$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143677.roa File: AS143677.roa (raw, json) Hash identifier: RMilisho/TnyUc+BnUUCw+kyQVvHqNOg9peeMtqb174= Subject key identifier: F6:A9:31:FF:0D:A2:DA:3D:2A:1D:E0:06:9F:5D:4D:82:E6:65:60:A6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 71CC589D459C85CB7583B7B7CD0F5CA1D0D79027 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143677.roa Signing time: Wed 04 Mar 2026 06:14:50 +0000 ROA not before: Wed 04 Mar 2026 06:09:50 +0000 ROA not after: Wed 03 Mar 2027 06:14:50 +0000 asID: 143677 IP address blocks: 240a:a403::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cc:58:9d:45:9c:85:cb:75:83:b7:b7:cd:0f:5c:a1:d0:d7:90:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:50 2026 GMT Not After : Mar 3 06:14:50 2027 GMT Subject: CN=F6A931FF0DA2DA3D2A1DE0069F5D4D82E66560A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:b4:65:26:8c:69:6a:b5:db:d1:aa:ee:e9: 4b:b7:62:df:83:b1:04:ef:5a:04:60:11:60:91:50: b6:00:5f:04:5b:ad:40:97:93:2a:7a:05:dd:7a:28: 24:bd:3f:c5:07:77:65:b8:6e:cc:24:11:54:cb:b2: c0:25:cb:10:a9:d4:a3:62:5d:1e:01:1c:4a:b1:16: 88:22:c6:9a:97:8c:f3:b4:90:7a:50:62:09:34:1b: df:ab:e2:6f:1c:1c:d5:4b:01:d2:82:10:31:52:f3: 66:2d:14:50:67:a6:1f:98:47:d0:f5:97:af:a6:58: 25:70:02:b4:ff:6c:18:63:9e:56:bd:80:97:9e:c1: ac:8f:c2:e5:4c:35:53:85:91:d0:f4:68:5f:50:ff: 26:75:89:48:c1:73:fa:00:ba:61:f5:3a:a1:2f:3c: 25:0b:b7:ee:4e:83:3e:f7:55:8f:33:bf:6e:b4:ea: c9:95:cc:88:47:a9:a6:3f:b0:92:b1:ea:05:bb:36: f7:57:1b:ce:0e:c4:f4:97:05:05:e2:a5:d6:5b:86: bf:7c:7d:39:c1:9c:84:dc:35:36:e6:df:ea:b0:ff: b0:05:03:d5:ef:14:8b:87:39:2d:6c:a7:8f:81:48: b2:ed:80:fc:98:1b:f7:15:76:ad:3a:85:ab:a6:54: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A9:31:FF:0D:A2:DA:3D:2A:1D:E0:06:9F:5D:4D:82:E6:65:60:A6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143677.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a403::/32 Signature Algorithm: sha256WithRSAEncryption 10:80:7c:8b:dc:f7:e6:21:29:dc:bd:5b:75:6a:87:3c:bb:43: 1e:99:2d:83:85:ba:dc:73:ea:a4:09:48:1f:f9:8c:5e:09:d5: bf:49:46:f4:35:11:07:4a:75:5f:d1:9b:5a:97:40:b7:fb:99: cc:a3:8f:cb:65:7a:6a:dc:c0:e0:8f:3c:f2:74:b8:45:70:94: cd:e6:91:5e:46:b6:b3:36:78:ef:07:3b:51:42:62:b6:fa:29: fb:a4:33:4c:e4:ba:8b:b9:86:f7:4f:de:16:0e:f8:f1:cb:41: 79:4d:da:e4:22:64:df:bb:32:74:d4:31:05:5c:5a:78:fc:47: 90:78:c7:c3:50:ee:33:d3:2a:bd:9d:b3:ae:64:7c:25:4c:4b: 1a:26:9c:e8:ae:bd:21:b9:28:2a:f3:cd:7d:b9:cf:ba:02:36: 61:4e:68:6f:ae:fe:2d:28:2a:51:34:ea:61:76:64:51:28:a0: f1:fb:0e:ff:e4:8c:46:35:88:f8:2d:fc:3c:b6:d9:a6:e2:fd: fc:7f:fd:54:76:de:64:26:54:ba:67:96:a1:f2:16:5f:ab:22: cb:18:c8:7e:be:57:c0:02:38:48:16:b3:a4:64:f3:37:d8:aa: 4d:b8:02:14:53:68:59:f7:26:04:8c:8d:2c:0c:4f:1f:93:ce: f3:c7:00:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUccxYnUWchct1g7e3zQ9codDXkCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1MFoX DTI3MDMwMzA2MTQ1MFowMzExMC8GA1UEAxMoRjZBOTMxRkYwREEyREEzRDJBMURF MDA2OUY1RDREODJFNjY1NjBBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmptGUmjGlqtdvRqu7pS7di34OxBO9aBGARYJFQtgBfBFutQJeTKnoF3Xoo JL0/xQd3ZbhuzCQRVMuywCXLEKnUo2JdHgEcSrEWiCLGmpeM87SQelBiCTQb36vi bxwc1UsB0oIQMVLzZi0UUGemH5hH0PWXr6ZYJXACtP9sGGOeVr2Al57BrI/C5Uw1 U4WR0PRoX1D/JnWJSMFz+gC6YfU6oS88JQu37k6DPvdVjzO/brTqyZXMiEeppj+w krHqBbs291cbzg7E9JcFBeKl1luGv3x9OcGchNw1Nubf6rD/sAUD1e8Ui4c5LWyn j4FIsu2A/Jgb9xV2rTqFq6ZUNvcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT2qTH/ DaLaPSod4AafXU2C5mVgpjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzY3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pAMwDQYJKoZIhvcNAQELBQADggEBABCAfIvc9+YhKdy9W3Vqhzy7Qx6ZLYOFutxz 6qQJSB/5jF4J1b9JRvQ1EQdKdV/Rm1qXQLf7mcyjj8tlemrcwOCPPPJ0uEVwlM3m kV5GtrM2eO8HO1FCYrb6KfukM0zkuou5hvdP3hYO+PHLQXlN2uQiZN+7MnTUMQVc Wnj8R5B4x8NQ7jPTKr2ds65kfCVMSxomnOiuvSG5KCrzzX25z7oCNmFOaG+u/i0o KlE06mF2ZFEooPH7Dv/kjEY1iPgt/Dy22abi/fx//VR23mQmVLpnlqHyFl+rIssY yH6+V8ACOEgWs6Rk8zfYqk24AhRTaFn3JgSMjSwMTx+TzvPHABM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:56 2026 by rpki-client