$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143774.roa File: AS143774.roa (raw, json) Hash identifier: Yvj8Emrg19XY2AUc/3/GATNnhLXIBqzcdtgk4hvtwPE= Subject key identifier: BA:5F:4F:0B:3E:DD:C2:2B:55:FB:DB:29:37:C5:80:55:AF:DB:70:B5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 05214896387628DD3ED72C21210C5901A6B23C24 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143774.roa Signing time: Wed 04 Mar 2026 06:15:06 +0000 ROA not before: Wed 04 Mar 2026 06:10:06 +0000 ROA not after: Wed 03 Mar 2027 06:15:06 +0000 asID: 143774 IP address blocks: 240a:a464::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:21:48:96:38:76:28:dd:3e:d7:2c:21:21:0c:59:01:a6:b2:3c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:06 2026 GMT Not After : Mar 3 06:15:06 2027 GMT Subject: CN=BA5F4F0B3EDDC22B55FBDB2937C58055AFDB70B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:3e:f7:6f:9f:eb:f2:c0:30:2c:77:6c:af: 63:f8:03:49:61:76:2d:58:ad:12:43:fc:84:9e:73: b1:b2:cf:ac:d3:a4:4e:42:ab:47:f0:51:e3:04:3e: 92:51:07:62:f8:de:5e:4d:d1:c9:b6:e4:e8:72:5e: 1f:c1:2d:93:b1:e9:ed:35:82:3f:8f:49:c1:d3:cb: 90:27:59:af:6b:6e:64:c1:af:cc:c6:1e:30:0c:6b: be:54:02:0f:40:4f:c4:30:cd:d4:d2:0a:9d:5b:f0: 4b:7d:d1:52:53:19:8e:7c:8b:88:11:1f:e7:08:7f: 60:ea:cc:b4:cf:a8:31:0a:c1:b7:e3:8d:2c:b9:3d: 9a:a1:f8:cd:05:e5:a4:c7:dc:dd:02:29:7b:e8:7c: 94:38:db:c8:6d:46:55:94:9e:f1:94:c3:0d:7b:5b: 45:63:9e:71:a3:6f:3a:59:42:fb:a4:eb:71:f9:11: fa:9c:46:f3:95:46:17:a8:72:f8:18:9e:4e:cf:89: 98:cf:2c:38:64:f0:79:de:97:b1:52:bf:c2:0a:74: a2:f3:46:0d:0a:fb:a1:3b:2d:33:d8:e8:2f:aa:51: 80:f5:e4:1e:bd:ef:fa:b4:06:97:7b:ba:83:f0:ce: 80:01:11:84:4c:6c:45:df:95:f7:ce:24:1b:20:95: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5F:4F:0B:3E:DD:C2:2B:55:FB:DB:29:37:C5:80:55:AF:DB:70:B5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143774.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a464::/32 Signature Algorithm: sha256WithRSAEncryption aa:cf:da:e4:52:9a:17:c8:1b:3e:a1:83:29:df:70:5a:80:07: 16:71:bc:e5:9b:b0:e1:84:a8:99:a5:d9:02:c6:a5:c6:fa:2a: 0d:60:a8:f4:88:f1:05:d0:98:0a:66:57:86:8c:bc:ee:ee:bd: f9:14:18:f6:fd:b4:84:19:5a:11:67:14:04:bb:e7:99:19:d1: 9c:e9:94:c6:d4:8b:29:fe:77:db:5c:ac:56:2c:4e:22:9a:3c: ca:4d:9e:eb:c4:a3:71:e3:bd:2e:1d:06:33:75:17:91:a9:0c: f9:a5:37:74:53:6d:7c:17:28:c4:f8:43:46:bf:8f:b5:bb:f7: 1b:54:8f:fb:ae:78:61:27:2b:e0:60:22:74:ff:d7:b7:ac:87: f1:fa:04:b3:2e:e4:4a:87:a1:84:ee:65:65:62:38:5a:37:d2: aa:f7:3f:ad:d2:bb:c2:fb:e6:d9:d8:b1:b4:a7:04:27:2d:1b: 55:65:81:3b:84:01:77:42:df:d1:fb:b1:7d:4b:4b:9b:ac:c5: 0e:4a:05:5b:3e:39:1c:8e:61:e2:d1:a6:da:f8:7b:f1:6b:16: 83:5d:44:8c:8c:8a:b8:cc:af:5f:a6:a1:aa:87:db:5c:40:32: 9c:e3:2b:2b:6f:be:ce:25:54:4a:16:bc:3a:85:77:41:28:7f: be:32:f9:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBSFIljh2KN0+1ywhIQxZAaayPCQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwNloX DTI3MDMwMzA2MTUwNlowMzExMC8GA1UEAxMoQkE1RjRGMEIzRUREQzIyQjU1RkJE QjI5MzdDNTgwNTVBRkRCNzBCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3SPvdvn+vywDAsd2yvY/gDSWF2LVitEkP8hJ5zsbLPrNOkTkKrR/BR4wQ+ klEHYvjeXk3Rybbk6HJeH8Etk7Hp7TWCP49JwdPLkCdZr2tuZMGvzMYeMAxrvlQC D0BPxDDN1NIKnVvwS33RUlMZjnyLiBEf5wh/YOrMtM+oMQrBt+ONLLk9mqH4zQXl pMfc3QIpe+h8lDjbyG1GVZSe8ZTDDXtbRWOecaNvOllC+6TrcfkR+pxG85VGF6hy +BieTs+JmM8sOGTwed6XsVK/wgp0ovNGDQr7oTstM9joL6pRgPXkHr3v+rQGl3u6 g/DOgAERhExsRd+V984kGyCVQeUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS6X08L Pt3CK1X72yk3xYBVr9twtTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pGQwDQYJKoZIhvcNAQELBQADggEBAKrP2uRSmhfIGz6hgynfcFqABxZxvOWbsOGE qJml2QLGpcb6Kg1gqPSI8QXQmApmV4aMvO7uvfkUGPb9tIQZWhFnFAS755kZ0Zzp lMbUiyn+d9tcrFYsTiKaPMpNnuvEo3HjvS4dBjN1F5GpDPmlN3RTbXwXKMT4Q0a/ j7W79xtUj/uueGEnK+BgInT/17esh/H6BLMu5EqHoYTuZWViOFo30qr3P63Su8L7 5tnYsbSnBCctG1VlgTuEAXdC39H7sX1LS5usxQ5KBVs+ORyOYeLRptr4e/FrFoNd RIyMirjMr1+moaqH21xAMpzjKytvvs4lVEoWvDqFd0Eof74y+fs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:36 2026 by rpki-client