$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143786.roa File: AS143786.roa (raw, json) Hash identifier: jOFD1CTspf/X26/TFS5LAxszVseuyERQpip2fBdkvHQ= Subject key identifier: B5:A0:D8:39:EA:44:96:E0:0C:0C:CF:09:01:D4:11:C6:6B:AF:AA:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08E0160CA14483E5E3D7E32F2A5CED2FC95C9E5D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143786.roa Signing time: Wed 04 Mar 2026 06:13:44 +0000 ROA not before: Wed 04 Mar 2026 06:08:44 +0000 ROA not after: Wed 03 Mar 2027 06:13:44 +0000 asID: 143786 IP address blocks: 240a:a470::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e0:16:0c:a1:44:83:e5:e3:d7:e3:2f:2a:5c:ed:2f:c9:5c:9e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:44 2026 GMT Not After : Mar 3 06:13:44 2027 GMT Subject: CN=B5A0D839EA4496E00C0CCF0901D411C66BAFAAD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:bc:2b:d0:02:aa:35:91:f1:93:e1:23:7e: 1d:cd:28:23:0d:d4:fe:33:ac:c8:6a:09:e5:f1:17: b4:25:2d:6d:e6:c2:60:1f:33:3e:bf:b1:be:d0:e6: 58:bc:38:fb:65:55:52:af:d0:0e:87:f5:46:59:46: 22:4a:65:e5:01:d2:e9:a1:dd:12:38:13:bd:8b:78: 58:e0:2a:f8:dc:c4:b7:0f:76:41:05:cc:02:48:c3: 8e:06:8e:30:9c:e9:4f:6b:71:77:00:06:2e:59:00: 46:32:fe:f4:2a:f1:64:56:38:75:56:49:47:28:0d: 48:89:35:52:ee:23:86:81:a6:e9:fc:fd:dc:26:d1: d9:4f:5c:17:fe:1f:83:6f:b3:d1:d1:8c:59:99:3d: 09:99:e2:2c:79:38:15:ca:99:6c:bc:95:73:cd:a6: c9:81:8b:aa:b1:30:9c:83:c2:b9:8b:07:62:d2:3e: fc:ee:5f:96:1c:d5:ca:13:c1:7f:ef:61:a2:7b:88: 5c:01:4f:8e:7a:00:03:0e:7f:f6:58:03:a1:01:b3: 8f:78:d7:5f:83:2d:90:2f:19:55:0b:57:35:c2:b1: d5:46:f2:de:b3:15:e0:58:51:e3:4a:13:1f:27:3c: e1:c8:e2:ab:fa:32:83:c5:a1:00:bc:f5:87:7b:39: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A0:D8:39:EA:44:96:E0:0C:0C:CF:09:01:D4:11:C6:6B:AF:AA:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143786.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a470::/32 Signature Algorithm: sha256WithRSAEncryption 9e:7e:ea:a3:6b:38:f8:9d:84:71:4f:32:e8:6b:3b:9b:07:ae: 61:96:44:bc:17:df:1d:09:7b:2b:36:f2:15:28:24:fb:8e:b2: 2f:55:28:4b:d3:94:d5:c6:35:5f:bc:ed:c0:98:2a:1c:04:55: b2:e2:27:13:66:15:90:e1:53:36:87:14:31:42:22:f9:3e:be: e6:21:69:83:d3:78:87:52:26:a1:3e:8e:ce:9d:06:30:e0:2f: b1:77:e9:08:25:87:5d:45:06:ac:02:cd:b8:24:33:a2:36:de: bb:46:5f:9b:c2:bc:34:b9:18:ef:8d:97:5b:bb:04:4f:f3:8c: 65:96:4f:a4:c3:fb:c1:77:49:52:7b:32:4d:d7:70:0e:79:08: 6d:9f:16:f6:35:85:81:3c:39:cc:ed:70:46:1c:2d:ef:71:c7: bd:b7:b2:6f:77:5e:ba:70:fe:d1:8d:6f:c6:7f:17:72:f8:00: 4d:1e:ff:03:18:21:63:af:d3:7a:dc:4a:18:dc:91:c4:01:03: 98:b3:21:db:1b:5e:7c:ec:46:4a:76:bc:be:53:c1:15:52:70: d6:fa:5d:e3:84:ee:c9:77:f7:a6:36:59:b4:4d:92:ec:58:c0: b8:d4:ed:81:a2:ce:d9:69:6d:c2:00:84:47:ce:c8:e8:20:26: 0b:08:f5:ba -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCOAWDKFEg+Xj1+MvKlztL8lcnl0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0NFoX DTI3MDMwMzA2MTM0NFowMzExMC8GA1UEAxMoQjVBMEQ4MzlFQTQ0OTZFMDBDMEND RjA5MDFENDExQzY2QkFGQUFENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJU1vCvQAqo1kfGT4SN+Hc0oIw3U/jOsyGoJ5fEXtCUtbebCYB8zPr+xvtDm WLw4+2VVUq/QDof1RllGIkpl5QHS6aHdEjgTvYt4WOAq+NzEtw92QQXMAkjDjgaO MJzpT2txdwAGLlkARjL+9CrxZFY4dVZJRygNSIk1Uu4jhoGm6fz93CbR2U9cF/4f g2+z0dGMWZk9CZniLHk4FcqZbLyVc82myYGLqrEwnIPCuYsHYtI+/O5flhzVyhPB f+9honuIXAFPjnoAAw5/9lgDoQGzj3jXX4MtkC8ZVQtXNcKx1Uby3rMV4FhR40oT Hyc84cjiq/oyg8WhALz1h3s5c+8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS1oNg5 6kSW4AwMzwkB1BHGa6+q1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pHAwDQYJKoZIhvcNAQELBQADggEBAJ5+6qNrOPidhHFPMuhrO5sHrmGWRLwX3x0J eys28hUoJPuOsi9VKEvTlNXGNV+87cCYKhwEVbLiJxNmFZDhUzaHFDFCIvk+vuYh aYPTeIdSJqE+js6dBjDgL7F36Qglh11FBqwCzbgkM6I23rtGX5vCvDS5GO+Nl1u7 BE/zjGWWT6TD+8F3SVJ7Mk3XcA55CG2fFvY1hYE8OcztcEYcLe9xx723sm93Xrpw /tGNb8Z/F3L4AE0e/wMYIWOv03rcShjckcQBA5izIdsbXnzsRkp2vL5TwRVScNb6 XeOE7sl396Y2WbRNkuxYwLjU7YGiztlpbcIAhEfOyOggJgsI9bo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:14 2026 by rpki-client