$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143917.roa File: AS143917.roa (raw, json) Hash identifier: wx/BJzqgLCKOTLWhqbwHEmSMytbE6kvBkHPwNtqz2No= Subject key identifier: 1B:4E:61:8F:43:F0:F5:8C:80:E0:50:57:7D:BD:95:30:D9:17:3A:EB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6388371EAC3C37AE41EB8B982F7667FFE6A6F913 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143917.roa Signing time: Wed 04 Mar 2026 06:12:33 +0000 ROA not before: Wed 04 Mar 2026 06:07:33 +0000 ROA not after: Wed 03 Mar 2027 06:12:33 +0000 asID: 143917 IP address blocks: 240a:a4f3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:88:37:1e:ac:3c:37:ae:41:eb:8b:98:2f:76:67:ff:e6:a6:f9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:33 2026 GMT Not After : Mar 3 06:12:33 2027 GMT Subject: CN=1B4E618F43F0F58C80E050577DBD9530D9173AEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:f1:b0:09:9c:bf:54:00:54:b0:51:ba:44: c8:80:6f:72:4d:ed:fa:98:46:49:98:a8:c5:b1:22: 23:af:a4:eb:03:a6:6e:d1:a3:a9:72:d2:99:ef:a4: a4:59:d9:91:d7:6f:85:d0:c1:a4:c7:02:c7:0e:f8: e3:7d:29:b8:9b:9a:35:a1:ec:b9:03:15:25:25:08: 4d:e7:ed:b0:2d:d7:5e:d5:5b:49:07:8f:e3:ac:13: 90:33:59:98:d8:58:d2:83:fe:7b:b6:80:2f:be:96: 53:90:c3:d0:1a:34:46:32:c9:bf:b6:c3:97:ce:f2: 95:5b:b1:95:db:26:07:0e:e7:77:36:3d:88:d5:b6: bb:ea:3f:e7:e3:04:24:03:45:19:b8:55:e5:de:ce: d9:20:83:0d:22:c9:77:99:ad:c2:59:e1:fd:69:57: 3b:12:ad:be:13:e1:df:4f:d6:ae:dd:d5:80:3b:cc: d3:41:29:62:00:c0:ba:e4:5f:7d:15:56:62:b2:f2: b9:73:f1:d6:51:81:0c:81:1b:34:c7:2b:51:43:48: 42:a3:89:06:59:19:50:00:fb:27:b0:54:52:59:3f: 3b:dc:fa:8c:b2:d5:2a:82:9a:e5:93:61:33:25:3c: ab:f7:d1:a7:aa:7a:ec:94:01:c5:09:3c:5b:db:37: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4E:61:8F:43:F0:F5:8C:80:E0:50:57:7D:BD:95:30:D9:17:3A:EB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143917.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a4f3::/32 Signature Algorithm: sha256WithRSAEncryption 9a:68:16:a8:a5:d5:5e:11:b2:38:6d:f2:d7:6e:62:f3:02:76: 2d:a8:74:ad:83:be:13:ff:84:18:20:a2:16:d1:db:3c:89:19: 66:b6:83:a7:61:7c:35:47:86:e4:79:34:9e:7e:8a:f7:26:f1: 3d:e4:e1:2c:6b:ac:e0:6b:db:2e:59:cf:b6:23:3a:cd:09:e5: 89:c7:f3:95:9d:6b:f3:c9:32:49:fc:06:cd:2e:3b:f5:86:c0: 7d:e9:ac:74:51:c6:77:7b:94:f0:71:c8:8a:59:cd:41:b5:b5: 5e:0f:b5:f4:72:82:ab:00:e3:04:ff:13:f7:02:e5:21:27:d8: 00:2e:41:b9:e0:e7:a4:90:e8:e1:a5:94:d7:3d:a3:f1:c3:5e: 3b:12:2b:36:06:73:a4:02:3d:d4:c8:41:14:1f:b0:5a:3a:9e: 56:34:de:35:7f:3a:1b:22:d6:27:78:5c:92:80:67:51:f3:e4: f4:09:86:95:a4:97:3f:8f:e5:76:a5:cd:26:2f:97:6e:80:79: 2a:b5:1f:eb:31:ce:7f:74:c6:fd:5c:fe:54:22:44:fa:1e:43: 76:1f:e8:cd:d8:45:09:b9:a0:a3:31:0e:1c:8d:31:ce:af:d4: 60:df:88:62:a9:89:89:eb:b5:27:41:ce:c2:78:05:48:99:1f: 10:6d:67:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUY4g3Hqw8N65B64uYL3Zn/+am+RMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczM1oX DTI3MDMwMzA2MTIzM1owMzExMC8GA1UEAxMoMUI0RTYxOEY0M0YwRjU4QzgwRTA1 MDU3N0RCRDk1MzBEOTE3M0FFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWz8bAJnL9UAFSwUbpEyIBvck3t+phGSZioxbEiI6+k6wOmbtGjqXLSme+k pFnZkddvhdDBpMcCxw74430puJuaNaHsuQMVJSUITeftsC3XXtVbSQeP46wTkDNZ mNhY0oP+e7aAL76WU5DD0Bo0RjLJv7bDl87ylVuxldsmBw7ndzY9iNW2u+o/5+ME JANFGbhV5d7O2SCDDSLJd5mtwlnh/WlXOxKtvhPh30/Wrt3VgDvM00EpYgDAuuRf fRVWYrLyuXPx1lGBDIEbNMcrUUNIQqOJBlkZUAD7J7BUUlk/O9z6jLLVKoKa5ZNh MyU8q/fRp6p67JQBxQk8W9s3uJUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQbTmGP Q/D1jIDgUFd9vZUw2Rc66zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzkxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pPMwDQYJKoZIhvcNAQELBQADggEBAJpoFqil1V4Rsjht8tduYvMCdi2odK2DvhP/ hBggohbR2zyJGWa2g6dhfDVHhuR5NJ5+ivcm8T3k4SxrrOBr2y5Zz7YjOs0J5YnH 85Wda/PJMkn8Bs0uO/WGwH3prHRRxnd7lPBxyIpZzUG1tV4PtfRygqsA4wT/E/cC 5SEn2AAuQbng56SQ6OGllNc9o/HDXjsSKzYGc6QCPdTIQRQfsFo6nlY03jV/Ohsi 1id4XJKAZ1Hz5PQJhpWklz+P5XalzSYvl26AeSq1H+sxzn90xv1c/lQiRPoeQ3Yf 6M3YRQm5oKMxDhyNMc6v1GDfiGKpiYnrtSdBzsJ4BUiZHxBtZ4c= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:25 2026 by rpki-client