$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143629.roa File: AS143629.roa (raw, json) Hash identifier: EGotvdFJxKyKyFYTcdwdixMP0Ksh6kHHyd0UWe/uJRw= Subject key identifier: 54:DC:BC:4A:0B:E2:19:8D:61:DB:88:C7:E2:5E:EB:51:2B:5A:11:72 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2EDCFEEF783D502C1ED1AF16FF2B3662F3FF8956 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143629.roa Signing time: Wed 04 Mar 2026 06:14:09 +0000 ROA not before: Wed 04 Mar 2026 06:09:09 +0000 ROA not after: Wed 03 Mar 2027 06:14:09 +0000 asID: 143629 IP address blocks: 240a:a3d3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:dc:fe:ef:78:3d:50:2c:1e:d1:af:16:ff:2b:36:62:f3:ff:89:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:09 2026 GMT Not After : Mar 3 06:14:09 2027 GMT Subject: CN=54DCBC4A0BE2198D61DB88C7E25EEB512B5A1172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ae:5f:dc:ec:7a:4b:22:a1:b3:80:d0:72:4e: 1f:da:d4:da:cb:7c:75:ed:ed:5d:d0:94:eb:e6:e8: 5d:cd:23:6c:08:14:a1:11:28:d1:7e:ab:6c:80:5e: b8:76:c1:38:ca:e9:68:d2:07:dc:20:4a:df:3e:fc: 70:ed:d2:f2:22:c8:df:04:d9:ca:f3:3a:28:98:22: 8a:79:09:0b:2f:90:cd:71:1d:b0:22:44:1f:54:7a: 5e:b8:28:ff:5d:84:f5:42:58:6e:56:70:7e:e5:83: e9:ff:ad:c9:d8:a3:97:d7:87:0e:da:0c:72:0f:ef: 8c:38:38:27:85:0b:1a:06:b6:de:94:57:2c:18:7a: 1b:d8:10:25:fe:4f:73:d1:f1:d3:7c:66:3b:0c:9f: e9:e4:2d:ab:fb:55:b3:13:ef:26:6d:bb:b8:57:fd: a3:0e:4d:61:81:eb:b2:8d:05:c1:65:6a:e4:7e:87: b8:d5:03:79:f1:87:71:aa:95:8b:b2:bf:bb:f6:87: 1e:b0:f1:47:97:e1:60:cd:b2:88:bd:ee:ff:e7:56: 9a:5a:a0:02:d9:3c:8c:41:9c:b5:96:41:3b:1b:af: b9:c1:21:ff:c4:6b:ae:54:b6:61:05:b0:e8:0f:2a: bb:01:b5:40:8d:7d:1f:91:58:f6:11:01:0a:14:8e: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DC:BC:4A:0B:E2:19:8D:61:DB:88:C7:E2:5E:EB:51:2B:5A:11:72 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143629.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3d3::/32 Signature Algorithm: sha256WithRSAEncryption 4d:14:77:61:56:f5:3a:1b:1a:a8:ff:22:8e:ea:5e:ea:df:70: 43:ec:eb:4f:a1:f9:e7:8d:3f:80:65:bc:fc:d3:4c:2a:bf:10: 9d:b5:5a:b4:89:e7:4f:c6:77:e8:e1:27:89:b3:50:53:4f:aa: 8e:02:9b:d7:87:8b:5d:05:c9:6f:ee:d8:14:79:b6:09:71:c1: 0f:19:fe:9a:1f:7c:a5:5a:42:b9:ab:1a:cc:e6:ba:50:78:74: e9:16:4c:d3:07:a0:b2:2c:ea:ff:3d:ae:bc:60:c2:b6:52:c9: a3:7a:8d:fb:58:e7:25:43:1d:14:28:5b:18:41:c1:e8:6c:6c: 83:9b:7f:e2:1f:cc:90:5d:a2:f9:1c:79:78:0d:0b:87:33:2f: 3e:0f:d2:b7:24:8c:f6:43:a1:06:cb:bb:f5:16:19:af:44:19: b0:19:20:26:57:af:11:27:83:70:de:cf:32:b8:f8:13:7f:f9: 07:8d:10:c8:b6:2f:d0:c3:54:35:35:6f:82:3b:c3:94:c2:7f: af:9d:1c:35:4c:90:3f:f0:a4:6b:fe:aa:e3:56:75:5a:15:11: 3d:a4:d3:7e:c7:71:cb:77:a2:36:db:38:66:21:8b:aa:33:52: 44:d9:18:11:55:0b:32:5e:1c:49:bb:b4:cd:50:24:ed:ef:26: 8b:02:0d:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULtz+73g9UCwe0a8W/ys2YvP/iVYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwOVoX DTI3MDMwMzA2MTQwOVowMzExMC8GA1UEAxMoNTREQ0JDNEEwQkUyMTk4RDYxREI4 OEM3RTI1RUVCNTEyQjVBMTE3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAISuX9zseksiobOA0HJOH9rU2st8de3tXdCU6+boXc0jbAgUoREo0X6rbIBe uHbBOMrpaNIH3CBK3z78cO3S8iLI3wTZyvM6KJgiinkJCy+QzXEdsCJEH1R6Xrgo /12E9UJYblZwfuWD6f+tydijl9eHDtoMcg/vjDg4J4ULGga23pRXLBh6G9gQJf5P c9Hx03xmOwyf6eQtq/tVsxPvJm27uFf9ow5NYYHrso0FwWVq5H6HuNUDefGHcaqV i7K/u/aHHrDxR5fhYM2yiL3u/+dWmlqgAtk8jEGctZZBOxuvucEh/8RrrlS2YQWw 6A8quwG1QI19H5FY9hEBChSOKpsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRU3LxK C+IZjWHbiMfiXutRK1oRcjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzYyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o9MwDQYJKoZIhvcNAQELBQADggEBAE0Ud2FW9TobGqj/Io7qXurfcEPs60+h+eeN P4BlvPzTTCq/EJ21WrSJ50/Gd+jhJ4mzUFNPqo4Cm9eHi10FyW/u2BR5tglxwQ8Z /poffKVaQrmrGszmulB4dOkWTNMHoLIs6v89rrxgwrZSyaN6jftY5yVDHRQoWxhB wehsbIObf+IfzJBdovkceXgNC4czLz4P0rckjPZDoQbLu/UWGa9EGbAZICZXrxEn g3DezzK4+BN/+QeNEMi2L9DDVDU1b4I7w5TCf6+dHDVMkD/wpGv+quNWdVoVET2k 037Hcct3ojbbOGYhi6ozUkTZGBFVCzJeHEm7tM1QJO3vJosCDdg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:06 2026 by rpki-client