$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143779.roa File: AS143779.roa (raw, json) Hash identifier: TUL3I25uS3M19MWZ9AmOfneWUV6+CBIuNBNPhqjyUtg= Subject key identifier: B6:40:31:AB:F1:89:24:17:66:99:32:4D:0C:A9:E0:00:59:9A:FD:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F485FE793E7E81C256FFEAE28B44835A5881855 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143779.roa Signing time: Wed 04 Mar 2026 06:15:51 +0000 ROA not before: Wed 04 Mar 2026 06:10:51 +0000 ROA not after: Wed 03 Mar 2027 06:15:51 +0000 asID: 143779 IP address blocks: 240a:a469::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:48:5f:e7:93:e7:e8:1c:25:6f:fe:ae:28:b4:48:35:a5:88:18:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:51 2026 GMT Not After : Mar 3 06:15:51 2027 GMT Subject: CN=B64031ABF18924176699324D0CA9E000599AFD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e8:dc:c1:5f:fb:ae:e2:7d:fe:3d:35:0d:81: cd:f9:e2:04:09:33:a2:18:c1:80:4d:e4:0b:1e:a8: 42:5d:07:66:f8:06:a8:37:57:4a:6d:d0:87:fd:1b: 09:7e:ee:1f:d7:da:eb:30:42:36:86:2b:c6:14:06: 92:8f:7c:9b:b7:f1:e4:e9:98:8b:70:d3:5d:0f:e8: be:8e:f2:07:85:10:4b:d4:3a:f3:21:07:18:5d:7d: bf:6c:57:f2:25:7b:95:0f:d5:9b:17:95:54:63:e8: c0:07:f6:40:a0:84:f3:a0:90:28:5c:8f:30:3d:16: 74:79:15:96:43:a6:66:8f:b7:0f:40:36:2c:c1:0c: 01:3b:83:80:0b:c4:a0:e4:a4:c7:8f:eb:2f:23:ec: 01:c9:dc:62:5c:4d:9f:0d:22:5d:28:ce:7a:5e:70: 0a:07:ea:44:f3:eb:cc:a7:17:cc:51:71:e4:6f:97: 05:c4:cf:34:ee:fd:fc:9d:f6:e8:d1:ad:d9:be:d2: 3a:ef:8c:64:5b:37:ed:ce:1a:b1:27:f7:83:2e:fc: f9:76:a0:64:ed:6f:a4:e0:4c:04:53:e2:77:3f:aa: f2:8d:ff:02:1f:82:77:7f:44:b0:36:ae:8c:8a:7e: 52:c6:f6:c8:eb:79:10:37:4b:c6:6a:b9:aa:e8:03: 8b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:40:31:AB:F1:89:24:17:66:99:32:4D:0C:A9:E0:00:59:9A:FD:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143779.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a469::/32 Signature Algorithm: sha256WithRSAEncryption 8c:9a:cf:b7:68:6e:0d:1a:8a:db:5d:77:bf:79:d2:30:c9:ec: c4:ab:a6:d9:63:93:45:69:8f:f2:f8:cf:c0:bc:14:1a:bd:92: 61:00:e6:2a:6d:63:9a:b4:b7:d0:0c:9b:06:02:ca:51:01:41: 02:71:43:9c:60:17:fc:b0:e0:4c:3d:b7:04:c5:ad:5c:48:10: 86:90:e3:d3:39:31:70:c0:a6:8f:7d:22:d9:d8:2d:d3:12:33: 64:34:4d:fa:b8:04:3e:fb:94:95:50:03:ba:e5:14:e4:03:4b: e7:e8:06:a4:51:33:b8:be:5e:de:51:6d:8a:63:3b:39:da:91: 8c:f9:6b:77:61:cf:1c:aa:87:91:5c:fb:71:52:99:46:d8:8a: 3a:49:67:1e:df:07:4b:d8:90:42:08:38:c3:43:11:58:6a:3b: 97:af:82:71:e7:7a:e0:3e:e8:24:ed:a1:b4:7a:ff:63:95:35: c8:4c:71:3c:37:c3:09:5f:38:0e:57:72:d3:a7:76:0e:c9:ca: 51:b0:e3:ad:4a:a4:ae:7d:71:11:d2:4b:03:82:fe:10:42:c2: bb:ce:5b:61:ec:ad:b0:95:29:47:d0:30:a9:66:db:cc:2a:ff: d5:30:6f:aa:2e:7f:48:46:68:d2:a9:d6:76:25:ee:fe:f6:49: 84:9e:d6:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX0hf55Pn6Bwlb/6uKLRINaWIGFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA1MVoX DTI3MDMwMzA2MTU1MVowMzExMC8GA1UEAxMoQjY0MDMxQUJGMTg5MjQxNzY2OTkz MjREMENBOUUwMDA1OTlBRkQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOvo3MFf+67iff49NQ2BzfniBAkzohjBgE3kCx6oQl0HZvgGqDdXSm3Qh/0b CX7uH9fa6zBCNoYrxhQGko98m7fx5OmYi3DTXQ/ovo7yB4UQS9Q68yEHGF19v2xX 8iV7lQ/VmxeVVGPowAf2QKCE86CQKFyPMD0WdHkVlkOmZo+3D0A2LMEMATuDgAvE oOSkx4/rLyPsAcncYlxNnw0iXSjOel5wCgfqRPPrzKcXzFFx5G+XBcTPNO79/J32 6NGt2b7SOu+MZFs37c4asSf3gy78+XagZO1vpOBMBFPidz+q8o3/Ah+Cd39EsDau jIp+Usb2yOt5EDdLxmq5qugDi1sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS2QDGr 8YkkF2aZMk0MqeAAWZr9ATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pGkwDQYJKoZIhvcNAQELBQADggEBAIyaz7dobg0aittdd7950jDJ7MSrptljk0Vp j/L4z8C8FBq9kmEA5iptY5q0t9AMmwYCylEBQQJxQ5xgF/yw4Ew9twTFrVxIEIaQ 49M5MXDApo99ItnYLdMSM2Q0Tfq4BD77lJVQA7rlFOQDS+foBqRRM7i+Xt5RbYpj OznakYz5a3dhzxyqh5Fc+3FSmUbYijpJZx7fB0vYkEIIOMNDEVhqO5evgnHneuA+ 6CTtobR6/2OVNchMcTw3wwlfOA5XctOndg7JylGw461KpK59cRHSSwOC/hBCwrvO W2HsrbCVKUfQMKlm28wq/9Uwb6ouf0hGaNKp1nYl7v72SYSe1lA= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:35 2026 by rpki-client