$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143745.roa File: AS143745.roa (raw, json) Hash identifier: Yw5KirDKMOrh68KJOkrb3bVqeVLcMSAW7M3XKwqvlpg= Subject key identifier: B7:2E:55:2D:A2:50:1A:C3:35:27:AA:D4:2C:EA:D1:66:58:3D:B0:7E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4BE8A40657AA4B5DF69CDE7D22EC5BEA281AC267 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143745.roa Signing time: Wed 04 Mar 2026 06:12:55 +0000 ROA not before: Wed 04 Mar 2026 06:07:55 +0000 ROA not after: Wed 03 Mar 2027 06:12:55 +0000 asID: 143745 IP address blocks: 240a:a447::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e8:a4:06:57:aa:4b:5d:f6:9c:de:7d:22:ec:5b:ea:28:1a:c2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:55 2026 GMT Not After : Mar 3 06:12:55 2027 GMT Subject: CN=B72E552DA2501AC33527AAD42CEAD166583DB07E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:76:3d:5d:19:e7:09:d5:d2:47:b8:4f:d6: 05:f2:30:62:bd:fb:ce:92:6d:a3:38:3b:9e:48:ef: 82:9d:2e:7e:64:cc:d9:19:1f:e7:12:52:8a:43:bb: 2b:06:52:1d:ef:e8:c1:aa:1c:96:72:ac:93:cb:84: b6:4b:f4:61:d6:63:1f:c6:b2:cc:ff:7d:e7:4c:e0: 0a:60:66:e8:41:fd:b9:11:10:ac:1b:7c:27:5b:b2: 13:d3:b2:4f:45:07:92:71:c7:b8:6a:c6:8b:e4:4c: 5b:28:11:ac:9e:28:c3:c1:68:f4:78:ab:cd:30:30: 85:de:27:65:f4:72:0f:f7:76:fb:7a:99:f3:a8:84: 09:b1:d7:88:04:93:01:a7:e8:28:6f:88:ef:e3:65: 1b:25:71:80:e0:f2:1d:e0:d3:57:10:69:b6:81:e4: 54:99:24:30:66:1a:11:36:ae:88:d0:2b:e5:75:6f: 13:51:19:52:9b:07:a3:81:fb:74:00:6b:e5:b4:3b: f2:a2:9f:3a:4f:a7:aa:1a:fe:e1:fb:0c:58:54:d8: 13:77:8d:dc:c9:aa:c6:fd:a9:0f:4f:83:f8:fc:a8: fb:8f:6a:91:65:30:85:8f:9a:c4:bb:d7:80:f1:7b: 7b:de:a6:bf:ed:c6:06:58:f3:86:38:c2:90:4c:e6: 4f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2E:55:2D:A2:50:1A:C3:35:27:AA:D4:2C:EA:D1:66:58:3D:B0:7E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143745.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a447::/32 Signature Algorithm: sha256WithRSAEncryption 78:93:42:9b:d0:d1:d9:79:1c:f8:c0:38:b0:60:7b:5b:66:65: c2:63:13:90:66:50:28:2b:c0:a3:88:a4:9f:fb:00:08:5d:68: 2f:d9:c4:9e:ea:9e:45:b1:c3:6d:6e:87:a6:7b:0e:f7:07:9a: 81:ab:45:31:10:ab:e0:a8:ed:3f:c2:75:d9:79:90:12:00:df: 7b:77:de:2f:de:c8:17:9a:84:fe:9e:0d:3d:ac:af:ea:16:d8: f2:d6:f9:97:32:c1:cc:29:60:87:4c:63:57:53:3c:75:17:6d: 81:f0:6b:27:69:59:ff:77:55:f5:b0:36:fa:db:07:a7:eb:73: 20:55:76:f0:25:91:c8:3d:d3:33:df:6d:75:1e:64:9a:8a:50: a8:c7:8f:01:ab:fd:3b:52:8e:17:9d:25:69:7a:d6:43:8f:21: 47:f8:5e:cf:40:81:1b:eb:4f:ac:d4:dc:b2:7c:85:76:e4:3c: 1a:1c:ae:40:0f:b9:be:24:cd:f4:83:fc:41:c6:fb:0b:2b:48: 4e:e3:ee:4d:43:0f:c0:d8:7b:a9:0b:fe:5c:40:a3:e4:ae:ac: ab:be:bd:e0:fb:39:59:6a:8a:80:08:75:37:3e:08:1f:d1:9b: e6:bd:2c:2d:45:0c:9f:97:90:2d:52:d1:46:37:d7:bc:12:b3: 5b:20:fe:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS+ikBleqS132nN59Iuxb6igawmcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1NVoX DTI3MDMwMzA2MTI1NVowMzExMC8GA1UEAxMoQjcyRTU1MkRBMjUwMUFDMzM1MjdB QUQ0MkNFQUQxNjY1ODNEQjA3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqydj1dGecJ1dJHuE/WBfIwYr37zpJtozg7nkjvgp0ufmTM2Rkf5xJSikO7 KwZSHe/owaoclnKsk8uEtkv0YdZjH8ayzP9950zgCmBm6EH9uREQrBt8J1uyE9Oy T0UHknHHuGrGi+RMWygRrJ4ow8Fo9HirzTAwhd4nZfRyD/d2+3qZ86iECbHXiAST AafoKG+I7+NlGyVxgODyHeDTVxBptoHkVJkkMGYaETauiNAr5XVvE1EZUpsHo4H7 dABr5bQ78qKfOk+nqhr+4fsMWFTYE3eN3Mmqxv2pD0+D+Pyo+49qkWUwhY+axLvX gPF7e96mv+3GBljzhjjCkEzmT4cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS3LlUt olAawzUnqtQs6tFmWD2wfjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pEcwDQYJKoZIhvcNAQELBQADggEBAHiTQpvQ0dl5HPjAOLBge1tmZcJjE5BmUCgr wKOIpJ/7AAhdaC/ZxJ7qnkWxw21uh6Z7DvcHmoGrRTEQq+Co7T/Cddl5kBIA33t3 3i/eyBeahP6eDT2sr+oW2PLW+ZcywcwpYIdMY1dTPHUXbYHwaydpWf93VfWwNvrb B6frcyBVdvAlkcg90zPfbXUeZJqKUKjHjwGr/TtSjhedJWl61kOPIUf4Xs9AgRvr T6zU3LJ8hXbkPBocrkAPub4kzfSD/EHG+wsrSE7j7k1DD8DYe6kL/lxAo+SurKu+ veD7OVlqioAIdTc+CB/Rm+a9LC1FDJ+XkC1S0UY317wSs1sg/tA= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:40 2026 by rpki-client