$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143037.roa File: AS143037.roa (raw, json) Hash identifier: Pa3A+nmXFJ3KK9Wl3jf5N1j2D5e90p0A66yRcpD/ax8= Subject key identifier: 08:BA:42:09:51:DA:EC:F7:04:C6:A9:51:F2:59:69:51:D8:29:8D:19 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 52BFDDA55B4F4D24D3C21F4E967DEF51F0CF76B9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143037.roa Signing time: Wed 04 Mar 2026 06:07:06 +0000 ROA not before: Wed 04 Mar 2026 06:02:06 +0000 ROA not after: Wed 03 Mar 2027 06:07:06 +0000 asID: 143037 IP address blocks: 240a:a183::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bf:dd:a5:5b:4f:4d:24:d3:c2:1f:4e:96:7d:ef:51:f0:cf:76:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:06 2026 GMT Not After : Mar 3 06:07:06 2027 GMT Subject: CN=08BA420951DAECF704C6A951F2596951D8298D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f1:cd:e4:1c:77:d9:51:06:11:4d:54:11:56: 10:78:c1:ab:fe:bd:9f:e2:ec:b8:69:db:92:74:3c: 99:dc:e4:d4:43:b5:29:42:83:93:5e:8c:09:f8:bd: e8:3a:3c:fc:31:fb:38:1f:08:10:bd:2c:58:04:30: 32:06:7d:43:42:e4:62:cf:e1:87:61:1a:d9:49:98: 3f:c7:4d:c4:e7:73:e8:b0:31:0d:45:e5:ef:a3:30: 8d:30:a3:d7:29:8a:80:b2:0b:ff:db:f1:96:81:de: 93:31:6e:59:aa:b4:f5:60:8b:9b:08:fa:6a:05:65: 3f:16:2e:a9:2f:6c:37:1c:f3:90:a1:89:c4:80:d1: 88:00:ac:37:3d:34:47:c3:da:be:d5:f8:0c:8f:21: 00:b0:85:21:54:78:b5:58:fb:99:2c:58:91:04:3c: 2e:99:6f:3e:4f:25:cb:b8:31:66:da:e1:b9:76:db: 8b:f2:17:f9:12:ea:43:12:6f:70:99:29:38:05:77: f8:d6:d4:f6:5c:78:aa:a1:eb:ba:dc:1f:7f:b0:a1: 2b:e2:f3:bf:75:48:4b:81:94:01:99:88:18:5c:8c: a7:34:6a:cc:9c:3b:df:f2:48:b0:92:77:6a:a3:0c: 57:27:4b:15:66:b3:96:7c:d9:86:5f:43:4e:95:ef: a9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BA:42:09:51:DA:EC:F7:04:C6:A9:51:F2:59:69:51:D8:29:8D:19 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a183::/32 Signature Algorithm: sha256WithRSAEncryption 51:47:e6:8f:de:34:f1:2b:7f:10:03:66:68:c2:9d:1d:a7:6c: bf:75:c4:87:df:d7:90:a4:6b:10:c1:81:20:59:aa:41:07:50: 3c:22:53:e0:f0:2d:36:90:09:74:a9:67:ad:0a:92:4f:b6:c0: a7:b5:e3:15:3c:f4:ec:9d:05:7d:84:18:88:d7:25:75:ee:04: 76:44:43:34:f5:ad:85:e3:e9:fa:ac:c4:f1:cb:ce:0d:ef:df: 43:9d:21:ff:97:52:c9:fc:2d:0f:1a:0e:a5:75:1d:32:38:0e: 9a:50:4e:80:4f:ba:22:4d:c2:fe:b8:e1:9b:ef:a3:b0:d4:95: 02:50:29:b0:da:5b:e2:41:ff:45:6e:a6:1d:80:5e:d8:56:5b: 2b:ce:4c:d0:6a:58:e8:d6:f8:cd:64:c6:d9:c8:46:ef:f5:ba: 54:4d:f1:12:8f:47:a2:3a:21:bf:79:82:79:8b:3b:fe:72:fb: 58:eb:62:93:7e:b6:1a:fb:da:af:3e:d2:2a:97:af:55:96:39: 8c:0d:95:ed:8c:7c:89:eb:fc:39:b9:44:cf:d2:10:65:61:db: 4e:8d:c9:4a:de:ae:f5:0f:14:9c:83:bc:bd:62:b7:18:a3:f4: 9a:4d:12:0a:90:1f:ee:b5:dc:70:32:7f:90:39:69:31:cc:80: 72:8e:ed:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUr/dpVtPTSTTwh9Oln3vUfDPdrkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwNloX DTI3MDMwMzA2MDcwNlowMzExMC8GA1UEAxMoMDhCQTQyMDk1MURBRUNGNzA0QzZB OTUxRjI1OTY5NTFEODI5OEQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObxzeQcd9lRBhFNVBFWEHjBq/69n+LsuGnbknQ8mdzk1EO1KUKDk16MCfi9 6Do8/DH7OB8IEL0sWAQwMgZ9Q0LkYs/hh2Ea2UmYP8dNxOdz6LAxDUXl76MwjTCj 1ymKgLIL/9vxloHekzFuWaq09WCLmwj6agVlPxYuqS9sNxzzkKGJxIDRiACsNz00 R8PavtX4DI8hALCFIVR4tVj7mSxYkQQ8LplvPk8ly7gxZtrhuXbbi/IX+RLqQxJv cJkpOAV3+NbU9lx4qqHrutwff7ChK+Lzv3VIS4GUAZmIGFyMpzRqzJw73/JIsJJ3 aqMMVydLFWazlnzZhl9DTpXvqS0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQIukIJ Udrs9wTGqVHyWWlR2CmNGTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oYMwDQYJKoZIhvcNAQELBQADggEBAFFH5o/eNPErfxADZmjCnR2nbL91xIff15Ck axDBgSBZqkEHUDwiU+DwLTaQCXSpZ60Kkk+2wKe14xU89OydBX2EGIjXJXXuBHZE QzT1rYXj6fqsxPHLzg3v30OdIf+XUsn8LQ8aDqV1HTI4DppQToBPuiJNwv644Zvv o7DUlQJQKbDaW+JB/0Vuph2AXthWWyvOTNBqWOjW+M1kxtnIRu/1ulRN8RKPR6I6 Ib95gnmLO/5y+1jrYpN+thr72q8+0iqXr1WWOYwNle2MfInr/Dm5RM/SEGVh206N yUrervUPFJyDvL1itxij9JpNEgqQH+613HAyf5A5aTHMgHKO7ak= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:35 2026 by rpki-client