$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143836.roa File: AS143836.roa (raw, json) Hash identifier: 4V6mqpVSvk54Jf37T3Jjl39kcpKXMkTPwV9v80/KxlQ= Subject key identifier: 0D:86:B5:E1:CC:4C:69:57:02:74:2E:03:D6:A9:3D:67:D0:B6:A4:DE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F42504A72E933B269479C7A643EEA7662232E8D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143836.roa Signing time: Wed 04 Mar 2026 06:13:21 +0000 ROA not before: Wed 04 Mar 2026 06:08:21 +0000 ROA not after: Wed 03 Mar 2027 06:13:21 +0000 asID: 143836 IP address blocks: 240a:a4a2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:42:50:4a:72:e9:33:b2:69:47:9c:7a:64:3e:ea:76:62:23:2e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:21 2026 GMT Not After : Mar 3 06:13:21 2027 GMT Subject: CN=0D86B5E1CC4C695702742E03D6A93D67D0B6A4DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:82:be:90:4d:52:4c:7b:f0:18:c0:5a:bf: a1:b0:a3:f2:5b:29:18:fd:3e:aa:0c:6d:2c:ff:f9: 87:3e:20:94:01:2c:15:de:1d:19:49:3a:98:86:0b: 14:2f:1a:d9:4b:e2:0c:a2:83:72:6e:87:0f:99:d5: d2:a8:67:c1:71:ce:44:8f:b1:94:d1:3c:f1:a2:90: 8d:fd:b5:b2:8d:96:1d:f7:37:52:d3:06:f8:0c:0a: c6:67:81:e7:28:99:e9:a0:7e:11:47:20:59:45:f1: 78:37:ad:46:0e:0d:12:f7:e5:87:9f:b0:74:1a:37: 53:b8:ff:4f:e6:51:2e:58:92:76:81:22:3d:3d:6c: 3d:3e:e9:ba:6b:fe:31:2e:e1:c5:5d:9e:cf:11:93: 9c:7b:86:b8:c9:79:8d:0c:22:06:27:f3:6a:3c:6f: 7d:a6:cb:0d:bb:b1:40:e7:ab:12:44:fb:c3:e5:b3: 8b:00:97:eb:26:b4:3a:ca:07:5a:6a:9d:cf:b5:9f: c7:a0:42:19:ec:61:b1:e7:a6:b6:8a:dc:0b:c9:34: 29:66:ae:69:0b:a5:a6:e1:5b:2f:5a:a2:7b:fc:e1: 40:0d:36:a2:af:82:9a:be:43:d9:d2:29:20:02:f0: a5:3d:3b:94:a5:79:24:e0:78:a5:06:3a:79:38:dc: 79:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:86:B5:E1:CC:4C:69:57:02:74:2E:03:D6:A9:3D:67:D0:B6:A4:DE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4a2::/32 Signature Algorithm: sha256WithRSAEncryption 27:5f:d1:43:07:96:7e:70:94:67:3b:ba:38:ce:1c:e7:71:c8: d7:73:4c:17:b6:3e:ee:ac:3f:af:13:88:b3:b1:de:4f:ea:5a: 78:ab:9c:04:a1:fc:59:ea:ca:49:88:f6:63:4a:2d:3a:0c:7b: e9:5a:f5:d2:09:86:a7:2f:48:d9:f8:61:df:14:2b:97:8b:56: 62:e8:76:e4:58:97:54:fc:39:33:f3:67:90:57:03:bc:35:29: d7:76:4c:91:a0:f9:94:9c:c7:53:9f:1c:16:f7:b5:2b:58:14: f9:ea:d0:71:d6:cc:b5:99:9e:c2:6d:aa:1f:67:a7:53:e2:9d: 47:aa:5e:b1:74:61:f6:7b:c0:bd:58:1d:ed:e0:d6:ae:bb:04: 1c:59:c4:f1:6d:7f:68:10:ca:bc:f8:7c:48:bc:80:da:37:b4: 46:53:e8:10:93:ca:bb:d5:be:ba:1a:61:16:5a:38:b8:91:46: 6d:56:27:a1:e5:01:86:b6:dc:f8:c6:df:da:1a:7e:3e:d2:54: cd:09:cc:8b:09:1f:ac:29:ef:9c:c0:1c:ff:04:a6:01:9c:d8: 45:38:31:61:f2:e8:32:a6:17:be:87:1f:66:ea:32:93:e9:d7: 15:c6:e0:84:28:37:e9:21:e9:3e:05:91:4b:f2:d2:53:2a:2b: 85:d5:3b:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUP0JQSnLpM7JpR5x6ZD7qdmIjLo0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyMVoX DTI3MDMwMzA2MTMyMVowMzExMC8GA1UEAxMoMEQ4NkI1RTFDQzRDNjk1NzAyNzQy RTAzRDZBOTNENjdEMEI2QTRERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcMgr6QTVJMe/AYwFq/obCj8lspGP0+qgxtLP/5hz4glAEsFd4dGUk6mIYL FC8a2UviDKKDcm6HD5nV0qhnwXHORI+xlNE88aKQjf21so2WHfc3UtMG+AwKxmeB 5yiZ6aB+EUcgWUXxeDetRg4NEvflh5+wdBo3U7j/T+ZRLliSdoEiPT1sPT7pumv+ MS7hxV2ezxGTnHuGuMl5jQwiBifzajxvfabLDbuxQOerEkT7w+WziwCX6ya0OsoH Wmqdz7Wfx6BCGexhseemtorcC8k0KWauaQulpuFbL1qie/zhQA02oq+Cmr5D2dIp IALwpT07lKV5JOB4pQY6eTjceeECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQNhrXh zExpVwJ0LgPWqT1n0Lak3jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzgzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pKIwDQYJKoZIhvcNAQELBQADggEBACdf0UMHln5wlGc7ujjOHOdxyNdzTBe2Pu6s P68TiLOx3k/qWnirnASh/FnqykmI9mNKLToMe+la9dIJhqcvSNn4Yd8UK5eLVmLo duRYl1T8OTPzZ5BXA7w1Kdd2TJGg+ZScx1OfHBb3tStYFPnq0HHWzLWZnsJtqh9n p1PinUeqXrF0YfZ7wL1YHe3g1q67BBxZxPFtf2gQyrz4fEi8gNo3tEZT6BCTyrvV vroaYRZaOLiRRm1WJ6HlAYa23PjG39oafj7SVM0JzIsJH6wp75zAHP8EpgGc2EU4 MWHy6DKmF76HH2bqMpPp1xXG4IQoN+kh6T4FkUvy0lMqK4XVOzk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:05 2026 by rpki-client