$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143019.roa File: AS143019.roa (raw, json) Hash identifier: lDZGM5vDqlsb3xxS2YAFUy2bXdskEyyPEuFtSWgwRTs= Subject key identifier: 7E:AA:AA:91:4C:57:11:3A:4D:FC:0E:17:7B:D0:B1:A4:30:14:59:2C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 245DA80990BA34D2F1EA492D484CF7B6FA5C0E73 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143019.roa Signing time: Wed 04 Mar 2026 06:07:50 +0000 ROA not before: Wed 04 Mar 2026 06:02:50 +0000 ROA not after: Wed 03 Mar 2027 06:07:50 +0000 asID: 143019 IP address blocks: 240a:a171::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5d:a8:09:90:ba:34:d2:f1:ea:49:2d:48:4c:f7:b6:fa:5c:0e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:50 2026 GMT Not After : Mar 3 06:07:50 2027 GMT Subject: CN=7EAAAA914C57113A4DFC0E177BD0B1A43014592C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:2f:ac:35:0c:6e:35:e4:07:e2:18:ab:da: 49:e1:1d:b6:d6:29:7c:f9:f1:dc:02:81:d6:d9:d0: c3:3a:98:bf:f6:5a:1a:4e:37:42:6d:96:de:14:94: 52:95:fb:40:17:55:c9:28:69:5f:d1:b9:69:dc:97: 9e:bc:ed:fb:48:70:f5:9b:07:83:f0:f0:30:10:9a: 91:bb:77:94:24:f0:d5:67:d3:62:42:33:7c:74:01: 39:16:53:e3:dc:e5:39:cc:51:09:38:14:a3:e8:02: 2d:77:90:ca:f3:3f:89:f1:b8:75:ba:28:66:13:59: 4d:3e:e9:0e:1b:59:a8:29:f8:6c:33:8a:be:1e:87: d0:dc:9a:d8:9d:b8:16:3c:01:0c:4e:24:92:db:ac: fe:7e:67:1f:f4:35:ac:3b:30:8e:e1:f5:b2:c7:39: a9:b3:22:52:07:b4:b8:0f:3a:97:8c:ee:66:40:06: 31:fd:52:a8:8a:cc:be:de:01:66:86:82:89:90:fd: 5c:31:1f:c1:e3:5e:c2:87:4c:48:a7:6e:0a:98:6c: c8:34:6e:a5:15:a8:e0:61:1d:f6:97:7b:64:4e:01: 78:57:01:e7:59:73:e9:2d:1d:07:6a:9b:3d:bc:89: c2:bc:32:87:06:57:34:c7:31:39:8e:e6:38:1e:42: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AA:AA:91:4C:57:11:3A:4D:FC:0E:17:7B:D0:B1:A4:30:14:59:2C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a171::/32 Signature Algorithm: sha256WithRSAEncryption 74:99:e6:8a:cb:46:fd:a1:b6:8a:7b:ea:cc:78:20:31:81:34: 68:5a:63:f3:88:2e:97:87:26:c7:57:96:3e:1c:cb:3a:c6:71: ed:4d:6b:67:06:80:97:00:59:c6:19:29:0d:35:f0:61:e5:7d: 52:ff:47:9e:b8:a1:a6:52:72:e1:4a:d0:ae:1c:01:ec:db:e5: 51:2b:6e:24:57:cf:cd:84:4d:1e:49:1f:37:2a:3d:73:75:4c: 2e:80:ce:2c:06:22:be:f7:8a:56:2c:a5:99:38:14:fa:a2:43: 10:99:18:d5:e9:88:0f:98:88:89:39:90:ac:56:e4:f5:c4:ca: 7d:f6:4e:dc:38:75:1f:6e:93:6e:79:25:99:b5:54:59:43:b6: 92:74:e4:c0:26:e3:25:65:b9:5f:e8:79:5c:6d:ab:56:a7:b6: e2:d4:af:52:b0:cc:eb:85:41:18:98:ff:07:55:20:28:2b:b0: e2:07:48:91:1c:1f:e9:b1:a7:15:6e:d9:de:2c:7d:79:bb:db: 59:43:8e:a3:e1:ce:32:10:0b:d6:e5:f0:bf:be:5f:a4:4a:84: 0a:30:20:d4:68:c9:bd:ac:0f:06:48:73:72:a6:ea:0d:42:a8: b1:2d:57:f2:ab:f0:9b:8c:15:87:b7:44:d4:64:7c:52:ca:e1: d5:f6:2a:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJF2oCZC6NNLx6kktSEz3tvpcDnMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1MFoX DTI3MDMwMzA2MDc1MFowMzExMC8GA1UEAxMoN0VBQUFBOTE0QzU3MTEzQTRERkMw RTE3N0JEMEIxQTQzMDE0NTkyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVIL6w1DG415AfiGKvaSeEdttYpfPnx3AKB1tnQwzqYv/ZaGk43Qm2W3hSU UpX7QBdVyShpX9G5adyXnrzt+0hw9ZsHg/DwMBCakbt3lCTw1WfTYkIzfHQBORZT 49zlOcxRCTgUo+gCLXeQyvM/ifG4dbooZhNZTT7pDhtZqCn4bDOKvh6H0Nya2J24 FjwBDE4kktus/n5nH/Q1rDswjuH1ssc5qbMiUge0uA86l4zuZkAGMf1SqIrMvt4B ZoaCiZD9XDEfweNewodMSKduCphsyDRupRWo4GEd9pd7ZE4BeFcB51lz6S0dB2qb PbyJwrwyhwZXNMcxOY7mOB5CMVUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR+qqqR TFcROk38Dhd70LGkMBRZLDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oXEwDQYJKoZIhvcNAQELBQADggEBAHSZ5orLRv2htop76sx4IDGBNGhaY/OILpeH JsdXlj4cyzrGce1Na2cGgJcAWcYZKQ018GHlfVL/R564oaZScuFK0K4cAezb5VEr biRXz82ETR5JHzcqPXN1TC6AziwGIr73ilYspZk4FPqiQxCZGNXpiA+YiIk5kKxW 5PXEyn32Ttw4dR9uk255JZm1VFlDtpJ05MAm4yVluV/oeVxtq1antuLUr1KwzOuF QRiY/wdVICgrsOIHSJEcH+mxpxVu2d4sfXm721lDjqPhzjIQC9bl8L++X6RKhAow INRoyb2sDwZIc3Km6g1CqLEtV/Kr8JuMFYe3RNRkfFLK4dX2KlM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:04 2026 by rpki-client