$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143771.roa File: AS143771.roa (raw, json) Hash identifier: Zy4HsDc9u86G+4r4/E4ZXiBmSYDPkZUURd1ODF7+WMY= Subject key identifier: 81:19:B8:8D:48:85:04:3A:AF:F8:37:E9:5C:15:F2:D2:06:B5:88:A2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7095BCC2639DA5C8410BD4225548C4F923FA6E4D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143771.roa Signing time: Wed 04 Mar 2026 06:13:14 +0000 ROA not before: Wed 04 Mar 2026 06:08:14 +0000 ROA not after: Wed 03 Mar 2027 06:13:14 +0000 asID: 143771 IP address blocks: 240a:a461::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:95:bc:c2:63:9d:a5:c8:41:0b:d4:22:55:48:c4:f9:23:fa:6e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:14 2026 GMT Not After : Mar 3 06:13:14 2027 GMT Subject: CN=8119B88D4885043AAFF837E95C15F2D206B588A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:a9:ba:6f:54:0e:70:4f:d8:13:a7:a4:f3: aa:c2:f3:94:a6:fc:ae:c9:15:f2:dd:f8:fa:32:78: 54:44:57:01:bc:92:b0:53:dc:4f:a0:8c:2b:98:ce: 86:64:45:3c:96:20:c0:4c:97:cd:b1:51:be:1c:19: 95:15:6f:d5:d1:48:89:48:e5:14:17:48:95:fe:07: 37:cf:64:a7:cf:ac:d5:e1:6c:be:d3:fc:8a:4e:8b: 6d:5a:c0:47:22:e0:bf:16:b0:14:e3:e6:3b:b6:73: 7c:0a:fa:15:74:7a:c4:71:50:7f:d4:93:7e:ec:e2: 0c:b8:d5:54:d7:fe:8e:82:1a:c1:a9:9d:f6:1a:b4: fb:cd:c3:d5:a0:1a:d9:20:4f:80:40:e3:90:5c:60: ec:ea:5c:35:c5:b3:95:b5:1a:71:fd:8c:9c:3b:5e: 64:ab:c6:17:46:6a:13:b8:8e:d0:95:46:cc:ab:65: ed:d3:47:17:8e:35:30:69:4d:70:0b:37:01:bf:cf: 87:b0:58:7e:80:96:b1:63:ad:2c:ad:81:76:cf:01: 2a:f8:92:39:e0:98:b2:91:06:2d:ea:1d:3e:41:ef: e3:12:2b:7a:01:9b:3f:9a:ac:b4:f3:3c:77:6d:91: 1f:a6:1a:59:82:e9:f9:ba:eb:3d:de:0e:94:e2:49: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:19:B8:8D:48:85:04:3A:AF:F8:37:E9:5C:15:F2:D2:06:B5:88:A2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143771.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a461::/32 Signature Algorithm: sha256WithRSAEncryption 5d:25:14:8f:0e:5f:18:67:be:a1:71:f5:20:af:86:8a:8e:d2: 5e:c3:84:a8:7c:fe:63:f5:c4:af:36:67:81:35:a4:81:80:29: ca:80:3c:b2:02:bc:16:36:5a:41:7b:79:90:9a:09:1a:30:0c: 5d:89:44:4a:62:e7:1e:52:c4:65:f8:b2:6d:a0:34:be:75:d5: 84:b9:7c:51:4f:e8:dd:5d:33:8a:53:10:b7:75:a3:90:e9:64: 38:bd:64:02:3e:af:74:87:b2:1e:5e:99:1a:cc:dd:bb:4a:27: bd:3c:93:d8:60:59:02:15:5a:e2:2c:f4:f0:de:f3:d4:79:8b: 2e:05:41:07:fe:0e:70:04:21:cd:c6:74:3b:55:6f:77:bd:b6: c6:09:31:73:25:84:59:f2:ed:10:83:ea:a3:19:5e:c4:0c:36: f5:d1:16:ad:57:4e:47:49:1f:b7:88:6a:01:3d:f2:ce:12:c3: cf:56:c0:23:7d:61:51:fd:a6:c4:79:f4:5b:59:2b:04:96:74: ea:a8:05:b4:2c:73:55:45:b6:46:b9:83:6f:26:85:88:e8:b2: c8:3e:ef:5e:8a:8b:87:da:e0:d2:f3:fd:41:bc:94:32:a7:ba: 2e:95:38:36:25:72:d1:c0:68:0f:5a:cf:bf:6c:47:88:be:50: 68:f0:c9:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcJW8wmOdpchBC9QiVUjE+SP6bk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNFoX DTI3MDMwMzA2MTMxNFowMzExMC8GA1UEAxMoODExOUI4OEQ0ODg1MDQzQUFGRjgz N0U5NUMxNUYyRDIwNkI1ODhBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOFqbpvVA5wT9gTp6TzqsLzlKb8rskV8t34+jJ4VERXAbySsFPcT6CMK5jO hmRFPJYgwEyXzbFRvhwZlRVv1dFIiUjlFBdIlf4HN89kp8+s1eFsvtP8ik6LbVrA RyLgvxawFOPmO7ZzfAr6FXR6xHFQf9STfuziDLjVVNf+joIawamd9hq0+83D1aAa 2SBPgEDjkFxg7OpcNcWzlbUacf2MnDteZKvGF0ZqE7iO0JVGzKtl7dNHF441MGlN cAs3Ab/Ph7BYfoCWsWOtLK2Bds8BKviSOeCYspEGLeodPkHv4xIregGbP5qstPM8 d22RH6YaWYLp+brrPd4OlOJJkVcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSBGbiN SIUEOq/4N+lcFfLSBrWIojAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pGEwDQYJKoZIhvcNAQELBQADggEBAF0lFI8OXxhnvqFx9SCvhoqO0l7DhKh8/mP1 xK82Z4E1pIGAKcqAPLICvBY2WkF7eZCaCRowDF2JREpi5x5SxGX4sm2gNL511YS5 fFFP6N1dM4pTELd1o5DpZDi9ZAI+r3SHsh5emRrM3btKJ708k9hgWQIVWuIs9PDe 89R5iy4FQQf+DnAEIc3GdDtVb3e9tsYJMXMlhFny7RCD6qMZXsQMNvXRFq1XTkdJ H7eIagE98s4Sw89WwCN9YVH9psR59FtZKwSWdOqoBbQsc1VFtka5g28mhYjossg+ 716Ki4fa4NLz/UG8lDKnui6VODYlctHAaA9az79sR4i+UGjwycU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:05 2026 by rpki-client