$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143742.roa File: AS143742.roa (raw, json) Hash identifier: XJNcNZAZJ96C/EVMrKo63qNpg5lH+3pyALAn+zIdeI4= Subject key identifier: 50:47:7A:F8:1F:99:29:58:1D:69:EF:92:F4:AD:EC:8C:89:91:76:5B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 079F840D717B52B158229AFBE6CE4518D438D9CE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143742.roa Signing time: Wed 04 Mar 2026 06:14:39 +0000 ROA not before: Wed 04 Mar 2026 06:09:39 +0000 ROA not after: Wed 03 Mar 2027 06:14:39 +0000 asID: 143742 IP address blocks: 240a:a444::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9f:84:0d:71:7b:52:b1:58:22:9a:fb:e6:ce:45:18:d4:38:d9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:39 2026 GMT Not After : Mar 3 06:14:39 2027 GMT Subject: CN=50477AF81F9929581D69EF92F4ADEC8C8991765B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:83:f5:94:66:d2:8e:a1:1a:13:6f:e2:6c: 85:0f:a0:dc:7d:c6:14:34:28:fb:7b:73:6d:cf:86: 72:12:48:b9:13:31:5a:70:d9:f9:dc:cf:09:24:63: f3:88:23:d0:d9:50:7f:49:10:93:81:5a:1b:e2:94: e0:c0:f5:8a:65:af:cd:64:23:58:81:6c:8d:81:d9: 27:23:f3:e5:46:c8:43:f2:b9:9d:e6:4a:60:00:c3: 36:fd:bf:81:9a:de:2b:eb:bc:67:32:e0:eb:cd:39: ff:94:80:a4:81:ea:0d:65:43:84:22:0a:d3:a8:b6: ad:a9:e9:c9:63:75:60:97:92:a2:fb:0a:4b:1c:04: 89:99:b2:e4:ad:53:b5:aa:05:92:c4:40:8a:7c:db: e2:19:01:7c:5b:3a:c2:39:eb:71:a5:3d:42:a7:ff: ca:07:22:4e:08:74:94:0e:9d:94:a5:fb:48:a0:fc: 85:8b:99:a6:36:b3:7a:3a:ac:e1:79:cc:a2:b1:30: 72:dc:57:b6:37:61:c0:4f:b0:56:b3:bd:14:13:11: 1b:c1:23:f5:bc:38:5a:c6:bf:01:c1:ad:bd:7a:99: 37:da:6f:2e:07:28:c1:8a:18:75:6f:7d:07:6e:9e: aa:25:11:59:01:ec:22:eb:56:5b:91:c4:d6:82:c5: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:47:7A:F8:1F:99:29:58:1D:69:EF:92:F4:AD:EC:8C:89:91:76:5B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143742.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a444::/32 Signature Algorithm: sha256WithRSAEncryption a2:54:39:39:23:b2:cf:e3:f7:a7:1d:1c:b1:12:4a:5c:51:21: a2:62:b9:6b:a3:c5:60:6b:cd:14:c4:6d:49:15:8d:fc:d3:df: e3:41:19:83:b7:f3:f5:6a:dc:ed:fe:27:e3:d2:e1:ad:6c:f3: e7:6b:7b:fa:1c:dd:09:08:0f:0f:ec:b2:a1:10:26:3b:04:7c: 22:1d:0a:14:31:da:c9:df:19:26:55:f3:0c:e1:4b:5f:6e:0a: bd:b3:32:5d:c7:7b:95:4e:73:5b:1c:e9:c7:fd:bd:ad:87:ce: fe:38:85:2e:14:e6:e9:30:29:60:d1:3e:c3:13:6a:b0:a0:84: 9d:ee:3c:63:ea:78:c9:20:5d:9a:38:0c:30:b5:8f:95:72:b0: a3:1b:38:e9:8f:2c:d5:e8:98:45:e8:31:3f:8a:31:dd:e9:fc: 50:ce:57:84:84:81:52:b9:0a:0c:3f:8f:59:09:cc:9d:c6:43: dc:80:57:fd:fa:dc:0b:8d:94:36:35:3a:a3:ea:2e:fc:25:60: 33:f9:4d:24:cc:39:44:1e:ae:af:0e:4d:3a:97:81:78:d4:cd: 1c:fa:fa:eb:d2:93:5f:2a:9e:7a:fa:0c:c8:17:23:84:05:7b: 59:e0:1c:0a:db:9e:6d:40:a8:0d:f0:8b:82:51:f0:29:d7:b4: e2:d4:20:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB5+EDXF7UrFYIpr75s5FGNQ42c4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzOVoX DTI3MDMwMzA2MTQzOVowMzExMC8GA1UEAxMoNTA0NzdBRjgxRjk5Mjk1ODFENjlF RjkyRjRBREVDOEM4OTkxNzY1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL51g/WUZtKOoRoTb+JshQ+g3H3GFDQo+3tzbc+GchJIuRMxWnDZ+dzPCSRj 84gj0NlQf0kQk4FaG+KU4MD1imWvzWQjWIFsjYHZJyPz5UbIQ/K5neZKYADDNv2/ gZreK+u8ZzLg6805/5SApIHqDWVDhCIK06i2ranpyWN1YJeSovsKSxwEiZmy5K1T taoFksRAinzb4hkBfFs6wjnrcaU9Qqf/ygciTgh0lA6dlKX7SKD8hYuZpjazejqs 4XnMorEwctxXtjdhwE+wVrO9FBMRG8Ej9bw4Wsa/AcGtvXqZN9pvLgcowYoYdW99 B26eqiURWQHsIutWW5HE1oLF7wsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRQR3r4 H5kpWB1p75L0reyMiZF2WzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pEQwDQYJKoZIhvcNAQELBQADggEBAKJUOTkjss/j96cdHLESSlxRIaJiuWujxWBr zRTEbUkVjfzT3+NBGYO38/Vq3O3+J+PS4a1s8+dre/oc3QkIDw/ssqEQJjsEfCId ChQx2snfGSZV8wzhS19uCr2zMl3He5VOc1sc6cf9va2Hzv44hS4U5ukwKWDRPsMT arCghJ3uPGPqeMkgXZo4DDC1j5VysKMbOOmPLNXomEXoMT+KMd3p/FDOV4SEgVK5 Cgw/j1kJzJ3GQ9yAV/363AuNlDY1OqPqLvwlYDP5TSTMOUQerq8OTTqXgXjUzRz6 +uvSk18qnnr6DMgXI4QFe1ngHArbnm1AqA3wi4JR8CnXtOLUIHQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:52 2026 by rpki-client