$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143801.roa File: AS143801.roa (raw, json) Hash identifier: BDsX3Vfn4GhUb+nMI40jIt3d538KO/vVXZdKgDNA0Mo= Subject key identifier: 04:C6:03:F4:B3:A5:E8:68:E2:82:E3:3E:64:6F:63:76:50:A0:99:EC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 43A40AA328E448E0BD5D0EB9C2E5982A11E0604F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143801.roa Signing time: Wed 04 Mar 2026 06:12:43 +0000 ROA not before: Wed 04 Mar 2026 06:07:43 +0000 ROA not after: Wed 03 Mar 2027 06:12:43 +0000 asID: 143801 IP address blocks: 240a:a47f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:0a:a3:28:e4:48:e0:bd:5d:0e:b9:c2:e5:98:2a:11:e0:60:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:43 2026 GMT Not After : Mar 3 06:12:43 2027 GMT Subject: CN=04C603F4B3A5E868E282E33E646F637650A099EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:71:e6:7a:fd:2f:99:6f:2d:b5:aa:5b:42:b7: b1:be:12:05:8e:67:76:df:eb:69:74:4e:7e:e9:67: 48:cf:5a:d4:a3:1c:88:f7:72:3b:7d:6f:f1:98:9a: 80:08:75:e7:8b:0b:bc:5e:0e:e4:2b:8c:94:93:f8: 85:58:e5:8f:1a:85:ae:f6:1c:da:8b:d3:48:b5:ba: f2:d2:53:78:47:ba:80:07:3b:d1:03:0d:64:db:b5: 2c:b4:4d:fd:d3:2b:40:87:c5:dc:58:0e:06:c6:b7: 90:ec:23:a7:e0:c1:20:8f:c1:29:c0:f4:e9:66:d8: e1:7d:9e:fb:e4:89:da:17:27:a0:d9:f5:8e:69:e7: 4f:5a:03:10:5a:01:59:94:5e:36:65:a3:37:c0:58: 5e:3c:21:ef:69:ae:dd:cc:8e:36:58:64:06:92:6d: de:e8:79:33:c7:05:73:02:49:7d:c2:00:5d:30:72: 3e:05:e3:51:a8:ed:df:03:aa:e8:93:78:6a:b9:26: 90:1c:b0:e4:99:6d:39:d2:c4:93:f3:1d:c1:48:1e: 68:da:f1:e6:ce:a8:89:b5:9c:82:42:5a:94:b6:7c: 43:c2:a5:c3:48:0d:20:f6:fe:a3:ad:5d:24:a6:85: 1c:14:b6:9c:bc:22:8c:36:ee:c9:e8:2a:f5:e2:22: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C6:03:F4:B3:A5:E8:68:E2:82:E3:3E:64:6F:63:76:50:A0:99:EC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143801.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a47f::/32 Signature Algorithm: sha256WithRSAEncryption 7e:68:ed:13:0c:14:5f:40:0e:bf:cb:0f:a7:62:e1:cd:9f:e4: 82:93:9f:14:99:33:b4:9b:bf:58:eb:e9:20:b6:3e:c8:c6:30: 42:95:fd:f6:ec:31:77:7a:32:69:86:eb:8d:8f:4d:df:86:40: 77:f1:bd:b4:33:1f:ff:ac:5f:a8:4a:5e:13:7d:36:73:4d:6e: e4:cf:03:d7:40:8c:13:49:c2:f2:09:db:03:6d:43:64:23:49: 25:f6:49:4d:99:ff:d2:26:35:69:26:d5:e3:00:73:f2:b5:11: 81:d7:72:6a:42:8e:95:e9:72:2e:09:bd:61:3d:05:0d:d5:1f: 6d:93:78:a5:e7:e4:ce:28:c3:68:0c:93:f2:ae:a1:2c:fa:91: bd:49:6b:dc:da:3f:05:f7:aa:a4:b4:0d:e7:6e:6b:8a:f4:04: 80:07:9e:ea:19:bc:14:73:30:9f:05:84:34:d5:f9:bc:ac:b7: ce:96:23:08:e8:cd:32:c8:75:a2:2e:78:0a:f9:fd:28:bd:c5: 4a:69:23:3e:29:79:22:0f:3e:d4:f2:e7:00:c2:bf:aa:9f:76: 21:07:5d:5d:56:ff:ae:f4:03:2f:27:b0:43:2c:d4:c5:eb:c4: 4d:24:90:ed:24:27:39:ac:19:c1:ea:26:78:12:d4:e8:d7:2c: 0e:62:79:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ6QKoyjkSOC9XQ65wuWYKhHgYE8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0M1oX DTI3MDMwMzA2MTI0M1owMzExMC8GA1UEAxMoMDRDNjAzRjRCM0E1RTg2OEUyODJF MzNFNjQ2RjYzNzY1MEEwOTlFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtx5nr9L5lvLbWqW0K3sb4SBY5ndt/raXROfulnSM9a1KMciPdyO31v8Zia gAh154sLvF4O5CuMlJP4hVjljxqFrvYc2ovTSLW68tJTeEe6gAc70QMNZNu1LLRN /dMrQIfF3FgOBsa3kOwjp+DBII/BKcD06WbY4X2e++SJ2hcnoNn1jmnnT1oDEFoB WZReNmWjN8BYXjwh72mu3cyONlhkBpJt3uh5M8cFcwJJfcIAXTByPgXjUajt3wOq 6JN4arkmkByw5JltOdLEk/MdwUgeaNrx5s6oibWcgkJalLZ8Q8Klw0gNIPb+o61d JKaFHBS2nLwijDbuyegq9eIiBPUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQExgP0 s6XoaOKC4z5kb2N2UKCZ7DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzgwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pH8wDQYJKoZIhvcNAQELBQADggEBAH5o7RMMFF9ADr/LD6di4c2f5IKTnxSZM7Sb v1jr6SC2PsjGMEKV/fbsMXd6MmmG642PTd+GQHfxvbQzH/+sX6hKXhN9NnNNbuTP A9dAjBNJwvIJ2wNtQ2QjSSX2SU2Z/9ImNWkm1eMAc/K1EYHXcmpCjpXpci4JvWE9 BQ3VH22TeKXn5M4ow2gMk/KuoSz6kb1Ja9zaPwX3qqS0Dedua4r0BIAHnuoZvBRz MJ8FhDTV+byst86WIwjozTLIdaIueAr5/Si9xUppIz4peSIPPtTy5wDCv6qfdiEH XV1W/670Ay8nsEMs1MXrxE0kkO0kJzmsGcHqJngS1OjXLA5ieSs= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:05 2026 by rpki-client