$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143764.roa File: AS143764.roa (raw, json) Hash identifier: zmkMnl2yyGeGCxZFYfH35hGZVQ8//rK5RaTegNCfB+c= Subject key identifier: 65:CE:7D:11:D0:A2:BB:58:6C:B8:7A:30:75:A2:6E:24:53:1A:3C:24 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08247719ED8AFC219E82452736710E9604B0F601 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143764.roa Signing time: Wed 04 Mar 2026 06:14:05 +0000 ROA not before: Wed 04 Mar 2026 06:09:05 +0000 ROA not after: Wed 03 Mar 2027 06:14:05 +0000 asID: 143764 IP address blocks: 240a:a45a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:24:77:19:ed:8a:fc:21:9e:82:45:27:36:71:0e:96:04:b0:f6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:05 2026 GMT Not After : Mar 3 06:14:05 2027 GMT Subject: CN=65CE7D11D0A2BB586CB87A3075A26E24531A3C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:70:22:a5:55:c5:d6:20:db:2d:42:a7:74:f9: 08:f8:ae:e2:a1:31:dc:41:42:43:a3:b7:36:c6:0e: f4:0f:b3:60:c4:5f:b1:68:af:f8:e6:35:eb:ff:50: 3a:50:cd:20:d4:99:df:d4:e0:ba:10:c4:d7:69:7c: 60:ca:9b:6d:3e:73:d3:d0:07:f1:e7:a6:24:10:60: 11:9f:25:10:8e:b4:9d:02:48:3f:8e:e8:c4:87:80: b6:c5:2b:82:e4:5a:2a:4b:4b:1b:35:b9:82:e3:a4: 54:3e:f5:53:d7:52:d7:b8:e2:dd:30:0f:ca:40:75: b1:3a:eb:39:36:4d:81:b8:8f:ab:75:a5:5c:35:12: f1:23:16:e7:92:4e:b6:f7:c5:64:02:2f:42:44:1b: 8d:3d:27:f1:c1:e4:ab:b8:e1:69:b2:5f:6e:72:d4: 05:e1:ac:b6:76:e6:75:df:ca:52:a3:ad:c7:d3:75: 33:5b:d6:83:7a:62:3a:28:26:0d:7a:d4:aa:26:19: 7a:f7:b3:ae:f1:e4:9d:de:82:24:f2:a4:1e:3e:3f: 21:ec:c6:65:64:65:ff:6f:5c:df:e9:c6:f9:be:8c: fb:41:b9:27:db:e3:85:60:83:e8:cc:66:3d:22:d7: 16:3f:c5:8c:c8:ca:79:ca:de:a2:78:f3:69:c4:5d: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CE:7D:11:D0:A2:BB:58:6C:B8:7A:30:75:A2:6E:24:53:1A:3C:24 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143764.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a45a::/32 Signature Algorithm: sha256WithRSAEncryption 08:e5:cd:43:9a:0e:8d:53:ab:16:81:95:d8:fd:ec:b9:a7:0e: 21:07:cc:ab:b6:0a:27:20:2c:e7:25:a3:47:a4:36:92:cb:ea: 4e:de:c2:d7:7f:cc:0a:62:c1:51:6a:5b:7b:5b:50:ec:68:c2: f0:28:38:68:79:4e:9a:b2:36:1e:60:55:05:ab:11:a7:99:f3: 61:af:56:9b:fa:ba:d6:67:db:1b:76:cd:1c:ac:f4:33:b2:9a: f4:0b:a2:6d:0f:d7:e4:d7:3d:24:87:d6:5c:bb:5a:78:ac:a7: 93:a3:3e:8d:3b:d2:e2:3a:8c:8f:1f:25:4b:ce:84:37:d4:ea: e5:c6:e6:82:5d:5f:2c:42:b8:c7:4c:41:d9:f2:69:1f:3a:05: 79:1f:60:b3:3e:c7:31:6b:c6:c7:5d:dd:a7:fa:b3:7f:65:50: 0b:3c:9c:17:a5:63:ea:43:53:b2:a8:12:b5:55:6a:09:a7:f5: 99:bb:84:cb:cb:b8:38:16:84:34:59:da:80:31:66:95:1f:ac: d4:d7:20:31:59:d7:3d:f9:29:35:22:5b:c7:7a:4a:ab:af:93: 68:fa:e0:e2:08:96:11:c4:e2:ec:e9:11:fc:e5:f5:32:87:f7: 3e:ce:43:d3:a0:16:8a:9c:65:53:97:a1:12:bf:0a:20:22:37: fd:56:49:f6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCCR3Ge2K/CGegkUnNnEOlgSw9gEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwNVoX DTI3MDMwMzA2MTQwNVowMzExMC8GA1UEAxMoNjVDRTdEMTFEMEEyQkI1ODZDQjg3 QTMwNzVBMjZFMjQ1MzFBM0MyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPdwIqVVxdYg2y1Cp3T5CPiu4qEx3EFCQ6O3NsYO9A+zYMRfsWiv+OY16/9Q OlDNINSZ39TguhDE12l8YMqbbT5z09AH8eemJBBgEZ8lEI60nQJIP47oxIeAtsUr guRaKktLGzW5guOkVD71U9dS17ji3TAPykB1sTrrOTZNgbiPq3WlXDUS8SMW55JO tvfFZAIvQkQbjT0n8cHkq7jhabJfbnLUBeGstnbmdd/KUqOtx9N1M1vWg3piOigm DXrUqiYZevezrvHknd6CJPKkHj4/IezGZWRl/29c3+nG+b6M+0G5J9vjhWCD6Mxm PSLXFj/FjMjKecreonjzacRdZjkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRlzn0R 0KK7WGy4ejB1om4kUxo8JDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pFowDQYJKoZIhvcNAQELBQADggEBAAjlzUOaDo1TqxaBldj97LmnDiEHzKu2Cicg LOclo0ekNpLL6k7ewtd/zApiwVFqW3tbUOxowvAoOGh5TpqyNh5gVQWrEaeZ82Gv Vpv6utZn2xt2zRys9DOymvQLom0P1+TXPSSH1ly7Wnisp5OjPo070uI6jI8fJUvO hDfU6uXG5oJdXyxCuMdMQdnyaR86BXkfYLM+xzFrxsdd3af6s39lUAs8nBelY+pD U7KoErVVagmn9Zm7hMvLuDgWhDRZ2oAxZpUfrNTXIDFZ1z35KTUiW8d6Squvk2j6 4OIIlhHE4uzpEfzl9TKH9z7OQ9OgFoqcZVOXoRK/CiAiN/1WSfY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:48 2026 by rpki-client