$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143497.roa File: AS143497.roa (raw, json) Hash identifier: xO2WI8A+XYZDMY86E/ZuVKGz77Z3brysmEwNkHOfWCY= Subject key identifier: F7:CA:72:C0:52:9D:46:79:68:0A:4F:08:54:44:DB:E8:E6:1F:CB:D4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1B9E43DCE3777C87688CFA7244B5C49D3566C5BC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143497.roa Signing time: Wed 04 Mar 2026 06:05:19 +0000 ROA not before: Wed 04 Mar 2026 06:00:19 +0000 ROA not after: Wed 03 Mar 2027 06:05:19 +0000 asID: 143497 IP address blocks: 240a:a34f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9e:43:dc:e3:77:7c:87:68:8c:fa:72:44:b5:c4:9d:35:66:c5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:19 2026 GMT Not After : Mar 3 06:05:19 2027 GMT Subject: CN=F7CA72C0529D4679680A4F085444DBE8E61FCBD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:44:e0:32:f8:ea:dd:d8:ec:b1:0a:90:09: a1:ba:a9:02:1f:cb:0a:ce:95:e0:e6:7e:3c:4a:d7: 50:91:8b:3b:73:d3:33:8e:d3:5a:a2:38:36:26:31: d2:7c:44:fb:cc:ef:3d:77:3a:0d:ba:ef:6f:fa:d7: 0f:b9:8f:a3:94:1d:bb:d9:55:95:30:0e:d9:e2:d0: df:a2:30:40:6d:20:0d:71:47:3e:04:1d:d8:c5:57: 8c:a5:45:1a:07:21:26:fe:3a:2c:40:9b:35:1b:41: 43:a8:a9:7b:91:37:34:07:58:db:ac:f4:4d:cd:47: 75:a2:73:29:80:c0:0b:e0:37:a1:d9:84:05:84:3c: 01:34:2e:f4:c6:9a:1f:26:65:1f:ee:93:36:57:73: 74:f6:c8:93:8c:99:e2:b1:2b:20:1e:31:59:47:42: 71:a7:c3:2e:88:aa:1c:71:42:c5:72:54:c5:c6:9f: f6:b3:55:c4:5d:d8:19:f6:24:bc:1b:f3:b9:e0:af: 00:df:b2:06:45:70:7c:c9:66:1c:b4:4a:da:3c:bb: 83:ec:ba:f0:43:fd:ad:c8:96:fa:a5:69:56:a1:a4: 4a:90:b1:be:bf:82:fb:f4:91:6d:64:bc:b7:99:45: 68:d8:0c:32:4f:46:32:51:dd:aa:6b:c9:12:0c:1a: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CA:72:C0:52:9D:46:79:68:0A:4F:08:54:44:DB:E8:E6:1F:CB:D4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143497.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a34f::/32 Signature Algorithm: sha256WithRSAEncryption 3c:34:47:58:2b:91:2c:ac:e4:a1:cc:83:1d:cf:95:09:e5:2f: f4:17:90:35:d6:fd:e1:70:5f:e8:67:13:fc:e0:78:2d:b6:5b: ac:03:dc:ae:4a:2a:21:2a:ba:b7:58:39:33:f0:69:27:b7:0d: 6f:d1:b8:40:bb:39:c6:6a:ec:2e:eb:84:2b:d3:3f:83:c8:98: 32:32:62:65:e7:ec:e6:e7:18:53:32:c1:dd:ef:02:6e:e9:76: f1:5b:8e:e8:53:ed:ca:04:c6:4a:a6:97:96:05:bf:fe:46:5c: 6d:4a:ef:d4:1c:2c:85:51:26:33:e3:c1:43:b1:38:b8:64:29: 8f:99:2c:ba:27:27:85:5e:69:dd:e2:eb:cf:f5:46:c0:8b:17: 85:ac:79:20:1f:a6:f4:e1:b7:ab:17:37:bd:73:ed:5c:66:cf: 4d:af:52:01:fc:3a:5d:1c:24:27:2f:1b:35:d0:9c:d1:00:bf: 6d:18:09:8a:06:98:0a:bb:c0:69:b5:81:84:20:4d:af:99:db: ae:c8:5e:c6:b3:af:ef:3b:84:d5:ec:fb:ac:b4:27:15:c7:b7: 28:5c:88:97:fa:a2:71:5d:f3:1f:32:cb:1e:bc:95:6a:51:c4: 88:2e:86:12:35:0a:b2:99:66:4c:b4:6a:2a:d2:f5:3d:82:8b: 50:2c:72:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG55D3ON3fIdojPpyRLXEnTVmxbwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxOVoX DTI3MDMwMzA2MDUxOVowMzExMC8GA1UEAxMoRjdDQTcyQzA1MjlENDY3OTY4MEE0 RjA4NTQ0NERCRThFNjFGQ0JENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc6ROAy+Ord2OyxCpAJobqpAh/LCs6V4OZ+PErXUJGLO3PTM47TWqI4NiYx 0nxE+8zvPXc6Dbrvb/rXD7mPo5Qdu9lVlTAO2eLQ36IwQG0gDXFHPgQd2MVXjKVF GgchJv46LECbNRtBQ6ipe5E3NAdY26z0Tc1HdaJzKYDAC+A3odmEBYQ8ATQu9Maa HyZlH+6TNldzdPbIk4yZ4rErIB4xWUdCcafDLoiqHHFCxXJUxcaf9rNVxF3YGfYk vBvzueCvAN+yBkVwfMlmHLRK2jy7g+y68EP9rciW+qVpVqGkSpCxvr+C+/SRbWS8 t5lFaNgMMk9GMlHdqmvJEgwaAvcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT3ynLA Up1GeWgKTwhURNvo5h/L1DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzQ5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o08wDQYJKoZIhvcNAQELBQADggEBADw0R1grkSys5KHMgx3PlQnlL/QXkDXW/eFw X+hnE/zgeC22W6wD3K5KKiEqurdYOTPwaSe3DW/RuEC7OcZq7C7rhCvTP4PImDIy YmXn7ObnGFMywd3vAm7pdvFbjuhT7coExkqml5YFv/5GXG1K79QcLIVRJjPjwUOx OLhkKY+ZLLonJ4Vead3i68/1RsCLF4WseSAfpvTht6sXN71z7Vxmz02vUgH8Ol0c JCcvGzXQnNEAv20YCYoGmAq7wGm1gYQgTa+Z267IXsazr+87hNXs+6y0JxXHtyhc iJf6onFd8x8yyx68lWpRxIguhhI1CrKZZky0airS9T2Ci1Ascp4= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:46 2026 by rpki-client