$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143792.roa File: AS143792.roa (raw, json) Hash identifier: 3QJRe5vnCZyKL194dDInlWp4H07emd57xy3uJ2pGek8= Subject key identifier: 35:02:7E:C4:34:C2:A0:1A:CC:19:CA:CF:EB:25:00:7E:FB:57:01:68 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 198B6BE187A4514CD9A00194991C9503D56E3386 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143792.roa Signing time: Wed 04 Mar 2026 06:13:51 +0000 ROA not before: Wed 04 Mar 2026 06:08:51 +0000 ROA not after: Wed 03 Mar 2027 06:13:51 +0000 asID: 143792 IP address blocks: 240a:a476::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8b:6b:e1:87:a4:51:4c:d9:a0:01:94:99:1c:95:03:d5:6e:33:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:51 2026 GMT Not After : Mar 3 06:13:51 2027 GMT Subject: CN=35027EC434C2A01ACC19CACFEB25007EFB570168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:a2:9f:05:bd:53:78:9a:32:44:71:b7:8d: 21:90:73:7c:f9:47:77:56:95:a0:8a:a3:5d:fe:1b: 4f:3c:2f:d0:d9:35:0c:b5:97:05:da:27:67:58:7d: 92:6a:a1:7b:ee:c6:73:22:11:ee:42:b2:8f:43:96: 33:d8:1f:db:b7:ad:72:60:25:40:4d:32:07:b9:99: d0:a7:2a:4f:2e:c1:35:b4:61:19:2c:da:dc:2c:81: 51:af:29:9f:e7:b7:98:fa:a0:01:55:aa:56:5f:2e: e7:6f:73:1c:f6:23:98:55:64:b2:73:45:98:2e:16: eb:45:88:d9:a2:4e:08:74:5b:1f:22:a2:e8:eb:4c: aa:e6:49:d9:24:d7:cc:53:9a:5a:1f:76:04:43:0c: 4d:92:07:d9:54:a9:87:ae:77:33:a7:06:0d:42:19: a2:79:20:9f:8d:0a:37:eb:d8:b3:74:05:98:5c:97: 94:95:49:49:4b:3b:83:b8:fe:07:0c:51:c4:25:16: bc:af:1f:35:8e:6d:82:a9:9f:b1:02:9b:d6:8a:cb: 1e:2f:06:c4:0f:24:aa:b4:11:ca:f7:1f:4d:99:46: f0:68:de:78:fe:4e:d9:03:7b:ea:aa:42:20:25:52: d6:ba:02:49:f1:d3:b9:8d:99:ea:89:7a:62:36:2f: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:02:7E:C4:34:C2:A0:1A:CC:19:CA:CF:EB:25:00:7E:FB:57:01:68 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143792.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a476::/32 Signature Algorithm: sha256WithRSAEncryption 16:fe:48:35:2a:af:b2:50:86:b9:ae:14:47:f3:8d:0b:9b:3e: cd:80:75:0e:03:79:7b:8c:41:bd:9c:32:84:c9:7b:a6:be:b8: a4:52:c8:8f:39:8b:fd:23:bd:fe:c7:fb:f9:c6:c7:d6:59:a1: cf:06:df:8f:a0:2e:8c:7d:75:ff:d6:87:50:f3:80:76:60:c3: 6e:4d:65:de:5b:8b:0a:fb:70:7f:78:7d:9d:1c:75:1c:2a:69: f1:83:e5:d2:dd:e6:66:60:14:ea:82:c9:7b:b6:eb:40:67:d5: ac:ee:5e:7c:91:c5:86:6f:6c:8e:c7:21:0c:c8:17:2f:f5:12: 78:19:2e:e5:1b:cb:8a:e1:e6:b8:9d:7e:28:4c:c3:5c:69:14: 46:1b:b8:dd:d6:bc:1b:bf:61:45:dc:19:b2:dc:d4:b7:bb:2f: 06:97:c8:5e:64:83:d6:f3:85:8a:45:4e:c5:0c:f2:e4:1b:d0: e4:a0:6b:35:76:07:ff:c3:ea:ac:08:fd:8e:c4:84:aa:4d:b2: 8b:34:b9:dc:f8:c2:32:26:db:cc:23:df:7e:60:17:e7:73:0e: c1:65:c2:51:eb:b8:01:bf:cd:11:de:d0:98:c6:0f:8b:db:25: fd:19:69:15:40:4c:55:1a:87:59:5e:34:a3:58:63:d4:9b:af: f8:18:57:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGYtr4YekUUzZoAGUmRyVA9VuM4YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1MVoX DTI3MDMwMzA2MTM1MVowMzExMC8GA1UEAxMoMzUwMjdFQzQzNEMyQTAxQUNDMTlD QUNGRUIyNTAwN0VGQjU3MDE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQ1op8FvVN4mjJEcbeNIZBzfPlHd1aVoIqjXf4bTzwv0Nk1DLWXBdonZ1h9 kmqhe+7GcyIR7kKyj0OWM9gf27etcmAlQE0yB7mZ0KcqTy7BNbRhGSza3CyBUa8p n+e3mPqgAVWqVl8u529zHPYjmFVksnNFmC4W60WI2aJOCHRbHyKi6OtMquZJ2STX zFOaWh92BEMMTZIH2VSph653M6cGDUIZonkgn40KN+vYs3QFmFyXlJVJSUs7g7j+ BwxRxCUWvK8fNY5tgqmfsQKb1orLHi8GxA8kqrQRyvcfTZlG8GjeeP5O2QN76qpC ICVS1roCSfHTuY2Z6ol6YjYvxzMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ1An7E NMKgGswZys/rJQB++1cBaDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pHYwDQYJKoZIhvcNAQELBQADggEBABb+SDUqr7JQhrmuFEfzjQubPs2AdQ4DeXuM Qb2cMoTJe6a+uKRSyI85i/0jvf7H+/nGx9ZZoc8G34+gLox9df/Wh1DzgHZgw25N Zd5biwr7cH94fZ0cdRwqafGD5dLd5mZgFOqCyXu260Bn1azuXnyRxYZvbI7HIQzI Fy/1EngZLuUby4rh5ridfihMw1xpFEYbuN3WvBu/YUXcGbLc1Le7LwaXyF5kg9bz hYpFTsUM8uQb0OSgazV2B//D6qwI/Y7EhKpNsos0udz4wjIm28wj335gF+dzDsFl wlHruAG/zRHe0JjGD4vbJf0ZaRVATFUah1leNKNYY9Sbr/gYV8w= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:05 2026 by rpki-client