$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143739.roa File: AS143739.roa (raw, json) Hash identifier: 0EC5hPPH7QHwzOXHmton6ePyKNrWTb1wyIBtbqa2oOk= Subject key identifier: DB:16:29:A7:86:5D:E2:CC:02:B6:4B:E5:AF:82:7C:D8:C4:8D:F6:EE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1C68B19DA8329044FD85184802C30BFA4F8C2657 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143739.roa Signing time: Wed 04 Mar 2026 06:15:03 +0000 ROA not before: Wed 04 Mar 2026 06:10:03 +0000 ROA not after: Wed 03 Mar 2027 06:15:03 +0000 asID: 143739 IP address blocks: 240a:a441::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:68:b1:9d:a8:32:90:44:fd:85:18:48:02:c3:0b:fa:4f:8c:26:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:03 2026 GMT Not After : Mar 3 06:15:03 2027 GMT Subject: CN=DB1629A7865DE2CC02B64BE5AF827CD8C48DF6EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:35:2c:ee:92:e0:b4:3b:63:58:bc:33:8c:17: b9:00:15:d5:e9:9d:df:78:0a:91:1e:3f:97:a7:8f: 74:06:f1:9b:65:69:3d:4e:c4:f3:ec:a4:32:a3:80: 67:de:bb:9b:b6:de:e3:2a:bd:37:17:07:86:ff:c4: 1c:89:bf:a3:94:01:a2:4e:c3:e8:7e:48:ef:4b:3d: 1f:fa:cd:7c:21:4a:1f:c1:9e:f2:62:25:ea:9f:c0: bd:9b:b9:70:7d:ba:61:f3:56:7b:09:72:05:d9:de: c7:f9:0f:8c:b9:73:da:1d:b5:37:50:b0:61:d9:a7: e1:c1:ef:ef:4a:5b:b3:fa:53:c3:b1:38:8b:5e:bd: 08:d3:a8:e6:b4:16:12:ff:e9:a3:c9:a1:8b:c0:69: 8a:a6:d9:98:bf:98:68:67:ef:ce:24:53:6b:fd:20: e5:e5:9d:71:17:a9:fc:55:c3:31:b1:99:32:aa:49: 04:42:e5:7b:5d:c0:bd:7e:6b:60:4d:62:c4:41:2c: 3a:53:e3:67:db:27:81:1d:80:74:9f:f9:bf:33:4b: 47:f5:da:11:95:93:e9:75:77:ac:94:da:05:5c:81: 4f:09:93:ae:87:47:f9:6f:2a:24:5c:7d:c3:82:ed: 74:22:9e:1e:f5:c0:28:7b:3b:4c:0d:f2:be:4d:86: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:16:29:A7:86:5D:E2:CC:02:B6:4B:E5:AF:82:7C:D8:C4:8D:F6:EE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a441::/32 Signature Algorithm: sha256WithRSAEncryption a3:83:37:85:1b:ef:b0:ff:4b:3e:6b:a3:29:fd:e5:39:45:bf: 1a:95:21:e9:a5:58:14:a7:86:84:d6:aa:a1:e2:55:cd:bd:ce: 6d:01:60:3e:65:a5:da:8e:51:3f:95:a0:74:78:84:06:d4:b3: 30:7f:4b:d2:0d:f2:dc:b3:6a:9d:3d:55:91:c9:b7:0f:28:ca: d9:ce:4c:ef:15:51:c1:3d:98:a2:c5:9d:c4:a2:24:93:85:bd: 8d:df:9e:dd:42:18:d2:f6:4a:a6:f0:0e:5c:5b:04:9b:cd:af: c8:a4:22:f2:37:86:97:bc:9b:c3:70:70:e3:38:af:f3:6b:3f: 0a:72:52:09:5e:d9:12:df:ef:db:5f:91:7e:74:ab:52:c7:d8: 8d:fa:2d:e8:de:a6:f3:75:c9:81:57:b0:22:b3:83:e1:9d:87: 52:59:f7:b8:4a:7a:73:b3:35:be:dd:ef:bc:81:12:a9:95:a3: 2f:0b:86:95:ad:c9:4b:fc:84:bc:ac:02:0e:14:61:3b:2d:e1: 1e:03:30:7c:44:48:59:11:29:dc:2a:d0:7e:ce:b8:47:c2:ad: 74:03:b4:9b:cd:25:4d:14:c9:2f:b5:bd:6b:40:1a:bc:2e:52: cd:55:78:c2:29:97:f3:53:2d:05:88:8c:cd:d7:32:ac:af:73: fe:7b:2a:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHGixnagykET9hRhIAsML+k+MJlcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwM1oX DTI3MDMwMzA2MTUwM1owMzExMC8GA1UEAxMoREIxNjI5QTc4NjVERTJDQzAyQjY0 QkU1QUY4MjdDRDhDNDhERjZFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN01LO6S4LQ7Y1i8M4wXuQAV1emd33gKkR4/l6ePdAbxm2VpPU7E8+ykMqOA Z967m7be4yq9NxcHhv/EHIm/o5QBok7D6H5I70s9H/rNfCFKH8Ge8mIl6p/AvZu5 cH26YfNWewlyBdnex/kPjLlz2h21N1CwYdmn4cHv70pbs/pTw7E4i169CNOo5rQW Ev/po8mhi8BpiqbZmL+YaGfvziRTa/0g5eWdcRep/FXDMbGZMqpJBELle13AvX5r YE1ixEEsOlPjZ9sngR2AdJ/5vzNLR/XaEZWT6XV3rJTaBVyBTwmTrodH+W8qJFx9 w4LtdCKeHvXAKHs7TA3yvk2GzbcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTbFimn hl3izAK2S+WvgnzYxI327jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzczOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pEEwDQYJKoZIhvcNAQELBQADggEBAKODN4Ub77D/Sz5royn95TlFvxqVIemlWBSn hoTWqqHiVc29zm0BYD5lpdqOUT+VoHR4hAbUszB/S9IN8tyzap09VZHJtw8oytnO TO8VUcE9mKLFncSiJJOFvY3fnt1CGNL2SqbwDlxbBJvNr8ikIvI3hpe8m8NwcOM4 r/NrPwpyUgle2RLf79tfkX50q1LH2I36LejepvN1yYFXsCKzg+Gdh1JZ97hKenOz Nb7d77yBEqmVoy8LhpWtyUv8hLysAg4UYTst4R4DMHxESFkRKdwq0H7OuEfCrXQD tJvNJU0UyS+1vWtAGrwuUs1VeMIpl/NTLQWIjM3XMqyvc/57Kn0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:30 2026 by rpki-client