$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143010.roa File: AS143010.roa (raw, json) Hash identifier: MMGyYYqH+MEjbpiqWoOheXXVfparorb1I9JNvn8AsxM= Subject key identifier: B7:5D:25:2A:2A:B5:20:38:2E:86:76:A3:2A:8C:06:FF:06:9C:2F:A6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0D3B996B9C9CC1BEBC103613AD945640FD3C5C60 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143010.roa Signing time: Wed 04 Mar 2026 06:07:55 +0000 ROA not before: Wed 04 Mar 2026 06:02:55 +0000 ROA not after: Wed 03 Mar 2027 06:07:55 +0000 asID: 143010 IP address blocks: 240a:a168::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3b:99:6b:9c:9c:c1:be:bc:10:36:13:ad:94:56:40:fd:3c:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:55 2026 GMT Not After : Mar 3 06:07:55 2027 GMT Subject: CN=B75D252A2AB520382E8676A32A8C06FF069C2FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:ce:6b:7a:11:9c:77:4a:e0:06:2a:39:96: 62:49:15:56:e4:85:6c:05:87:ce:87:f5:b3:74:74: d0:e7:16:ee:b6:a9:3d:27:55:b3:01:3d:13:2c:f3: 6a:97:75:97:ae:70:82:04:1b:fa:88:b4:68:cc:77: 19:98:69:dd:14:0e:6f:ab:2a:eb:27:33:c0:08:c0: 57:b5:1a:27:25:ad:23:15:91:c5:66:03:f0:93:c4: 7d:5a:63:39:0b:3b:6b:ac:96:d7:e9:fe:c8:c5:79: aa:0c:0e:21:52:19:cb:88:0e:5b:f4:db:8c:79:99: 6a:ea:76:d5:e1:d2:d2:54:45:0e:f3:88:db:5b:18: 44:b8:b9:bf:c7:72:0b:79:8f:55:b1:e3:9f:f7:bc: 4f:bf:a7:96:df:27:f9:d0:2c:a8:85:d1:7b:26:bf: 8b:47:bb:26:19:7d:56:0b:4f:53:41:8c:2f:d5:ab: ea:88:f5:8b:cb:21:bc:88:de:42:a7:35:aa:1c:81: d8:f5:10:5f:fd:87:8f:8c:8d:87:99:ec:23:3e:59: 6d:24:bf:c4:16:b1:89:f2:b7:f0:7a:3d:9f:7f:e1: fd:3c:7a:57:4d:4e:54:91:ca:50:81:3a:94:d1:df: 0e:fd:08:88:8f:f2:ef:dc:3f:45:e2:aa:ea:55:09: a9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:25:2A:2A:B5:20:38:2E:86:76:A3:2A:8C:06:FF:06:9C:2F:A6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143010.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a168::/32 Signature Algorithm: sha256WithRSAEncryption 94:07:cf:28:28:2f:52:84:d1:8e:58:0d:57:9a:1a:ba:67:76: 89:20:18:33:9c:3d:1e:c4:a8:64:24:29:87:c0:ae:9f:09:79: 43:2e:29:4d:60:13:2f:68:2f:0e:a6:22:2f:93:c7:6a:ed:b9: 03:c4:86:34:ed:e4:b2:9f:2b:f1:43:55:62:d6:1f:c0:6c:b0: 88:8f:18:3f:1e:b6:4c:3c:57:9e:c0:60:33:83:b4:77:19:4b: 9b:26:ee:41:d0:ff:cd:01:f1:72:e0:4f:15:20:2a:f3:7d:73: a9:e3:71:ce:0b:38:f2:77:ec:00:4c:ab:1a:4d:64:df:f6:10: 69:1c:a9:72:28:b7:50:23:c0:d3:fe:f0:b4:7e:40:a9:90:f8: e6:7c:44:05:79:b0:94:33:04:50:52:05:63:1b:6f:92:1e:33: 3f:2a:c4:6c:87:31:49:6a:92:d5:74:9a:5d:7d:2b:de:84:2c: 8c:e6:81:8d:c8:8b:eb:c5:f9:b0:71:3d:e4:c7:99:78:91:09: 87:92:83:0a:18:ac:ac:fa:50:bb:74:42:5b:de:3a:7b:18:77: d9:86:0e:47:c7:a4:4b:f0:d5:9f:eb:46:eb:ee:a3:c7:84:88: 13:ec:6a:99:61:e6:94:63:63:fe:55:d0:08:75:5b:35:45:b1: 41:c1:c6:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDTuZa5ycwb68EDYTrZRWQP08XGAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1NVoX DTI3MDMwMzA2MDc1NVowMzExMC8GA1UEAxMoQjc1RDI1MkEyQUI1MjAzODJFODY3 NkEzMkE4QzA2RkYwNjlDMkZBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5bzmt6EZx3SuAGKjmWYkkVVuSFbAWHzof1s3R00OcW7rapPSdVswE9Eyzz apd1l65wggQb+oi0aMx3GZhp3RQOb6sq6yczwAjAV7UaJyWtIxWRxWYD8JPEfVpj OQs7a6yW1+n+yMV5qgwOIVIZy4gOW/TbjHmZaup21eHS0lRFDvOI21sYRLi5v8dy C3mPVbHjn/e8T7+nlt8n+dAsqIXReya/i0e7Jhl9VgtPU0GML9Wr6oj1i8shvIje Qqc1qhyB2PUQX/2Hj4yNh5nsIz5ZbSS/xBaxifK38Ho9n3/h/Tx6V01OVJHKUIE6 lNHfDv0IiI/y79w/ReKq6lUJqf8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS3XSUq KrUgOC6GdqMqjAb/BpwvpjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oWgwDQYJKoZIhvcNAQELBQADggEBAJQHzygoL1KE0Y5YDVeaGrpndokgGDOcPR7E qGQkKYfArp8JeUMuKU1gEy9oLw6mIi+Tx2rtuQPEhjTt5LKfK/FDVWLWH8BssIiP GD8etkw8V57AYDODtHcZS5sm7kHQ/80B8XLgTxUgKvN9c6njcc4LOPJ37ABMqxpN ZN/2EGkcqXIot1AjwNP+8LR+QKmQ+OZ8RAV5sJQzBFBSBWMbb5IeMz8qxGyHMUlq ktV0ml19K96ELIzmgY3Ii+vF+bBxPeTHmXiRCYeSgwoYrKz6ULt0QlveOnsYd9mG DkfHpEvw1Z/rRuvuo8eEiBPsaplh5pRjY/5V0Ah1WzVFsUHBxhs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:35 2026 by rpki-client