$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143896.roa File: AS143896.roa (raw, json) Hash identifier: gcaO3ywrRL0rP8sQYXBXdFI80KCnrotGxRJDdvB+0gQ= Subject key identifier: 78:1C:D8:9C:14:A7:51:5D:BC:C0:5A:AD:1F:F6:7D:69:2E:DA:4E:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 473ABA6805E1A31DA56152F2D9D3D752FA7041DD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143896.roa Signing time: Wed 04 Mar 2026 06:13:14 +0000 ROA not before: Wed 04 Mar 2026 06:08:14 +0000 ROA not after: Wed 03 Mar 2027 06:13:14 +0000 asID: 143896 IP address blocks: 240a:a4de::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3a:ba:68:05:e1:a3:1d:a5:61:52:f2:d9:d3:d7:52:fa:70:41:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:14 2026 GMT Not After : Mar 3 06:13:14 2027 GMT Subject: CN=781CD89C14A7515DBCC05AAD1FF67D692EDA4EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:ff:58:45:30:2e:3d:39:0a:9a:2d:0c:e8: b1:00:a8:6b:fc:53:9b:28:b7:0f:3a:72:cc:96:dd: 1c:2d:79:0c:8d:14:55:36:fa:e7:a8:69:99:9a:7b: 94:f8:27:7e:09:cf:35:fa:9a:eb:31:01:b3:3b:32: 7e:90:8e:f6:8b:e5:68:37:ee:50:17:bb:3c:b4:ac: 0f:2c:d1:69:43:14:49:17:63:e0:aa:98:cb:10:59: 09:21:b1:72:4d:2b:f6:68:0f:bc:0f:6d:2d:25:8d: 50:eb:81:9d:ce:a8:82:89:0c:f6:c0:a0:87:4d:4d: 06:84:00:5f:34:81:72:51:89:76:4a:dc:c9:df:8b: 5e:b5:a7:c5:ee:8f:51:b7:87:bf:7a:31:a3:3d:d4: 2e:4f:13:28:82:f5:b1:69:48:d2:7d:47:33:60:d2: 21:30:5b:45:cd:32:bf:7b:3c:b7:6f:96:20:43:c7: 6e:76:16:88:6e:b5:17:5e:56:8e:5a:bf:7f:25:00: c2:6c:f5:9b:09:14:00:41:69:85:22:ad:fe:c1:56: ca:f8:8c:67:5e:5e:f9:a5:7f:7c:83:46:67:fe:45: b4:29:84:78:06:3a:a7:a3:e2:88:3b:6d:e7:40:c5: 8a:2e:67:bf:00:e1:34:f4:f6:a8:38:91:58:44:10: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1C:D8:9C:14:A7:51:5D:BC:C0:5A:AD:1F:F6:7D:69:2E:DA:4E:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143896.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4de::/32 Signature Algorithm: sha256WithRSAEncryption 77:4f:b4:b6:1a:e5:30:09:d1:80:1a:9e:e7:d1:7c:cf:24:0c: 70:e7:e3:c0:74:27:e2:e0:47:a5:55:65:98:ee:57:2b:14:b1: c2:93:4a:ea:4d:cb:92:b3:b8:b3:6e:fe:f8:ff:cb:42:5e:8b: e3:7e:7d:13:9e:82:54:eb:94:5c:a9:9f:4f:f3:55:a4:d5:a8: 97:67:df:46:23:61:25:67:a7:68:26:53:77:c6:c3:d6:d7:78: 37:2e:be:7c:bc:f9:78:b5:ba:c7:9b:0c:c8:48:d9:00:82:78: 90:a1:1f:d5:19:1d:6c:81:c0:9a:87:93:8a:9a:5a:c5:ad:cd: e9:13:20:f8:c8:4c:4b:7b:2e:d6:00:7d:05:ab:64:36:03:57: bf:57:3f:9d:1d:9b:72:92:4d:0c:8f:2e:fd:bb:99:a5:a7:e5: e3:de:18:85:01:c9:67:f5:95:68:a4:e2:ae:16:1b:65:fe:7d: f5:b6:e7:53:aa:8a:1b:2e:f2:b3:73:22:b2:ed:14:21:e5:6b: 21:a6:6a:87:3c:0b:5f:e1:cf:55:88:78:17:0f:23:83:29:57: e6:70:3c:99:88:f7:8b:56:42:61:9d:f0:e0:f9:d0:a8:6c:52: 0b:15:bb:b3:5f:05:b0:73:45:ca:72:ef:27:a4:b0:6e:6f:c6: a2:fd:f1:dc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURzq6aAXhox2lYVLy2dPXUvpwQd0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNFoX DTI3MDMwMzA2MTMxNFowMzExMC8GA1UEAxMoNzgxQ0Q4OUMxNEE3NTE1REJDQzA1 QUFEMUZGNjdENjkyRURBNEVBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMh/1hFMC49OQqaLQzosQCoa/xTmyi3DzpyzJbdHC15DI0UVTb656hpmZp7 lPgnfgnPNfqa6zEBszsyfpCO9ovlaDfuUBe7PLSsDyzRaUMUSRdj4KqYyxBZCSGx ck0r9mgPvA9tLSWNUOuBnc6ogokM9sCgh01NBoQAXzSBclGJdkrcyd+LXrWnxe6P UbeHv3oxoz3ULk8TKIL1sWlI0n1HM2DSITBbRc0yv3s8t2+WIEPHbnYWiG61F15W jlq/fyUAwmz1mwkUAEFphSKt/sFWyviMZ15e+aV/fINGZ/5FtCmEeAY6p6PiiDtt 50DFii5nvwDhNPT2qDiRWEQQxAkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR4HNic FKdRXbzAWq0f9n1pLtpOozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzg5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pN4wDQYJKoZIhvcNAQELBQADggEBAHdPtLYa5TAJ0YAanufRfM8kDHDn48B0J+Lg R6VVZZjuVysUscKTSupNy5KzuLNu/vj/y0Jei+N+fROeglTrlFypn0/zVaTVqJdn 30YjYSVnp2gmU3fGw9bXeDcuvny8+Xi1usebDMhI2QCCeJChH9UZHWyBwJqHk4qa WsWtzekTIPjITEt7LtYAfQWrZDYDV79XP50dm3KSTQyPLv27maWn5ePeGIUByWf1 lWik4q4WG2X+ffW251Oqihsu8rNzIrLtFCHlayGmaoc8C1/hz1WIeBcPI4MpV+Zw PJmI94tWQmGd8OD50KhsUgsVu7NfBbBzRcpy7yeksG5vxqL98dw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:18 2026 by rpki-client