$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143027.roa File: AS143027.roa (raw, json) Hash identifier: 63uD4itQwTA4bkewIoC7g8fj1ixpbZ7jgPi4NLGvIoU= Subject key identifier: 8B:2A:42:F6:5B:BC:7A:94:9A:A0:D6:98:3F:9E:97:ED:23:1F:8F:BB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 481E210A235620739B369A6FAD619FCF3DE719F0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143027.roa Signing time: Wed 04 Mar 2026 06:05:22 +0000 ROA not before: Wed 04 Mar 2026 06:00:22 +0000 ROA not after: Wed 03 Mar 2027 06:05:22 +0000 asID: 143027 IP address blocks: 240a:a179::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1e:21:0a:23:56:20:73:9b:36:9a:6f:ad:61:9f:cf:3d:e7:19:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:22 2026 GMT Not After : Mar 3 06:05:22 2027 GMT Subject: CN=8B2A42F65BBC7A949AA0D6983F9E97ED231F8FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f1:66:47:1e:46:70:5d:00:47:b5:47:da:f9: 7b:35:c3:4e:c0:ab:47:55:7b:8a:66:39:ad:cd:69: 3d:44:7d:30:20:b9:1a:e4:26:ac:52:e8:66:30:12: 35:de:44:1c:92:55:04:c8:72:15:66:49:b5:c0:14: d2:eb:ba:1b:3e:6c:08:a7:aa:f2:d5:91:8f:67:6c: 47:cf:ba:bd:7b:b2:55:c0:36:b0:ca:b0:29:bb:4e: e9:3d:bd:3e:bf:dd:5c:bf:dc:ab:50:45:31:a6:19: 20:e7:6f:71:51:ac:2c:76:c7:4c:5d:46:a9:db:ac: 10:38:6f:5f:04:69:b8:e2:66:10:4a:67:f3:c6:02: df:e5:d9:6b:14:84:3b:0c:db:9a:a8:8d:66:af:5f: 07:b7:bf:1f:dd:a5:22:c3:ef:16:5f:47:78:a4:bc: 0e:59:a0:bd:3e:cb:09:1e:96:03:a7:fb:38:9a:78: 52:1e:42:a0:fa:b5:60:16:d7:45:c0:48:80:16:e7: ab:3f:8b:6a:b4:7e:0c:fd:2c:00:e9:e3:33:69:52: e1:6d:06:f3:88:14:37:bb:a1:8c:c1:29:d0:16:c3: d0:b1:03:56:e1:38:a0:68:1c:95:24:21:db:e0:86: 15:23:f1:a7:85:20:82:d8:a6:d3:a2:d7:38:89:f4: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2A:42:F6:5B:BC:7A:94:9A:A0:D6:98:3F:9E:97:ED:23:1F:8F:BB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143027.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a179::/32 Signature Algorithm: sha256WithRSAEncryption da:85:bc:39:8b:76:94:47:58:05:67:92:76:3a:ff:92:f8:4e: e7:fe:8d:17:9b:6e:6a:31:83:85:14:21:27:3a:63:76:32:da: 21:ba:e0:79:89:f7:03:89:45:ef:45:3f:b5:0b:cb:8a:bd:f5: 4f:ee:63:f2:a8:34:96:e3:f9:2a:57:70:e1:60:06:df:86:0f: 47:7f:5a:8b:a9:ed:71:e8:e5:53:35:9e:c4:a9:e0:1a:6e:99: 98:ab:60:8b:6b:8d:ad:26:7e:5b:59:d2:b0:79:ee:af:aa:da: e8:bd:8d:ad:21:33:48:8a:ea:1a:21:a6:2f:3b:86:1a:cd:73: 96:50:58:6c:6b:5d:76:af:1a:78:2a:cd:ac:37:e1:12:87:e2: b8:22:b2:3d:3b:ad:b2:66:17:5f:94:67:33:61:c0:75:8d:11: 65:55:41:63:c7:66:40:3b:a9:00:e9:e9:63:a9:fb:b0:35:90: f2:26:92:03:d0:a8:d0:94:99:97:bd:34:12:4f:36:ce:6a:58: 50:6f:8c:dc:c2:f0:b0:8c:1c:50:7a:3c:34:ca:a9:5e:8e:0d: f0:4e:a4:a7:62:ff:43:b7:8e:86:89:d5:91:5e:a6:62:a8:76: ea:8f:26:7e:28:b7:1d:a0:ae:88:9e:6f:6a:10:60:4e:44:3d: 6a:f9:d5:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSB4hCiNWIHObNppvrWGfzz3nGfAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyMloX DTI3MDMwMzA2MDUyMlowMzExMC8GA1UEAxMoOEIyQTQyRjY1QkJDN0E5NDlBQTBE Njk4M0Y5RTk3RUQyMzFGOEZCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTxZkceRnBdAEe1R9r5ezXDTsCrR1V7imY5rc1pPUR9MCC5GuQmrFLoZjAS Nd5EHJJVBMhyFWZJtcAU0uu6Gz5sCKeq8tWRj2dsR8+6vXuyVcA2sMqwKbtO6T29 Pr/dXL/cq1BFMaYZIOdvcVGsLHbHTF1GqdusEDhvXwRpuOJmEEpn88YC3+XZaxSE OwzbmqiNZq9fB7e/H92lIsPvFl9HeKS8DlmgvT7LCR6WA6f7OJp4Uh5CoPq1YBbX RcBIgBbnqz+LarR+DP0sAOnjM2lS4W0G84gUN7uhjMEp0BbD0LEDVuE4oGgclSQh 2+CGFSPxp4Uggtim06LXOIn0w3kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSLKkL2 W7x6lJqg1pg/npftIx+PuzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAyNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oXkwDQYJKoZIhvcNAQELBQADggEBANqFvDmLdpRHWAVnknY6/5L4Tuf+jRebbmox g4UUISc6Y3Yy2iG64HmJ9wOJRe9FP7ULy4q99U/uY/KoNJbj+SpXcOFgBt+GD0d/ Woup7XHo5VM1nsSp4BpumZirYItrja0mfltZ0rB57q+q2ui9ja0hM0iK6hohpi87 hhrNc5ZQWGxrXXavGngqzaw34RKH4rgisj07rbJmF1+UZzNhwHWNEWVVQWPHZkA7 qQDp6WOp+7A1kPImkgPQqNCUmZe9NBJPNs5qWFBvjNzC8LCMHFB6PDTKqV6ODfBO pKdi/0O3joaJ1ZFepmKoduqPJn4otx2groieb2oQYE5EPWr51Ro= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:57 2026 by rpki-client