$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143766.roa File: AS143766.roa (raw, json) Hash identifier: D67K4EXOdUPq03fAtHIiNSwUA9TZEEY0PglTRv93gqs= Subject key identifier: 5C:89:1D:97:06:CB:6A:77:DE:5E:F8:65:E1:F7:DC:16:A3:40:9C:D7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 226CA3BE622F4E544975A46B1075355B7EFAE6D0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143766.roa Signing time: Wed 04 Mar 2026 06:12:57 +0000 ROA not before: Wed 04 Mar 2026 06:07:57 +0000 ROA not after: Wed 03 Mar 2027 06:12:57 +0000 asID: 143766 IP address blocks: 240a:a45c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6c:a3:be:62:2f:4e:54:49:75:a4:6b:10:75:35:5b:7e:fa:e6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:57 2026 GMT Not After : Mar 3 06:12:57 2027 GMT Subject: CN=5C891D9706CB6A77DE5EF865E1F7DC16A3409CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:cb:69:ac:79:46:55:d6:1b:b7:3c:ea:18: b5:e9:ef:aa:65:e0:53:8a:0a:9f:6b:5f:b9:2c:fa: d3:e8:42:bd:5a:5e:e8:61:db:c0:0e:cc:7f:a4:2d: 2b:6b:05:03:d9:3d:7f:71:6d:f0:29:bf:22:3a:6b: e1:0d:34:ba:ca:03:b7:dd:4d:af:07:db:00:00:4e: 4b:a9:0e:8b:4a:03:72:a0:f5:a6:63:50:e5:7d:90: 69:c9:9f:31:0c:0d:c8:02:b3:b9:90:34:fa:a2:76: 53:5e:52:bd:b5:eb:6a:bd:8e:dd:52:09:3a:3e:55: 59:ad:6c:a2:d0:66:f1:fb:32:ac:f3:de:f4:b7:a5: 2a:88:5a:6a:ef:c3:82:47:c5:f7:d7:8e:82:c5:18: 15:13:42:11:6e:0b:44:c3:b3:1d:a4:8d:b9:07:5b: 30:d3:3e:e4:a4:7a:5e:d6:5b:7c:9f:a4:59:a5:d0: 25:e3:c9:6f:f5:3b:ef:7b:2f:b6:eb:c1:35:dc:03: 1c:a3:b4:ae:39:3a:09:1a:a4:e0:d2:0c:19:ad:f7: 8b:47:dd:0f:0c:4a:e4:f6:3c:f1:94:34:f0:2c:0c: 23:7f:0f:cf:ea:02:69:15:ea:40:40:56:99:6a:4a: 20:e6:05:e0:0d:bb:4f:d5:97:71:c5:21:83:10:df: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:89:1D:97:06:CB:6A:77:DE:5E:F8:65:E1:F7:DC:16:A3:40:9C:D7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143766.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a45c::/32 Signature Algorithm: sha256WithRSAEncryption 99:29:30:b9:24:1b:65:65:14:88:81:8e:6e:64:ac:7f:fb:b5: dd:d1:53:5a:cf:1e:f7:4e:be:98:7c:ca:6e:6a:1d:7e:32:b9: e6:3a:21:71:37:17:92:81:1d:9f:dc:7d:57:31:5f:3d:ed:91: 6c:7e:d2:e9:eb:b1:f4:12:42:81:f9:a2:a3:7e:2b:90:68:bc: ab:7d:b7:09:af:55:32:3d:9a:6e:56:28:49:ce:be:8e:7e:a7: e1:da:83:e5:1a:49:42:1d:a7:7f:eb:3b:5b:d4:1a:bc:68:05: dc:ae:f0:34:4c:7c:55:03:d2:d7:a3:bd:6a:0f:e9:9b:34:89: 0a:11:e6:97:07:a6:7b:bc:e4:f0:92:65:5d:ac:92:df:5b:73: 35:88:58:3e:cc:d7:58:d9:75:4d:05:54:f3:e1:de:9c:55:4f: f7:ae:38:99:ec:28:8b:90:a6:d1:65:c9:a3:fe:c1:c2:c7:97: 37:f0:c9:c6:d1:4e:a4:3c:32:6b:99:a1:77:de:79:67:ba:69: b7:a7:b2:a6:fe:4e:b5:56:b1:00:46:04:09:57:b0:f9:48:08: 96:3e:57:ce:4e:20:fc:fb:f0:09:12:f2:2e:a2:0d:23:48:10: c2:f8:1a:c0:a4:d3:2b:04:bc:ea:7b:eb:f7:a0:95:66:ce:2c: 62:b8:69:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUImyjvmIvTlRJdaRrEHU1W3765tAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1N1oX DTI3MDMwMzA2MTI1N1owMzExMC8GA1UEAxMoNUM4OTFEOTcwNkNCNkE3N0RFNUVG ODY1RTFGN0RDMTZBMzQwOUNENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAly2mseUZV1hu3POoYtenvqmXgU4oKn2tfuSz60+hCvVpe6GHbwA7Mf6Qt K2sFA9k9f3Ft8Cm/Ijpr4Q00usoDt91NrwfbAABOS6kOi0oDcqD1pmNQ5X2Qacmf MQwNyAKzuZA0+qJ2U15SvbXrar2O3VIJOj5VWa1sotBm8fsyrPPe9LelKohaau/D gkfF99eOgsUYFRNCEW4LRMOzHaSNuQdbMNM+5KR6XtZbfJ+kWaXQJePJb/U773sv tuvBNdwDHKO0rjk6CRqk4NIMGa33i0fdDwxK5PY88ZQ08CwMI38Pz+oCaRXqQEBW mWpKIOYF4A27T9WXccUhgxDfVv8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRciR2X Bstqd95e+GXh99wWo0Cc1zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pFwwDQYJKoZIhvcNAQELBQADggEBAJkpMLkkG2VlFIiBjm5krH/7td3RU1rPHvdO vph8ym5qHX4yueY6IXE3F5KBHZ/cfVcxXz3tkWx+0unrsfQSQoH5oqN+K5BovKt9 twmvVTI9mm5WKEnOvo5+p+Hag+UaSUIdp3/rO1vUGrxoBdyu8DRMfFUD0tejvWoP 6Zs0iQoR5pcHpnu85PCSZV2skt9bczWIWD7M11jZdU0FVPPh3pxVT/euOJnsKIuQ ptFlyaP+wcLHlzfwycbRTqQ8MmuZoXfeeWe6abensqb+TrVWsQBGBAlXsPlICJY+ V85OIPz78AkS8i6iDSNIEML4GsCk0ysEvOp76/eglWbOLGK4aZ0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:04 2026 by rpki-client