$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143649.roa File: AS143649.roa (raw, json) Hash identifier: 4gCBYtuMz6+uxh+DGHNBd4xwhb+jgH24axu0hvfcyfw= Subject key identifier: E4:F9:20:D8:26:3F:8C:6F:AF:63:DE:9F:D7:51:C8:E8:2C:6B:BB:9B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1F436CE548EC2B8C25D0C02350293B359F1785D8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143649.roa Signing time: Wed 04 Mar 2026 06:12:35 +0000 ROA not before: Wed 04 Mar 2026 06:07:35 +0000 ROA not after: Wed 03 Mar 2027 06:12:35 +0000 asID: 143649 IP address blocks: 240a:a3e7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:43:6c:e5:48:ec:2b:8c:25:d0:c0:23:50:29:3b:35:9f:17:85:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:35 2026 GMT Not After : Mar 3 06:12:35 2027 GMT Subject: CN=E4F920D8263F8C6FAF63DE9FD751C8E82C6BBB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:15:71:74:b7:be:b0:08:c9:5a:f9:7c:9e: e8:d3:f8:cc:aa:63:07:f8:c0:f9:00:aa:39:ab:2a: a7:5f:82:42:d5:cf:9c:cd:c8:9f:14:50:f5:ab:a0: fa:2c:d0:70:41:e7:40:fc:46:05:72:ce:17:24:83: 88:78:a5:3a:07:17:81:c5:d0:9f:3d:df:f6:11:04: 30:26:c9:86:72:0c:49:a7:ed:3a:86:45:8d:dc:27: 07:1f:58:fe:4b:31:f5:8e:30:b2:2b:4f:ad:9b:ab: e8:b5:cb:f7:ca:a6:79:0c:04:3e:f7:49:0a:59:49: 59:f4:fa:7c:ed:31:d6:8e:85:2b:97:51:60:c2:2c: 46:ab:e5:75:1e:08:76:9f:d2:31:c0:aa:0d:3a:ec: 0a:36:57:a4:73:a5:ca:32:b1:d0:de:cf:0f:54:67: 79:5c:b5:91:f0:03:d4:0e:7e:70:8b:66:9c:b6:0a: 9f:0a:73:d5:e6:19:8b:80:d7:5e:41:c8:4d:b2:d4: e3:de:c7:ac:89:1f:fd:97:8d:82:35:34:eb:ea:94: a4:2e:8c:9e:71:dc:28:43:5b:36:f5:34:b3:78:3a: 2c:1b:09:d1:1c:f2:4c:8e:ca:e5:43:71:c4:dd:cd: 0d:3d:b5:41:6e:b8:89:e8:48:85:b6:ed:f2:5d:44: da:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F9:20:D8:26:3F:8C:6F:AF:63:DE:9F:D7:51:C8:E8:2C:6B:BB:9B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143649.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3e7::/32 Signature Algorithm: sha256WithRSAEncryption 9b:b7:ed:c8:f6:b3:48:33:a5:a7:97:c0:ff:43:8d:05:ba:1d: 67:01:8e:a8:73:d9:0b:7c:98:eb:5b:eb:ba:57:9f:db:18:cd: 5e:6a:b9:19:8d:0a:a4:55:c2:2f:de:2b:a6:16:1d:fd:5b:73: 85:cd:0a:67:b3:11:bd:b2:09:c3:40:27:d3:87:23:10:ce:5d: 0f:71:11:7a:7b:14:b2:6d:a3:68:02:df:55:4c:22:48:65:40: ee:ef:90:5e:e1:50:dc:8c:2e:ef:21:c1:0f:2d:48:80:36:c6: 8f:f2:54:5f:ff:41:64:96:8b:b1:8a:97:2a:46:67:02:ae:1a: 75:9e:72:4c:dd:f7:e9:76:aa:b6:d2:c5:48:b2:d1:b1:9c:c2: c6:f4:64:a6:18:20:82:d3:68:50:97:b8:0a:ab:37:e9:21:ab: c3:50:73:bd:46:89:ae:ac:f9:fa:7f:aa:64:ec:fe:98:52:d7: 43:3a:67:0d:12:29:ee:ed:7a:ba:25:e9:9b:34:ae:f3:67:68: e0:5a:06:6e:8b:0b:cf:54:d1:c1:5f:fb:c5:4a:82:63:4b:ef: 00:3b:ef:79:db:d9:88:3d:9b:08:d5:1f:1f:36:4a:a7:9b:c1: 31:8f:2b:31:98:dd:02:de:99:e1:a3:9e:b1:e2:55:ea:e5:9e: 86:96:28:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUH0Ns5UjsK4wl0MAjUCk7NZ8XhdgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczNVoX DTI3MDMwMzA2MTIzNVowMzExMC8GA1UEAxMoRTRGOTIwRDgyNjNGOEM2RkFGNjNE RTlGRDc1MUM4RTgyQzZCQkI5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgGFXF0t76wCMla+Xye6NP4zKpjB/jA+QCqOasqp1+CQtXPnM3InxRQ9aug +izQcEHnQPxGBXLOFySDiHilOgcXgcXQnz3f9hEEMCbJhnIMSaftOoZFjdwnBx9Y /ksx9Y4wsitPrZur6LXL98qmeQwEPvdJCllJWfT6fO0x1o6FK5dRYMIsRqvldR4I dp/SMcCqDTrsCjZXpHOlyjKx0N7PD1RneVy1kfAD1A5+cItmnLYKnwpz1eYZi4DX XkHITbLU497HrIkf/ZeNgjU06+qUpC6MnnHcKENbNvU0s3g6LBsJ0RzyTI7K5UNx xN3NDT21QW64iehIhbbt8l1E2pkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTk+SDY Jj+Mb69j3p/XUcjoLGu7mzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o+cwDQYJKoZIhvcNAQELBQADggEBAJu37cj2s0gzpaeXwP9DjQW6HWcBjqhz2Qt8 mOtb67pXn9sYzV5quRmNCqRVwi/eK6YWHf1bc4XNCmezEb2yCcNAJ9OHIxDOXQ9x EXp7FLJto2gC31VMIkhlQO7vkF7hUNyMLu8hwQ8tSIA2xo/yVF//QWSWi7GKlypG ZwKuGnWeckzd9+l2qrbSxUiy0bGcwsb0ZKYYIILTaFCXuAqrN+khq8NQc71Gia6s +fp/qmTs/phS10M6Zw0SKe7terol6Zs0rvNnaOBaBm6LC89U0cFf+8VKgmNL7wA7 73nb2Yg9mwjVHx82SqebwTGPKzGY3QLemeGjnrHiVerlnoaWKIA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:10 2026 by rpki-client