$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143043.roa File: AS143043.roa (raw, json) Hash identifier: jItHXgNh7WZnQABzRLA4oDhQeHuuW96qNIC2/Dkl8aM= Subject key identifier: 16:73:1F:DC:89:13:01:0D:31:4B:D4:12:DF:0E:FB:3E:D6:9F:B5:52 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08844BADB47FA983F0EDF3D5490C63798EA8937C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143043.roa Signing time: Wed 04 Mar 2026 06:06:55 +0000 ROA not before: Wed 04 Mar 2026 06:01:55 +0000 ROA not after: Wed 03 Mar 2027 06:06:55 +0000 asID: 143043 IP address blocks: 240a:a189::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:84:4b:ad:b4:7f:a9:83:f0:ed:f3:d5:49:0c:63:79:8e:a8:93:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:55 2026 GMT Not After : Mar 3 06:06:55 2027 GMT Subject: CN=16731FDC8913010D314BD412DF0EFB3ED69FB552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:5d:3f:95:b4:b3:26:2a:0e:af:04:b3:5f: 9e:50:a6:3a:60:61:69:fe:12:a2:b0:c0:06:85:48: 12:1a:93:5f:a3:d5:92:99:9d:11:0a:93:c2:76:3b: f2:af:a5:39:6e:6c:1a:a3:c1:5d:29:8e:1a:01:1a: 46:65:c2:7a:eb:43:b8:b7:9d:e5:c2:7d:59:20:a3: b1:bd:9b:50:4d:ba:65:7a:ed:47:b1:ad:6c:c8:f1: 6d:c7:3b:ce:5a:29:60:23:a7:b5:ac:98:78:b0:6e: e8:a7:9d:61:12:cf:95:fd:e9:d7:4f:62:ab:7b:54: 28:a0:c9:bf:ea:41:1f:d1:b5:1d:99:05:f6:2c:01: 7b:20:c8:a4:b4:00:bc:61:45:c9:dd:b2:97:f6:54: 15:01:fa:3e:3c:87:42:08:51:a0:7e:bd:d0:8c:35: f9:48:50:dd:bf:d7:0e:26:35:66:a2:ed:0e:fd:81: a3:3b:90:3f:c7:f7:b7:0a:55:a7:11:21:be:fb:45: c0:66:85:39:9d:2b:dd:f1:11:b0:a8:44:30:33:99: b2:99:f4:0f:95:c8:92:8c:9b:4f:9e:2f:c2:2f:96: 83:10:4b:f4:4e:bc:e9:93:79:fa:d2:4f:b7:21:6b: b6:a1:d4:5a:0e:45:62:06:83:ee:1d:09:17:1b:d9: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:73:1F:DC:89:13:01:0D:31:4B:D4:12:DF:0E:FB:3E:D6:9F:B5:52 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a189::/32 Signature Algorithm: sha256WithRSAEncryption 1a:82:43:4a:68:ab:4b:2e:2f:3a:66:71:e2:ae:ee:f0:89:95: 21:7c:25:ce:00:1e:8e:74:f9:e0:3d:f8:d3:16:9d:5f:5b:42: 7e:4c:61:fd:e6:f4:26:a0:b1:75:b2:99:00:97:c5:5a:a6:f4: a7:41:08:1e:32:a4:f9:6e:10:bb:3d:ab:bd:c2:b0:98:67:bf: 63:3a:4f:5b:41:68:a4:8d:f0:38:60:4f:ac:9f:7b:58:4b:8e: a1:01:56:2e:e5:3f:03:44:12:e0:0b:ca:77:96:91:4f:c7:89: f6:01:41:a2:3a:e8:0e:b9:5f:19:b5:bf:c6:f1:27:e5:5c:d1: 22:74:c5:d3:02:2d:64:87:58:03:56:25:af:2c:d3:e9:07:d5: b9:a7:3a:92:bd:7c:f2:65:af:e4:d5:09:4a:d2:64:b5:8c:40: c1:88:d6:15:a5:4c:8f:98:cf:c1:64:07:0d:c0:7f:25:f0:83: 3e:1e:89:43:1d:7a:c2:0e:ba:0d:43:61:bb:6b:f3:1d:79:50: 3b:69:1d:29:00:1a:d2:2e:a1:79:88:c8:8b:2f:91:b0:39:01: 61:8f:b8:d8:fe:60:21:b2:20:70:50:a8:98:d0:72:1f:3e:40: 44:d3:28:6f:93:17:1c:99:d0:5f:95:71:5a:1e:bc:dd:1b:d5: c4:0e:30:23 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCIRLrbR/qYPw7fPVSQxjeY6ok3wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1NVoX DTI3MDMwMzA2MDY1NVowMzExMC8GA1UEAxMoMTY3MzFGREM4OTEzMDEwRDMxNEJE NDEyREYwRUZCM0VENjlGQjU1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKL/XT+VtLMmKg6vBLNfnlCmOmBhaf4SorDABoVIEhqTX6PVkpmdEQqTwnY7 8q+lOW5sGqPBXSmOGgEaRmXCeutDuLed5cJ9WSCjsb2bUE26ZXrtR7GtbMjxbcc7 zlopYCOntayYeLBu6KedYRLPlf3p109iq3tUKKDJv+pBH9G1HZkF9iwBeyDIpLQA vGFFyd2yl/ZUFQH6PjyHQghRoH690Iw1+UhQ3b/XDiY1ZqLtDv2BozuQP8f3twpV pxEhvvtFwGaFOZ0r3fERsKhEMDOZspn0D5XIkoybT54vwi+WgxBL9E686ZN5+tJP tyFrtqHUWg5FYgaD7h0JFxvZ9F8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQWcx/c iRMBDTFL1BLfDvs+1p+1UjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oYkwDQYJKoZIhvcNAQELBQADggEBABqCQ0poq0suLzpmceKu7vCJlSF8Jc4AHo50 +eA9+NMWnV9bQn5MYf3m9CagsXWymQCXxVqm9KdBCB4ypPluELs9q73CsJhnv2M6 T1tBaKSN8DhgT6yfe1hLjqEBVi7lPwNEEuALyneWkU/HifYBQaI66A65Xxm1v8bx J+Vc0SJ0xdMCLWSHWANWJa8s0+kH1bmnOpK9fPJlr+TVCUrSZLWMQMGI1hWlTI+Y z8FkBw3AfyXwgz4eiUMdesIOug1DYbtr8x15UDtpHSkAGtIuoXmIyIsvkbA5AWGP uNj+YCGyIHBQqJjQch8+QETTKG+TFxyZ0F+VcVoevN0b1cQOMCM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:05 2026 by rpki-client