$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143746.roa File: AS143746.roa (raw, json) Hash identifier: CIEdPb4RIT6/uoNRQrERbTHaEOjwJ6MDQQEdmDOuVdM= Subject key identifier: FD:E9:EF:83:36:FE:BC:48:86:00:8D:30:83:83:6D:E0:8D:20:3A:16 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 32AD41F018AEC6C994DB15925708587848CD4CB2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143746.roa Signing time: Wed 04 Mar 2026 06:15:34 +0000 ROA not before: Wed 04 Mar 2026 06:10:34 +0000 ROA not after: Wed 03 Mar 2027 06:15:34 +0000 asID: 143746 IP address blocks: 240a:a448::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ad:41:f0:18:ae:c6:c9:94:db:15:92:57:08:58:78:48:cd:4c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:34 2026 GMT Not After : Mar 3 06:15:34 2027 GMT Subject: CN=FDE9EF8336FEBC4886008D3083836DE08D203A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:d5:54:f3:4f:76:17:35:4b:f1:f0:56:d0: ca:20:ce:78:d3:6e:4a:06:e0:26:81:b8:10:41:b9: a2:ee:d3:9e:65:c5:2a:c5:5b:3a:ed:9d:e2:a5:d3: 8c:36:d2:ee:5a:9f:e6:1a:da:54:0e:50:76:a8:c4: ff:3f:82:a8:63:ed:1b:18:4b:b5:c6:39:a3:12:e9: db:d4:52:02:97:97:69:9a:fe:ba:44:0e:33:e9:26: 95:bf:d1:27:87:c5:19:58:b3:05:77:e8:17:e6:13: e0:a8:f3:5b:9d:80:04:ca:c6:33:1c:f0:d4:b5:2a: ee:0e:04:18:a4:b3:58:09:c8:cd:a3:1a:c0:5e:71: a3:2b:a1:72:dc:f0:2b:d1:52:98:6e:e0:b4:0f:cd: 71:81:87:0e:10:62:d6:20:f0:82:70:aa:1b:ce:ae: f8:c1:08:db:37:8d:8b:90:de:c9:1a:ac:62:ef:69: 26:51:8a:d7:eb:b3:2c:d9:2a:af:64:1b:fe:10:20: 5f:00:df:48:99:0f:df:34:28:22:98:e8:c3:5e:b8: 0a:11:88:6f:dc:76:4d:35:c5:98:e0:d4:41:22:c2: 69:c1:ed:41:b0:83:61:35:25:2b:5c:a3:83:37:e1: 49:84:5d:dd:96:ef:44:cf:5e:82:db:d8:0e:66:c0: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E9:EF:83:36:FE:BC:48:86:00:8D:30:83:83:6D:E0:8D:20:3A:16 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143746.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a448::/32 Signature Algorithm: sha256WithRSAEncryption b5:b4:57:74:29:e7:68:fe:4f:bd:5a:0d:4e:d1:48:0e:6d:cf: ac:c6:9a:9f:0b:f9:c9:8b:82:70:a3:8e:aa:1e:82:d2:dc:aa: c8:c3:f4:c1:70:83:8b:a6:68:e9:bf:1c:7b:cd:1c:62:cc:77: d0:35:72:10:4f:fb:60:e8:84:2a:8e:a9:06:9b:37:b5:7f:43: 16:1d:a0:ff:66:35:12:68:fd:c4:5c:28:21:fc:49:8b:da:36: c3:58:6a:f9:7c:85:9a:78:df:ed:e6:a3:81:71:35:78:c2:89: db:f3:9c:ca:b9:60:d2:09:2f:da:2e:d1:7f:d9:9d:02:50:02: 77:62:f0:17:b0:a9:a5:c7:42:a0:17:03:04:16:a7:e0:db:5a: 25:ca:09:fd:6e:5d:5f:de:c0:3e:97:43:e5:1b:2e:ac:84:80: f1:df:5d:2b:d8:2b:19:cb:a1:e0:07:0d:62:83:ea:b5:3f:ff: 67:ba:83:b0:7b:b6:94:8b:b2:97:b6:d7:9f:af:2b:a7:6d:c5: 3f:66:37:76:cb:cb:48:11:77:58:8c:7e:08:63:35:25:ca:2b: 08:d8:c7:22:96:60:c4:f3:e0:49:ff:8f:94:e1:2b:65:f4:21: 6f:06:7c:71:1a:c8:e0:76:ea:af:11:a5:85:7a:fd:4b:46:b0: b3:fd:e0:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMq1B8BiuxsmU2xWSVwhYeEjNTLIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzNFoX DTI3MDMwMzA2MTUzNFowMzExMC8GA1UEAxMoRkRFOUVGODMzNkZFQkM0ODg2MDA4 RDMwODM4MzZERTA4RDIwM0ExNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALho1VTzT3YXNUvx8FbQyiDOeNNuSgbgJoG4EEG5ou7TnmXFKsVbOu2d4qXT jDbS7lqf5hraVA5QdqjE/z+CqGPtGxhLtcY5oxLp29RSApeXaZr+ukQOM+kmlb/R J4fFGVizBXfoF+YT4KjzW52ABMrGMxzw1LUq7g4EGKSzWAnIzaMawF5xoyuhctzw K9FSmG7gtA/NcYGHDhBi1iDwgnCqG86u+MEI2zeNi5DeyRqsYu9pJlGK1+uzLNkq r2Qb/hAgXwDfSJkP3zQoIpjow164ChGIb9x2TTXFmODUQSLCacHtQbCDYTUlK1yj gzfhSYRd3ZbvRM9egtvYDmbAHeMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT96e+D Nv68SIYAjTCDg23gjSA6FjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pEgwDQYJKoZIhvcNAQELBQADggEBALW0V3Qp52j+T71aDU7RSA5tz6zGmp8L+cmL gnCjjqoegtLcqsjD9MFwg4umaOm/HHvNHGLMd9A1chBP+2DohCqOqQabN7V/QxYd oP9mNRJo/cRcKCH8SYvaNsNYavl8hZp43+3mo4FxNXjCidvznMq5YNIJL9ou0X/Z nQJQAndi8BewqaXHQqAXAwQWp+DbWiXKCf1uXV/ewD6XQ+UbLqyEgPHfXSvYKxnL oeAHDWKD6rU//2e6g7B7tpSLspe215+vK6dtxT9mN3bLy0gRd1iMfghjNSXKKwjY xyKWYMTz4En/j5ThK2X0IW8GfHEayOB26q8RpYV6/UtGsLP94NM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:49 2026 by rpki-client