$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143701.roa File: AS143701.roa (raw, json) Hash identifier: HiTgln1buymHvkDq/RxKqPE3U05Yeupc93WPZ1nhDE4= Subject key identifier: 0E:05:12:46:0D:6D:F6:B3:0F:34:CD:DE:BC:11:9C:AA:4A:E4:06:0D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 246C7B1527BB579B1ACF9769F7C2AB49D6F96C0F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143701.roa Signing time: Wed 04 Mar 2026 06:12:33 +0000 ROA not before: Wed 04 Mar 2026 06:07:33 +0000 ROA not after: Wed 03 Mar 2027 06:12:33 +0000 asID: 143701 IP address blocks: 240a:a41b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6c:7b:15:27:bb:57:9b:1a:cf:97:69:f7:c2:ab:49:d6:f9:6c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:33 2026 GMT Not After : Mar 3 06:12:33 2027 GMT Subject: CN=0E0512460D6DF6B30F34CDDEBC119CAA4AE4060D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:bd:3a:eb:af:a3:da:e4:36:1d:47:c9:56: b1:78:23:ea:2f:54:14:69:19:b6:fd:e6:5c:47:44: a2:19:97:b5:96:da:6a:fd:bd:bc:fb:ae:3a:a7:a1: 65:f8:cb:1a:0b:63:36:2f:d4:9e:af:f9:1a:51:11: 45:73:49:aa:a5:b8:15:8b:08:b9:89:dc:e7:a0:c5: 7f:71:cf:ef:29:4b:2c:da:91:ec:85:a7:36:13:67: ad:7a:47:20:06:9a:62:51:c7:2e:c8:49:30:19:40: c7:48:51:0a:17:c9:8f:d6:87:31:3d:63:96:d3:df: 06:ba:13:71:61:0e:44:0a:ac:c5:cd:c0:21:26:fe: 4a:8a:94:41:06:45:2e:d7:b7:0f:0a:25:35:11:ac: d0:6d:53:30:ab:cf:15:9e:7a:30:df:64:05:3b:6d: ef:7f:88:2f:2c:11:be:7e:f2:01:8c:d5:cb:b0:57: be:69:5a:a5:10:77:04:39:3a:f0:bc:e6:29:b3:7d: ff:29:60:ee:23:da:14:b6:61:b8:cb:9c:11:29:d5: 3c:8c:86:c1:b9:17:43:d4:97:17:f5:1d:20:95:24: 42:ff:cc:06:05:b9:2d:b1:96:25:5c:0f:fe:1e:60: 3b:3e:0f:82:27:4b:f4:34:6d:c3:a5:f2:9f:a0:7a: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:12:46:0D:6D:F6:B3:0F:34:CD:DE:BC:11:9C:AA:4A:E4:06:0D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143701.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a41b::/32 Signature Algorithm: sha256WithRSAEncryption 1a:69:5e:e7:35:b5:49:18:39:95:45:b5:c2:7a:db:79:7e:64: 2d:60:74:ce:9f:c4:68:16:46:50:ce:c7:70:b2:d5:31:fd:8c: 65:11:46:84:ca:45:5c:33:dd:87:21:98:4c:2c:5a:c4:4e:13: 71:39:fe:24:5e:10:ef:f3:7a:bf:ec:3b:3d:b5:ed:6c:cd:12: 9c:53:b9:e7:76:b3:75:7a:95:a5:15:23:02:09:cd:21:24:4b: 5f:03:4b:3e:27:8c:b8:c1:44:f2:1f:d2:1d:f3:15:ed:56:e7: 79:8e:8d:11:0e:76:c8:01:62:b6:44:6c:da:9e:36:24:18:d0: 47:d6:49:5d:b8:a4:bb:53:05:ad:55:3c:e6:0d:ee:c0:e0:85: 6e:f4:5a:a6:0b:25:cc:92:82:28:74:8a:19:bd:b4:ec:ce:a9: a5:6a:24:dc:0c:f9:85:f0:7f:c0:72:f1:e3:af:85:ab:69:0c: 9a:29:c1:e6:d8:24:14:1e:54:b1:da:e3:cd:35:f0:d4:43:bd: 41:93:c1:33:0b:8f:61:9a:4f:78:66:e6:05:65:0d:df:46:a4: 56:f5:94:2c:a1:e4:2f:60:b1:19:09:3a:56:9b:5b:f4:79:a9: 41:49:29:bc:f2:be:9d:ac:44:68:64:dc:ac:c7:6a:4a:ee:00: 14:bb:ab:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJGx7FSe7V5saz5dp98KrSdb5bA8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczM1oX DTI3MDMwMzA2MTIzM1owMzExMC8GA1UEAxMoMEUwNTEyNDYwRDZERjZCMzBGMzRD RERFQkMxMTlDQUE0QUU0MDYwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgMvTrrr6Pa5DYdR8lWsXgj6i9UFGkZtv3mXEdEohmXtZbaav29vPuuOqeh ZfjLGgtjNi/Unq/5GlERRXNJqqW4FYsIuYnc56DFf3HP7ylLLNqR7IWnNhNnrXpH IAaaYlHHLshJMBlAx0hRChfJj9aHMT1jltPfBroTcWEORAqsxc3AISb+SoqUQQZF Lte3DwolNRGs0G1TMKvPFZ56MN9kBTtt73+ILywRvn7yAYzVy7BXvmlapRB3BDk6 8LzmKbN9/ylg7iPaFLZhuMucESnVPIyGwbkXQ9SXF/UdIJUkQv/MBgW5LbGWJVwP /h5gOz4PgidL9DRtw6Xyn6B6PYECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQOBRJG DW32sw80zd68EZyqSuQGDTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzcwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pBswDQYJKoZIhvcNAQELBQADggEBABppXuc1tUkYOZVFtcJ623l+ZC1gdM6fxGgW RlDOx3Cy1TH9jGURRoTKRVwz3YchmEwsWsROE3E5/iReEO/zer/sOz217WzNEpxT ued2s3V6laUVIwIJzSEkS18DSz4njLjBRPIf0h3zFe1W53mOjREOdsgBYrZEbNqe NiQY0EfWSV24pLtTBa1VPOYN7sDghW70WqYLJcySgih0ihm9tOzOqaVqJNwM+YXw f8By8eOvhatpDJopwebYJBQeVLHa48018NRDvUGTwTMLj2GaT3hm5gVlDd9GpFb1 lCyh5C9gsRkJOlabW/R5qUFJKbzyvp2sRGhk3KzHakruABS7q7k= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:41 2026 by rpki-client