$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143661.roa File: AS143661.roa (raw, json) Hash identifier: PwQmEDyQ59UWk2MSlCJmisJVCtx968Z4lQsTNQVUhyA= Subject key identifier: 87:74:FA:7E:BC:23:2F:3C:1E:07:97:84:67:9A:1B:18:F5:C4:AC:90 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1ACDCD4BA50AF1C9E34805711DEED6CA183F5C23 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143661.roa Signing time: Wed 04 Mar 2026 06:13:58 +0000 ROA not before: Wed 04 Mar 2026 06:08:58 +0000 ROA not after: Wed 03 Mar 2027 06:13:58 +0000 asID: 143661 IP address blocks: 240a:a3f3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cd:cd:4b:a5:0a:f1:c9:e3:48:05:71:1d:ee:d6:ca:18:3f:5c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:58 2026 GMT Not After : Mar 3 06:13:58 2027 GMT Subject: CN=8774FA7EBC232F3C1E079784679A1B18F5C4AC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:15:84:53:5b:42:36:eb:c2:e0:2e:cd:fe: ee:00:a2:eb:fc:07:80:94:be:ce:8a:45:41:be:19: 35:75:a9:39:39:84:a8:b4:79:9e:8c:00:fd:fb:88: f7:a8:4e:fa:69:56:a7:45:cc:31:d9:60:1a:87:ad: 07:6c:09:2a:9b:69:ef:d8:a1:40:e1:39:f7:54:9f: f1:08:ac:65:55:74:05:8a:29:5d:8d:b3:3e:01:e1: 33:53:99:d1:cf:ed:1c:19:78:9e:a8:e6:a2:e1:8e: a4:75:b4:fc:2e:18:4e:a5:27:d9:58:f8:66:8f:d2: ac:e0:aa:c5:56:a3:af:3e:f3:20:d8:f2:54:82:30: 31:7c:0f:d8:24:30:f7:73:aa:80:84:bb:97:09:1f: 92:2e:20:53:75:a7:b5:e3:02:05:70:32:72:f2:fb: b5:8c:22:40:c1:4e:f0:22:ab:eb:97:88:ec:7c:ee: 3f:14:fa:22:fe:fa:94:47:51:e4:57:b3:a9:65:4e: cf:c2:32:d4:b9:7a:93:99:34:1f:87:c3:2a:79:fc: da:37:d4:81:30:eb:14:9d:31:6e:7d:d8:41:75:ee: e3:89:7f:27:4d:55:33:3d:eb:e5:55:f6:40:62:20: 6f:18:8b:16:cc:79:73:95:81:29:fd:ca:49:7a:f3: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:74:FA:7E:BC:23:2F:3C:1E:07:97:84:67:9A:1B:18:F5:C4:AC:90 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143661.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a3f3::/32 Signature Algorithm: sha256WithRSAEncryption 7f:b5:e6:c6:51:c5:93:c5:a4:e0:2c:63:70:c0:6b:64:7c:32: 06:66:55:36:e0:97:bf:72:c9:79:8d:cd:ad:b1:60:71:7c:73: b7:b5:9a:2d:b8:42:a4:ef:7f:26:bf:15:91:8e:c8:47:af:5d: c7:9e:2b:81:f1:66:05:60:8f:cd:14:00:3e:ab:0d:9e:05:15: 61:5c:9f:57:e7:5e:65:c0:e9:7d:e1:6f:d9:ba:bd:30:5f:08: 5d:30:e7:a2:fb:4d:d7:59:13:8d:ae:3a:21:9a:1f:c9:b6:a2: 23:fc:a0:66:df:f3:4a:df:ec:d8:67:24:00:19:f9:dc:04:3c: b4:a3:e1:e6:8b:6c:6a:94:e8:bf:cb:a9:6d:a6:63:46:3f:5f: a4:df:84:c9:b0:1a:9b:59:ee:fd:04:73:cd:fe:ef:6c:75:56: 87:b6:9e:67:24:4f:e0:e7:f6:79:ee:24:7c:e6:4d:e6:2f:b8: c0:2f:58:69:d8:68:4e:0d:29:d8:e4:07:17:75:8b:ca:b5:25: be:65:f9:7d:e7:ea:52:0f:64:29:74:84:2b:5c:55:58:7e:4b: 10:58:5b:a2:5a:6e:09:a9:bc:39:b8:04:e8:bd:70:62:79:7b: c8:42:28:d1:d7:e5:88:c7:e0:17:2d:f5:f0:6b:37:b7:26:7e: 49:8f:db:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGs3NS6UK8cnjSAVxHe7Wyhg/XCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1OFoX DTI3MDMwMzA2MTM1OFowMzExMC8GA1UEAxMoODc3NEZBN0VCQzIzMkYzQzFFMDc5 Nzg0Njc5QTFCMThGNUM0QUM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM20FYRTW0I268LgLs3+7gCi6/wHgJS+zopFQb4ZNXWpOTmEqLR5nowA/fuI 96hO+mlWp0XMMdlgGoetB2wJKptp79ihQOE591Sf8QisZVV0BYopXY2zPgHhM1OZ 0c/tHBl4nqjmouGOpHW0/C4YTqUn2Vj4Zo/SrOCqxVajrz7zINjyVIIwMXwP2CQw 93OqgIS7lwkfki4gU3WnteMCBXAycvL7tYwiQMFO8CKr65eI7HzuPxT6Iv76lEdR 5FezqWVOz8Iy1Ll6k5k0H4fDKnn82jfUgTDrFJ0xbn3YQXXu44l/J01VMz3r5VX2 QGIgbxiLFsx5c5WBKf3KSXrzEm8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSHdPp+ vCMvPB4Hl4RnmhsY9cSskDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK o/MwDQYJKoZIhvcNAQELBQADggEBAH+15sZRxZPFpOAsY3DAa2R8MgZmVTbgl79y yXmNza2xYHF8c7e1mi24QqTvfya/FZGOyEevXceeK4HxZgVgj80UAD6rDZ4FFWFc n1fnXmXA6X3hb9m6vTBfCF0w56L7TddZE42uOiGaH8m2oiP8oGbf80rf7NhnJAAZ +dwEPLSj4eaLbGqU6L/LqW2mY0Y/X6TfhMmwGptZ7v0Ec83+72x1Voe2nmckT+Dn 9nnuJHzmTeYvuMAvWGnYaE4NKdjkBxd1i8q1Jb5l+X3n6lIPZCl0hCtcVVh+SxBY W6JabgmpvDm4BOi9cGJ5e8hCKNHX5YjH4Bct9fBrN7cmfkmP2w4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:49 2026 by rpki-client