$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143481.roa File: AS143481.roa (raw, json) Hash identifier: GaA4WKa89ncwKk2jQwiUjbBDsQ2kGFKQQXAlZ9ZROkI= Subject key identifier: 9D:AD:06:9F:74:A8:0D:00:CB:AA:16:DF:DC:F4:0B:BF:2E:B7:78:64 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1454B55D0EA06ED01058CBA02BCB4556BA81F64A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143481.roa Signing time: Wed 04 Mar 2026 06:07:01 +0000 ROA not before: Wed 04 Mar 2026 06:02:01 +0000 ROA not after: Wed 03 Mar 2027 06:07:01 +0000 asID: 143481 IP address blocks: 240a:a33f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:54:b5:5d:0e:a0:6e:d0:10:58:cb:a0:2b:cb:45:56:ba:81:f6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:01 2026 GMT Not After : Mar 3 06:07:01 2027 GMT Subject: CN=9DAD069F74A80D00CBAA16DFDCF40BBF2EB77864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:8f:9d:40:34:d3:3d:09:4f:4a:f0:88:63: 87:c8:5a:98:5a:9d:86:2f:77:e6:65:ca:26:b1:c6: 37:e7:cc:d7:88:c3:bb:50:72:6f:f4:92:37:7a:4d: 9f:bf:65:44:b4:24:50:03:5a:16:11:4a:cb:04:12: 78:a9:99:dd:71:87:a6:35:74:b1:0e:65:6f:9b:60: 4a:b1:01:17:25:17:e3:31:32:d1:09:37:2d:38:55: f1:3a:92:41:a0:88:32:bf:df:52:21:1c:9c:a9:ee: 29:2e:0a:24:dd:f7:19:1b:2e:7a:3b:c4:ef:19:b4: 5e:29:98:66:65:77:f5:35:2d:5d:25:d4:8b:ff:bb: 32:08:59:93:9e:87:cf:98:dc:c1:34:af:a6:8d:b5: 16:b1:fa:8a:3c:57:41:68:a1:5e:1a:c1:ad:bd:ad: 9b:9b:f3:7d:b4:17:d1:c2:fc:c4:80:f4:6d:eb:95: 88:b1:f6:84:fa:ce:a4:69:2e:ef:0a:7f:4c:be:b2: 1c:de:90:6f:c9:bb:97:5f:dc:97:f5:20:4e:d0:bc: cb:53:c5:71:d6:24:9d:a6:72:f2:e6:fd:1d:97:f8: 06:87:1e:f7:5a:71:8a:2a:28:8a:c9:7a:67:e3:dc: fa:35:2e:e5:4d:67:fd:ca:ea:b4:ff:e6:10:b8:03: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AD:06:9F:74:A8:0D:00:CB:AA:16:DF:DC:F4:0B:BF:2E:B7:78:64 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143481.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a33f::/32 Signature Algorithm: sha256WithRSAEncryption 73:a7:ae:a4:81:73:0d:2e:77:4d:af:c5:5e:d9:c6:90:82:cf: 7b:de:f6:e0:8b:84:ca:6e:ee:4f:e8:1f:f3:65:58:e0:15:ef: 8b:60:3f:b8:68:90:82:2a:09:17:c6:14:37:7e:40:21:c6:12: f7:cc:55:3d:af:6d:ea:83:f3:77:4b:88:fe:96:08:b0:55:fe: 89:8f:31:5a:6e:5c:bf:e2:95:cb:ca:2a:9f:c2:a4:9d:55:de: bb:04:0b:ba:78:55:8b:f4:f4:fb:e4:72:a3:15:d9:a8:c8:d8: 2d:2b:08:d3:52:30:72:98:ad:35:61:b0:b1:e2:f7:8b:19:1e: b2:09:c8:35:3c:42:80:cf:2a:28:92:54:ea:83:d7:1f:2b:ee: db:a9:a4:78:47:b6:40:a0:3f:ac:d6:f4:3f:41:69:85:52:86: 25:66:cb:94:fe:46:9c:ff:de:36:d1:e9:e7:cc:90:58:d4:29: 45:95:55:ca:08:a0:d2:bf:ba:8c:09:fc:98:ab:88:5f:7c:51: d5:11:80:dc:eb:4d:c2:ed:7d:86:50:3c:2c:3e:d3:22:00:7d: 0c:8c:67:24:83:d8:f3:0e:88:2a:c5:57:53:60:57:02:8a:27: ac:b8:73:8c:ce:c1:13:f0:c0:2e:af:c2:f9:a2:b0:40:50:8d: 03:09:92:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFFS1XQ6gbtAQWMugK8tFVrqB9kowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwMVoX DTI3MDMwMzA2MDcwMVowMzExMC8GA1UEAxMoOURBRDA2OUY3NEE4MEQwMENCQUEx NkRGRENGNDBCQkYyRUI3Nzg2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlPj51ANNM9CU9K8Ihjh8hamFqdhi935mXKJrHGN+fM14jDu1Byb/SSN3pN n79lRLQkUANaFhFKywQSeKmZ3XGHpjV0sQ5lb5tgSrEBFyUX4zEy0Qk3LThV8TqS QaCIMr/fUiEcnKnuKS4KJN33GRsuejvE7xm0XimYZmV39TUtXSXUi/+7MghZk56H z5jcwTSvpo21FrH6ijxXQWihXhrBrb2tm5vzfbQX0cL8xID0beuViLH2hPrOpGku 7wp/TL6yHN6Qb8m7l1/cl/UgTtC8y1PFcdYknaZy8ub9HZf4Boce91pxiiooisl6 Z+Pc+jUu5U1n/crqtP/mELgDe+0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSdrQaf dKgNAMuqFt/c9Au/Lrd4ZDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oz8wDQYJKoZIhvcNAQELBQADggEBAHOnrqSBcw0ud02vxV7ZxpCCz3ve9uCLhMpu 7k/oH/NlWOAV74tgP7hokIIqCRfGFDd+QCHGEvfMVT2vbeqD83dLiP6WCLBV/omP MVpuXL/ilcvKKp/CpJ1V3rsEC7p4VYv09PvkcqMV2ajI2C0rCNNSMHKYrTVhsLHi 94sZHrIJyDU8QoDPKiiSVOqD1x8r7tuppHhHtkCgP6zW9D9BaYVShiVmy5T+Rpz/ 3jbR6efMkFjUKUWVVcoIoNK/uowJ/JiriF98UdURgNzrTcLtfYZQPCw+0yIAfQyM ZySD2PMOiCrFV1NgVwKKJ6y4c4zOwRPwwC6vwvmisEBQjQMJkoQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:36 2026 by rpki-client