$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143970.roa File: AS143970.roa (raw, json) Hash identifier: JlLc8RWk977TWVunA6H3S4XmIeWiG9T0K6SzcmGaRaU= Subject key identifier: 42:D9:14:EA:4D:29:C4:A2:38:DA:76:2A:F3:DB:23:54:BE:54:6B:A0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 647DCFFCF2213EA46085D6B2C72D3A30F3B721F0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143970.roa Signing time: Wed 04 Mar 2026 06:12:44 +0000 ROA not before: Wed 04 Mar 2026 06:07:44 +0000 ROA not after: Wed 03 Mar 2027 06:12:44 +0000 asID: 143970 IP address blocks: 240a:a528::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7d:cf:fc:f2:21:3e:a4:60:85:d6:b2:c7:2d:3a:30:f3:b7:21:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:44 2026 GMT Not After : Mar 3 06:12:44 2027 GMT Subject: CN=42D914EA4D29C4A238DA762AF3DB2354BE546BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:b9:b8:94:89:c7:db:b4:ad:1f:96:1a:8d: 0f:62:d5:b0:3f:4f:3f:f7:75:38:a7:7c:48:04:71: 79:d5:ab:c2:65:3f:eb:4b:a4:12:3a:1e:68:8e:61: fd:41:da:1c:1a:63:21:ac:c3:2c:7e:08:ad:04:4e: ab:2b:db:ea:0e:66:e2:d8:06:0c:8b:48:fb:cf:01: 4c:1f:7e:1c:47:ac:47:8f:41:01:44:ff:ff:c6:95: f1:5d:8d:33:04:81:32:3d:ad:64:23:c7:3f:18:e3: 95:a4:dc:1a:4a:6f:c7:94:93:01:b1:57:99:74:b2: f4:9b:86:bc:cb:c4:cc:68:ca:c2:10:94:43:1a:a6: 2e:04:42:28:9f:99:b8:fc:ce:d3:8b:fd:0c:38:62: fb:01:0d:b5:e5:d3:be:b8:7c:0f:66:65:0e:10:a6: 4b:af:de:62:dd:1c:8b:b5:ba:8c:20:78:b7:93:07: 27:01:d6:2b:59:b2:6f:1e:32:f8:ca:44:75:8c:42: d7:76:bf:58:42:21:de:61:d0:01:36:a2:a4:df:ba: 3c:0e:ae:c8:19:b9:db:f7:5e:0b:b3:db:35:0a:fc: 90:fe:6a:df:d5:9d:d4:4b:a5:39:ee:44:d9:a4:66: b6:a9:7d:de:eb:9f:af:83:6f:e1:92:f3:27:3b:a7: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:14:EA:4D:29:C4:A2:38:DA:76:2A:F3:DB:23:54:BE:54:6B:A0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143970.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a528::/32 Signature Algorithm: sha256WithRSAEncryption 7d:18:9f:90:6d:ce:4e:71:79:9f:99:0c:4b:73:e1:b9:6e:1e: ff:f3:38:41:ef:d9:b8:f5:a2:f5:53:61:b9:92:58:4d:3e:49: 36:89:a7:b1:46:11:10:ff:3e:09:fb:ed:7e:36:86:41:d1:cc: 65:8d:26:5b:fe:3a:f3:fd:12:3f:53:4d:06:92:92:bf:bc:8e: 38:e6:e8:99:9c:2b:f4:a9:21:e4:6f:19:74:f4:04:b9:14:27: ba:9a:59:5c:40:0c:b0:08:81:fd:d2:5a:18:1a:05:b6:cb:cf: c4:aa:a6:f0:2e:d9:ca:7e:04:3f:5d:93:4d:0e:4c:a8:69:e2: ab:5b:f5:b8:5f:73:05:5d:73:5d:49:e9:f0:9a:5a:83:b7:95: 74:99:c7:3b:f6:6f:e2:58:65:57:39:42:85:d6:3d:1b:e0:e2: 72:78:50:34:20:62:46:0b:66:8c:2c:2c:60:41:8b:b2:39:df: b6:ee:9d:0a:93:5c:31:bd:e4:61:83:21:40:c5:d8:db:13:7e: 3d:2e:ac:a4:5e:24:ea:7e:b1:3f:ba:3d:2c:65:ee:59:11:0b: 89:f6:3a:a0:8f:5e:ae:15:2c:ce:cc:de:59:f0:05:05:d4:c8: 58:61:cc:80:e5:26:a6:32:ca:6d:58:c4:c0:48:68:d8:46:58: d3:f0:90:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZH3P/PIhPqRghdayxy06MPO3IfAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0NFoX DTI3MDMwMzA2MTI0NFowMzExMC8GA1UEAxMoNDJEOTE0RUE0RDI5QzRBMjM4REE3 NjJBRjNEQjIzNTRCRTU0NkJBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzAubiUicfbtK0flhqND2LVsD9PP/d1OKd8SARxedWrwmU/60ukEjoeaI5h /UHaHBpjIazDLH4IrQROqyvb6g5m4tgGDItI+88BTB9+HEesR49BAUT//8aV8V2N MwSBMj2tZCPHPxjjlaTcGkpvx5STAbFXmXSy9JuGvMvEzGjKwhCUQxqmLgRCKJ+Z uPzO04v9DDhi+wENteXTvrh8D2ZlDhCmS6/eYt0ci7W6jCB4t5MHJwHWK1mybx4y +MpEdYxC13a/WEIh3mHQATaipN+6PA6uyBm52/deC7PbNQr8kP5q39Wd1EulOe5E 2aRmtql93uufr4Nv4ZLzJzunD5ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRC2RTq TSnEojjadirz2yNUvlRroDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mzk3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pSgwDQYJKoZIhvcNAQELBQADggEBAH0Yn5Btzk5xeZ+ZDEtz4bluHv/zOEHv2bj1 ovVTYbmSWE0+STaJp7FGERD/Pgn77X42hkHRzGWNJlv+OvP9Ej9TTQaSkr+8jjjm 6JmcK/SpIeRvGXT0BLkUJ7qaWVxADLAIgf3SWhgaBbbLz8SqpvAu2cp+BD9dk00O TKhp4qtb9bhfcwVdc11J6fCaWoO3lXSZxzv2b+JYZVc5QoXWPRvg4nJ4UDQgYkYL ZowsLGBBi7I537bunQqTXDG95GGDIUDF2NsTfj0urKReJOp+sT+6PSxl7lkRC4n2 OqCPXq4VLM7M3lnwBQXUyFhhzIDlJqYyym1YxMBIaNhGWNPwkP8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:04 2026 by rpki-client