$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143811.roa File: AS143811.roa (raw, json) Hash identifier: ItyN4mLITFRZwdhXFhSP7vnhfjcT2twtK4buNQJ7oc0= Subject key identifier: D6:01:DA:91:20:6E:AD:3F:52:33:EE:7B:BC:B1:7E:8E:D3:1A:8D:2F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48AAE246B798B5AF64C02A09F5846F5C892ECF25 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143811.roa Signing time: Wed 04 Mar 2026 06:14:46 +0000 ROA not before: Wed 04 Mar 2026 06:09:46 +0000 ROA not after: Wed 03 Mar 2027 06:14:46 +0000 asID: 143811 IP address blocks: 240a:a489::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:aa:e2:46:b7:98:b5:af:64:c0:2a:09:f5:84:6f:5c:89:2e:cf:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:46 2026 GMT Not After : Mar 3 06:14:46 2027 GMT Subject: CN=D601DA91206EAD3F5233EE7BBCB17E8ED31A8D2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:d5:14:18:be:b9:b4:4b:2e:ab:53:53:0d: 82:e7:09:a7:30:2a:08:83:50:b4:cf:99:b1:d6:d2: 7f:6f:03:df:04:2e:97:b6:c1:c2:60:6f:81:04:3a: ac:7e:7a:12:64:eb:09:d5:75:ff:c1:ae:de:3a:43: bc:55:ba:9d:92:74:b9:25:2e:b1:ed:66:43:03:80: 2b:fd:70:8d:28:07:36:f4:58:03:16:a1:0f:4b:2a: f1:15:8c:51:b9:8f:80:84:89:0d:e1:07:ae:e4:83: 25:e6:ce:a4:39:9a:be:db:06:b4:4c:bc:5a:ed:bf: ca:47:66:9a:7d:b5:a9:10:fb:9a:69:79:f2:21:19: 3f:45:5e:92:f5:1c:37:20:7d:d7:80:e8:a9:c4:93: ee:1b:f7:61:53:2a:b1:c4:81:f4:13:9b:8c:6e:ff: e3:7e:d1:9c:c5:36:e5:81:36:41:f9:3b:2c:9b:96: bb:15:f8:f2:ff:bf:27:82:b8:3d:a5:cd:c9:fe:c8: a9:01:d9:4b:cc:65:5f:c7:ba:81:f5:b0:e5:5b:d6: dc:05:df:d8:07:3e:04:79:0e:fd:5b:5d:a6:59:57: 1d:4c:a0:21:20:5f:90:87:c8:be:ab:07:31:d1:51: d7:35:0e:4c:c0:2e:4d:ca:39:19:91:8d:3a:20:1e: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:DA:91:20:6E:AD:3F:52:33:EE:7B:BC:B1:7E:8E:D3:1A:8D:2F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143811.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a489::/32 Signature Algorithm: sha256WithRSAEncryption d5:7d:e2:52:7f:bf:5c:0f:05:c0:c5:41:80:d7:e4:b5:97:22: 86:da:a4:b4:06:fd:24:6d:b5:b3:36:01:be:48:8d:05:e1:7b: 5a:56:12:37:be:6b:3a:81:c4:6a:3e:0a:3e:80:09:8a:5f:7f: 68:9e:9e:8a:1a:6d:a3:f5:01:62:ca:35:8a:9f:d1:d8:f7:c1: 57:5c:10:d9:37:81:41:d7:c9:55:d9:5e:a1:21:88:ba:7b:6f: 1f:40:2d:ad:27:f5:3c:fd:df:e5:7e:02:cc:e0:36:33:3f:7a: e1:c2:73:d9:4d:f8:3d:ec:cf:ec:cb:74:be:1c:d1:c5:d6:60: 11:c3:5d:8e:00:a6:b8:99:62:8c:fc:ca:0b:16:3d:b6:1c:82: a4:b9:1a:4c:3b:d9:f8:65:07:47:3d:b7:51:c2:a2:68:9b:1a: 3b:e3:50:49:ad:78:80:4e:b9:c3:ae:f9:44:e6:f6:d5:16:56: b8:bb:2f:ec:7a:e7:2b:a5:da:e9:1c:df:1b:4c:6a:b7:e1:42: bb:ba:4a:03:74:32:58:5a:e8:8f:5c:18:97:21:06:25:86:62: 29:31:e6:5e:62:f0:7d:42:03:7a:ed:98:8c:d4:4a:3e:66:30: 95:a3:19:0b:0f:89:c9:7e:93:c7:01:6f:48:c2:78:58:e6:f7: 84:c8:0d:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSKriRreYta9kwCoJ9YRvXIkuzyUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0NloX DTI3MDMwMzA2MTQ0NlowMzExMC8GA1UEAxMoRDYwMURBOTEyMDZFQUQzRjUyMzNF RTdCQkNCMTdFOEVEMzFBOEQyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKer1RQYvrm0Sy6rU1MNgucJpzAqCINQtM+ZsdbSf28D3wQul7bBwmBvgQQ6 rH56EmTrCdV1/8Gu3jpDvFW6nZJ0uSUuse1mQwOAK/1wjSgHNvRYAxahD0sq8RWM UbmPgISJDeEHruSDJebOpDmavtsGtEy8Wu2/ykdmmn21qRD7mml58iEZP0VekvUc NyB914DoqcST7hv3YVMqscSB9BObjG7/437RnMU25YE2Qfk7LJuWuxX48v+/J4K4 PaXNyf7IqQHZS8xlX8e6gfWw5VvW3AXf2Ac+BHkO/VtdpllXHUygISBfkIfIvqsH MdFR1zUOTMAuTco5GZGNOiAeXBsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTWAdqR IG6tP1Iz7nu8sX6O0xqNLzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzgxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pIkwDQYJKoZIhvcNAQELBQADggEBANV94lJ/v1wPBcDFQYDX5LWXIobapLQG/SRt tbM2Ab5IjQXhe1pWEje+azqBxGo+Cj6ACYpff2ienooabaP1AWLKNYqf0dj3wVdc ENk3gUHXyVXZXqEhiLp7bx9ALa0n9Tz93+V+AszgNjM/euHCc9lN+D3sz+zLdL4c 0cXWYBHDXY4ApriZYoz8ygsWPbYcgqS5Gkw72fhlB0c9t1HComibGjvjUEmteIBO ucOu+UTm9tUWVri7L+x65yul2ukc3xtMarfhQru6SgN0Mlha6I9cGJchBiWGYikx 5l5i8H1CA3rtmIzUSj5mMJWjGQsPicl+k8cBb0jCeFjm94TIDeM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:41 2026 by rpki-client