$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143790.roa File: AS143790.roa (raw, json) Hash identifier: tgs3CfvIjwSU9YEYu/RSqjSvdwr/imFtFIXpcOZaykE= Subject key identifier: DC:C1:7C:F8:F6:F3:62:54:FF:8E:50:FD:5C:B6:36:E4:C3:53:11:0E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 758DE36F8D646468BF861D9C7C159D1E8F3C83DE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143790.roa Signing time: Wed 04 Mar 2026 06:13:58 +0000 ROA not before: Wed 04 Mar 2026 06:08:58 +0000 ROA not after: Wed 03 Mar 2027 06:13:58 +0000 asID: 143790 IP address blocks: 240a:a474::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8d:e3:6f:8d:64:64:68:bf:86:1d:9c:7c:15:9d:1e:8f:3c:83:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:58 2026 GMT Not After : Mar 3 06:13:58 2027 GMT Subject: CN=DCC17CF8F6F36254FF8E50FD5CB636E4C353110E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8a:b9:81:8b:ed:c8:09:8e:ca:46:10:ce:0c: 86:06:d1:83:cc:64:b7:df:c4:a4:65:14:0a:22:55: 07:77:1f:bd:06:36:17:0f:54:89:44:bc:a6:b2:cc: bc:24:35:44:c8:18:ea:c8:e2:0d:ff:53:e9:8a:53: d8:0f:6e:14:91:ac:56:24:2d:d6:78:9f:3a:7a:b9: 3f:ca:36:d2:76:da:8c:97:3c:11:c4:c8:32:b5:98: f7:b5:8c:49:29:89:59:3f:d7:0f:d2:c4:4a:c9:d1: 90:e0:c9:9b:5a:6d:03:ab:c0:fa:45:9c:f1:47:89: 62:fd:80:b8:2b:8b:56:92:d2:4a:da:d1:52:3d:f6: 4e:d0:ad:ac:6c:da:f5:40:6a:9f:89:d6:2e:25:b5: d6:02:94:69:6f:00:ff:54:8a:37:1e:05:6b:d3:3c: 57:fa:e2:e8:ce:0b:76:7b:c7:4c:5f:5e:0c:d6:c4: f6:e3:0b:3d:d4:3a:e3:23:63:f8:c8:48:bc:d6:5c: ee:80:47:fc:7d:fe:03:a8:b1:94:be:16:d8:df:a8: 2d:ce:55:65:2e:85:c7:e4:dd:e0:77:07:8d:49:2f: 8e:e8:99:4d:a0:33:00:1f:7b:29:f8:00:da:15:7b: 99:4b:91:ab:60:82:a6:1d:4a:c0:66:db:95:db:4a: 4c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C1:7C:F8:F6:F3:62:54:FF:8E:50:FD:5C:B6:36:E4:C3:53:11:0E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143790.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a474::/32 Signature Algorithm: sha256WithRSAEncryption 3f:5a:7d:08:df:eb:c4:97:98:50:88:03:3c:8b:aa:34:a3:e5: 88:35:d4:20:87:41:4c:ae:7d:16:47:be:42:15:d0:f8:4f:fe: a0:45:38:6b:c0:b2:58:53:4e:87:71:2f:bc:08:d9:77:e0:c0: 39:d4:7c:8f:0a:6b:12:0f:89:ed:33:6e:24:f4:15:f4:91:d4: 1b:0a:79:5e:9f:07:6c:6d:05:e2:3f:32:77:50:47:39:ea:9c: e6:f1:04:b6:b7:7c:d3:60:a3:e3:58:72:b3:74:2c:61:35:c5: 8b:35:be:d0:50:a9:97:c4:83:e0:1c:7a:55:1e:0f:a7:4d:aa: be:cf:9b:0e:d0:6e:7a:5f:fd:e3:01:80:9a:ff:f7:35:01:21: 0d:04:c8:55:9e:a8:6d:60:6a:6c:9e:a3:14:1f:c6:62:fe:e8: 7a:fc:12:fa:07:61:d4:d1:c0:a3:75:9f:d9:8b:02:0c:ba:dc: e3:8b:60:f8:5c:a2:51:84:c6:cc:32:51:bd:d2:2c:84:52:c2: 10:10:2f:1f:0d:5d:9c:8e:df:60:c1:3a:d9:e4:17:0e:47:20: 3c:e1:c4:6e:fc:f1:b7:96:37:cc:cc:df:cd:eb:b4:8c:23:11: 16:75:ee:e2:be:e9:14:bf:16:b1:60:25:5b:71:b8:c2:92:21: 93:df:6b:c7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdY3jb41kZGi/hh2cfBWdHo88g94wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1OFoX DTI3MDMwMzA2MTM1OFowMzExMC8GA1UEAxMoRENDMTdDRjhGNkYzNjI1NEZGOEU1 MEZENUNCNjM2RTRDMzUzMTEwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+KuYGL7cgJjspGEM4MhgbRg8xkt9/EpGUUCiJVB3cfvQY2Fw9UiUS8prLM vCQ1RMgY6sjiDf9T6YpT2A9uFJGsViQt1nifOnq5P8o20nbajJc8EcTIMrWY97WM SSmJWT/XD9LESsnRkODJm1ptA6vA+kWc8UeJYv2AuCuLVpLSStrRUj32TtCtrGza 9UBqn4nWLiW11gKUaW8A/1SKNx4Fa9M8V/ri6M4LdnvHTF9eDNbE9uMLPdQ64yNj +MhIvNZc7oBH/H3+A6ixlL4W2N+oLc5VZS6Fx+Td4HcHjUkvjuiZTaAzAB97KfgA 2hV7mUuRq2CCph1KwGbbldtKTPECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTcwXz4 9vNiVP+OUP1ctjbkw1MRDjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pHQwDQYJKoZIhvcNAQELBQADggEBAD9afQjf68SXmFCIAzyLqjSj5Yg11CCHQUyu fRZHvkIV0PhP/qBFOGvAslhTTodxL7wI2XfgwDnUfI8KaxIPie0zbiT0FfSR1BsK eV6fB2xtBeI/MndQRznqnObxBLa3fNNgo+NYcrN0LGE1xYs1vtBQqZfEg+AcelUe D6dNqr7Pmw7Qbnpf/eMBgJr/9zUBIQ0EyFWeqG1gamyeoxQfxmL+6Hr8EvoHYdTR wKN1n9mLAgy63OOLYPhcolGExswyUb3SLIRSwhAQLx8NXZyO32DBOtnkFw5HIDzh xG788beWN8zM383rtIwjERZ17uK+6RS/FrFgJVtxuMKSIZPfa8c= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:42 2026 by rpki-client