$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143714.roa File: AS143714.roa (raw, json) Hash identifier: nF+ydZOjgRrmOnyvsgEoRFfkqEPgITVxCvs2dwcLOFo= Subject key identifier: E0:E6:15:0B:D1:B0:B2:F3:50:B0:AB:9B:9F:9C:0D:F9:10:B9:70:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 66E39844D3B6569839EC13E34B0B731C13E01953 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143714.roa Signing time: Wed 04 Mar 2026 06:13:33 +0000 ROA not before: Wed 04 Mar 2026 06:08:33 +0000 ROA not after: Wed 03 Mar 2027 06:13:33 +0000 asID: 143714 IP address blocks: 240a:a428::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e3:98:44:d3:b6:56:98:39:ec:13:e3:4b:0b:73:1c:13:e0:19:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:33 2026 GMT Not After : Mar 3 06:13:33 2027 GMT Subject: CN=E0E6150BD1B0B2F350B0AB9B9F9C0DF910B970D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e6:3c:45:53:31:33:19:f5:90:ca:d2:e4:22: 5b:a2:71:b1:b9:16:ef:6d:5a:bf:47:c7:87:68:b2: 5e:1f:1c:d3:49:ee:ac:75:07:63:53:c2:d1:64:c4: e4:38:00:0a:cd:e5:90:d8:a1:42:e8:c3:9a:2e:0a: c2:90:8c:72:7c:11:7c:fc:31:d4:29:00:98:b0:d9: 8a:ee:99:57:46:d5:fe:f4:eb:2e:b9:f9:c4:02:5d: 8d:41:e9:60:cf:7f:f8:ec:70:58:80:ea:52:cf:50: 8a:e6:b0:48:80:b1:00:c6:18:2a:38:89:f2:20:f3: b8:2f:e3:4f:d0:cb:9b:f5:10:da:9a:3f:d4:19:98: 94:0d:2b:68:e0:35:c3:f8:9b:80:cf:31:c6:11:64: 48:af:0a:f8:b7:af:95:c3:f2:49:a2:26:a3:01:45: 34:84:18:29:c9:d2:0c:1e:fd:55:a6:4b:a8:29:4e: f1:aa:24:40:1a:d8:ad:69:7e:f6:d9:86:af:dc:3b: 14:a4:ff:d7:a5:ff:a5:5e:ab:3e:33:6c:e8:39:ac: de:ad:f2:8a:d4:51:d4:c6:00:a0:2b:28:69:62:92: b2:be:2d:b3:7d:5c:37:00:55:37:ca:2c:3a:e0:07: 5d:06:4f:57:ed:f0:02:77:56:82:48:89:a0:63:0f: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E6:15:0B:D1:B0:B2:F3:50:B0:AB:9B:9F:9C:0D:F9:10:B9:70:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143714.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a428::/32 Signature Algorithm: sha256WithRSAEncryption 8b:0f:90:46:39:f0:a7:2a:24:ec:fd:7f:13:8b:7c:3f:26:d5: 64:ea:92:43:f8:ce:36:09:6a:cd:c9:24:e1:83:ff:1c:91:31: bd:86:77:a9:cc:73:9b:b3:b0:33:3c:20:c5:7b:6d:32:85:f8: 08:eb:ce:62:91:40:e8:8a:27:c4:39:47:de:9c:e1:f1:9b:d6: 65:0e:a4:4d:5f:47:52:cb:3b:64:35:e0:c1:59:d5:45:31:fe: ef:e0:fe:1a:af:87:40:94:68:dc:ce:dc:77:26:71:4a:05:de: 25:50:52:d9:1d:4d:6a:7e:e7:94:30:3b:1b:cb:00:53:dd:2d: 56:8d:a4:bf:03:5b:6d:85:9a:3b:22:b6:cf:a0:fa:df:e4:3f: e0:fc:da:f5:17:ad:d5:85:cf:85:87:0b:6b:6a:cc:3d:d7:e9: b0:bd:84:0e:1f:63:cb:a6:d6:c7:3f:34:48:18:cb:af:ee:0b: 70:6b:57:3a:da:b9:ff:b6:55:cb:fd:08:7e:9f:3b:1a:62:ed: ca:eb:fa:78:8f:71:1c:a9:99:5b:5d:c5:d7:79:49:db:08:5a: 96:d0:c2:36:5b:dd:a0:8d:f2:87:81:c6:2f:34:a8:a0:87:79: e7:e9:d5:37:83:0a:36:ac:6d:00:62:37:89:bf:d1:d2:73:82: 3e:ec:0a:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZuOYRNO2Vpg57BPjSwtzHBPgGVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzM1oX DTI3MDMwMzA2MTMzM1owMzExMC8GA1UEAxMoRTBFNjE1MEJEMUIwQjJGMzUwQjBB QjlCOUY5QzBERjkxMEI5NzBENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrmPEVTMTMZ9ZDK0uQiW6JxsbkW721av0fHh2iyXh8c00nurHUHY1PC0WTE 5DgACs3lkNihQujDmi4KwpCMcnwRfPwx1CkAmLDZiu6ZV0bV/vTrLrn5xAJdjUHp YM9/+OxwWIDqUs9QiuawSICxAMYYKjiJ8iDzuC/jT9DLm/UQ2po/1BmYlA0raOA1 w/ibgM8xxhFkSK8K+LevlcPySaImowFFNIQYKcnSDB79VaZLqClO8aokQBrYrWl+ 9tmGr9w7FKT/16X/pV6rPjNs6Dms3q3yitRR1MYAoCsoaWKSsr4ts31cNwBVN8os OuAHXQZPV+3wAndWgkiJoGMPqdMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTg5hUL 0bCy81Cwq5ufnA35ELlw1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzcxNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pCgwDQYJKoZIhvcNAQELBQADggEBAIsPkEY58KcqJOz9fxOLfD8m1WTqkkP4zjYJ as3JJOGD/xyRMb2Gd6nMc5uzsDM8IMV7bTKF+AjrzmKRQOiKJ8Q5R96c4fGb1mUO pE1fR1LLO2Q14MFZ1UUx/u/g/hqvh0CUaNzO3HcmcUoF3iVQUtkdTWp+55QwOxvL AFPdLVaNpL8DW22Fmjsits+g+t/kP+D82vUXrdWFz4WHC2tqzD3X6bC9hA4fY8um 1sc/NEgYy6/uC3BrVzrauf+2Vcv9CH6fOxpi7crr+niPcRypmVtdxdd5SdsIWpbQ wjZb3aCN8oeBxi80qKCHeefp1TeDCjasbQBiN4m/0dJzgj7sCpw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:08 2026 by rpki-client