$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143030.roa File: AS143030.roa (raw, json) Hash identifier: dW4WAmOhl2uFbeIpv/M0ohVhP5JSGG9ZHAaRTQqDwqA= Subject key identifier: 5E:D0:3D:EA:3E:50:45:8F:93:44:49:4E:AC:7A:48:A6:8E:68:3E:43 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 702AB8CB80C17A4D9B2070C3C89A6D4ADB4B315E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143030.roa Signing time: Wed 04 Mar 2026 06:07:17 +0000 ROA not before: Wed 04 Mar 2026 06:02:17 +0000 ROA not after: Wed 03 Mar 2027 06:07:17 +0000 asID: 143030 IP address blocks: 240a:a17c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2a:b8:cb:80:c1:7a:4d:9b:20:70:c3:c8:9a:6d:4a:db:4b:31:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:17 2026 GMT Not After : Mar 3 06:07:17 2027 GMT Subject: CN=5ED03DEA3E50458F9344494EAC7A48A68E683E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:d1:19:34:21:d3:03:27:79:aa:8d:75:65: 09:01:b7:cc:15:01:00:54:94:9a:51:e6:f9:68:0d: 56:9e:98:d0:1e:94:af:f6:01:de:bf:99:9f:fa:30: c3:cb:b5:c6:2b:2c:fe:f2:28:02:43:06:69:73:9f: 12:e5:85:90:92:c6:72:23:e4:26:22:82:4b:19:f5: bb:7e:e1:f3:2b:2d:a5:b1:69:52:b8:24:c6:57:20: 8d:15:bf:31:0f:e6:9a:97:d5:04:63:c7:6c:3b:ac: 70:81:3b:a8:00:d6:59:a0:df:83:25:b6:c6:f8:ab: 36:ad:81:fd:d9:14:3f:aa:6a:a3:08:70:a7:10:98: db:cc:49:2f:1d:fc:b7:ec:de:fe:bd:c5:6e:78:f4: aa:bf:e0:88:52:67:a4:89:60:9e:64:75:7e:01:c0: 16:a4:c3:91:19:d2:89:91:8e:cf:fc:c8:a2:c9:6c: a5:86:69:0e:a6:2c:47:ce:b0:88:5f:67:93:e7:df: 11:70:9f:55:c3:f8:52:f3:99:f3:87:07:9f:29:0b: 8f:20:4e:dc:14:da:cd:b3:c2:0c:9f:5c:4d:7d:08: b7:6f:cf:04:f9:f9:00:74:ba:be:37:85:7c:ce:61: b2:21:ae:40:ea:a9:5a:5d:49:e5:16:28:a8:10:13: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D0:3D:EA:3E:50:45:8F:93:44:49:4E:AC:7A:48:A6:8E:68:3E:43 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a17c::/32 Signature Algorithm: sha256WithRSAEncryption dc:f1:a7:07:93:ad:0b:1c:89:3d:d8:fd:51:b1:34:3f:88:5a: 4d:c4:1c:aa:a5:2f:15:84:97:f5:82:9c:e0:f2:36:73:b3:a8: 64:e3:2d:61:7a:93:1e:82:9d:44:eb:cb:d6:57:f1:07:36:8c: 80:47:84:b0:1d:e4:3a:a5:97:6e:4a:64:dd:8d:7b:d1:2c:dd: ff:79:53:93:af:58:4f:7b:76:95:86:15:41:04:7a:96:76:95: 8f:e8:34:48:3f:20:71:f3:83:37:f6:0b:13:b0:8b:01:db:a0: 68:34:02:4c:2d:c5:ed:7c:96:8f:ff:f9:3c:39:4e:00:f4:53: 85:ba:ee:ae:57:38:4e:63:03:21:0d:f2:d3:ae:f1:fa:5a:65: 24:c4:d4:95:04:6b:4b:42:fc:24:c1:3e:7f:61:ba:88:09:35: 9e:8f:bf:e5:26:bd:52:ff:c1:20:23:72:06:de:b5:f8:74:8e: db:de:4e:31:be:0b:11:5e:92:ff:b1:49:c8:2b:71:f6:6c:4b: 79:fc:bc:2b:51:8b:73:af:a4:ed:ba:20:24:4d:f4:93:4a:b4: fa:64:ec:31:2e:a6:a1:a5:fc:aa:31:bf:77:13:b0:3e:5f:a7: 72:87:cc:ed:d5:97:cf:49:18:87:35:3e:5a:96:5e:64:c4:ea: 86:00:01:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcCq4y4DBek2bIHDDyJptSttLMV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxN1oX DTI3MDMwMzA2MDcxN1owMzExMC8GA1UEAxMoNUVEMDNERUEzRTUwNDU4RjkzNDQ0 OTRFQUM3QTQ4QTY4RTY4M0U0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUS0Rk0IdMDJ3mqjXVlCQG3zBUBAFSUmlHm+WgNVp6Y0B6Ur/YB3r+Zn/ow w8u1xiss/vIoAkMGaXOfEuWFkJLGciPkJiKCSxn1u37h8ystpbFpUrgkxlcgjRW/ MQ/mmpfVBGPHbDuscIE7qADWWaDfgyW2xvirNq2B/dkUP6pqowhwpxCY28xJLx38 t+ze/r3Fbnj0qr/giFJnpIlgnmR1fgHAFqTDkRnSiZGOz/zIoslspYZpDqYsR86w iF9nk+ffEXCfVcP4UvOZ84cHnykLjyBO3BTazbPCDJ9cTX0It2/PBPn5AHS6vjeF fM5hsiGuQOqpWl1J5RYoqBATC8MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRe0D3q PlBFj5NESU6sekimjmg+QzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oXwwDQYJKoZIhvcNAQELBQADggEBANzxpweTrQsciT3Y/VGxND+IWk3EHKqlLxWE l/WCnODyNnOzqGTjLWF6kx6CnUTry9ZX8Qc2jIBHhLAd5Dqll25KZN2Ne9Es3f95 U5OvWE97dpWGFUEEepZ2lY/oNEg/IHHzgzf2CxOwiwHboGg0Akwtxe18lo//+Tw5 TgD0U4W67q5XOE5jAyEN8tOu8fpaZSTE1JUEa0tC/CTBPn9huogJNZ6Pv+UmvVL/ wSAjcgbetfh0jtveTjG+CxFekv+xScgrcfZsS3n8vCtRi3OvpO26ICRN9JNKtPpk 7DEupqGl/Koxv3cTsD5fp3KHzO3Vl89JGIc1PlqWXmTE6oYAAZY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:57 2026 by rpki-client