$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143846.roa File: AS143846.roa (raw, json) Hash identifier: 8ceUUn8HaahWaTd+vFfszebUuZsj7k4xysnlmwyZiBY= Subject key identifier: 5F:84:7C:C2:EC:FA:23:54:6D:29:22:5C:4E:D8:FA:44:80:AC:A1:68 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7E539C884EC33C982ADB25EC07FEBEEB0A4AE88D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143846.roa Signing time: Wed 04 Mar 2026 06:15:28 +0000 ROA not before: Wed 04 Mar 2026 06:10:28 +0000 ROA not after: Wed 03 Mar 2027 06:15:28 +0000 asID: 143846 IP address blocks: 240a:a4ac::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:53:9c:88:4e:c3:3c:98:2a:db:25:ec:07:fe:be:eb:0a:4a:e8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:28 2026 GMT Not After : Mar 3 06:15:28 2027 GMT Subject: CN=5F847CC2ECFA23546D29225C4ED8FA4480ACA168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:6a:a8:b6:30:d0:af:d7:1e:2b:a5:01:5d: 87:2b:1a:ac:c6:c0:fc:4f:61:e1:05:d1:65:f1:a0: 0f:2b:39:cc:2d:77:5a:a5:49:ca:0a:fe:cc:87:c4: d5:c8:2d:a5:e7:66:52:f5:0f:45:bb:60:63:69:c3: 6c:57:81:e6:82:40:55:07:96:06:69:39:bf:5e:46: 92:fa:eb:a4:71:cc:7c:9d:f5:dc:9c:74:33:b5:a0: 64:2d:c3:66:2a:a4:f1:a4:2e:f0:ce:54:15:6d:e5: cf:26:ce:de:05:34:8d:bf:62:d3:d5:42:82:25:70: 9b:b0:b9:e1:e5:b6:27:7a:f8:3a:71:f5:a9:4c:ce: e6:73:a3:62:d4:9f:46:0b:e3:45:92:31:b2:60:1a: 9f:d0:86:f5:dc:94:7d:71:a6:81:38:40:69:e1:17: b2:c5:7a:58:bc:d8:ba:82:13:9f:71:24:cd:be:87: 8c:74:9a:78:47:33:3a:6e:f4:ba:45:4f:bf:0e:79: 91:40:36:2b:bb:d7:d9:41:b1:6b:20:db:61:15:fa: 9c:21:46:f0:df:5b:8e:ca:92:76:7f:26:ac:aa:c0: 5d:3c:50:f0:d4:76:a5:3a:8c:82:9f:cc:df:98:05: 6e:7d:c9:a0:ee:b2:44:8e:19:7c:4d:3a:40:4b:ff: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:84:7C:C2:EC:FA:23:54:6D:29:22:5C:4E:D8:FA:44:80:AC:A1:68 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143846.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4ac::/32 Signature Algorithm: sha256WithRSAEncryption 5e:65:ef:0d:0b:36:66:fa:6d:8e:05:d6:2d:1f:02:b3:20:8a: 1d:93:01:78:a9:40:a9:3c:5a:c0:17:35:95:de:24:77:d8:39: 57:0a:bf:9d:99:76:9c:40:f7:ac:a3:1b:bd:19:bb:dd:ff:66: 26:46:19:f3:fa:26:ef:da:da:e8:86:f9:d2:4b:00:39:ce:4c: 86:16:c5:dc:b3:d1:07:fa:c7:41:b3:c3:af:0c:2f:16:ea:fe: ca:dc:fd:e1:5f:75:da:33:93:21:36:24:33:cf:59:a7:48:f2: 3c:7e:d9:96:af:cd:77:a2:75:85:bf:f5:e7:da:dd:36:e8:42: 14:d0:ce:4b:78:9c:7a:e6:4e:3f:3b:bb:c4:5f:e3:fd:05:11: 51:78:97:12:99:24:b8:5f:f8:ae:65:94:99:86:30:d6:33:ea: 90:4d:c0:dc:3c:27:51:b5:45:70:ca:5d:22:1d:fa:7f:96:53: fa:9e:96:0a:33:fe:0d:3e:60:98:35:55:c2:be:f7:ab:6b:af: 87:f5:9e:26:2a:21:06:5b:3a:28:29:01:15:4e:8a:b2:a5:8a: 0a:af:b4:aa:09:46:a2:ed:51:9e:84:0a:88:34:a2:72:dc:e0: a0:aa:44:51:67:d2:fa:a5:b5:94:28:bb:62:1f:e5:a2:ac:b1: 1e:d6:24:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUflOciE7DPJgq2yXsB/6+6wpK6I0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyOFoX DTI3MDMwMzA2MTUyOFowMzExMC8GA1UEAxMoNUY4NDdDQzJFQ0ZBMjM1NDZEMjky MjVDNEVEOEZBNDQ4MEFDQTE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANk0aqi2MNCv1x4rpQFdhysarMbA/E9h4QXRZfGgDys5zC13WqVJygr+zIfE 1cgtpedmUvUPRbtgY2nDbFeB5oJAVQeWBmk5v15GkvrrpHHMfJ313Jx0M7WgZC3D Ziqk8aQu8M5UFW3lzybO3gU0jb9i09VCgiVwm7C54eW2J3r4OnH1qUzO5nOjYtSf RgvjRZIxsmAan9CG9dyUfXGmgThAaeEXssV6WLzYuoITn3Ekzb6HjHSaeEczOm70 ukVPvw55kUA2K7vX2UGxayDbYRX6nCFG8N9bjsqSdn8mrKrAXTxQ8NR2pTqMgp/M 35gFbn3JoO6yRI4ZfE06QEv/5kMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRfhHzC 7PojVG0pIlxO2PpEgKyhaDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pKwwDQYJKoZIhvcNAQELBQADggEBAF5l7w0LNmb6bY4F1i0fArMgih2TAXipQKk8 WsAXNZXeJHfYOVcKv52ZdpxA96yjG70Zu93/ZiZGGfP6Ju/a2uiG+dJLADnOTIYW xdyz0Qf6x0Gzw68MLxbq/src/eFfddozkyE2JDPPWadI8jx+2ZavzXeidYW/9efa 3TboQhTQzkt4nHrmTj87u8Rf4/0FEVF4lxKZJLhf+K5llJmGMNYz6pBNwNw8J1G1 RXDKXSId+n+WU/qelgoz/g0+YJg1VcK+96trr4f1niYqIQZbOigpARVOirKligqv tKoJRqLtUZ6ECog0onLc4KCqRFFn0vqltZQou2If5aKssR7WJNw= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:35 2026 by rpki-client