$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143107.roa File: AS143107.roa (raw, json) Hash identifier: oTlaANxL4dPrre+di1jVhl3AOwdx0Xl9/ZfjIT6lxLg= Subject key identifier: 45:D0:AF:B9:DB:A7:13:F3:58:7E:B7:48:06:C1:6F:35:EA:D3:FA:D4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 67DB6D0B640A6BB040CDED1C05976F01F41CFD39 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143107.roa Signing time: Wed 04 Mar 2026 06:07:47 +0000 ROA not before: Wed 04 Mar 2026 06:02:47 +0000 ROA not after: Wed 03 Mar 2027 06:07:47 +0000 asID: 143107 IP address blocks: 240a:a1c9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:db:6d:0b:64:0a:6b:b0:40:cd:ed:1c:05:97:6f:01:f4:1c:fd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:47 2026 GMT Not After : Mar 3 06:07:47 2027 GMT Subject: CN=45D0AFB9DBA713F3587EB74806C16F35EAD3FAD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:75:db:7d:de:96:75:1f:54:c4:5d:ac:3c: 0c:34:66:0a:bb:89:1a:47:a9:28:b0:db:da:86:96: ba:d5:ab:cb:c7:a1:21:f4:94:33:50:24:ab:36:7d: 1b:04:c3:04:29:21:b4:f7:1f:fd:98:61:90:c0:7d: 45:0f:46:06:a6:03:e6:88:8f:9a:0c:84:8f:81:3c: c9:83:06:e5:79:81:b5:2a:0d:3a:c6:e9:f5:18:9e: 9a:d2:b7:24:95:3e:e5:aa:59:66:78:3c:35:5e:cb: 8b:a9:ce:b5:c5:29:4b:1f:ed:a6:93:ad:6b:bf:09: 57:6c:fd:a0:a8:59:8d:f5:22:e3:e4:64:da:65:c6: 23:a3:e8:72:85:94:f1:80:5a:98:9c:4e:bc:39:5d: 6c:50:52:1b:32:38:84:b0:ad:7a:76:ea:31:09:c3: 57:11:05:70:33:cc:21:24:f8:f6:89:ae:5f:f3:e2: 57:87:0d:2f:f1:0d:09:14:b0:82:84:72:7e:28:ae: af:41:9d:14:be:e9:48:5e:2b:2a:b2:ae:22:81:90: de:24:ac:c3:64:1d:20:9c:6c:52:57:44:78:bd:e7: 6c:fe:c5:62:cf:d0:a2:14:5c:27:f6:e9:53:96:2d: 76:2c:d3:b1:90:a9:2d:ea:ba:1d:a5:c1:93:ef:9f: e7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D0:AF:B9:DB:A7:13:F3:58:7E:B7:48:06:C1:6F:35:EA:D3:FA:D4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143107.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1c9::/32 Signature Algorithm: sha256WithRSAEncryption a6:79:cf:dc:98:d2:fb:03:6b:e6:04:d5:d2:13:88:94:80:75: 48:bb:b2:e4:e6:95:8f:dd:dc:86:f7:83:f3:8e:30:6a:21:19: 36:2f:6b:c3:79:80:3e:3b:36:4d:27:fb:1a:76:c6:1d:87:c5: af:3c:fa:17:2b:8e:9b:5c:4f:7c:a4:7f:aa:e0:a0:51:ab:b7: fd:8e:f2:04:6a:39:20:a6:58:cc:c7:b0:f8:8a:99:a5:0d:e4: b8:6b:b7:94:a2:e1:2b:40:c2:90:9e:25:e2:c9:35:04:0c:b5: 48:5c:15:a3:53:06:f8:f8:7c:3d:c3:3f:0e:a2:bc:5f:dc:13: 07:3e:12:0c:01:38:dd:8d:9b:2e:13:c9:2c:25:5e:01:82:97: 4c:ec:b8:2e:b7:0c:8c:87:b6:2e:88:1a:45:da:a4:9a:f8:9a: fc:f8:03:f4:ad:00:fa:f5:7e:3a:2f:a9:3a:cc:82:65:24:8b: 14:c0:fe:ac:dc:bc:0f:d3:f5:38:3f:f4:bd:56:0d:a1:a9:3f: 1e:6f:45:eb:9f:69:f5:3a:5b:88:8e:5f:fd:c5:db:e6:07:59: a3:02:22:b5:f2:93:c7:f3:3a:28:32:58:50:79:f9:c0:ba:97: 72:29:35:a1:5f:bf:af:a0:50:4c:b6:80:dd:a8:ec:8b:81:cb: 50:03:67:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZ9ttC2QKa7BAze0cBZdvAfQc/TkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0N1oX DTI3MDMwMzA2MDc0N1owMzExMC8GA1UEAxMoNDVEMEFGQjlEQkE3MTNGMzU4N0VC NzQ4MDZDMTZGMzVFQUQzRkFENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIvyddt93pZ1H1TEXaw8DDRmCruJGkepKLDb2oaWutWry8ehIfSUM1AkqzZ9 GwTDBCkhtPcf/ZhhkMB9RQ9GBqYD5oiPmgyEj4E8yYMG5XmBtSoNOsbp9RiemtK3 JJU+5apZZng8NV7Li6nOtcUpSx/tppOta78JV2z9oKhZjfUi4+Rk2mXGI6PocoWU 8YBamJxOvDldbFBSGzI4hLCtenbqMQnDVxEFcDPMIST49omuX/PiV4cNL/ENCRSw goRyfiiur0GdFL7pSF4rKrKuIoGQ3iSsw2QdIJxsUldEeL3nbP7FYs/QohRcJ/bp U5YtdizTsZCpLeq6HaXBk++f5y8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRF0K+5 26cT81h+t0gGwW816tP61DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzEwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ockwDQYJKoZIhvcNAQELBQADggEBAKZ5z9yY0vsDa+YE1dITiJSAdUi7suTmlY/d 3Ib3g/OOMGohGTYva8N5gD47Nk0n+xp2xh2Hxa88+hcrjptcT3ykf6rgoFGrt/2O 8gRqOSCmWMzHsPiKmaUN5Lhrt5Si4StAwpCeJeLJNQQMtUhcFaNTBvj4fD3DPw6i vF/cEwc+EgwBON2Nmy4TySwlXgGCl0zsuC63DIyHti6IGkXapJr4mvz4A/StAPr1 fjovqTrMgmUkixTA/qzcvA/T9Tg/9L1WDaGpPx5vReufafU6W4iOX/3F2+YHWaMC IrXyk8fzOigyWFB5+cC6l3IpNaFfv6+gUEy2gN2o7IuBy1ADZ8E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:33 2026 by rpki-client