$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143788.roa File: AS143788.roa (raw, json) Hash identifier: JhKlo/3gjWpT2MjUJHrkiK2iHZXO4USa7lzZI9WdGWc= Subject key identifier: 7F:46:28:49:4B:36:17:4F:94:72:D3:00:5F:8B:F9:8C:EC:C0:0A:E5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 263C8FC753CA42E60FF1CAAB331A93DF27801308 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143788.roa Signing time: Wed 04 Mar 2026 06:15:47 +0000 ROA not before: Wed 04 Mar 2026 06:10:47 +0000 ROA not after: Wed 03 Mar 2027 06:15:47 +0000 asID: 143788 IP address blocks: 240a:a472::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3c:8f:c7:53:ca:42:e6:0f:f1:ca:ab:33:1a:93:df:27:80:13:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:47 2026 GMT Not After : Mar 3 06:15:47 2027 GMT Subject: CN=7F4628494B36174F9472D3005F8BF98CECC00AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:87:a6:d4:d8:10:a3:f3:03:8a:12:5d:e2: 64:b6:99:d0:75:ba:fc:27:ed:09:a7:36:ad:c9:30: b0:ef:8a:ec:07:4f:21:70:80:6f:83:27:d7:3f:21: 98:91:bd:91:c9:04:7a:66:cd:4a:79:83:9a:32:31: 86:75:d3:94:71:d8:13:5e:65:56:ae:87:7f:b8:01: 18:9d:67:99:b0:28:32:cf:49:20:e3:cc:6d:a4:06: eb:56:0c:ce:ea:23:ac:4c:db:b2:e3:32:02:5a:e6: 23:74:d0:7e:19:83:6d:f3:38:6a:b7:84:51:da:bc: 85:b1:aa:03:7e:10:30:15:84:6f:7c:42:14:72:16: 06:4b:dd:88:a2:73:ec:20:39:a9:c5:69:4e:5e:8b: 9e:a4:25:3d:72:91:5b:28:11:3c:1e:15:c3:ea:80: 40:93:9d:21:30:83:a5:47:8d:c5:1c:cf:15:b2:72: 66:a2:b4:5d:35:13:df:5c:d2:85:fa:91:46:75:9f: cc:5c:53:72:0b:9d:a2:7f:4d:b8:c9:54:32:95:3d: 9b:4e:99:8f:e0:be:a5:4b:2a:e5:00:4f:c0:c5:13: b5:90:f6:1f:9a:c0:53:45:32:f5:8d:ab:76:5a:45: 15:df:62:a1:d0:bf:17:57:a6:ef:96:63:db:1e:b3: 18:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:46:28:49:4B:36:17:4F:94:72:D3:00:5F:8B:F9:8C:EC:C0:0A:E5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143788.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a472::/32 Signature Algorithm: sha256WithRSAEncryption b7:98:21:6a:32:81:5c:20:ab:87:59:20:c3:eb:f5:0b:f3:aa: 63:77:61:df:c1:a2:50:91:d6:60:df:99:ae:c5:ac:5a:9b:03: be:4e:6b:b4:10:1f:b1:e3:bd:a3:f8:e9:a9:70:76:87:c6:12: 5a:a1:6e:13:5f:5b:93:b5:b7:dc:c1:25:38:a3:55:10:78:b7: e5:5e:79:6d:f2:e9:fa:be:1f:ad:67:d6:6b:94:78:d5:18:f5: 47:16:3b:80:51:26:df:91:ca:04:02:d7:21:35:19:84:c9:a8: 4e:9c:4b:06:26:6b:6e:1c:e3:23:b9:4b:07:8a:57:29:9a:0d: 1a:bb:c2:57:0d:64:48:91:14:d1:b0:d2:d7:c8:87:29:c3:11: bc:1b:bf:09:75:94:50:a9:d8:38:50:1c:48:33:ce:dc:02:32: d5:81:21:0e:cd:a5:5f:38:c0:4c:fb:15:df:c6:27:32:a6:85: 7f:c4:72:a7:04:0e:1f:9b:3c:0a:53:64:7b:0f:ba:66:2c:ae: 92:00:e6:9c:2c:a1:90:92:d8:d6:48:76:37:70:4b:f4:ad:2b: a4:a5:0e:d3:51:ff:97:96:8c:69:75:ec:1e:d5:12:c5:97:76: 6e:52:f4:5d:08:6d:91:97:13:08:e8:36:2f:b2:b1:c5:b3:1d: ed:6c:cd:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJjyPx1PKQuYP8cqrMxqT3yeAEwgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0N1oX DTI3MDMwMzA2MTU0N1owMzExMC8GA1UEAxMoN0Y0NjI4NDk0QjM2MTc0Rjk0NzJE MzAwNUY4QkY5OENFQ0MwMEFFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOh8h6bU2BCj8wOKEl3iZLaZ0HW6/CftCac2rckwsO+K7AdPIXCAb4Mn1z8h mJG9kckEembNSnmDmjIxhnXTlHHYE15lVq6Hf7gBGJ1nmbAoMs9JIOPMbaQG61YM zuojrEzbsuMyAlrmI3TQfhmDbfM4areEUdq8hbGqA34QMBWEb3xCFHIWBkvdiKJz 7CA5qcVpTl6LnqQlPXKRWygRPB4Vw+qAQJOdITCDpUeNxRzPFbJyZqK0XTUT31zS hfqRRnWfzFxTcgudon9NuMlUMpU9m06Zj+C+pUsq5QBPwMUTtZD2H5rAU0Uy9Y2r dlpFFd9iodC/F1em75Zj2x6zGH0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR/RihJ SzYXT5Ry0wBfi/mM7MAK5TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pHIwDQYJKoZIhvcNAQELBQADggEBALeYIWoygVwgq4dZIMPr9QvzqmN3Yd/BolCR 1mDfma7FrFqbA75Oa7QQH7HjvaP46alwdofGElqhbhNfW5O1t9zBJTijVRB4t+Ve eW3y6fq+H61n1muUeNUY9UcWO4BRJt+RygQC1yE1GYTJqE6cSwYma24c4yO5SweK VymaDRq7wlcNZEiRFNGw0tfIhynDEbwbvwl1lFCp2DhQHEgzztwCMtWBIQ7NpV84 wEz7Fd/GJzKmhX/EcqcEDh+bPApTZHsPumYsrpIA5pwsoZCS2NZIdjdwS/StK6Sl DtNR/5eWjGl17B7VEsWXdm5S9F0IbZGXEwjoNi+yscWzHe1szfA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:43 2026 by rpki-client