$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143013.roa File: AS143013.roa (raw, json) Hash identifier: uBa01ruv1JTrzrz5HEPV1yY0UGPD7RZwjZWSwPzv2k8= Subject key identifier: 9A:E5:7D:CA:66:FD:EA:30:90:83:0B:EA:B4:53:2E:71:8A:ED:36:4C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1FBC5BECCCDFB38402A904DDB4F55FCECAAE1105 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143013.roa Signing time: Wed 04 Mar 2026 06:05:57 +0000 ROA not before: Wed 04 Mar 2026 06:00:57 +0000 ROA not after: Wed 03 Mar 2027 06:05:57 +0000 asID: 143013 IP address blocks: 240a:a16b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bc:5b:ec:cc:df:b3:84:02:a9:04:dd:b4:f5:5f:ce:ca:ae:11:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:57 2026 GMT Not After : Mar 3 06:05:57 2027 GMT Subject: CN=9AE57DCA66FDEA3090830BEAB4532E718AED364C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9d:fe:17:e7:27:9f:df:c3:e6:5c:29:47:02: 80:81:aa:78:e4:bd:ba:df:6b:2a:b6:4d:f6:72:f6: b7:2c:40:9b:d9:c7:a3:22:ff:d6:f1:28:05:45:4d: c0:e2:f0:7b:17:15:d1:ed:51:92:a4:f3:89:b1:95: ef:37:8f:41:92:07:d0:17:d7:ac:8d:ab:40:ab:ab: 9d:61:f5:13:e0:75:07:bd:d8:db:09:73:5b:f3:fa: 7d:35:a6:8a:3b:fc:ed:f8:08:2a:8a:f6:5b:a7:7a: 29:98:97:3f:23:8c:c6:f8:99:34:50:06:19:27:1a: c2:d2:8b:9f:9b:ee:23:3c:33:e8:a5:83:93:dd:50: 66:1e:84:3b:f9:d1:8f:da:77:3f:30:a9:4a:f7:34: 66:88:5c:f6:55:19:a5:94:4d:b9:8a:e2:c7:f8:0d: 38:58:e9:e7:71:ee:24:c8:89:8c:ec:65:82:96:ce: 45:98:53:c7:a1:cf:c6:3f:c4:1e:19:b2:70:81:ba: 92:af:9a:97:e5:0f:96:d6:bf:4e:fc:ec:26:d4:22: 5b:95:6f:b5:36:05:57:7c:75:64:ff:e8:d9:67:df: b4:5b:bf:c1:b1:08:72:75:11:b6:b1:18:c1:a5:60: c9:60:21:10:b5:eb:8b:2d:18:41:12:8a:8f:6a:a3: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E5:7D:CA:66:FD:EA:30:90:83:0B:EA:B4:53:2E:71:8A:ED:36:4C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143013.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a16b::/32 Signature Algorithm: sha256WithRSAEncryption 9d:e5:4f:79:d3:2d:f7:7a:00:13:79:dc:00:b5:d4:3a:86:c3: 51:46:0c:67:ca:26:31:1d:1c:89:4b:ad:7a:51:7a:25:b2:52: 05:1a:53:19:83:2a:da:5b:74:f7:12:06:9a:f0:e6:fd:6c:0b: 2f:56:9e:d8:07:9f:ea:f5:79:bb:dd:89:78:8a:b4:7a:ce:fe: 4c:f5:8b:ea:29:73:e5:34:d6:8b:a6:34:ca:ec:7c:a2:07:6f: a5:71:dd:00:0c:dc:dc:b0:03:fe:68:cc:99:dd:fb:f1:7f:de: 50:9f:0f:74:d8:92:a3:6d:fd:d0:be:2d:18:a9:02:c5:67:7f: 48:1b:87:2b:5d:74:2d:60:71:52:e1:58:37:9f:45:8e:31:f2: 0c:88:20:4a:cb:ca:ce:2d:1d:b6:77:9b:2f:5d:c3:16:5f:a7: 5e:80:01:23:e7:27:42:78:12:f1:cb:fd:f3:dc:6b:f0:d2:df: b7:7e:2e:a6:a1:0d:12:ed:e6:f7:02:c2:fd:17:ee:76:81:f3: f8:0c:b3:de:73:d0:53:93:99:ef:99:6e:b0:d6:e0:87:c5:ef: 50:75:5a:38:dc:58:d4:c1:dd:5b:9a:16:5d:da:4b:47:e6:fb: 4f:03:ec:c5:ad:6a:8e:42:4c:e5:67:58:5c:89:ff:78:8c:37: 6f:78:2e:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUH7xb7Mzfs4QCqQTdtPVfzsquEQUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1N1oX DTI3MDMwMzA2MDU1N1owMzExMC8GA1UEAxMoOUFFNTdEQ0E2NkZERUEzMDkwODMw QkVBQjQ1MzJFNzE4QUVEMzY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOGd/hfnJ5/fw+ZcKUcCgIGqeOS9ut9rKrZN9nL2tyxAm9nHoyL/1vEoBUVN wOLwexcV0e1RkqTzibGV7zePQZIH0BfXrI2rQKurnWH1E+B1B73Y2wlzW/P6fTWm ijv87fgIKor2W6d6KZiXPyOMxviZNFAGGScawtKLn5vuIzwz6KWDk91QZh6EO/nR j9p3PzCpSvc0Zohc9lUZpZRNuYrix/gNOFjp53HuJMiJjOxlgpbORZhTx6HPxj/E HhmycIG6kq+al+UPlta/TvzsJtQiW5VvtTYFV3x1ZP/o2WfftFu/wbEIcnURtrEY waVgyWAhELXriy0YQRKKj2qjTKkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSa5X3K Zv3qMJCDC+q0Uy5xiu02TDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oWswDQYJKoZIhvcNAQELBQADggEBAJ3lT3nTLfd6ABN53AC11DqGw1FGDGfKJjEd HIlLrXpReiWyUgUaUxmDKtpbdPcSBprw5v1sCy9WntgHn+r1ebvdiXiKtHrO/kz1 i+opc+U01oumNMrsfKIHb6Vx3QAM3NywA/5ozJnd+/F/3lCfD3TYkqNt/dC+LRip AsVnf0gbhytddC1gcVLhWDefRY4x8gyIIErLys4tHbZ3my9dwxZfp16AASPnJ0J4 EvHL/fPca/DS37d+LqahDRLt5vcCwv0X7naB8/gMs95z0FOTme+ZbrDW4IfF71B1 WjjcWNTB3VuaFl3aS0fm+08D7MWtao5CTOVnWFyJ/3iMN294Ln8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:14 2026 by rpki-client