$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143025.roa File: AS143025.roa (raw, json) Hash identifier: 4AYl04VNi9JOwUL+o03BoL6x42qliRvOSQWVQlBD0G8= Subject key identifier: A5:1C:A4:F7:1F:39:D3:AD:A6:B2:B5:34:83:94:1D:A7:A6:5A:B3:FD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0F77FE0BBADD0FF90E05DC596C234907A832C9FF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143025.roa Signing time: Wed 04 Mar 2026 06:07:44 +0000 ROA not before: Wed 04 Mar 2026 06:02:44 +0000 ROA not after: Wed 03 Mar 2027 06:07:44 +0000 asID: 143025 IP address blocks: 240a:a177::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:77:fe:0b:ba:dd:0f:f9:0e:05:dc:59:6c:23:49:07:a8:32:c9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:44 2026 GMT Not After : Mar 3 06:07:44 2027 GMT Subject: CN=A51CA4F71F39D3ADA6B2B53483941DA7A65AB3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:32:2f:e5:6c:32:76:8b:4e:eb:8b:97:23: 65:a2:e4:1f:d6:9e:60:2f:21:e0:a0:93:71:e8:8c: 1d:02:43:dd:1d:cd:c0:eb:97:9c:e7:b3:f0:1c:82: d8:8d:e5:36:2a:43:64:fa:06:ff:e8:e0:0a:7b:2b: 80:f3:1e:2f:5b:be:be:2b:9b:1b:55:7d:d8:b4:d0: 81:00:64:fc:bb:aa:c2:62:89:73:99:ce:2e:17:1a: a6:1f:c4:23:81:8f:ff:1a:c8:8b:45:76:61:a8:6e: 38:03:f9:3e:f6:1b:1c:de:7c:a4:89:ed:cf:2d:ab: 2f:c4:e2:6e:11:1d:f5:25:05:fa:99:05:50:f2:83: 42:ad:7c:62:5d:ad:58:e7:21:c8:ec:2f:51:1d:24: 72:bc:62:e3:94:1c:b6:59:bf:4f:6e:04:9f:72:df: 5e:6d:93:3d:94:3b:9b:9a:d2:97:9e:33:5e:3c:9b: 87:fc:0b:5c:96:11:68:d6:6f:77:00:d5:dc:f8:56: d0:46:66:82:ce:64:a0:3f:b7:14:29:e4:84:dc:bd: 69:a3:cf:8d:09:58:ea:27:57:b0:f2:1c:ea:66:d9: 48:9d:ef:cf:a2:74:f2:18:61:6e:8d:21:e5:b5:39: 5d:a9:59:0f:32:9a:54:85:d5:75:65:c0:bb:bc:a8: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1C:A4:F7:1F:39:D3:AD:A6:B2:B5:34:83:94:1D:A7:A6:5A:B3:FD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a177::/32 Signature Algorithm: sha256WithRSAEncryption 80:a3:0e:01:e3:11:09:80:82:cb:ae:24:7d:93:54:d3:c4:45: 7a:39:9c:bf:1a:43:1e:22:f6:23:cb:66:df:14:da:1a:e9:01: e2:6a:cf:50:93:31:d2:0f:0f:2b:95:c7:20:b6:4c:3b:e5:0b: 8d:d4:2c:eb:f3:26:96:4d:a7:cc:70:27:97:bf:f6:d1:48:f4: 8c:d4:fa:c4:f8:00:e8:b9:f5:81:83:44:2c:d1:6d:86:3f:0c: 58:cc:17:d0:6d:5c:1e:71:a1:68:4a:80:5d:10:3b:00:68:83: a6:6e:cc:4c:23:c3:08:97:1e:71:7b:df:24:8c:2b:f7:cc:66: 9a:7d:79:94:4f:dc:b8:9b:fb:f3:9d:56:d8:31:8c:1b:96:f0: 51:22:e3:d6:13:0b:91:c3:83:2b:d2:3e:f3:05:3c:a6:bb:b3: 0e:a2:a6:f9:f5:55:ea:31:a2:22:cf:5f:27:ed:79:d8:72:48: e6:c0:66:02:8f:70:82:44:5d:56:f7:a3:c5:aa:33:fd:0b:52: 14:cd:59:6b:b7:e4:98:6d:b6:c9:b5:3a:5a:eb:77:4d:dd:85: f9:0f:a7:17:43:e2:93:23:1c:23:38:75:8b:61:b6:16:6f:b5: fe:d6:0a:b3:3e:ef:bd:58:72:f0:49:1c:69:ca:2c:ae:c2:57: f1:96:eb:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUD3f+C7rdD/kOBdxZbCNJB6gyyf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0NFoX DTI3MDMwMzA2MDc0NFowMzExMC8GA1UEAxMoQTUxQ0E0RjcxRjM5RDNBREE2QjJC NTM0ODM5NDFEQTdBNjVBQjNGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALI8Mi/lbDJ2i07ri5cjZaLkH9aeYC8h4KCTceiMHQJD3R3NwOuXnOez8ByC 2I3lNipDZPoG/+jgCnsrgPMeL1u+viubG1V92LTQgQBk/LuqwmKJc5nOLhcaph/E I4GP/xrIi0V2YahuOAP5PvYbHN58pIntzy2rL8TibhEd9SUF+pkFUPKDQq18Yl2t WOchyOwvUR0kcrxi45Qctlm/T24En3LfXm2TPZQ7m5rSl54zXjybh/wLXJYRaNZv dwDV3PhW0EZmgs5koD+3FCnkhNy9aaPPjQlY6idXsPIc6mbZSJ3vz6J08hhhbo0h 5bU5XalZDzKaVIXVdWXAu7yovkkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSlHKT3 HznTraaytTSDlB2nplqz/TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oXcwDQYJKoZIhvcNAQELBQADggEBAICjDgHjEQmAgsuuJH2TVNPERXo5nL8aQx4i 9iPLZt8U2hrpAeJqz1CTMdIPDyuVxyC2TDvlC43ULOvzJpZNp8xwJ5e/9tFI9IzU +sT4AOi59YGDRCzRbYY/DFjMF9BtXB5xoWhKgF0QOwBog6ZuzEwjwwiXHnF73ySM K/fMZpp9eZRP3Lib+/OdVtgxjBuW8FEi49YTC5HDgyvSPvMFPKa7sw6ipvn1Veox oiLPXyftedhySObAZgKPcIJEXVb3o8WqM/0LUhTNWWu35Jhttsm1Olrrd03dhfkP pxdD4pMjHCM4dYththZvtf7WCrM+771YcvBJHGnKLK7CV/GW69g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:59 2026 by rpki-client