$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143738.roa File: AS143738.roa (raw, json) Hash identifier: /UuvZT26HrZGCZWnsQ8j9Lh+T7LAgeuq5h14J5qKnN4= Subject key identifier: F1:0C:BB:4A:F7:CC:15:03:F0:2B:3F:AE:87:6D:89:FF:D8:70:FF:AC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 27996FC90973BC29951EC365AED155DD655FE8C9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143738.roa Signing time: Wed 04 Mar 2026 06:14:19 +0000 ROA not before: Wed 04 Mar 2026 06:09:19 +0000 ROA not after: Wed 03 Mar 2027 06:14:19 +0000 asID: 143738 IP address blocks: 240a:a440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:99:6f:c9:09:73:bc:29:95:1e:c3:65:ae:d1:55:dd:65:5f:e8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:19 2026 GMT Not After : Mar 3 06:14:19 2027 GMT Subject: CN=F10CBB4AF7CC1503F02B3FAE876D89FFD870FFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1e:16:7e:05:9b:a7:19:df:8b:17:77:03:4d: 54:81:18:ab:1c:e8:0e:20:36:06:43:9b:00:09:10: d4:e8:52:fa:bc:f5:ea:08:1c:8c:c6:75:67:d7:1b: e1:83:f8:ba:68:83:38:75:92:27:6e:49:47:b1:7b: 89:31:a0:1d:eb:bb:a8:84:5b:a8:ca:0d:21:09:2c: bb:89:28:00:1b:46:e0:2e:1b:f0:ec:e1:4f:ab:00: d0:0c:54:b9:7e:e6:5a:78:55:70:55:f3:1e:10:fe: b5:2a:44:c0:07:68:c9:b8:57:c9:75:a1:20:8d:92: 9d:9a:bc:f7:05:34:62:e8:2f:87:97:99:a1:94:26: fb:41:06:21:99:67:64:8f:1f:af:5c:99:d3:35:36: 93:d1:21:32:67:68:1e:1e:01:97:de:e0:8d:3d:17: 33:d7:62:a3:5f:74:21:d5:a8:c1:f6:71:66:96:2b: 9d:2b:0a:ff:31:28:ab:2a:41:c5:bc:10:a8:06:43: c0:70:a6:cd:d6:96:90:c4:90:75:1f:55:4d:53:6a: 63:54:85:18:75:80:d7:d6:a3:dd:6a:ae:2e:74:83: 09:78:e1:81:2e:cf:96:72:27:c0:d1:e8:f3:bf:5b: ff:d6:46:cf:0d:30:8f:1b:ae:fe:f3:42:91:bc:5b: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0C:BB:4A:F7:CC:15:03:F0:2B:3F:AE:87:6D:89:FF:D8:70:FF:AC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a440::/32 Signature Algorithm: sha256WithRSAEncryption 00:a9:e5:ed:01:2a:c3:3a:b0:04:9d:5f:89:0c:ce:a2:c5:8b: 18:64:06:1b:04:fa:0c:21:fb:2b:85:20:83:7a:fb:3b:51:7e: 71:9f:20:47:7c:4e:4c:8b:89:8a:34:b8:35:e9:24:8f:bc:95: cc:c3:e8:96:57:e1:f2:96:8d:98:bd:1a:8f:a6:3b:0c:30:fe: ef:2d:16:a1:57:d7:f9:34:08:2b:83:ed:9f:8e:c2:15:95:14: dd:35:74:ec:d0:b4:db:96:f6:bd:2f:ae:bc:92:ec:25:ab:26: e7:97:44:be:a4:11:59:3b:45:20:05:65:b8:19:24:8d:1b:c4: 3e:c7:8c:5e:28:3c:97:fd:73:00:43:cc:d1:1a:22:96:b0:f1: a9:55:75:01:30:d7:3b:9a:83:b0:24:96:fa:ce:00:be:20:88: 6a:75:73:3f:3e:08:83:d5:94:03:a0:67:fb:d3:13:78:c3:88: 46:4d:16:5a:7a:72:69:f4:e6:e2:fb:6b:85:d1:fb:19:b4:f2: 4d:fc:3b:3c:aa:ed:b7:fb:37:b4:c3:46:05:b2:c1:b0:63:55: 4e:e4:ba:9c:58:b8:2f:f5:dd:bc:45:22:97:4c:ea:01:ae:0b: 60:7d:cb:62:24:55:46:b8:95:82:3a:e0:9d:e1:a9:99:32:db: 29:6a:5d:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJ5lvyQlzvCmVHsNlrtFV3WVf6MkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxOVoX DTI3MDMwMzA2MTQxOVowMzExMC8GA1UEAxMoRjEwQ0JCNEFGN0NDMTUwM0YwMkIz RkFFODc2RDg5RkZEODcwRkZBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPUeFn4Fm6cZ34sXdwNNVIEYqxzoDiA2BkObAAkQ1OhS+rz16ggcjMZ1Z9cb 4YP4umiDOHWSJ25JR7F7iTGgHeu7qIRbqMoNIQksu4koABtG4C4b8OzhT6sA0AxU uX7mWnhVcFXzHhD+tSpEwAdoybhXyXWhII2SnZq89wU0Yugvh5eZoZQm+0EGIZln ZI8fr1yZ0zU2k9EhMmdoHh4Bl97gjT0XM9dio190IdWowfZxZpYrnSsK/zEoqypB xbwQqAZDwHCmzdaWkMSQdR9VTVNqY1SFGHWA19aj3WquLnSDCXjhgS7PlnInwNHo 879b/9ZGzw0wjxuu/vNCkbxbr+kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTxDLtK 98wVA/ArP66HbYn/2HD/rDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzczOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pEAwDQYJKoZIhvcNAQELBQADggEBAACp5e0BKsM6sASdX4kMzqLFixhkBhsE+gwh +yuFIIN6+ztRfnGfIEd8TkyLiYo0uDXpJI+8lczD6JZX4fKWjZi9Go+mOwww/u8t FqFX1/k0CCuD7Z+OwhWVFN01dOzQtNuW9r0vrryS7CWrJueXRL6kEVk7RSAFZbgZ JI0bxD7HjF4oPJf9cwBDzNEaIpaw8alVdQEw1zuag7AklvrOAL4giGp1cz8+CIPV lAOgZ/vTE3jDiEZNFlp6cmn05uL7a4XR+xm08k38Ozyq7bf7N7TDRgWywbBjVU7k upxYuC/13bxFIpdM6gGuC2B9y2IkVUa4lYI64J3hqZky2ylqXUQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:48 2026 by rpki-client