$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143474.roa File: AS143474.roa (raw, json) Hash identifier: zfCYlDFYzYoXD4+7HpmFb5L89HnmR2gkXzDOow2YdFU= Subject key identifier: 89:9B:59:00:FD:94:D7:65:52:F6:71:FA:E7:4B:E1:D2:84:26:B3:1E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 631DD9AC39CBCE19BFF21DD0620E6958799A1870 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143474.roa Signing time: Wed 04 Mar 2026 06:06:36 +0000 ROA not before: Wed 04 Mar 2026 06:01:36 +0000 ROA not after: Wed 03 Mar 2027 06:06:36 +0000 asID: 143474 IP address blocks: 240a:a338::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1d:d9:ac:39:cb:ce:19:bf:f2:1d:d0:62:0e:69:58:79:9a:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:36 2026 GMT Not After : Mar 3 06:06:36 2027 GMT Subject: CN=899B5900FD94D76552F671FAE74BE1D28426B31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:ae:bd:de:84:77:98:71:b5:19:85:e9:b0: aa:a1:fc:10:ff:be:6a:78:81:36:ba:13:53:fc:55: cc:aa:6f:35:3c:95:a6:00:c3:58:52:f0:f8:39:3a: 42:d5:2c:93:9a:c7:0b:e9:08:e7:2e:11:b5:60:3a: 73:bc:bc:8c:74:f2:d8:4e:e5:21:ac:44:0d:0d:4b: d3:df:15:32:1c:e0:1b:a9:fa:d1:ac:fc:80:6d:69: d1:c3:a1:6a:3c:25:8a:6f:50:98:1a:58:53:a4:02: f7:11:3c:2d:c8:12:6b:98:5c:ed:40:ff:6e:16:89: 2b:a8:38:fe:d2:34:50:22:47:29:64:8e:b3:e5:82: c8:c9:ff:28:cd:84:1e:42:bd:9d:6c:47:c2:e6:34: 61:b8:02:1f:d3:06:4c:1b:40:c6:54:55:8d:02:d4: ab:3f:92:05:6b:c4:8f:fc:b0:c4:3f:fd:5d:3b:40: 09:b6:0a:cc:fc:69:91:86:90:86:3a:d9:95:41:93: 70:41:22:6e:74:49:34:ac:2c:7a:ae:a8:e8:2d:07: 04:db:40:db:80:72:16:97:1a:55:88:6f:69:6f:e9: 9a:4e:00:63:43:98:33:f7:74:d2:79:47:71:3e:9b: 02:a9:af:36:a5:06:21:fa:40:13:6d:1c:0e:35:64: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9B:59:00:FD:94:D7:65:52:F6:71:FA:E7:4B:E1:D2:84:26:B3:1E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143474.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a338::/32 Signature Algorithm: sha256WithRSAEncryption be:4b:74:3d:c5:c3:65:d1:d4:e1:11:34:fb:de:e1:49:d3:b7: 96:6e:3e:c8:2e:1b:02:e6:a4:05:65:67:46:b9:f8:91:8a:c2: bd:60:52:c8:e7:eb:23:7d:c4:7a:ae:ff:4b:aa:9d:ba:b5:f1: 92:6a:42:3a:4d:78:3d:51:f7:17:2c:78:0e:b5:c8:79:45:b4: ff:65:20:4d:39:a4:c0:fd:d6:6c:8c:cd:00:53:85:54:f8:b6: aa:a0:2c:29:68:6f:ab:69:7a:fa:4d:fb:14:9d:0e:d7:79:03: a9:25:ca:6c:63:98:cf:86:aa:c8:4b:43:c1:0f:da:b2:6d:97: 60:da:f6:dc:99:73:35:11:20:c5:a8:48:89:2b:68:6e:cc:08: ac:b5:63:f2:a6:df:84:6e:de:88:f4:9f:1b:db:7b:a8:61:b2: 0b:5b:ec:ee:89:cd:c6:43:80:d1:dd:90:69:8c:61:66:27:a9: fa:71:eb:16:d4:51:67:3e:6a:63:42:6f:fc:01:a5:ee:93:23: c5:ef:17:03:10:df:53:bb:42:ca:16:37:fe:c4:75:f0:af:17: 26:a1:dc:be:99:44:f6:04:ff:98:d8:78:7a:5f:93:90:98:b6: fd:3d:b0:b5:f1:30:38:9a:99:e7:63:36:c9:e9:57:f2:68:8e: 98:a4:42:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYx3ZrDnLzhm/8h3QYg5pWHmaGHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzNloX DTI3MDMwMzA2MDYzNlowMzExMC8GA1UEAxMoODk5QjU5MDBGRDk0RDc2NTUyRjY3 MUZBRTc0QkUxRDI4NDI2QjMxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpHrr3ehHeYcbUZhemwqqH8EP++aniBNroTU/xVzKpvNTyVpgDDWFLw+Dk6 QtUsk5rHC+kI5y4RtWA6c7y8jHTy2E7lIaxEDQ1L098VMhzgG6n60az8gG1p0cOh ajwlim9QmBpYU6QC9xE8LcgSa5hc7UD/bhaJK6g4/tI0UCJHKWSOs+WCyMn/KM2E HkK9nWxHwuY0YbgCH9MGTBtAxlRVjQLUqz+SBWvEj/ywxD/9XTtACbYKzPxpkYaQ hjrZlUGTcEEibnRJNKwseq6o6C0HBNtA24ByFpcaVYhvaW/pmk4AY0OYM/d00nlH cT6bAqmvNqUGIfpAE20cDjVktUMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSJm1kA /ZTXZVL2cfrnS+HShCazHjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ozgwDQYJKoZIhvcNAQELBQADggEBAL5LdD3Fw2XR1OERNPve4UnTt5ZuPsguGwLm pAVlZ0a5+JGKwr1gUsjn6yN9xHqu/0uqnbq18ZJqQjpNeD1R9xcseA61yHlFtP9l IE05pMD91myMzQBThVT4tqqgLClob6tpevpN+xSdDtd5A6klymxjmM+GqshLQ8EP 2rJtl2Da9tyZczURIMWoSIkraG7MCKy1Y/Km34Ru3oj0nxvbe6hhsgtb7O6JzcZD gNHdkGmMYWYnqfpx6xbUUWc+amNCb/wBpe6TI8XvFwMQ31O7QsoWN/7EdfCvFyah 3L6ZRPYE/5jYeHpfk5CYtv09sLXxMDiamedjNsnpV/JojpikQqA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:04 2026 by rpki-client