$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143734.roa File: AS143734.roa (raw, json) Hash identifier: hJypOpE2mQhzvtTwLxAczBR4kUUWLfmo70OIu6yxAyk= Subject key identifier: BC:20:82:B0:13:C2:B3:82:7E:96:CC:C6:39:6D:F9:66:0F:9C:B2:9B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7812F41742D2CE2DA1082125B433EB2595C5CD83 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143734.roa Signing time: Wed 04 Mar 2026 06:14:14 +0000 ROA not before: Wed 04 Mar 2026 06:09:14 +0000 ROA not after: Wed 03 Mar 2027 06:14:14 +0000 asID: 143734 IP address blocks: 240a:a43c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:12:f4:17:42:d2:ce:2d:a1:08:21:25:b4:33:eb:25:95:c5:cd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:14 2026 GMT Not After : Mar 3 06:14:14 2027 GMT Subject: CN=BC2082B013C2B3827E96CCC6396DF9660F9CB29B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:aa:4a:e5:3f:35:8d:bf:71:76:cc:68:db: 3c:e5:d6:1e:cc:5d:05:b5:70:14:e8:a4:ed:e3:92: a0:8e:f9:a1:3f:cb:ff:7c:e8:60:4c:66:1a:d2:00: 26:15:00:4c:d1:8a:c5:6f:b6:92:16:9a:1c:78:a3: 81:86:0d:e5:83:8d:a8:a5:b3:28:65:6b:75:49:ce: 63:27:90:7b:80:bc:3a:56:07:25:41:32:62:f2:29: 12:05:33:0e:86:15:79:60:d5:2a:a9:a0:de:a0:07: 87:04:30:a3:18:ac:52:cc:6d:e7:0e:1d:17:dc:82: 20:28:0e:b4:cb:fb:62:a3:b0:83:ac:4e:4e:92:ca: 14:c2:8b:5c:60:77:d3:f7:40:08:68:2a:d5:54:ec: 23:4c:01:bd:11:dd:a4:4c:45:34:c8:f8:4d:12:cd: f3:48:40:26:65:49:48:46:f0:11:f4:55:5b:68:c5: 90:62:e6:31:7d:f4:9e:e9:ec:e9:6d:99:b7:a0:ef: 56:c3:ea:bc:72:94:86:e9:e1:32:55:f7:24:e3:7b: dd:e9:ff:da:c0:2b:b3:56:28:a0:9d:b8:dd:86:80: 5a:eb:2f:b0:b1:eb:b6:f5:43:b8:fe:0e:dc:7d:0a: 10:bf:60:c0:c1:57:22:d5:51:8d:8d:24:a5:da:34: 07:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:20:82:B0:13:C2:B3:82:7E:96:CC:C6:39:6D:F9:66:0F:9C:B2:9B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a43c::/32 Signature Algorithm: sha256WithRSAEncryption 0a:03:30:09:c6:5a:48:8f:50:d8:6e:bc:09:65:c2:e4:b5:15: c4:e2:72:e9:f8:9d:f6:6e:b4:98:27:90:6f:c6:38:63:48:25: 67:2d:55:d5:5b:5b:36:70:99:18:c6:ba:2f:83:70:26:01:9e: 7e:5c:ca:38:4f:9c:06:ac:70:21:98:cc:95:63:f7:71:af:57: 7b:97:64:88:ee:41:07:6f:e5:32:4b:b2:fd:c5:ca:6a:45:49: 9c:41:f5:d6:89:b5:d1:b5:4a:6d:4a:ac:f7:89:1f:72:5f:b7: 16:07:74:8c:63:84:ba:9a:05:8c:56:8a:f9:ab:5f:f8:73:a0: fe:cd:94:60:de:d2:d1:56:6e:65:5b:f3:a8:4d:e0:2b:66:52: b1:d1:12:22:6b:d8:a3:68:73:85:f0:c2:bd:4b:62:d1:43:de: bc:50:8b:3c:23:6f:07:b9:d1:9e:5f:41:5a:4f:6f:26:62:de: 74:0a:a7:9d:e2:36:88:14:db:cf:e9:25:78:ba:a8:6e:2f:f6: dd:e9:c6:bc:b9:d2:79:5e:91:45:f0:83:c2:4f:44:7f:84:dc: de:2e:8d:2f:2a:17:a2:b0:4d:04:3d:88:75:c8:10:46:b4:79: 3d:e9:36:7d:26:5f:10:84:24:ce:73:c7:0d:23:c0:44:c7:ed: 43:2f:e7:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeBL0F0LSzi2hCCEltDPrJZXFzYMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxNFoX DTI3MDMwMzA2MTQxNFowMzExMC8GA1UEAxMoQkMyMDgyQjAxM0MyQjM4MjdFOTZD Q0M2Mzk2REY5NjYwRjlDQjI5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIgSqkrlPzWNv3F2zGjbPOXWHsxdBbVwFOik7eOSoI75oT/L/3zoYExmGtIA JhUATNGKxW+2khaaHHijgYYN5YONqKWzKGVrdUnOYyeQe4C8OlYHJUEyYvIpEgUz DoYVeWDVKqmg3qAHhwQwoxisUsxt5w4dF9yCICgOtMv7YqOwg6xOTpLKFMKLXGB3 0/dACGgq1VTsI0wBvRHdpExFNMj4TRLN80hAJmVJSEbwEfRVW2jFkGLmMX30nuns 6W2Zt6DvVsPqvHKUhunhMlX3JON73en/2sArs1YooJ243YaAWusvsLHrtvVDuP4O 3H0KEL9gwMFXItVRjY0kpdo0BysCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS8IIKw E8Kzgn6WzMY5bflmD5yymzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzczNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pDwwDQYJKoZIhvcNAQELBQADggEBAAoDMAnGWkiPUNhuvAllwuS1FcTicun4nfZu tJgnkG/GOGNIJWctVdVbWzZwmRjGui+DcCYBnn5cyjhPnAascCGYzJVj93GvV3uX ZIjuQQdv5TJLsv3FympFSZxB9daJtdG1Sm1KrPeJH3JftxYHdIxjhLqaBYxWivmr X/hzoP7NlGDe0tFWbmVb86hN4CtmUrHREiJr2KNoc4Xwwr1LYtFD3rxQizwjbwe5 0Z5fQVpPbyZi3nQKp53iNogU28/pJXi6qG4v9t3pxry50nlekUXwg8JPRH+E3N4u jS8qF6KwTQQ9iHXIEEa0eT3pNn0mXxCEJM5zxw0jwETH7UMv56Y= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:11 2026 by rpki-client