$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143712.roa File: AS143712.roa (raw, json) Hash identifier: qhUiojFBpcjjE2SI7JMdoPvct2dAI5Cbvl2Zpb89v4Q= Subject key identifier: AB:F6:85:FC:B6:34:53:D6:A2:56:16:C1:53:F1:D9:FA:8B:4F:ED:CE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 715CDFECF966AF922F4B3A3EB84AE4AD90B3EB6F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143712.roa Signing time: Wed 04 Mar 2026 06:13:39 +0000 ROA not before: Wed 04 Mar 2026 06:08:39 +0000 ROA not after: Wed 03 Mar 2027 06:13:39 +0000 asID: 143712 IP address blocks: 240a:a426::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5c:df:ec:f9:66:af:92:2f:4b:3a:3e:b8:4a:e4:ad:90:b3:eb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:39 2026 GMT Not After : Mar 3 06:13:39 2027 GMT Subject: CN=ABF685FCB63453D6A25616C153F1D9FA8B4FEDCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:0f:7d:02:86:1c:84:dc:ad:3a:b3:08:af: a2:e7:dd:90:2b:2c:24:5e:eb:52:3c:ea:af:6b:2e: 80:78:7b:a7:64:a8:8e:21:e2:5e:3e:d2:ff:a2:a5: 75:de:9a:fb:1f:8b:6e:8f:46:20:10:59:36:76:89: bc:f6:31:45:57:46:b0:7e:a4:b7:2a:ae:15:6b:30: de:84:81:a0:cb:11:cc:47:d0:d5:d7:48:45:c7:ff: ee:0e:2c:ba:dc:89:ba:65:86:eb:08:8f:04:88:01: 5e:f6:dc:d4:c8:4e:0b:91:52:d3:d4:fc:45:86:db: 56:ee:9b:78:60:e3:9b:e8:3f:85:36:30:09:0c:96: 94:64:19:be:39:fd:9e:4b:4a:5b:c3:1e:11:eb:07: cd:c3:a9:66:ce:f6:c7:bf:a0:e7:e6:ae:bc:df:58: d8:8f:2f:27:1d:5e:ee:7a:a4:b5:a2:a2:6b:d4:14: 14:94:65:d2:2f:72:a1:34:df:03:19:ae:d2:e5:85: 74:ad:0e:c7:5c:66:49:67:44:88:4e:e3:9e:95:ef: 2b:4a:c8:aa:7f:6e:cb:b7:d2:ed:65:24:dd:d1:bb: e9:1b:d0:cb:3f:ea:75:84:f1:f4:0a:26:5e:ce:ca: b1:6e:da:d3:27:4a:45:e4:b7:61:43:1e:d2:df:c7: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F6:85:FC:B6:34:53:D6:A2:56:16:C1:53:F1:D9:FA:8B:4F:ED:CE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143712.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a426::/32 Signature Algorithm: sha256WithRSAEncryption 93:a9:cb:e9:be:7a:aa:e0:97:97:d1:5a:34:28:ef:f5:7b:73: 96:8d:c6:b1:76:3e:dd:b9:63:fc:40:1b:16:4f:9c:2e:82:e0: 51:51:1b:fa:28:ac:e3:f4:a0:e8:f7:d7:58:ef:a6:a0:81:95: 1e:42:d5:dc:c4:35:80:43:df:ea:91:ad:3c:49:14:82:d1:20: 3e:3c:ca:2e:9d:e4:b8:7a:80:3e:89:86:4e:2c:54:9c:e2:72: a8:15:45:0a:28:82:0f:a7:2d:7b:0a:33:32:a7:72:d9:72:c5: 7a:00:9f:7e:cb:c5:0a:1b:0a:b5:9f:14:7b:85:a1:05:42:08: 9a:d6:96:08:a6:da:58:5d:aa:50:31:f5:1c:56:d8:9f:f2:f2: 4c:28:d5:de:c4:25:a3:0d:29:f8:e5:0e:fa:e7:78:00:67:ba: 21:90:31:31:9d:dc:f7:8c:57:0b:d1:88:e5:b9:5d:b5:83:3f: 2c:07:aa:fe:d7:f6:f3:6f:01:8e:ce:5d:bf:c3:96:22:d2:67: d6:cb:22:a0:eb:9b:35:4f:cb:82:51:c4:37:5f:c6:7e:02:12: 02:fd:8c:ed:a3:c4:77:3d:67:78:c8:f2:9c:83:5f:7b:a0:5a: 3c:6c:90:56:17:04:bd:e4:8f:45:8b:bf:8c:e5:30:b5:7b:53: e1:08:23:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcVzf7Plmr5IvSzo+uErkrZCz628wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzOVoX DTI3MDMwMzA2MTMzOVowMzExMC8GA1UEAxMoQUJGNjg1RkNCNjM0NTNENkEyNTYx NkMxNTNGMUQ5RkE4QjRGRURDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/+D30ChhyE3K06swivoufdkCssJF7rUjzqr2sugHh7p2SojiHiXj7S/6Kl dd6a+x+Lbo9GIBBZNnaJvPYxRVdGsH6ktyquFWsw3oSBoMsRzEfQ1ddIRcf/7g4s utyJumWG6wiPBIgBXvbc1MhOC5FS09T8RYbbVu6beGDjm+g/hTYwCQyWlGQZvjn9 nktKW8MeEesHzcOpZs72x7+g5+auvN9Y2I8vJx1e7nqktaKia9QUFJRl0i9yoTTf Axmu0uWFdK0Ox1xmSWdEiE7jnpXvK0rIqn9uy7fS7WUk3dG76RvQyz/qdYTx9Aom Xs7KsW7a0ydKReS3YUMe0t/H3mcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSr9oX8 tjRT1qJWFsFT8dn6i0/tzjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzcxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pCYwDQYJKoZIhvcNAQELBQADggEBAJOpy+m+eqrgl5fRWjQo7/V7c5aNxrF2Pt25 Y/xAGxZPnC6C4FFRG/oorOP0oOj311jvpqCBlR5C1dzENYBD3+qRrTxJFILRID48 yi6d5Lh6gD6Jhk4sVJzicqgVRQoogg+nLXsKMzKnctlyxXoAn37LxQobCrWfFHuF oQVCCJrWlgim2lhdqlAx9RxW2J/y8kwo1d7EJaMNKfjlDvrneABnuiGQMTGd3PeM VwvRiOW5XbWDPywHqv7X9vNvAY7OXb/DliLSZ9bLIqDrmzVPy4JRxDdfxn4CEgL9 jO2jxHc9Z3jI8pyDX3ugWjxskFYXBL3kj0WLv4zlMLV7U+EII7s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:20 2026 by rpki-client