$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143012.roa File: AS143012.roa (raw, json) Hash identifier: Mkdgfep/6JMxGaVtxP8oCU4oSqgl5A5ArQVGKteMx44= Subject key identifier: C0:52:28:72:2C:C5:BF:96:3C:29:63:77:00:BD:11:F7:84:27:4B:F3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30705C39D051161B4E8AE2BAE0D088EF82B11057 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143012.roa Signing time: Wed 04 Mar 2026 06:05:19 +0000 ROA not before: Wed 04 Mar 2026 06:00:19 +0000 ROA not after: Wed 03 Mar 2027 06:05:19 +0000 asID: 143012 IP address blocks: 240a:a16a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:70:5c:39:d0:51:16:1b:4e:8a:e2:ba:e0:d0:88:ef:82:b1:10:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:19 2026 GMT Not After : Mar 3 06:05:19 2027 GMT Subject: CN=C05228722CC5BF963C29637700BD11F784274BF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:db:ba:ca:98:2f:b8:bc:c3:7c:12:5b:cd: ad:a6:89:1b:4f:fe:04:75:2c:02:d6:96:a6:5d:e8: 60:7a:54:8e:5b:9f:9c:84:7f:d4:ae:3c:79:f0:10: fb:24:90:6d:99:e6:1c:74:90:4b:a2:0e:32:66:08: a6:3a:2a:16:fb:86:31:0d:41:32:fa:38:ef:48:5b: 5e:05:ad:45:1e:a7:00:65:22:e0:a0:9f:57:d7:66: 92:1e:18:45:59:c0:03:20:4b:61:3e:a0:4b:7d:2f: 2a:e5:1e:05:c0:02:f4:ce:96:8e:1b:d7:87:50:c4: 5c:03:78:22:ce:cf:b6:e0:c8:1f:4f:f4:8a:e2:cb: 34:01:83:19:00:2c:ea:1a:9c:e8:30:cf:f0:5e:23: 45:ac:3f:35:e6:03:a6:68:0e:6f:f5:ab:1c:da:ba: 32:9e:d1:a7:cd:2a:0c:b0:e9:ea:d5:bb:b3:43:5e: 27:c9:4d:f0:76:ad:9f:59:6b:c8:38:3c:a5:c3:f7: 31:f6:90:92:bc:a9:c7:f3:a8:73:fe:14:11:27:35: 89:f3:c9:79:e5:93:60:b9:4e:b9:f7:39:9c:68:0a: 64:ad:ec:38:f9:71:f7:19:34:e0:a5:cc:d5:3a:b9: 2f:f3:91:50:cf:55:29:4d:88:d4:19:d5:54:26:2d: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:52:28:72:2C:C5:BF:96:3C:29:63:77:00:BD:11:F7:84:27:4B:F3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143012.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a16a::/32 Signature Algorithm: sha256WithRSAEncryption 6d:a3:2a:a3:8c:55:e2:86:97:e5:f9:1a:cc:f3:d1:83:ce:01: 19:8e:9d:44:6e:92:01:5d:3f:a5:aa:d2:4c:6d:c0:77:c1:34: 27:16:35:92:a7:fc:47:b9:86:9e:9f:ab:33:df:e3:74:f5:b8: 7e:ad:de:82:4c:8c:07:0a:ff:a9:83:bd:64:20:11:75:70:1c: 14:29:59:f4:05:f9:aa:5b:b2:31:29:4b:d7:6d:7c:6a:07:31: 5b:84:c8:54:56:9e:13:d0:f4:fa:ec:7a:59:5d:0b:4d:3c:05: 98:bf:73:cf:30:bc:75:0e:4b:01:a0:a8:12:6f:5c:77:5e:c2: 05:11:59:85:03:06:02:f5:65:1d:a1:93:49:fe:7d:3c:f6:90: 84:e3:5e:5f:a7:93:ab:1a:74:85:db:d6:5c:31:fb:1d:46:e1: 24:2d:e5:a9:92:6d:f1:7f:9a:64:ee:da:13:d5:5c:b2:61:9c: fb:c5:62:03:6a:70:22:79:9b:eb:3c:d8:dc:85:0c:09:9b:f3: 62:9d:d7:96:be:24:05:13:ed:71:78:4c:bf:c0:4e:26:5e:f7: 9e:fd:44:99:b8:ca:4a:7f:9c:c6:40:cb:99:3d:a6:9a:bc:f2: c5:c9:06:e3:f3:75:5d:d9:83:92:2f:a9:4d:5d:a3:05:0d:de: 78:5a:03:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMHBcOdBRFhtOiuK64NCI74KxEFcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxOVoX DTI3MDMwMzA2MDUxOVowMzExMC8GA1UEAxMoQzA1MjI4NzIyQ0M1QkY5NjNDMjk2 Mzc3MDBCRDExRjc4NDI3NEJGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALS027rKmC+4vMN8ElvNraaJG0/+BHUsAtaWpl3oYHpUjlufnIR/1K48efAQ +ySQbZnmHHSQS6IOMmYIpjoqFvuGMQ1BMvo470hbXgWtRR6nAGUi4KCfV9dmkh4Y RVnAAyBLYT6gS30vKuUeBcAC9M6WjhvXh1DEXAN4Is7PtuDIH0/0iuLLNAGDGQAs 6hqc6DDP8F4jRaw/NeYDpmgOb/WrHNq6Mp7Rp80qDLDp6tW7s0NeJ8lN8Hatn1lr yDg8pcP3MfaQkrypx/Ooc/4UESc1ifPJeeWTYLlOufc5nGgKZK3sOPlx9xk04KXM 1Tq5L/ORUM9VKU2I1BnVVCYtZ+kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTAUihy LMW/ljwpY3cAvRH3hCdL8zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oWowDQYJKoZIhvcNAQELBQADggEBAG2jKqOMVeKGl+X5Gszz0YPOARmOnURukgFd P6Wq0kxtwHfBNCcWNZKn/Ee5hp6fqzPf43T1uH6t3oJMjAcK/6mDvWQgEXVwHBQp WfQF+apbsjEpS9dtfGoHMVuEyFRWnhPQ9PrselldC008BZi/c88wvHUOSwGgqBJv XHdewgURWYUDBgL1ZR2hk0n+fTz2kITjXl+nk6sadIXb1lwx+x1G4SQt5amSbfF/ mmTu2hPVXLJhnPvFYgNqcCJ5m+s82NyFDAmb82Kd15a+JAUT7XF4TL/ATiZe9579 RJm4ykp/nMZAy5k9ppq88sXJBuPzdV3Zg5IvqU1dowUN3nhaA/o= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:28 2026 by rpki-client