$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143004.roa File: AS143004.roa (raw, json) Hash identifier: HCfH2klGsItHaxEn3650i/3EtgHO7kGOEXWBv/FrWbM= Subject key identifier: 68:EA:E5:78:3B:B8:DD:CF:FC:AF:A9:BB:B4:7D:0C:AD:21:A8:21:D2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2C6E69096C89E4EA031667FECE66D45CA3BCCE6F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143004.roa Signing time: Wed 04 Mar 2026 06:05:20 +0000 ROA not before: Wed 04 Mar 2026 06:00:20 +0000 ROA not after: Wed 03 Mar 2027 06:05:20 +0000 asID: 143004 IP address blocks: 240a:a162::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6e:69:09:6c:89:e4:ea:03:16:67:fe:ce:66:d4:5c:a3:bc:ce:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:20 2026 GMT Not After : Mar 3 06:05:20 2027 GMT Subject: CN=68EAE5783BB8DDCFFCAFA9BBB47D0CAD21A821D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ef:f8:87:f0:8d:95:e7:c3:f4:d7:6d:e2:52: bf:67:91:27:e5:df:82:6c:f9:d4:a7:fd:9d:dc:bb: 51:e1:f0:a0:a9:da:73:84:81:ae:f4:5b:40:75:b1: 1a:58:bb:b5:8b:f7:35:ff:c6:37:e7:51:ac:48:07: 60:3e:50:02:ac:6a:7e:1b:56:33:e7:32:b0:58:8f: b9:e1:cf:bb:db:bd:dd:ab:f7:4c:c1:9d:06:3c:b2: a5:62:89:ad:10:42:78:aa:fc:33:66:52:6f:1a:ee: da:ab:30:cc:32:aa:7c:34:ee:0a:41:62:02:25:0b: 2f:38:bb:54:35:04:e8:56:bb:34:94:08:f1:6e:46: d8:e0:6b:b9:98:53:c0:3c:fe:e1:a7:4b:db:4b:b9: 01:b4:13:b2:b0:50:87:6c:4b:64:dd:9c:1d:5c:7b: 04:2c:1c:be:dd:c4:f1:29:36:22:75:96:2a:db:7a: 3e:2f:2d:46:68:75:0b:62:5b:c5:fc:8b:fc:19:47: 95:f8:74:68:02:91:05:1f:74:15:b3:92:c0:ee:22: 3c:32:af:2b:95:07:c7:e4:d8:2b:2e:08:f1:69:19: 2d:ea:16:4c:79:c0:4e:77:32:29:8c:5b:c7:36:0d: 91:50:12:cd:cf:54:45:79:39:76:1d:2a:e1:9b:99: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EA:E5:78:3B:B8:DD:CF:FC:AF:A9:BB:B4:7D:0C:AD:21:A8:21:D2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143004.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a162::/32 Signature Algorithm: sha256WithRSAEncryption 81:17:fb:04:c8:a8:34:de:42:4e:00:a7:21:18:63:7a:04:9c: 5e:45:30:4c:23:ba:e8:5b:b2:76:16:71:80:4c:fd:d4:bb:6d: 5c:0e:d6:10:b6:e0:cf:3c:3e:a7:bf:e5:0f:e7:82:48:a3:d5: d7:46:16:f7:65:4c:e1:98:b6:8c:53:e2:af:e8:c6:ba:8e:cf: 24:0a:81:5d:16:86:4e:42:8f:2a:7b:cb:97:da:d9:11:72:cf: 14:92:b8:ff:43:fd:0a:af:c4:d8:a4:99:fc:57:a1:fb:ea:61: f3:62:1a:08:c9:df:5e:35:67:d6:ca:92:47:dc:61:71:0d:3b: 06:1e:c2:a8:7b:4b:26:7e:71:3e:7c:89:27:27:36:37:ef:a2: cc:41:b9:ac:2a:e7:bf:cd:f4:4d:73:90:d3:1b:c5:4c:32:5f: 2d:4b:3d:a3:6d:a8:b5:49:bd:11:4e:63:ec:2f:5b:37:bc:b1: 75:46:2b:bd:7e:82:9a:52:31:fb:4a:4d:e1:23:c0:8c:f7:74: 2b:83:82:7e:ba:91:8f:fa:da:aa:71:07:ab:6b:2e:a6:a2:6f: 80:0f:92:53:ce:b0:1c:c5:79:fe:eb:e4:63:49:f2:43:0c:18: 86:30:25:71:44:08:fb:52:75:f3:48:6e:6b:4c:65:92:36:19: 15:c2:8d:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULG5pCWyJ5OoDFmf+zmbUXKO8zm8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyMFoX DTI3MDMwMzA2MDUyMFowMzExMC8GA1UEAxMoNjhFQUU1NzgzQkI4RERDRkZDQUZB OUJCQjQ3RDBDQUQyMUE4MjFEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzv+IfwjZXnw/TXbeJSv2eRJ+Xfgmz51Kf9ndy7UeHwoKnac4SBrvRbQHWx Gli7tYv3Nf/GN+dRrEgHYD5QAqxqfhtWM+cysFiPueHPu9u93av3TMGdBjyypWKJ rRBCeKr8M2ZSbxru2qswzDKqfDTuCkFiAiULLzi7VDUE6Fa7NJQI8W5G2OBruZhT wDz+4adL20u5AbQTsrBQh2xLZN2cHVx7BCwcvt3E8Sk2InWWKtt6Pi8tRmh1C2Jb xfyL/BlHlfh0aAKRBR90FbOSwO4iPDKvK5UHx+TYKy4I8WkZLeoWTHnATncyKYxb xzYNkVASzc9URXk5dh0q4ZuZMN8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRo6uV4 O7jdz/yvqbu0fQytIagh0jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oWIwDQYJKoZIhvcNAQELBQADggEBAIEX+wTIqDTeQk4ApyEYY3oEnF5FMEwjuuhb snYWcYBM/dS7bVwO1hC24M88Pqe/5Q/ngkij1ddGFvdlTOGYtoxT4q/oxrqOzyQK gV0Whk5Cjyp7y5fa2RFyzxSSuP9D/QqvxNikmfxXofvqYfNiGgjJ3141Z9bKkkfc YXENOwYewqh7SyZ+cT58iScnNjfvosxBuawq57/N9E1zkNMbxUwyXy1LPaNtqLVJ vRFOY+wvWze8sXVGK71+gppSMftKTeEjwIz3dCuDgn66kY/62qpxB6trLqaib4AP klPOsBzFef7r5GNJ8kMMGIYwJXFECPtSdfNIbmtMZZI2GRXCjR8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:56 2026 by rpki-client