$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143704.roa File: AS143704.roa (raw, json) Hash identifier: Z+PnO9ufQl1TJ60yeHPhsT+d9DUg2yktkQu12TI/QC4= Subject key identifier: 01:7C:C4:40:C8:D1:9C:AD:9C:6D:24:BF:53:60:CD:2C:1D:EF:26:69 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 40545ECAA2C523A645C3D64F1E4865E2ECB9FCB7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143704.roa Signing time: Wed 04 Mar 2026 06:15:36 +0000 ROA not before: Wed 04 Mar 2026 06:10:36 +0000 ROA not after: Wed 03 Mar 2027 06:15:36 +0000 asID: 143704 IP address blocks: 240a:a41e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:54:5e:ca:a2:c5:23:a6:45:c3:d6:4f:1e:48:65:e2:ec:b9:fc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:36 2026 GMT Not After : Mar 3 06:15:36 2027 GMT Subject: CN=017CC440C8D19CAD9C6D24BF5360CD2C1DEF2669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:49:35:cc:d4:d4:a5:f6:c6:78:75:45:db: 22:3d:9b:28:16:ac:39:b2:61:c8:1d:a4:d4:36:78: 28:3b:a2:43:f5:37:17:99:cc:75:6f:64:0b:59:ed: f9:72:43:43:d1:a4:52:31:c8:c8:0a:ea:77:09:ee: af:e7:6a:6d:12:4a:9b:75:36:2e:7b:e5:56:6d:73: be:16:44:27:16:3a:a3:6d:ca:d2:22:04:29:4b:cb: c1:5a:d8:80:ae:28:1f:61:bb:1d:64:f8:35:ad:37: 0f:8c:8f:ab:ab:9e:2c:3d:79:c6:47:5e:ef:66:79: 8b:59:46:23:de:34:9a:b9:98:ec:63:b3:45:f5:3b: da:67:83:26:40:1b:4d:b1:d8:4e:91:88:af:28:9b: 77:e6:9c:09:7e:1b:bf:b9:da:74:a4:e8:c1:ee:da: 8e:ae:fc:f2:25:47:ba:97:fe:da:78:02:66:a4:b4: 7b:df:90:cd:38:f1:a8:46:f2:90:4b:cc:86:a9:55: b4:69:39:3b:93:8a:26:94:32:8b:a2:b7:c8:91:1f: 80:63:5c:c4:02:9f:cb:46:02:a4:34:c5:ed:ef:33: 8a:b6:4e:83:2a:6b:19:e3:c3:42:59:fa:3d:c7:dc: b2:02:2f:48:fe:03:2c:f7:31:8d:ba:b1:c7:52:fa: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7C:C4:40:C8:D1:9C:AD:9C:6D:24:BF:53:60:CD:2C:1D:EF:26:69 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143704.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a41e::/32 Signature Algorithm: sha256WithRSAEncryption 3e:c1:a7:83:ff:dd:69:df:a7:29:39:57:6b:f4:d8:9d:9b:8c: fe:f6:37:9f:f2:63:62:b3:c6:10:be:4c:b6:ff:68:10:41:91: d4:53:8d:bb:e8:e4:95:2e:5f:ce:91:93:0f:8b:05:53:4f:6f: 3b:40:e1:7a:14:23:1a:37:8e:98:ae:40:e8:36:86:a9:d9:ed: 0e:9e:52:c3:cd:f7:60:c7:7b:2a:ad:dc:4a:09:9f:5f:bb:7f: ef:29:5d:4c:fb:b5:22:87:f1:21:eb:2d:f1:16:6c:17:79:35: 13:13:84:41:65:99:e9:14:16:33:87:5c:c1:7f:86:4e:ed:34: 21:83:d2:54:80:4e:0d:2d:c0:ed:8e:75:26:90:af:31:04:78: 40:57:8b:7c:bb:f4:7a:54:8d:97:e9:07:36:e9:2a:15:9a:4c: 48:43:60:8a:2f:03:81:74:91:70:b6:75:bf:9c:4a:67:0a:10: c4:f4:ab:45:dc:3a:51:f2:45:ba:0e:13:26:8a:2c:76:1e:95: e8:bf:5e:4d:bb:a9:eb:46:45:86:87:69:85:aa:f5:13:ce:97: d6:a0:cf:bc:c1:95:6f:c9:31:d6:5e:ef:d2:17:6f:13:49:10: c7:d8:05:46:2c:94:49:4a:5f:8e:a5:7d:e6:2d:04:75:ac:58: 38:cc:9f:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQFReyqLFI6ZFw9ZPHkhl4uy5/LcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzNloX DTI3MDMwMzA2MTUzNlowMzExMC8GA1UEAxMoMDE3Q0M0NDBDOEQxOUNBRDlDNkQy NEJGNTM2MENEMkMxREVGMjY2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAxSTXM1NSl9sZ4dUXbIj2bKBasObJhyB2k1DZ4KDuiQ/U3F5nMdW9kC1nt +XJDQ9GkUjHIyArqdwnur+dqbRJKm3U2LnvlVm1zvhZEJxY6o23K0iIEKUvLwVrY gK4oH2G7HWT4Na03D4yPq6ueLD15xkde72Z5i1lGI940mrmY7GOzRfU72meDJkAb TbHYTpGIryibd+acCX4bv7nadKTowe7ajq788iVHupf+2ngCZqS0e9+QzTjxqEby kEvMhqlVtGk5O5OKJpQyi6K3yJEfgGNcxAKfy0YCpDTF7e8zirZOgyprGePDQln6 PcfcsgIvSP4DLPcxjbqxx1L6DWMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQBfMRA yNGcrZxtJL9TYM0sHe8maTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzcwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pB4wDQYJKoZIhvcNAQELBQADggEBAD7Bp4P/3Wnfpyk5V2v02J2bjP72N5/yY2Kz xhC+TLb/aBBBkdRTjbvo5JUuX86Rkw+LBVNPbztA4XoUIxo3jpiuQOg2hqnZ7Q6e UsPN92DHeyqt3EoJn1+7f+8pXUz7tSKH8SHrLfEWbBd5NRMThEFlmekUFjOHXMF/ hk7tNCGD0lSATg0twO2OdSaQrzEEeEBXi3y79HpUjZfpBzbpKhWaTEhDYIovA4F0 kXC2db+cSmcKEMT0q0XcOlHyRboOEyaKLHYelei/Xk27qetGRYaHaYWq9RPOl9ag z7zBlW/JMdZe79IXbxNJEMfYBUYslElKX46lfeYtBHWsWDjMnwQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:04 2026 by rpki-client