$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143737.roa File: AS143737.roa (raw, json) Hash identifier: Nq3HoJixTJ5IllJ6J0aWSWWkOdxNg3BNr2Ecr+QkxaM= Subject key identifier: 2E:69:27:3D:99:FC:61:F3:C4:3B:28:8B:E9:4B:A4:9B:D9:6A:B8:A4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 141C5EABC73599A6329E962FE940FAEBDE8388CD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143737.roa Signing time: Wed 04 Mar 2026 06:14:13 +0000 ROA not before: Wed 04 Mar 2026 06:09:13 +0000 ROA not after: Wed 03 Mar 2027 06:14:13 +0000 asID: 143737 IP address blocks: 240a:a43f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1c:5e:ab:c7:35:99:a6:32:9e:96:2f:e9:40:fa:eb:de:83:88:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:13 2026 GMT Not After : Mar 3 06:14:13 2027 GMT Subject: CN=2E69273D99FC61F3C43B288BE94BA49BD96AB8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:33:65:6f:a9:71:19:47:d7:bd:0a:a2:84: 45:d0:e5:de:e5:3a:59:15:ad:b9:48:b6:a6:ab:f1: 3f:11:51:35:72:9a:32:91:94:f4:42:b4:07:c1:15: fa:b8:47:1e:e0:02:f3:d8:fe:da:2e:34:e2:8d:cf: c9:d1:d9:36:fa:99:b8:d8:5b:9c:19:61:81:42:ae: 42:1a:46:58:b6:82:0b:97:49:e3:0d:a7:df:9d:b8: 13:38:89:52:1a:54:69:92:d4:da:17:ad:06:31:5c: c2:06:3f:3e:f4:56:df:b4:4f:34:fd:e7:ee:1b:d9: 19:64:ba:a3:24:0a:78:58:2b:f3:fb:df:28:f3:1b: 2f:2d:99:59:40:df:a4:1c:c7:ec:55:9b:02:ff:83: b1:9c:bb:fd:ad:73:9a:24:20:b9:b4:49:3e:9f:9f: df:1a:41:c3:2e:70:18:d6:cc:0e:00:6e:cf:3e:5e: 76:0c:27:0c:55:fd:17:d0:21:46:4d:aa:3d:d5:7e: 80:38:4d:ce:7f:6a:85:3f:b1:f3:7b:08:a4:3a:a2: 52:04:93:f9:49:33:26:eb:1a:5e:6c:0e:b6:9c:0d: db:fa:f9:06:25:45:95:18:58:e6:42:cb:f4:58:75: fb:0b:ff:82:19:3e:89:87:71:07:24:e7:3f:4b:95: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:69:27:3D:99:FC:61:F3:C4:3B:28:8B:E9:4B:A4:9B:D9:6A:B8:A4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a43f::/32 Signature Algorithm: sha256WithRSAEncryption 95:a3:c6:4f:24:4f:b3:56:d5:26:b1:3a:ea:04:56:36:ec:40: 1a:3f:02:f1:8a:64:1f:dc:ba:da:47:f0:28:68:31:7b:5b:ba: df:a6:48:0a:39:38:ad:2a:05:44:90:3e:96:fc:41:1f:dc:4f: 58:1e:2c:0b:fc:db:94:ef:51:3d:c8:ea:81:ca:7a:e5:5c:ca: ad:44:0d:37:9d:0a:3b:e8:f9:6f:c9:ba:1f:24:fe:f3:00:6b: a9:ae:5b:e3:4b:e0:bf:66:15:16:71:ec:22:42:82:1d:49:05: 48:92:b4:43:d8:82:47:3f:cb:87:22:2b:14:a9:a4:7d:f8:69: 11:ba:a4:0a:5e:07:0f:53:05:a3:55:ca:e1:db:c9:aa:4c:4e: 79:0a:b2:dc:b3:b8:41:0a:fd:be:b1:42:7d:62:fb:10:59:5f: 40:fc:3e:32:33:96:2b:72:72:6f:26:a4:5d:2e:00:2b:7f:d0: fe:5e:d8:99:3a:6c:bd:eb:eb:dd:c0:a8:c4:98:10:2d:1e:21: c7:2e:01:99:47:6c:47:c1:18:4a:51:68:2b:25:fc:b6:cd:c5: 3b:76:35:11:b6:f5:ff:da:aa:aa:8b:b5:85:19:79:cd:d7:61: 7a:12:c8:f2:6b:c6:a9:4d:67:64:53:06:25:ab:ab:1f:6b:e4: 0c:a4:01:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFBxeq8c1maYynpYv6UD6696DiM0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxM1oX DTI3MDMwMzA2MTQxM1owMzExMC8GA1UEAxMoMkU2OTI3M0Q5OUZDNjFGM0M0M0Iy ODhCRTk0QkE0OUJEOTZBQjhBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOWM2VvqXEZR9e9CqKERdDl3uU6WRWtuUi2pqvxPxFRNXKaMpGU9EK0B8EV +rhHHuAC89j+2i404o3PydHZNvqZuNhbnBlhgUKuQhpGWLaCC5dJ4w2n3524EziJ UhpUaZLU2hetBjFcwgY/PvRW37RPNP3n7hvZGWS6oyQKeFgr8/vfKPMbLy2ZWUDf pBzH7FWbAv+DsZy7/a1zmiQgubRJPp+f3xpBwy5wGNbMDgBuzz5edgwnDFX9F9Ah Rk2qPdV+gDhNzn9qhT+x83sIpDqiUgST+UkzJusaXmwOtpwN2/r5BiVFlRhY5kLL 9Fh1+wv/ghk+iYdxByTnP0uV1IECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQuaSc9 mfxh88Q7KIvpS6Sb2Wq4pDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzczNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pD8wDQYJKoZIhvcNAQELBQADggEBAJWjxk8kT7NW1SaxOuoEVjbsQBo/AvGKZB/c utpH8ChoMXtbut+mSAo5OK0qBUSQPpb8QR/cT1geLAv825TvUT3I6oHKeuVcyq1E DTedCjvo+W/Juh8k/vMAa6muW+NL4L9mFRZx7CJCgh1JBUiStEPYgkc/y4ciKxSp pH34aRG6pApeBw9TBaNVyuHbyapMTnkKstyzuEEK/b6xQn1i+xBZX0D8PjIzlity cm8mpF0uACt/0P5e2Jk6bL3r693AqMSYEC0eIccuAZlHbEfBGEpRaCsl/LbNxTt2 NRG29f/aqqqLtYUZec3XYXoSyPJrxqlNZ2RTBiWrqx9r5AykAWo= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:36 2026 by rpki-client