$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143743.roa File: AS143743.roa (raw, json) Hash identifier: YknPzNnk+gtHj7dHNESV/dA6XbDcKz+NZhrdIpiCfo0= Subject key identifier: 5C:9E:CE:DE:C5:37:CB:A3:44:C9:64:70:2A:43:7D:90:1E:F5:07:61 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 43C676C3D5F6B160A247C8B80B7F0ADE3D594BBA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143743.roa Signing time: Wed 04 Mar 2026 06:12:53 +0000 ROA not before: Wed 04 Mar 2026 06:07:53 +0000 ROA not after: Wed 03 Mar 2027 06:12:53 +0000 asID: 143743 IP address blocks: 240a:a445::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c6:76:c3:d5:f6:b1:60:a2:47:c8:b8:0b:7f:0a:de:3d:59:4b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:53 2026 GMT Not After : Mar 3 06:12:53 2027 GMT Subject: CN=5C9ECEDEC537CBA344C964702A437D901EF50761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:32:a4:22:d8:b2:b8:85:d8:76:f2:ec:ee: a3:cc:77:93:f9:6c:ea:a2:69:41:97:af:80:5f:7f: b8:b1:f1:44:b1:6e:f0:ed:7d:3f:13:7c:4a:c2:39: 9b:66:e0:d8:26:3d:e1:5c:9e:f2:b1:03:da:f7:3c: 4c:e6:56:f9:71:ad:d9:40:cd:3a:7b:37:60:f7:51: 51:d6:d2:d7:57:9a:b2:58:1d:57:41:53:0b:a6:19: 27:46:e7:33:3c:11:b4:04:37:97:bf:9c:88:50:d8: 20:00:b4:22:82:48:e8:60:58:d7:68:84:6f:2c:b4: 5d:21:63:e5:a8:e1:ba:41:06:3a:e7:6e:c7:be:ab: bb:f8:ef:58:c9:c0:77:97:31:9a:60:50:11:0b:92: f8:1f:3d:42:38:17:66:89:a4:7e:46:19:f0:d2:6f: 03:f2:16:5d:84:f6:5f:b1:4b:07:b8:53:6e:36:0b: 7a:e9:e5:2c:f7:ac:8d:67:1f:04:fb:d6:60:70:85: d5:fb:31:ac:d4:a5:d3:c6:01:ea:9a:37:dd:07:ff: e6:f4:d5:2a:c7:2e:fc:09:bf:ee:cf:3c:07:8b:06: 6b:b2:0d:16:a6:b5:0d:06:bf:80:31:42:63:07:e2: c5:45:78:b8:05:6b:2c:c1:9c:c4:94:b7:cf:1b:c4: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9E:CE:DE:C5:37:CB:A3:44:C9:64:70:2A:43:7D:90:1E:F5:07:61 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143743.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a445::/32 Signature Algorithm: sha256WithRSAEncryption 42:9c:1a:09:41:ad:93:43:83:a2:4a:a0:5e:df:a2:4f:ef:19: ff:7c:75:22:8f:a7:00:3c:7f:3d:88:bc:c8:d7:95:be:aa:95: d9:19:97:51:c7:ee:3a:12:3b:3e:81:cf:4f:a4:74:00:69:d6: 83:5e:0e:8a:b4:75:2c:94:59:76:09:9f:c3:e2:2f:f9:28:82: 6b:7e:0d:13:4c:9e:e7:7d:d2:2c:0c:71:5e:91:8b:98:28:38: 2b:40:fe:c7:48:b2:96:e9:36:5c:9f:1c:97:25:8d:17:fc:a5: 4c:2c:c8:78:6d:b1:80:b1:58:11:33:3c:38:e5:53:5f:c6:e5: 9b:87:e3:4b:92:72:5b:37:57:f1:8f:2a:52:95:1f:f8:7f:3f: 3e:b4:5f:16:2e:83:95:7e:c6:84:5b:2f:ac:4c:61:f5:86:b9: d8:a3:46:46:b0:d3:c4:13:9e:15:ff:68:f7:c8:ab:f4:4b:f1: 0c:8e:85:00:1c:df:ae:84:85:05:44:04:f6:1c:67:68:f3:c1: 2b:aa:45:89:35:10:f9:e1:7c:fb:97:d4:4a:d9:e1:bc:ea:14: 9d:90:bd:73:ba:f0:f1:0c:c8:d7:73:1c:01:04:4b:15:01:15: d9:77:32:93:b5:b5:50:92:8a:c3:34:48:29:46:c8:20:b5:e9: bc:44:6f:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ8Z2w9X2sWCiR8i4C38K3j1ZS7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1M1oX DTI3MDMwMzA2MTI1M1owMzExMC8GA1UEAxMoNUM5RUNFREVDNTM3Q0JBMzQ0Qzk2 NDcwMkE0MzdEOTAxRUY1MDc2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxdMqQi2LK4hdh28uzuo8x3k/ls6qJpQZevgF9/uLHxRLFu8O19PxN8SsI5 m2bg2CY94Vye8rED2vc8TOZW+XGt2UDNOns3YPdRUdbS11easlgdV0FTC6YZJ0bn MzwRtAQ3l7+ciFDYIAC0IoJI6GBY12iEbyy0XSFj5ajhukEGOudux76ru/jvWMnA d5cxmmBQEQuS+B89QjgXZomkfkYZ8NJvA/IWXYT2X7FLB7hTbjYLeunlLPesjWcf BPvWYHCF1fsxrNSl08YB6po33Qf/5vTVKscu/Am/7s88B4sGa7INFqa1DQa/gDFC YwfixUV4uAVrLMGcxJS3zxvEL50CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRcns7e xTfLo0TJZHAqQ32QHvUHYTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pEUwDQYJKoZIhvcNAQELBQADggEBAEKcGglBrZNDg6JKoF7fok/vGf98dSKPpwA8 fz2IvMjXlb6qldkZl1HH7joSOz6Bz0+kdABp1oNeDoq0dSyUWXYJn8PiL/kogmt+ DRNMnud90iwMcV6Ri5goOCtA/sdIspbpNlyfHJcljRf8pUwsyHhtsYCxWBEzPDjl U1/G5ZuH40uScls3V/GPKlKVH/h/Pz60XxYug5V+xoRbL6xMYfWGudijRkaw08QT nhX/aPfIq/RL8QyOhQAc366EhQVEBPYcZ2jzwSuqRYk1EPnhfPuX1ErZ4bzqFJ2Q vXO68PEMyNdzHAEESxUBFdl3MpO1tVCSisM0SClGyCC16bxEbwE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:49 2026 by rpki-client