$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143802.roa File: AS143802.roa (raw, json) Hash identifier: OdapGJoEyWznUWqS99rrrFrUsrtUQstFRwqWJCi055I= Subject key identifier: E3:E2:EE:E0:43:9C:BC:C1:09:30:F0:7A:88:2D:DA:36:82:F8:41:3D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0774C62C69942607A6E729D8477BF56802D59F2B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143802.roa Signing time: Wed 04 Mar 2026 06:12:28 +0000 ROA not before: Wed 04 Mar 2026 06:07:28 +0000 ROA not after: Wed 03 Mar 2027 06:12:28 +0000 asID: 143802 IP address blocks: 240a:a480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:74:c6:2c:69:94:26:07:a6:e7:29:d8:47:7b:f5:68:02:d5:9f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:28 2026 GMT Not After : Mar 3 06:12:28 2027 GMT Subject: CN=E3E2EEE0439CBCC10930F07A882DDA3682F8413D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:50:b3:0e:2d:1b:4a:b6:55:92:39:b6:b0: b1:f9:d4:d1:65:af:44:35:ce:aa:07:b0:0a:80:d2: 0e:09:67:b9:26:2f:7d:45:2f:2f:ec:69:60:6c:c0: 0a:49:bd:d5:2c:de:97:e3:72:bc:41:2e:a5:e6:f4: 0f:f3:d4:ac:57:ba:16:3b:5b:f5:a5:82:9d:a5:3c: 4f:80:e8:3b:4b:a3:9b:a8:42:b1:78:78:fe:a7:91: c0:79:e1:57:f4:3b:21:6d:dc:72:95:2b:92:1c:53: ba:1d:6e:66:a7:6c:32:6f:4a:37:e8:54:9c:7c:43: 78:ce:1a:90:46:f1:6f:81:1f:1a:10:74:47:8d:61: 8f:99:7c:57:d7:ff:6a:4b:06:c8:1d:cc:4d:ec:c7: 90:38:30:9f:0b:ce:0d:75:19:e2:ba:6c:38:ae:36: 1f:04:76:a0:1d:17:1e:6b:86:04:27:7c:51:1a:1e: 3c:6b:9f:9d:ad:1e:41:40:27:ab:7b:61:0f:f4:cf: 0d:cc:c6:88:2b:be:83:65:4e:b5:7c:25:56:7b:fa: 78:89:30:90:02:72:fa:37:79:d7:e2:89:5b:4a:8d: 76:1e:2b:e3:16:76:83:f9:90:2f:7b:c4:a4:c7:ba: 62:ef:02:74:69:de:15:5e:a0:df:80:fc:37:09:1a: ee:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:EE:E0:43:9C:BC:C1:09:30:F0:7A:88:2D:DA:36:82:F8:41:3D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a480::/32 Signature Algorithm: sha256WithRSAEncryption 82:e1:62:80:d2:45:3c:50:ca:83:1d:9a:ff:4d:99:4c:1e:8a: 65:1b:e2:8a:67:4b:69:d4:1f:f0:99:74:19:54:e7:20:b7:4b: 8f:bf:03:76:38:22:e8:23:2d:26:9b:5f:d0:b7:ab:ec:7d:08: 0e:19:64:a9:1d:58:5d:53:e1:8e:7c:61:f0:59:4c:ec:0b:8e: ed:5e:84:40:5b:99:5c:c7:a1:14:2e:20:97:9f:c4:d2:08:fb: 7c:2d:7b:da:3e:8c:7e:e5:bd:f1:39:90:5f:71:e4:60:96:21: b7:11:87:43:76:b5:ea:34:0a:0a:8f:66:48:e3:14:06:c5:b9: 03:65:91:da:2f:2e:44:f5:59:31:7e:cb:3d:f8:06:b4:53:b8: c2:62:ec:45:12:ee:87:f5:d8:06:e6:16:49:1e:fa:a8:62:49: 44:08:41:90:82:ed:86:8a:01:3d:4d:75:12:b7:90:89:b7:88: 45:55:96:b3:ae:01:f1:2d:be:6a:17:f7:bf:16:43:bd:14:4b: c4:88:62:91:6e:c7:e3:9e:23:bb:58:d4:a6:be:b1:ac:ad:6f: 55:03:a6:6b:e8:4e:7f:04:d0:f5:41:5d:a4:3b:37:fc:9e:3b: 8f:96:7d:54:5b:97:ca:4d:97:fb:65:2d:7e:6d:6e:a5:64:42: 03:10:d2:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB3TGLGmUJgem5ynYR3v1aALVnyswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDcyOFoX DTI3MDMwMzA2MTIyOFowMzExMC8GA1UEAxMoRTNFMkVFRTA0MzlDQkNDMTA5MzBG MDdBODgyRERBMzY4MkY4NDEzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEQULMOLRtKtlWSObawsfnU0WWvRDXOqgewCoDSDglnuSYvfUUvL+xpYGzA Ckm91Szel+NyvEEupeb0D/PUrFe6Fjtb9aWCnaU8T4DoO0ujm6hCsXh4/qeRwHnh V/Q7IW3ccpUrkhxTuh1uZqdsMm9KN+hUnHxDeM4akEbxb4EfGhB0R41hj5l8V9f/ aksGyB3MTezHkDgwnwvODXUZ4rpsOK42HwR2oB0XHmuGBCd8URoePGufna0eQUAn q3thD/TPDczGiCu+g2VOtXwlVnv6eIkwkAJy+jd51+KJW0qNdh4r4xZ2g/mQL3vE pMe6Yu8CdGneFV6g34D8Nwka7gkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTj4u7g Q5y8wQkw8HqILdo2gvhBPTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzgwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pIAwDQYJKoZIhvcNAQELBQADggEBAILhYoDSRTxQyoMdmv9NmUweimUb4opnS2nU H/CZdBlU5yC3S4+/A3Y4IugjLSabX9C3q+x9CA4ZZKkdWF1T4Y58YfBZTOwLju1e hEBbmVzHoRQuIJefxNII+3wte9o+jH7lvfE5kF9x5GCWIbcRh0N2teo0CgqPZkjj FAbFuQNlkdovLkT1WTF+yz34BrRTuMJi7EUS7of12AbmFkke+qhiSUQIQZCC7YaK AT1NdRK3kIm3iEVVlrOuAfEtvmoX978WQ70US8SIYpFux+OeI7tY1Ka+saytb1UD pmvoTn8E0PVBXaQ7N/yeO4+WfVRbl8pNl/tlLX5tbqVkQgMQ0hM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:29 2026 by rpki-client