$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143044.roa File: AS143044.roa (raw, json) Hash identifier: 1Qdd89bOZmIG8voNkfLoUWhxbA6JeIlWVzh5cgvAElY= Subject key identifier: 4D:49:0A:9F:5A:DD:F7:4B:8C:D9:CC:4E:90:AA:DB:67:87:2C:3F:C7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 740E6057B80F040C360C8730CFCCFC4AC49FF08F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143044.roa Signing time: Wed 04 Mar 2026 06:06:37 +0000 ROA not before: Wed 04 Mar 2026 06:01:37 +0000 ROA not after: Wed 03 Mar 2027 06:06:37 +0000 asID: 143044 IP address blocks: 240a:a18a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0e:60:57:b8:0f:04:0c:36:0c:87:30:cf:cc:fc:4a:c4:9f:f0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:37 2026 GMT Not After : Mar 3 06:06:37 2027 GMT Subject: CN=4D490A9F5ADDF74B8CD9CC4E90AADB67872C3FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:28:79:a7:cc:d2:48:3e:31:30:89:27:b3: 8d:b1:f9:74:8f:91:73:06:0a:0c:81:71:61:35:6e: 5d:f1:03:37:6a:45:15:af:28:1e:76:45:a1:80:20: e2:94:98:0c:01:b0:49:59:b7:2f:9e:a2:7f:31:d8: 34:87:4c:8a:e4:50:b0:62:88:d8:d5:59:b0:1f:1e: 00:98:cc:49:bd:90:61:c4:e0:7e:ae:65:6d:c3:d8: 9f:b5:e2:0b:a4:2e:b0:61:b0:b5:b5:07:3a:46:14: 1a:86:ad:99:65:ec:8f:5c:eb:6f:7a:45:12:f5:e4: 38:b2:0f:12:40:aa:84:d2:42:b2:42:11:38:c1:3b: b8:11:69:54:4d:05:8c:e0:cd:b1:5e:41:9e:70:dc: 86:d5:ee:63:42:b1:bb:77:4a:90:d9:3b:6a:c3:3c: ce:2a:c7:dc:87:d5:0b:12:50:30:a2:aa:c7:1d:74: 59:58:a7:90:8e:bc:57:89:22:e3:d8:b8:be:83:d9: 85:34:26:1a:a0:be:1f:94:f7:c3:24:14:87:b4:8d: eb:ff:a5:06:44:67:c9:80:e5:b7:f2:c1:db:14:1c: 45:7d:2c:ed:5a:0a:73:fc:f8:ee:4c:57:2f:bf:26: b0:8c:87:48:cf:31:ce:cb:43:34:5d:b1:a9:6d:93: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:49:0A:9F:5A:DD:F7:4B:8C:D9:CC:4E:90:AA:DB:67:87:2C:3F:C7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143044.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a18a::/32 Signature Algorithm: sha256WithRSAEncryption 63:40:ad:ba:a2:5b:c3:60:94:f6:2f:00:85:81:2d:c9:55:94: 3c:e7:06:24:6e:e7:96:89:81:e4:96:6a:62:36:40:df:4e:3c: 45:f5:f8:20:f7:59:7f:87:e7:20:c5:37:ab:35:f3:45:c2:13: 05:99:9a:56:a0:a0:50:64:15:ba:71:7c:b9:3f:78:dd:cf:7d: cd:8b:6a:bf:28:09:a8:c2:2f:a1:80:8b:b9:aa:62:4c:20:ae: 7e:b1:59:23:05:55:58:1f:0d:41:53:57:4c:9e:20:d9:f6:0e: 32:dd:16:fc:b7:e2:a9:69:67:65:ca:f8:eb:81:5d:ce:18:14: 97:66:e3:4c:ca:5b:a2:0b:18:46:c7:b8:fb:0d:23:02:0e:de: 49:24:02:ef:f0:96:77:8e:01:1f:57:d3:fe:c9:28:0d:c2:3e: 25:66:60:ef:81:6d:ba:8c:70:c3:65:53:99:f8:83:c7:30:b9: b7:5f:9b:a2:1e:32:e1:91:ba:0e:f5:58:97:ed:a6:37:2f:d8: d5:a2:ba:3e:7b:dc:97:08:e1:f7:be:5c:8f:31:04:31:2b:d1: 24:c8:f8:28:1d:f4:f8:ab:0b:5c:c0:b6:bc:f7:30:84:e8:8c: 59:0e:e8:f2:8a:e6:22:50:7d:a6:7f:ea:c3:9a:4a:39:bb:ad: c4:9b:a6:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdA5gV7gPBAw2DIcwz8z8SsSf8I8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzN1oX DTI3MDMwMzA2MDYzN1owMzExMC8GA1UEAxMoNEQ0OTBBOUY1QURERjc0QjhDRDlD QzRFOTBBQURCNjc4NzJDM0ZDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdvKHmnzNJIPjEwiSezjbH5dI+RcwYKDIFxYTVuXfEDN2pFFa8oHnZFoYAg 4pSYDAGwSVm3L56ifzHYNIdMiuRQsGKI2NVZsB8eAJjMSb2QYcTgfq5lbcPYn7Xi C6QusGGwtbUHOkYUGoatmWXsj1zrb3pFEvXkOLIPEkCqhNJCskIROME7uBFpVE0F jODNsV5BnnDchtXuY0Kxu3dKkNk7asM8zirH3IfVCxJQMKKqxx10WVinkI68V4ki 49i4voPZhTQmGqC+H5T3wyQUh7SN6/+lBkRnyYDlt/LB2xQcRX0s7VoKc/z47kxX L78msIyHSM8xzstDNF2xqW2TTQ0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNSQqf Wt33S4zZzE6Qqttnhyw/xzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oYowDQYJKoZIhvcNAQELBQADggEBAGNArbqiW8NglPYvAIWBLclVlDznBiRu55aJ geSWamI2QN9OPEX1+CD3WX+H5yDFN6s180XCEwWZmlagoFBkFbpxfLk/eN3Pfc2L ar8oCajCL6GAi7mqYkwgrn6xWSMFVVgfDUFTV0yeINn2DjLdFvy34qlpZ2XK+OuB Xc4YFJdm40zKW6ILGEbHuPsNIwIO3kkkAu/wlneOAR9X0/7JKA3CPiVmYO+BbbqM cMNlU5n4g8cwubdfm6IeMuGRug71WJftpjcv2NWiuj573JcI4fe+XI8xBDEr0STI +Cgd9PirC1zAtrz3MITojFkO6PKK5iJQfaZ/6sOaSjm7rcSbpoQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:42 2026 by rpki-client