:d7:2c:c8:19:6f:30: 38:8f:ba:15:4b:e1:1b:c0:e9:d6:f9:c0:92:86:2f: f0:0c:60:ef:0e:e0:86:78:02:85:1e:c7:8a:05:1b: 5f:14:15:43:21:5b:ae:52:87:21:44:48:20:b5:98: 7a:10:da:3f:b9:f1:8b:27:43:4f:03:d0:97:80:2c: 81:dc:5a:85:9a:ed:cf:8a:10:6b:b9:5e:61:bc:af: 79:34:8b:e3:93:a0:63:b6:00:65:1a:e8:24:36:e6: cc:40:c3:b9:fb:d0:87:9a:d3:96:2c:63:54:7e:fc: cd:ff:c1:2c:2f:ca:88:16:31:c6:c0:39:df:ad:c9: 6f:05:17:d2:a2:06:5c:37:ac:87:6a:5f:89:96:96: 98:e1:23:3c:45:28:22:4c:01:f3:b2:75:75:de:b1: 88:a7:10:88:b9:48:6e:94:1d:6b:ab:6e:93:5d:b0: 29:3c:8a:65:86:af:aa:57:a8:15:ea:57:95:bd:16: 20:19:dd:66:dc:12:a3:61:06:9f:e2:73:71:f0:87: a6:81:8e:0f:89:7e:3b:e3:d7:20:56:16:fd:c4:b0: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FD:CF:44:D9:FE:0C:F2:39:8D:30:C8:08:CD:51:9F:51:64:43:06 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143954.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a518::/32 Signature Algorithm: sha256WithRSAEncryption 96:b7:d5:5e:1a:25:58:2d:d3:e3:a0:cd:18:4a:ec:89:b1:77: 0a:08:d8:84:11:f8:4a:1e:0b:ec:17:68:10:b9:b2:39:a3:68: 75:b5:17:5e:34:bf:1d:d7:71:9c:c9:5d:4a:d1:5f:5d:f9:a2: f2:e3:1f:ca:a7:56:3b:10:8c:4e:fe:20:60:3c:e9:03:68:db: 83:ab:27:11:48:83:79:e7:6c:4e:8a:b2:5c:f1:46:12:e1:56: 3e:58:00:d7:72:1c:ab:2e:53:7a:88:94:44:59:18:73:41:80: 55:97:c6:f0:a1:b2:36:25:e4:af:80:76:ba:3b:f5:1e:78:2e: c3:ed:59:45:73:59:c8:2b:ba:b6:7f:9a:96:17:86:ef:28:e4: f2:45:ba:eb:7f:05:b4:26:e8:67:94:49:8d:db:93:5b:f3:31: 43:18:4c:ad:dd:84:78:32:2a:8d:8b:eb:de:7c:e1:9c:d0:24: 1b:fd:ec:f3:20:f3:c5:c8:42:26:b0:c0:dc:9f:da:78:b1:90: 89:3e:fc:17:29:80:56:e0:c0:0c:43:94:a5:9c:19:3e:70:e0: 2d:46:3c:82:9a:57:82:75:9a:1b:db:c6:75:72:a5:2c:9b:97: 43:3f:b7:e1:e6:a0:7a:65:dc:c5:61:94:97:8c:33:bb:ac:b7: 66:c8:c9:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKeYFpIHm8Tz+EDdRKxQfQTyEUVswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwMloX DTI3MDMwMzA2MTQwMlowMzExMC8GA1UEAxMoMjlGRENGNDREOUZFMENGMjM5OEQz MEM4MDhDRDUxOUY1MTY0NDMwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhpZ/kHd87Rl1XYMKn2zasWiX2Ff5/lJs8DtP3zlt0cXpLa/Fe11yzIGW8w OI+6FUvhG8Dp1vnAkoYv8Axg7w7ghngChR7HigUbXxQVQyFbrlKHIURIILWYehDa P7nxiydDTwPQl4AsgdxahZrtz4oQa7leYbyveTSL45OgY7YAZRroJDbmzEDDufvQ h5rTlixjVH78zf/BLC/KiBYxxsA5363JbwUX0qIGXDesh2pfiZaWmOEjPEUoIkwB 87J1dd6xiKcQiLlIbpQda6tuk12wKTyKZYavqleoFepXlb0WIBndZtwSo2EGn+Jz cfCHpoGOD4l+O+PXIFYW/cSwDk0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQp/c9E 2f4M8jmNMMgIzVGfUWRDBjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pRgwDQYJKoZIhvcNAQELBQADggEBAJa31V4aJVgt0+OgzRhK7ImxdwoI2IQR+Eoe C+wXaBC5sjmjaHW1F140vx3XcZzJXUrRX135ovLjH8qnVjsQjE7+IGA86QNo24Or JxFIg3nnbE6KslzxRhLhVj5YANdyHKsuU3qIlERZGHNBgFWXxvChsjYl5K+Adro7 9R54LsPtWUVzWcgrurZ/mpYXhu8o5PJFuut/BbQm6GeUSY3bk1vzMUMYTK3dhHgy Ko2L69584ZzQJBv97PMg88XIQiawwNyf2nixkIk+/BcpgFbgwAxDlKWcGT5w4C1G PIKaV4J1mhvbxnVypSybl0M/t+HmoHpl3MVhlJeMM7ust2bIyTk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:40 2026 by rpki-client