$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143022.roa File: AS143022.roa (raw, json) Hash identifier: M30OkGQ+MhVP/gsqukMgbnggKbGdmAFwMBQzJbghWls= Subject key identifier: C5:F2:25:53:F5:80:22:02:86:F7:F5:73:AB:55:11:CA:E8:F1:4D:09 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1EDC35856E7B2F4F9FA80584D2D6AF117B7C161E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143022.roa Signing time: Wed 04 Mar 2026 06:07:14 +0000 ROA not before: Wed 04 Mar 2026 06:02:14 +0000 ROA not after: Wed 03 Mar 2027 06:07:14 +0000 asID: 143022 IP address blocks: 240a:a174::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dc:35:85:6e:7b:2f:4f:9f:a8:05:84:d2:d6:af:11:7b:7c:16:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:14 2026 GMT Not After : Mar 3 06:07:14 2027 GMT Subject: CN=C5F22553F580220286F7F573AB5511CAE8F14D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b5:81:90:2e:e9:3e:da:12:10:6f:25:d2:3b: 18:88:19:61:f2:bf:b3:db:f2:4c:e5:2d:39:97:0c: b8:cb:65:3c:e0:02:04:bf:f4:f0:cd:83:4e:6a:99: 9f:17:67:7b:65:4d:e9:9a:40:9d:10:62:55:24:74: 39:4c:76:0f:05:62:37:1a:85:e7:7d:52:4b:26:5c: 53:b5:4c:9f:96:08:af:21:e6:50:75:dc:a8:82:48: e9:14:d6:8c:33:02:06:67:d0:16:42:c4:78:86:19: 69:09:f2:4e:8c:46:10:79:f9:ff:5a:b2:ae:5e:58: 8e:c0:1b:36:62:85:c7:b9:2d:ec:df:02:12:28:c1: 21:85:7c:d1:a5:52:a4:2e:5f:fc:67:da:f8:87:71: 01:f1:6e:cf:a7:95:53:a5:ec:cf:cf:99:85:3a:2f: aa:5b:b5:bf:a7:9f:2e:16:3c:01:25:77:ee:22:3d: 29:d3:fc:b1:3a:85:e1:3c:da:04:8b:be:39:a8:73: fb:e9:7b:13:a1:be:47:9f:7c:80:64:a2:8d:ed:ab: 7f:65:e0:30:26:73:d9:06:30:4c:92:59:78:b5:ad: b0:be:05:28:b6:0c:72:b4:c8:37:2c:d7:5b:d2:f1: 8f:cb:cb:1d:fa:b3:9c:0c:87:fb:6c:d6:2d:23:6b: 99:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F2:25:53:F5:80:22:02:86:F7:F5:73:AB:55:11:CA:E8:F1:4D:09 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143022.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a174::/32 Signature Algorithm: sha256WithRSAEncryption 14:3a:78:01:bd:c4:dc:05:4b:76:1e:43:95:26:29:62:e9:09: b8:ed:50:c7:fb:c2:a6:19:c8:18:13:15:3b:12:f1:c7:59:7a: 18:14:da:bf:42:71:ae:f3:ac:81:ca:b3:a4:ad:d3:64:0e:ad: bb:8b:a3:8e:03:b3:2a:a3:68:ac:b3:cd:3d:a4:95:15:7e:9c: a9:ea:32:39:91:a9:38:6d:42:11:ff:ed:7e:06:1b:56:7b:86: 7c:59:8c:9a:e4:6a:88:92:bc:0e:2c:a0:8a:4e:54:2b:8d:79: 9c:7b:2e:86:66:75:38:60:a6:61:a7:a1:36:eb:bb:dc:86:03: fa:36:c6:aa:2b:96:50:a4:fd:3d:44:05:db:26:cd:dc:46:25: 8d:a2:3a:6f:69:9a:d9:a4:84:c0:1c:15:0c:d8:a4:c3:16:7b: fe:78:1e:b4:25:ca:5d:e8:6b:cb:d2:47:d3:b5:58:df:67:eb: e7:79:43:da:73:47:ed:81:43:e2:b5:86:47:e3:d3:56:a6:2b: 62:39:54:6f:9e:d6:10:12:4a:7e:2c:09:db:aa:40:e1:b5:bc: 38:d8:4b:eb:6e:3c:06:0a:9a:92:04:f0:51:16:23:93:6b:14: 6c:24:1e:f8:ae:63:a8:57:76:cd:40:a8:e8:a7:0c:de:44:22: 2f:f9:ab:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHtw1hW57L0+fqAWE0tavEXt8Fh4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxNFoX DTI3MDMwMzA2MDcxNFowMzExMC8GA1UEAxMoQzVGMjI1NTNGNTgwMjIwMjg2RjdG NTczQUI1NTExQ0FFOEYxNEQwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKW1gZAu6T7aEhBvJdI7GIgZYfK/s9vyTOUtOZcMuMtlPOACBL/08M2DTmqZ nxdne2VN6ZpAnRBiVSR0OUx2DwViNxqF531SSyZcU7VMn5YIryHmUHXcqIJI6RTW jDMCBmfQFkLEeIYZaQnyToxGEHn5/1qyrl5YjsAbNmKFx7kt7N8CEijBIYV80aVS pC5f/Gfa+IdxAfFuz6eVU6Xsz8+ZhTovqlu1v6efLhY8ASV37iI9KdP8sTqF4Tza BIu+Oahz++l7E6G+R598gGSije2rf2XgMCZz2QYwTJJZeLWtsL4FKLYMcrTINyzX W9Lxj8vLHfqznAyH+2zWLSNrmVsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTF8iVT 9YAiAob39XOrVRHK6PFNCTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oXQwDQYJKoZIhvcNAQELBQADggEBABQ6eAG9xNwFS3YeQ5UmKWLpCbjtUMf7wqYZ yBgTFTsS8cdZehgU2r9Cca7zrIHKs6St02QOrbuLo44DsyqjaKyzzT2klRV+nKnq MjmRqThtQhH/7X4GG1Z7hnxZjJrkaoiSvA4soIpOVCuNeZx7LoZmdThgpmGnoTbr u9yGA/o2xqorllCk/T1EBdsmzdxGJY2iOm9pmtmkhMAcFQzYpMMWe/54HrQlyl3o a8vSR9O1WN9n6+d5Q9pzR+2BQ+K1hkfj01amK2I5VG+e1hASSn4sCduqQOG1vDjY S+tuPAYKmpIE8FEWI5NrFGwkHviuY6hXds1AqOinDN5EIi/5q8s= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:18 2026 by rpki-client