$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143574.roa File: AS143574.roa (raw, json) Hash identifier: sfw8BOsDgi4hZN0GDH3DL8mhe3h0ngnzKum8Lki5Rxs= Subject key identifier: 54:C4:C7:10:FC:E3:46:B7:2F:0E:9D:CC:E6:CA:95:8C:4A:4E:59:97 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 048301EFEB5FE87C65CB126CEAA52E7F1E2A669E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143574.roa Signing time: Wed 04 Mar 2026 06:14:53 +0000 ROA not before: Wed 04 Mar 2026 06:09:53 +0000 ROA not after: Wed 03 Mar 2027 06:14:53 +0000 asID: 143574 IP address blocks: 240a:a39c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:83:01:ef:eb:5f:e8:7c:65:cb:12:6c:ea:a5:2e:7f:1e:2a:66:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:53 2026 GMT Not After : Mar 3 06:14:53 2027 GMT Subject: CN=54C4C710FCE346B72F0E9DCCE6CA958C4A4E5997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:62:e4:09:47:69:4e:ea:25:f3:0d:fc:4e: 35:66:4c:37:55:c6:75:3f:ce:e3:38:df:4e:ad:be: 70:92:4d:81:08:fd:21:a5:1c:b7:a5:8a:de:84:56: b6:cc:11:45:fe:4e:72:7a:fd:f7:f9:df:8c:86:6c: b0:34:1c:fd:28:3b:80:42:cf:f8:7a:8b:7d:33:cd: d5:25:49:b4:b3:19:c6:f8:b0:be:6c:a2:07:31:01: af:ee:bb:32:0c:94:02:6b:ee:fc:fc:07:4c:1e:d9: c5:ac:e8:f3:dd:3f:bb:2a:99:e1:c4:4b:75:59:b4: 1c:6d:35:45:58:02:79:35:36:2a:29:05:85:36:af: 5c:b7:74:dd:41:0f:3b:ad:2c:6e:26:3c:f7:31:13: 19:ca:e9:98:1b:62:26:e6:ce:7f:c6:33:80:1f:5c: b3:b3:e6:12:6b:8b:34:fe:21:ee:f8:8c:12:bb:ec: 54:cf:5f:c6:f2:ff:34:8d:13:d1:b4:74:b2:50:dc: 7b:2e:55:1a:c6:64:4c:7b:1b:3b:39:e4:8c:d1:a3: 36:55:da:43:3e:55:27:8e:0a:2e:fe:f9:c7:81:83: c7:ae:77:ac:74:3a:95:e8:dc:db:ed:12:4e:e8:f9: 8f:da:23:6d:84:f5:15:ab:68:71:f7:25:fa:70:71: 36:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C4:C7:10:FC:E3:46:B7:2F:0E:9D:CC:E6:CA:95:8C:4A:4E:59:97 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a39c::/32 Signature Algorithm: sha256WithRSAEncryption 32:3d:19:a2:02:94:42:4c:51:63:b8:87:5b:06:d9:92:8d:d2: 43:1c:bc:6f:d6:1b:7f:90:7c:3f:cf:9d:c0:16:1a:f5:47:a4: 9a:c0:73:c6:d7:f7:12:02:91:70:30:97:c5:2b:03:02:a3:a8: 5b:3f:aa:db:d9:5b:20:34:fb:bd:16:79:23:80:59:71:c7:34: 3a:21:39:73:35:a2:d9:69:81:09:37:e6:d9:90:d5:eb:22:e0: ec:3a:18:55:93:a0:c1:d7:7d:34:0b:46:64:5b:df:e1:2d:5a: eb:7e:1c:38:15:7a:d6:fe:bc:dd:86:69:44:01:c0:d1:fe:e1: d6:6b:88:23:ed:d1:71:ab:4c:34:0f:48:3c:c2:08:3b:f9:83: b5:d1:6e:db:1b:9e:a7:b2:db:94:46:7e:e0:c9:65:a1:6e:93: 4c:19:b4:38:e7:2b:7c:6e:6b:34:70:a3:9c:1d:bf:ea:35:d8: c8:f8:dd:05:29:81:f6:df:4f:0d:0b:5e:2a:bb:69:07:7b:b0: 91:2e:2b:47:a8:97:1f:35:90:4e:c9:6a:6d:e5:d3:65:e6:9d: 69:98:22:43:9a:00:29:8f:72:66:47:8c:2d:ce:92:d5:ad:eb: 94:5b:a7:f1:3a:17:76:02:ce:6b:52:48:17:dd:70:7b:dd:f2: 8a:44:dc:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBIMB7+tf6HxlyxJs6qUufx4qZp4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1M1oX DTI3MDMwMzA2MTQ1M1owMzExMC8GA1UEAxMoNTRDNEM3MTBGQ0UzNDZCNzJGMEU5 RENDRTZDQTk1OEM0QTRFNTk5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXWYuQJR2lO6iXzDfxONWZMN1XGdT/O4zjfTq2+cJJNgQj9IaUct6WK3oRW tswRRf5Ocnr99/nfjIZssDQc/Sg7gELP+HqLfTPN1SVJtLMZxviwvmyiBzEBr+67 MgyUAmvu/PwHTB7Zxazo890/uyqZ4cRLdVm0HG01RVgCeTU2KikFhTavXLd03UEP O60sbiY89zETGcrpmBtiJubOf8YzgB9cs7PmEmuLNP4h7viMErvsVM9fxvL/NI0T 0bR0slDcey5VGsZkTHsbOznkjNGjNlXaQz5VJ44KLv75x4GDx653rHQ6lejc2+0S Tuj5j9ojbYT1Fatocfcl+nBxNtECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRUxMcQ /ONGty8OnczmypWMSk5ZlzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzU3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o5wwDQYJKoZIhvcNAQELBQADggEBADI9GaIClEJMUWO4h1sG2ZKN0kMcvG/WG3+Q fD/PncAWGvVHpJrAc8bX9xICkXAwl8UrAwKjqFs/qtvZWyA0+70WeSOAWXHHNDoh OXM1otlpgQk35tmQ1esi4Ow6GFWToMHXfTQLRmRb3+EtWut+HDgVetb+vN2GaUQB wNH+4dZriCPt0XGrTDQPSDzCCDv5g7XRbtsbnqey25RGfuDJZaFuk0wZtDjnK3xu azRwo5wdv+o12Mj43QUpgfbfTw0LXiq7aQd7sJEuK0eolx81kE7Jam3l02XmnWmY IkOaACmPcmZHjC3OktWt65Rbp/E6F3YCzmtSSBfdcHvd8opE3ME= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:00 2026 by rpki-client