$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143886.roa File: AS143886.roa (raw, json) Hash identifier: ieyBA/qXThOyc8xi6Q9HKu5Ad+b9PPT4z6bxR9bPJSI= Subject key identifier: 4D:4E:B3:B1:2A:5F:E7:74:82:FF:F4:1B:26:AB:84:91:17:3B:0E:70 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3DB70176878548D94FCEBC2F5FEA5A6470100119 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143886.roa Signing time: Wed 04 Mar 2026 06:13:32 +0000 ROA not before: Wed 04 Mar 2026 06:08:32 +0000 ROA not after: Wed 03 Mar 2027 06:13:32 +0000 asID: 143886 IP address blocks: 240a:a4d4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b7:01:76:87:85:48:d9:4f:ce:bc:2f:5f:ea:5a:64:70:10:01:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:32 2026 GMT Not After : Mar 3 06:13:32 2027 GMT Subject: CN=4D4EB3B12A5FE77482FFF41B26AB8491173B0E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f5:6e:d1:c4:a8:3b:45:2f:97:b3:cc:52:9e: 5c:79:d9:c6:23:65:ec:b8:52:a4:bd:8d:84:e0:a8: cd:18:cd:31:fa:25:56:c2:07:65:b5:3f:12:ea:7d: 54:d0:00:f3:0d:33:0e:f2:5c:d9:20:7b:8d:0f:03: b8:68:6f:8c:f0:2e:7e:47:ac:69:d6:22:3d:08:6f: 56:21:d4:3f:42:8f:dc:ae:cd:7d:ff:93:6e:f2:e3: 6e:5a:1b:b5:25:b2:cf:f6:b2:69:e1:fe:b0:1e:74: e4:1b:b2:2f:c4:30:3e:34:f3:37:5a:4d:18:14:7a: be:d5:93:00:16:13:b0:62:87:e5:b2:cf:3b:f9:a9: bb:80:ed:1a:97:82:1a:64:37:f7:d0:cc:c1:18:35: 00:6a:79:60:5a:06:a9:6c:ca:1a:e2:63:66:59:85: 2a:f6:1e:5b:5f:43:ef:1a:13:1e:4b:4d:b5:62:09: 7c:b8:d7:28:3f:9e:5d:3f:65:c9:2b:1e:59:ae:7c: c3:32:3e:28:75:ab:34:d8:5b:c6:e0:a0:35:7b:d3: d5:c9:2a:54:16:f7:63:08:ab:3f:bc:ca:b7:5f:a0: c9:50:f5:8a:56:7a:f6:b4:69:d4:7c:ce:b9:25:a2: 64:85:de:09:bf:9d:ec:42:0e:ad:10:19:d2:af:f8: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4E:B3:B1:2A:5F:E7:74:82:FF:F4:1B:26:AB:84:91:17:3B:0E:70 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4d4::/32 Signature Algorithm: sha256WithRSAEncryption 3c:42:73:24:15:18:21:1a:ad:a4:7b:e9:01:2e:f8:e1:ff:04: 46:b4:56:1c:85:c3:be:37:b4:e0:93:43:40:c3:6d:bf:71:93: af:fb:47:64:13:df:43:d3:49:99:1d:7f:f2:ac:6b:d0:d7:50: 35:f4:0e:ba:b4:6e:8f:4a:d6:c1:c2:52:18:c0:ae:da:a9:8d: 00:e8:bd:52:ea:a1:48:d3:dd:3d:e4:eb:01:98:23:2a:10:ae: d7:70:7f:6c:9c:30:e8:b0:e7:f5:e5:1f:85:45:25:ca:02:07: d8:80:57:1c:be:71:2d:ec:70:37:3d:42:ee:0b:2f:2c:b0:05: 86:1b:02:d9:b7:2b:dc:f4:77:53:d6:b8:c6:3c:22:08:50:50: 5c:58:04:df:d4:3d:20:6e:fc:a7:e5:c8:d7:a8:08:04:6b:ea: 5d:56:cd:5c:f9:2f:1b:fb:97:8b:f7:96:2c:f6:ab:be:87:6f: d4:89:ba:7c:ed:36:72:88:01:45:a0:40:a5:f6:fa:23:bc:76: 12:ac:cb:b2:44:b7:2e:0e:a4:bf:bc:6d:13:2e:1e:a7:b1:6f: 6a:c6:0c:0a:c8:ed:cb:75:fd:cc:da:b3:3d:43:97:32:cf:5c: f5:3e:4f:fb:e2:92:d1:34:86:e8:86:16:28:f9:ba:ec:4d:3d: 98:a9:70:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPbcBdoeFSNlPzrwvX+paZHAQARkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzMloX DTI3MDMwMzA2MTMzMlowMzExMC8GA1UEAxMoNEQ0RUIzQjEyQTVGRTc3NDgyRkZG NDFCMjZBQjg0OTExNzNCMEU3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO/1btHEqDtFL5ezzFKeXHnZxiNl7LhSpL2NhOCozRjNMfolVsIHZbU/Eup9 VNAA8w0zDvJc2SB7jQ8DuGhvjPAufkesadYiPQhvViHUP0KP3K7Nff+TbvLjblob tSWyz/ayaeH+sB505BuyL8QwPjTzN1pNGBR6vtWTABYTsGKH5bLPO/mpu4DtGpeC GmQ399DMwRg1AGp5YFoGqWzKGuJjZlmFKvYeW19D7xoTHktNtWIJfLjXKD+eXT9l ySseWa58wzI+KHWrNNhbxuCgNXvT1ckqVBb3YwirP7zKt1+gyVD1ilZ69rRp1HzO uSWiZIXeCb+d7EIOrRAZ0q/46c8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNTrOx Kl/ndIL/9Bsmq4SRFzsOcDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pNQwDQYJKoZIhvcNAQELBQADggEBADxCcyQVGCEaraR76QEu+OH/BEa0VhyFw743 tOCTQ0DDbb9xk6/7R2QT30PTSZkdf/Ksa9DXUDX0Drq0bo9K1sHCUhjArtqpjQDo vVLqoUjT3T3k6wGYIyoQrtdwf2ycMOiw5/XlH4VFJcoCB9iAVxy+cS3scDc9Qu4L LyywBYYbAtm3K9z0d1PWuMY8IghQUFxYBN/UPSBu/KflyNeoCARr6l1WzVz5Lxv7 l4v3liz2q76Hb9SJunztNnKIAUWgQKX2+iO8dhKsy7JEty4OpL+8bRMuHqexb2rG DArI7ct1/czasz1DlzLPXPU+T/viktE0huiGFij5uuxNPZipcN4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:43 2026 by rpki-client