$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143038.roa File: AS143038.roa (raw, json) Hash identifier: KQxaqNbp8BSsPp9IRD4iGuOE+ZFUpHmPlr0OJhj6mmQ= Subject key identifier: 7C:F6:F5:44:81:CD:E6:29:B4:69:D1:F1:6F:FB:6E:6E:59:43:E0:69 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 114214685E76365FA63AC1852D7612880E48B7D5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143038.roa Signing time: Wed 04 Mar 2026 06:07:20 +0000 ROA not before: Wed 04 Mar 2026 06:02:20 +0000 ROA not after: Wed 03 Mar 2027 06:07:20 +0000 asID: 143038 IP address blocks: 240a:a184::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:42:14:68:5e:76:36:5f:a6:3a:c1:85:2d:76:12:88:0e:48:b7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:20 2026 GMT Not After : Mar 3 06:07:20 2027 GMT Subject: CN=7CF6F54481CDE629B469D1F16FFB6E6E5943E069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:86:fb:8f:97:5f:ed:17:a3:37:8b:29:d5:df: 3b:d6:97:ea:4a:b1:84:55:78:5f:18:13:48:4f:ee: da:0e:d7:36:a5:07:00:77:25:c4:33:ab:45:fc:02: e5:11:d5:98:0d:37:e9:96:ac:8d:bb:ff:a9:32:01: 81:29:23:56:b3:1e:82:be:3d:6c:c5:c4:ac:fc:25: b1:02:d9:1f:9a:c9:68:6f:34:4e:11:9e:d8:11:01: c8:52:8a:d4:ca:0b:be:83:9b:c4:c0:99:7d:4b:e0: 89:74:84:07:00:0d:14:6b:7f:6e:55:a1:e2:71:c5: 77:c9:40:54:18:fc:55:f9:04:78:7c:4a:7a:5d:0f: a2:ea:35:8d:29:09:2e:06:6b:83:d7:cf:b1:3e:64: f5:dc:36:09:9b:b8:44:a4:99:73:58:6d:a1:56:4c: 99:2a:01:7d:9a:dd:3d:06:7a:a6:c1:87:93:85:6a: 84:9b:9c:c9:f0:b6:c4:7b:37:f5:9f:50:b3:77:08: 03:46:34:a2:3a:fc:6a:5a:e2:08:bb:34:35:97:8f: 44:97:8e:61:16:51:2b:07:68:9d:cf:75:47:5e:94: 32:77:cc:c1:b9:87:50:bc:9f:97:f9:38:84:9e:3f: c4:de:8b:7a:46:aa:29:6d:a0:35:e6:19:a2:b5:4e: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F6:F5:44:81:CD:E6:29:B4:69:D1:F1:6F:FB:6E:6E:59:43:E0:69 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a184::/32 Signature Algorithm: sha256WithRSAEncryption a0:97:f1:44:36:bb:d7:44:a7:50:71:66:b1:e9:46:45:88:b0: 40:ff:2a:f3:35:7b:f5:6e:1b:44:d0:72:a1:63:c2:81:65:69: 76:c8:29:3e:dd:46:2b:fc:d9:41:90:31:7d:a9:d5:01:34:77: 65:a5:e3:ab:82:9e:96:80:69:9f:11:fe:1a:72:29:d2:6c:b6: 17:d4:94:06:32:1f:8c:70:2c:e0:d4:2c:0b:8a:e9:15:7d:b5: 3b:46:86:83:27:a0:da:0a:2d:84:e9:50:9a:8f:97:20:5f:1f: 83:26:d3:a3:56:9d:ee:e7:a1:8c:1c:3c:56:c5:a0:9f:7d:40: 35:cb:54:21:9d:73:1e:5d:92:32:b2:13:d0:fd:84:39:5a:fa: 3a:04:2c:90:15:73:fe:f0:a1:cc:1c:f2:6c:08:7f:ba:6c:66: 3b:e9:8b:0c:a1:1d:b9:13:b8:79:e5:32:07:7c:2b:0f:37:5c: 94:49:4b:7f:39:56:11:89:75:f2:25:26:ad:36:17:32:ff:87: c9:3b:22:b1:a6:4a:0c:5b:f5:ca:61:ee:d6:72:8c:41:ec:d6: d4:c9:1e:11:42:e6:09:bb:c2:5e:12:bd:2c:22:2f:18:fa:37: 43:84:e6:93:d4:25:6c:cf:8b:29:84:10:9d:e2:42:5c:fa:d7: f2:cb:e0:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEUIUaF52Nl+mOsGFLXYSiA5It9UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyMFoX DTI3MDMwMzA2MDcyMFowMzExMC8GA1UEAxMoN0NGNkY1NDQ4MUNERTYyOUI0NjlE MUYxNkZGQjZFNkU1OTQzRTA2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSG+4+XX+0XozeLKdXfO9aX6kqxhFV4XxgTSE/u2g7XNqUHAHclxDOrRfwC 5RHVmA036Zasjbv/qTIBgSkjVrMegr49bMXErPwlsQLZH5rJaG80ThGe2BEByFKK 1MoLvoObxMCZfUvgiXSEBwANFGt/blWh4nHFd8lAVBj8VfkEeHxKel0Pouo1jSkJ LgZrg9fPsT5k9dw2CZu4RKSZc1htoVZMmSoBfZrdPQZ6psGHk4VqhJucyfC2xHs3 9Z9Qs3cIA0Y0ojr8alriCLs0NZePRJeOYRZRKwdonc91R16UMnfMwbmHULyfl/k4 hJ4/xN6LekaqKW2gNeYZorVOoHsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR89vVE gc3mKbRp0fFv+25uWUPgaTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzAzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oYQwDQYJKoZIhvcNAQELBQADggEBAKCX8UQ2u9dEp1BxZrHpRkWIsED/KvM1e/Vu G0TQcqFjwoFlaXbIKT7dRiv82UGQMX2p1QE0d2Wl46uCnpaAaZ8R/hpyKdJsthfU lAYyH4xwLODULAuK6RV9tTtGhoMnoNoKLYTpUJqPlyBfH4Mm06NWne7noYwcPFbF oJ99QDXLVCGdcx5dkjKyE9D9hDla+joELJAVc/7wocwc8mwIf7psZjvpiwyhHbkT uHnlMgd8Kw83XJRJS385VhGJdfIlJq02FzL/h8k7IrGmSgxb9cph7tZyjEHs1tTJ HhFC5gm7wl4SvSwiLxj6N0OE5pPUJWzPiymEEJ3iQlz61/LL4GI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:46 2026 by rpki-client