$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143754.roa File: AS143754.roa (raw, json) Hash identifier: ZxpJZyc7exyKjQnZ0yatXbDumY/rNOJGBAiy9zpBXJc= Subject key identifier: 40:A4:9C:FF:48:C4:3F:47:47:E1:3D:CA:3E:6F:11:4E:DD:FD:73:A2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 063F50487CC9EE1A76E5C9E0284DA643E46976E3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143754.roa Signing time: Wed 04 Mar 2026 06:14:27 +0000 ROA not before: Wed 04 Mar 2026 06:09:27 +0000 ROA not after: Wed 03 Mar 2027 06:14:27 +0000 asID: 143754 IP address blocks: 240a:a450::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3f:50:48:7c:c9:ee:1a:76:e5:c9:e0:28:4d:a6:43:e4:69:76:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:27 2026 GMT Not After : Mar 3 06:14:27 2027 GMT Subject: CN=40A49CFF48C43F4747E13DCA3E6F114EDDFD73A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:cf:7b:b5:bc:d3:f6:2b:63:51:7f:2a:fc: 43:0f:92:76:7e:18:24:54:36:5c:d9:e3:07:c6:da: 13:a0:6a:82:70:33:e1:0f:78:b2:64:af:b3:22:00: 8a:6f:1e:ed:48:a7:53:1c:1a:e9:78:9b:6a:cb:41: 50:88:9a:71:da:a4:05:09:6e:95:90:91:61:b6:0a: 83:93:ef:fe:2e:00:db:6e:25:22:5e:c2:4f:bc:46: 25:3f:1e:fe:14:1d:1a:cb:0c:d2:b1:0c:a5:98:07: fb:fc:f1:5a:29:9b:4b:c8:08:b4:76:85:5a:7e:40: a5:21:f7:36:d5:0a:b8:35:e9:12:6d:50:bc:c0:20: b2:d6:a0:21:16:9c:f9:25:5c:07:a3:4e:63:97:46: b5:ce:27:b0:7c:9c:95:39:fe:e7:4a:fa:d3:a9:87: 18:4e:57:41:25:bb:f5:34:47:91:f7:c1:c8:a5:b4: 9b:42:c3:c4:e7:cb:bd:a1:f8:9c:f7:1a:1c:9c:bc: 78:30:25:79:4b:47:38:4c:94:7b:c9:b8:f1:26:e7: e1:ba:69:2e:47:14:5d:83:4e:05:9a:cb:b6:f5:20: 11:1e:97:44:1a:a5:fe:d0:3c:df:65:b0:ec:1c:d6: 43:cc:a2:32:ff:dc:16:5e:40:df:19:48:98:b7:5b: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A4:9C:FF:48:C4:3F:47:47:E1:3D:CA:3E:6F:11:4E:DD:FD:73:A2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143754.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a450::/32 Signature Algorithm: sha256WithRSAEncryption 59:2b:e1:75:11:2e:8c:d7:9e:17:f4:f4:bc:fa:96:a1:6b:38: f2:92:b4:0b:2a:a1:93:df:09:18:1c:8b:b8:d5:3e:e6:92:f3: 6b:db:eb:5e:ff:6a:e1:4c:7a:df:18:ce:4a:35:47:cd:69:81: 6a:08:a7:1a:2c:87:48:e0:18:ce:28:e8:af:34:04:45:55:35: 36:ed:a1:7b:7b:72:aa:2b:18:67:ae:c3:79:67:bc:8f:3d:d8: fb:5c:13:0f:54:cc:9b:e4:d8:ea:85:da:96:ff:e0:c1:c2:06: 05:ee:19:b2:d4:2c:ca:f2:42:42:04:1d:a4:01:db:3d:c5:67: 3d:3a:0b:6c:19:ed:29:59:2e:b3:4e:81:1b:13:3e:2a:49:09: da:72:d7:80:1e:c2:15:87:73:70:87:3f:5c:3f:71:5c:43:f2: ea:a8:5f:82:66:82:4a:ee:3c:02:25:2b:17:bb:4a:03:42:68: 17:eb:98:21:80:10:b8:39:06:b8:5e:1a:f0:7d:e2:a9:e5:d8: 0d:f6:47:67:e6:28:46:13:24:b9:0f:da:06:75:fe:47:50:a4: d4:e5:81:90:af:00:0b:c1:c6:5d:bf:0a:04:09:2d:e1:57:ab: 30:db:62:6d:fc:0e:19:d9:52:02:bf:f6:45:83:21:2a:55:ef: b9:c6:ac:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBj9QSHzJ7hp25cngKE2mQ+RpduMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyN1oX DTI3MDMwMzA2MTQyN1owMzExMC8GA1UEAxMoNDBBNDlDRkY0OEM0M0Y0NzQ3RTEz RENBM0U2RjExNEVEREZENzNBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkTz3u1vNP2K2NRfyr8Qw+Sdn4YJFQ2XNnjB8baE6BqgnAz4Q94smSvsyIA im8e7UinUxwa6XibastBUIiacdqkBQlulZCRYbYKg5Pv/i4A224lIl7CT7xGJT8e /hQdGssM0rEMpZgH+/zxWimbS8gItHaFWn5ApSH3NtUKuDXpEm1QvMAgstagIRac +SVcB6NOY5dGtc4nsHyclTn+50r606mHGE5XQSW79TRHkffByKW0m0LDxOfLvaH4 nPcaHJy8eDAleUtHOEyUe8m48Sbn4bppLkcUXYNOBZrLtvUgER6XRBql/tA832Ww 7BzWQ8yiMv/cFl5A3xlImLdbGVUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRApJz/ SMQ/R0fhPco+bxFO3f1zojAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pFAwDQYJKoZIhvcNAQELBQADggEBAFkr4XURLozXnhf09Lz6lqFrOPKStAsqoZPf CRgci7jVPuaS82vb617/auFMet8Yzko1R81pgWoIpxosh0jgGM4o6K80BEVVNTbt oXt7cqorGGeuw3lnvI892PtcEw9UzJvk2OqF2pb/4MHCBgXuGbLULMryQkIEHaQB 2z3FZz06C2wZ7SlZLrNOgRsTPipJCdpy14AewhWHc3CHP1w/cVxD8uqoX4Jmgkru PAIlKxe7SgNCaBfrmCGAELg5BrheGvB94qnl2A32R2fmKEYTJLkP2gZ1/kdQpNTl gZCvAAvBxl2/CgQJLeFXqzDbYm38DhnZUgK/9kWDISpV77nGrFA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:50 2026 by rpki-client