$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143968.roa File: AS143968.roa (raw, json) Hash identifier: YwutE2lpaf4WZYLAID39zH8agX4eCgJlkwuFCjO0S5U= Subject key identifier: 0B:A0:F9:32:60:C6:B4:CC:72:B1:C5:01:7F:57:EC:73:AC:CD:28:AE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6B790F4FD93111F9A312E9739170D7EDBAEFE4BD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143968.roa Signing time: Wed 04 Mar 2026 06:12:44 +0000 ROA not before: Wed 04 Mar 2026 06:07:44 +0000 ROA not after: Wed 03 Mar 2027 06:12:44 +0000 asID: 143968 IP address blocks: 240a:a526::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:79:0f:4f:d9:31:11:f9:a3:12:e9:73:91:70:d7:ed:ba:ef:e4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:44 2026 GMT Not After : Mar 3 06:12:44 2027 GMT Subject: CN=0BA0F93260C6B4CC72B1C5017F57EC73ACCD28AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:9f:92:5d:00:92:b9:8e:b2:77:85:ba:41: 9c:57:8d:02:f9:c0:95:f8:01:5e:ef:4c:be:b2:1b: 4d:85:7b:9b:69:95:c9:64:93:0f:26:6c:28:2d:37: 60:e3:a8:c3:4b:49:1f:c0:1d:25:f8:7a:b1:63:70: 7d:cf:a8:79:cd:0b:c6:45:d4:25:83:53:45:ea:7b: a6:8e:ed:a1:d8:38:cd:da:c5:f4:7c:ad:e7:44:fa: 99:5e:5c:a4:91:02:c2:d3:fb:0f:c2:da:98:54:42: 47:4f:f2:43:e3:75:11:5f:a8:b3:21:8e:4c:c7:e0: 41:06:82:ea:f4:22:a9:eb:b7:c8:a1:87:92:ba:02: 0c:c6:36:a1:fa:45:48:cf:ef:ad:64:15:1c:1e:58: e5:50:e9:8f:d1:03:e2:67:90:8f:30:f2:c0:9a:d6: a2:d5:50:60:d8:21:89:4f:1c:31:7d:3a:6c:2e:6b: 22:14:4e:60:54:e3:25:da:4a:2d:a8:ca:c8:a1:92: 1e:7a:0e:39:50:9a:ba:8a:8d:34:f4:07:af:11:b5: 0b:84:b5:bc:10:29:2c:c4:8f:71:f9:af:7a:4f:59: fe:ed:fd:f3:4e:f6:11:b5:ee:48:2f:a9:6c:58:86: 41:90:14:40:48:5b:7f:78:77:2d:62:74:2f:13:55: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A0:F9:32:60:C6:B4:CC:72:B1:C5:01:7F:57:EC:73:AC:CD:28:AE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a526::/32 Signature Algorithm: sha256WithRSAEncryption 78:a4:ff:05:af:d0:0d:3d:3a:2f:40:58:39:5f:40:5d:10:5e: 48:35:9a:e1:a2:70:07:4a:ca:2f:90:ab:b6:65:2d:da:84:a9: 9a:93:a4:d7:53:c2:8c:9f:b6:39:46:fd:f5:75:b9:e9:28:7c: 6f:f7:98:23:0f:fc:e6:06:00:42:01:ce:3b:7f:a6:f6:d2:db: 0b:ab:f9:5b:15:0c:ec:fa:1d:f9:ac:56:5b:f8:13:a9:a2:fb: 6d:a9:1d:4a:1a:02:01:3d:54:db:ec:39:c1:34:ea:78:3b:7a: 64:1c:f2:07:e4:d4:73:37:b1:74:9c:d2:b2:8c:c0:50:8c:2d: 61:40:8e:20:97:9b:41:49:0f:ae:d3:0a:0e:ee:8c:ec:4f:91: 2c:77:a9:a9:2a:52:25:2d:61:21:6c:12:83:0c:5c:c3:05:84: fe:f5:20:d6:c1:70:27:00:a8:59:41:ba:8b:65:0d:ed:51:41: c9:e4:19:37:05:f0:3d:75:f2:48:e9:1d:1c:e4:a7:0e:53:b3: f8:6f:6f:4a:6f:84:63:36:9f:66:18:5a:3e:29:5d:4d:ea:4c: d0:6c:ad:6e:f2:3c:cc:cd:33:73:f5:58:da:9b:ba:54:85:d1: 3f:15:52:c3:53:97:7a:2a:71:1b:22:9a:49:c9:6d:d8:c9:9f: 12:88:ce:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa3kPT9kxEfmjEulzkXDX7brv5L0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0NFoX DTI3MDMwMzA2MTI0NFowMzExMC8GA1UEAxMoMEJBMEY5MzI2MEM2QjRDQzcyQjFD NTAxN0Y1N0VDNzNBQ0NEMjhBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALohn5JdAJK5jrJ3hbpBnFeNAvnAlfgBXu9MvrIbTYV7m2mVyWSTDyZsKC03 YOOow0tJH8AdJfh6sWNwfc+oec0LxkXUJYNTRep7po7todg4zdrF9Hyt50T6mV5c pJECwtP7D8LamFRCR0/yQ+N1EV+osyGOTMfgQQaC6vQiqeu3yKGHkroCDMY2ofpF SM/vrWQVHB5Y5VDpj9ED4meQjzDywJrWotVQYNghiU8cMX06bC5rIhROYFTjJdpK LajKyKGSHnoOOVCauoqNNPQHrxG1C4S1vBApLMSPcfmvek9Z/u398072EbXuSC+p bFiGQZAUQEhbf3h3LWJ0LxNVR1MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQLoPky YMa0zHKxxQF/V+xzrM0orjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pSYwDQYJKoZIhvcNAQELBQADggEBAHik/wWv0A09Oi9AWDlfQF0QXkg1muGicAdK yi+Qq7ZlLdqEqZqTpNdTwoyftjlG/fV1uekofG/3mCMP/OYGAEIBzjt/pvbS2wur +VsVDOz6HfmsVlv4E6mi+22pHUoaAgE9VNvsOcE06ng7emQc8gfk1HM3sXSc0rKM wFCMLWFAjiCXm0FJD67TCg7ujOxPkSx3qakqUiUtYSFsEoMMXMMFhP71INbBcCcA qFlBuotlDe1RQcnkGTcF8D118kjpHRzkpw5Ts/hvb0pvhGM2n2YYWj4pXU3qTNBs rW7yPMzNM3P1WNqbulSF0T8VUsNTl3oqcRsimknJbdjJnxKIzg0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:20 2026 by rpki-client