$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143703.roa File: AS143703.roa (raw, json) Hash identifier: HE6k9bilk/sSNkiPG6ayQINYoxDOAqhAuqDV7tPIzrc= Subject key identifier: 80:22:FB:F9:A0:66:D7:E9:64:3F:76:38:EA:19:BC:8D:41:B9:EB:7F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0233AD86F97CC7B73FABF3596E64DD76EA13E11F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143703.roa Signing time: Wed 04 Mar 2026 06:15:13 +0000 ROA not before: Wed 04 Mar 2026 06:10:13 +0000 ROA not after: Wed 03 Mar 2027 06:15:13 +0000 asID: 143703 IP address blocks: 240a:a41d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:33:ad:86:f9:7c:c7:b7:3f:ab:f3:59:6e:64:dd:76:ea:13:e1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:13 2026 GMT Not After : Mar 3 06:15:13 2027 GMT Subject: CN=8022FBF9A066D7E9643F7638EA19BC8D41B9EB7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:14:2a:1e:d2:7e:1e:4e:bb:fa:12:68:17: da:c2:8a:be:67:8f:ef:d3:44:fa:52:32:c5:9e:7e: 6b:27:bb:3b:fb:81:69:45:4b:c6:54:c8:ec:1a:60: 01:cc:93:ba:97:6d:00:7d:ed:6b:a9:72:24:69:27: 6d:bf:f7:b2:13:b9:b6:e9:21:58:7d:6e:2c:86:71: f5:b7:83:29:05:6b:31:d1:02:9a:73:07:34:c5:0c: ac:4c:df:ed:b1:3e:11:f5:d4:74:37:d6:e8:67:34: 72:fb:4e:e7:74:9f:f5:90:26:b7:53:e1:33:ce:99: 3e:d5:e6:b4:72:1b:d5:f5:06:7c:22:ce:2b:df:60: d6:45:d6:c4:1d:26:9b:7b:8c:06:4e:fb:49:91:a5: 7a:f0:77:a6:f4:4a:e6:38:31:8b:fa:bd:3b:1d:1f: 96:0b:b1:35:7e:88:7d:ec:d0:0b:b6:e5:be:e8:07: 8b:9c:9f:29:d4:fa:f7:03:88:6d:ff:96:1d:0f:85: d1:8b:6b:ab:20:c5:f5:1f:54:ee:66:e0:e5:3e:b6: 9a:a2:0d:85:b7:2e:2a:38:97:5d:f7:8c:06:9b:5b: 24:9b:77:77:0d:df:e7:e9:77:56:58:f8:8c:28:1d: 55:f5:34:1f:70:c4:cd:35:db:41:9a:74:0c:fd:61: 60:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:22:FB:F9:A0:66:D7:E9:64:3F:76:38:EA:19:BC:8D:41:B9:EB:7F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143703.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a41d::/32 Signature Algorithm: sha256WithRSAEncryption 7a:77:10:48:3f:f7:09:8a:c1:50:a2:eb:de:71:60:bf:77:b9: 4f:46:bb:4c:e3:e3:1f:ce:48:62:5c:4e:39:92:ce:c8:1e:a3: 9c:63:b1:eb:ee:40:10:bc:1d:6c:0d:aa:a0:57:c1:60:d0:55: 37:5d:4b:fd:4d:5f:f5:03:72:4d:32:3f:f6:ce:98:bb:44:fc: ee:2c:a8:0b:8b:6a:72:d9:4e:cc:93:41:23:e0:85:10:53:fb: 83:13:bf:70:8e:1e:9c:11:0a:8f:1f:be:33:1d:fb:88:61:70: 16:3e:3e:b8:2e:e7:d8:3d:7e:a9:08:29:5a:9b:51:65:ce:4b: 68:6e:65:6d:a7:9f:21:e4:34:10:46:93:0d:47:33:c2:a3:fe: 18:aa:e5:49:6a:cb:ae:ad:98:ce:dd:b8:93:5a:0d:70:12:5e: e4:96:3f:aa:4c:88:57:bb:6d:f3:60:eb:8c:eb:36:0d:2d:9a: 06:81:b1:ee:b1:a4:b1:e3:72:b5:d2:ce:05:62:bd:e5:b3:3b: be:64:47:02:ca:2e:c4:9b:d7:a6:37:3f:a6:91:68:1f:51:a0: 79:d9:e0:11:93:cf:8a:24:ab:36:1d:f0:7c:b9:d4:85:0f:83: c8:16:56:5e:1d:ad:84:99:d7:a1:9e:bf:ef:8c:0d:e1:c7:9c: 1b:fb:45:17 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAjOthvl8x7c/q/NZbmTdduoT4R8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxM1oX DTI3MDMwMzA2MTUxM1owMzExMC8GA1UEAxMoODAyMkZCRjlBMDY2RDdFOTY0M0Y3 NjM4RUExOUJDOEQ0MUI5RUI3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgBFCoe0n4eTrv6EmgX2sKKvmeP79NE+lIyxZ5+aye7O/uBaUVLxlTI7Bpg AcyTupdtAH3ta6lyJGknbb/3shO5tukhWH1uLIZx9beDKQVrMdECmnMHNMUMrEzf 7bE+EfXUdDfW6Gc0cvtO53Sf9ZAmt1PhM86ZPtXmtHIb1fUGfCLOK99g1kXWxB0m m3uMBk77SZGlevB3pvRK5jgxi/q9Ox0flguxNX6IfezQC7blvugHi5yfKdT69wOI bf+WHQ+F0YtrqyDF9R9U7mbg5T62mqINhbcuKjiXXfeMBptbJJt3dw3f5+l3Vlj4 jCgdVfU0H3DEzTXbQZp0DP1hYJ0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSAIvv5 oGbX6WQ/djjqGbyNQbnrfzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzcwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pB0wDQYJKoZIhvcNAQELBQADggEBAHp3EEg/9wmKwVCi695xYL93uU9Gu0zj4x/O SGJcTjmSzsgeo5xjsevuQBC8HWwNqqBXwWDQVTddS/1NX/UDck0yP/bOmLtE/O4s qAuLanLZTsyTQSPghRBT+4MTv3COHpwRCo8fvjMd+4hhcBY+Prgu59g9fqkIKVqb UWXOS2huZW2nnyHkNBBGkw1HM8Kj/hiq5Ulqy66tmM7duJNaDXASXuSWP6pMiFe7 bfNg64zrNg0tmgaBse6xpLHjcrXSzgViveWzO75kRwLKLsSb16Y3P6aRaB9RoHnZ 4BGTz4okqzYd8Hy51IUPg8gWVl4drYSZ16Gev++MDeHHnBv7RRc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:33 2026 by rpki-client