$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143437.roa File: AS143437.roa (raw, json) Hash identifier: 5zjsI/JFr1ULZF8pPKUZ3ou1TmnE91XtqqdWzStl9LQ= Subject key identifier: 5E:FE:20:08:C1:FC:CA:D5:AF:71:37:2A:59:15:5A:C6:9B:9B:F9:68 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5B7CB417FF94AE5E9BC0D0EB9486DDB8060D092F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143437.roa Signing time: Wed 04 Mar 2026 06:08:02 +0000 ROA not before: Wed 04 Mar 2026 06:03:02 +0000 ROA not after: Wed 03 Mar 2027 06:08:02 +0000 asID: 143437 IP address blocks: 240a:a313::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7c:b4:17:ff:94:ae:5e:9b:c0:d0:eb:94:86:dd:b8:06:0d:09:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:02 2026 GMT Not After : Mar 3 06:08:02 2027 GMT Subject: CN=5EFE2008C1FCCAD5AF71372A59155AC69B9BF968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fe:a9:48:c4:97:52:77:03:02:11:39:a6:77: 38:14:4b:09:e9:f9:3a:43:fb:a1:ef:ee:19:7c:7d: d8:87:d2:ea:51:6e:86:24:0b:7c:08:9c:59:1d:a8: 37:89:d8:ba:07:3c:c4:f9:5d:50:43:00:b6:f5:3f: e1:1e:96:cc:5b:af:a9:4c:8e:73:5e:d8:72:47:c3: 70:79:c1:03:a0:69:60:12:f5:f2:b2:93:34:de:96: 9a:ab:64:73:b7:21:f2:1f:9d:c6:42:12:d3:5a:42: 24:99:df:a1:0f:03:e3:13:c3:5f:14:a7:5e:44:1a: df:db:bd:7c:4b:1b:ba:81:e6:9b:02:98:e4:c3:5b: 7e:0a:2b:fb:af:64:7a:f6:de:21:37:f5:6f:d4:9b: d2:a3:c1:41:9f:95:f3:76:84:38:dd:9e:0d:59:e4: c6:28:f2:8e:27:6f:c7:8b:a3:a7:07:4b:a1:bc:fd: c6:a5:2e:22:b8:68:f1:99:03:ba:23:68:56:75:c7: 6f:56:19:6c:f6:02:0d:05:6a:0f:70:1e:a4:a0:17: a6:76:1f:c6:b4:fa:7c:a6:9c:31:45:54:e3:14:04: 17:c4:14:45:cb:a0:b2:03:3b:21:3d:f0:89:ea:45: ff:49:1b:4f:49:75:0f:33:c5:cc:30:49:f2:42:2e: 1e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FE:20:08:C1:FC:CA:D5:AF:71:37:2A:59:15:5A:C6:9B:9B:F9:68 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a313::/32 Signature Algorithm: sha256WithRSAEncryption 9d:54:f0:72:18:0a:ee:3e:23:9e:18:9d:a7:43:43:c8:20:ba: ec:9c:30:2d:de:18:e1:8a:6d:59:8f:9a:d3:08:74:29:87:c1: 53:cc:3f:93:33:73:22:f8:7f:f4:82:4f:9e:c9:90:93:12:f5: 1a:9e:1b:7a:8d:5b:7e:5d:30:f8:6c:c3:d7:1f:9a:d4:e5:ad: 45:08:b7:8e:36:56:ce:77:c0:54:3b:89:00:81:79:bf:5f:c2: f0:c9:4a:6d:05:73:93:2b:5e:1f:65:5b:b0:6b:36:f6:9c:89: 30:3e:a1:a7:d9:5c:76:78:ac:8d:6c:59:fb:f2:53:41:c3:e5: 68:23:14:85:97:5c:c6:10:ff:2e:ce:c9:ff:84:17:b4:7d:f7: ad:60:a3:89:d9:ac:65:9a:1d:90:db:29:89:ad:cb:a2:17:88: 7e:af:a7:9e:10:54:a3:01:a6:4a:74:d5:52:84:a1:8a:18:5a: fd:90:2b:d6:47:45:c0:9c:15:82:0d:b9:de:2e:7a:ff:d0:e1: c0:6a:ec:aa:1f:da:9e:5d:e6:37:84:8c:e6:87:99:55:6b:30: 3a:89:6d:21:1f:92:b8:e6:da:20:ba:fb:dc:ba:dd:33:7f:5b: ee:de:72:f1:42:c4:44:d9:5e:c5:f1:27:f5:87:85:85:60:ab: 0d:59:55:b5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUW3y0F/+Url6bwNDrlIbduAYNCS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwMloX DTI3MDMwMzA2MDgwMlowMzExMC8GA1UEAxMoNUVGRTIwMDhDMUZDQ0FENUFGNzEz NzJBNTkxNTVBQzY5QjlCRjk2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7+qUjEl1J3AwIROaZ3OBRLCen5OkP7oe/uGXx92IfS6lFuhiQLfAicWR2o N4nYugc8xPldUEMAtvU/4R6WzFuvqUyOc17YckfDcHnBA6BpYBL18rKTNN6Wmqtk c7ch8h+dxkIS01pCJJnfoQ8D4xPDXxSnXkQa39u9fEsbuoHmmwKY5MNbfgor+69k evbeITf1b9Sb0qPBQZ+V83aEON2eDVnkxijyjidvx4ujpwdLobz9xqUuIrho8ZkD uiNoVnXHb1YZbPYCDQVqD3AepKAXpnYfxrT6fKacMUVU4xQEF8QURcugsgM7IT3w iepF/0kbT0l1DzPFzDBJ8kIuHqkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRe/iAI wfzK1a9xNypZFVrGm5v5aDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oxMwDQYJKoZIhvcNAQELBQADggEBAJ1U8HIYCu4+I54YnadDQ8gguuycMC3eGOGK bVmPmtMIdCmHwVPMP5MzcyL4f/SCT57JkJMS9RqeG3qNW35dMPhsw9cfmtTlrUUI t442Vs53wFQ7iQCBeb9fwvDJSm0Fc5MrXh9lW7BrNvaciTA+oafZXHZ4rI1sWfvy U0HD5WgjFIWXXMYQ/y7Oyf+EF7R9961go4nZrGWaHZDbKYmty6IXiH6vp54QVKMB pkp01VKEoYoYWv2QK9ZHRcCcFYINud4uev/Q4cBq7Kof2p5d5jeEjOaHmVVrMDqJ bSEfkrjm2iC6+9y63TN/W+7ecvFCxETZXsXxJ/WHhYVgqw1ZVbU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:53 2026 by rpki-client