$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143794.roa File: AS143794.roa (raw, json) Hash identifier: PgXEqLfaegAbtdRuNU8awIHh//zgN36bpq29isyEuWM= Subject key identifier: 87:EA:47:7E:8E:DD:41:9B:8B:8E:51:ED:1E:96:82:98:0B:95:AB:5A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 17D523AF100E95845B84F3461F9721A972B60798 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143794.roa Signing time: Wed 04 Mar 2026 06:15:32 +0000 ROA not before: Wed 04 Mar 2026 06:10:32 +0000 ROA not after: Wed 03 Mar 2027 06:15:32 +0000 asID: 143794 IP address blocks: 240a:a478::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d5:23:af:10:0e:95:84:5b:84:f3:46:1f:97:21:a9:72:b6:07:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:32 2026 GMT Not After : Mar 3 06:15:32 2027 GMT Subject: CN=87EA477E8EDD419B8B8E51ED1E9682980B95AB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:b7:b3:8f:05:bc:6b:8d:4c:d0:d6:7e:39: 6e:61:5b:15:fb:f3:a7:a2:a7:0c:ba:ad:91:13:c4: 86:f6:75:70:af:8f:ef:d5:ea:46:ad:57:a0:b6:d2: c3:cc:47:6e:ce:2a:90:0f:f9:43:da:d5:0a:b6:91: 95:77:76:94:2a:96:dd:51:58:1b:fd:39:85:3b:00: a9:38:50:bb:98:52:f2:b6:48:95:1f:6b:9f:97:6c: 11:3d:96:7a:e0:15:ba:24:14:cc:a8:36:0c:38:4a: 39:4f:a7:8a:e4:84:33:5b:b9:26:01:76:ec:25:69: fe:86:40:85:16:66:c9:36:34:93:13:2d:78:17:27: 8f:ae:e6:73:ee:7d:ca:ea:98:72:8d:b8:7a:0c:b1: 6f:40:c0:e4:d0:a5:13:a5:ad:a3:9f:11:0f:ec:29: 6e:c8:07:da:51:96:2a:85:59:6b:27:28:cc:bb:9f: 71:77:51:7d:fc:8e:20:c7:d0:c2:1e:af:fc:4c:a3: 11:ef:d2:a9:4d:04:48:fb:20:1f:95:b1:66:69:70: 25:45:8b:bc:54:5c:0b:6b:ac:25:9b:b7:b6:a3:96: 00:62:55:f9:2a:f3:85:49:2a:c5:e4:fc:ca:50:75: 34:ca:67:ed:41:b8:dd:39:74:c9:48:10:63:3f:a6: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EA:47:7E:8E:DD:41:9B:8B:8E:51:ED:1E:96:82:98:0B:95:AB:5A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143794.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a478::/32 Signature Algorithm: sha256WithRSAEncryption 7f:31:32:93:b4:36:6b:0b:d6:6c:6e:ca:6b:52:52:f6:01:3a: 35:55:9a:73:4f:8f:85:94:66:90:78:a7:55:7e:43:ef:0b:9a: 27:89:44:a4:a3:98:22:52:9c:12:f7:8b:91:4e:14:01:5b:bc: 8a:7e:e5:f6:5e:8a:a0:e5:33:5f:65:66:42:6e:f9:e0:31:ee: c7:ac:34:c6:b2:8c:0f:32:08:fd:d8:00:53:de:99:ff:2c:63: 8b:94:93:19:26:9f:3e:77:40:6f:45:60:01:48:8a:a7:05:46: 75:7d:5f:7e:f0:62:47:44:e9:e0:e8:c7:94:28:a4:87:9e:e3: 97:4d:c8:cf:f0:67:ff:4b:00:34:f0:b5:e6:ab:7b:92:3d:ca: 29:bf:48:e4:25:7e:44:c8:45:57:df:7e:e7:3b:82:7f:bb:83: 02:ca:32:bb:38:08:90:db:b9:1a:41:4a:0c:49:0e:a7:8e:42: 57:96:84:bf:fe:ff:f7:77:3f:ef:ac:f6:cb:f6:ff:f4:e7:43: 5a:af:15:9b:a7:4e:e2:57:74:c7:68:8e:e8:2a:63:74:b5:4a: 3d:21:7b:e1:a4:f8:25:d2:1a:f2:37:ec:0d:d6:88:5a:8e:46: 29:e0:45:11:30:c9:63:70:39:bc:0b:9b:81:3c:ea:d9:07:2c: 74:36:65:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUF9UjrxAOlYRbhPNGH5chqXK2B5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzMloX DTI3MDMwMzA2MTUzMlowMzExMC8GA1UEAxMoODdFQTQ3N0U4RURENDE5QjhCOEU1 MUVEMUU5NjgyOTgwQjk1QUI1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALv3t7OPBbxrjUzQ1n45bmFbFfvzp6KnDLqtkRPEhvZ1cK+P79XqRq1XoLbS w8xHbs4qkA/5Q9rVCraRlXd2lCqW3VFYG/05hTsAqThQu5hS8rZIlR9rn5dsET2W euAVuiQUzKg2DDhKOU+niuSEM1u5JgF27CVp/oZAhRZmyTY0kxMteBcnj67mc+59 yuqYco24egyxb0DA5NClE6Wto58RD+wpbsgH2lGWKoVZaycozLufcXdRffyOIMfQ wh6v/EyjEe/SqU0ESPsgH5WxZmlwJUWLvFRcC2usJZu3tqOWAGJV+SrzhUkqxeT8 ylB1NMpn7UG43Tl0yUgQYz+m7mcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSH6kd+ jt1Bm4uOUe0eloKYC5WrWjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzc5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pHgwDQYJKoZIhvcNAQELBQADggEBAH8xMpO0NmsL1mxuymtSUvYBOjVVmnNPj4WU ZpB4p1V+Q+8LmieJRKSjmCJSnBL3i5FOFAFbvIp+5fZeiqDlM19lZkJu+eAx7ses NMayjA8yCP3YAFPemf8sY4uUkxkmnz53QG9FYAFIiqcFRnV9X37wYkdE6eDox5Qo pIee45dNyM/wZ/9LADTwteare5I9yim/SOQlfkTIRVfffuc7gn+7gwLKMrs4CJDb uRpBSgxJDqeOQleWhL/+//d3P++s9sv2//TnQ1qvFZunTuJXdMdojugqY3S1Sj0h e+Gk+CXSGvI37A3WiFqORingRREwyWNwObwLm4E86tkHLHQ2ZQw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:06 2026 by rpki-client