$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143045.roa File: AS143045.roa (raw, json) Hash identifier: U3j1Aqi+wxoRcrAxt4GFGBqlnlw7mNfG5XbTnGqFCeE= Subject key identifier: FA:91:5C:CA:14:B1:F7:5B:65:6E:BF:16:02:E1:1E:9D:47:CC:CF:28 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 37BD03CDC9236F277CC72FCAD451C895513B3C58 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143045.roa Signing time: Wed 04 Mar 2026 06:06:05 +0000 ROA not before: Wed 04 Mar 2026 06:01:05 +0000 ROA not after: Wed 03 Mar 2027 06:06:05 +0000 asID: 143045 IP address blocks: 240a:a18b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bd:03:cd:c9:23:6f:27:7c:c7:2f:ca:d4:51:c8:95:51:3b:3c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:05 2026 GMT Not After : Mar 3 06:06:05 2027 GMT Subject: CN=FA915CCA14B1F75B656EBF1602E11E9D47CCCF28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:a8:52:91:f5:23:93:ae:35:87:20:53:84: 52:78:26:d8:30:23:db:d6:a3:c8:21:47:c5:67:f5: 63:05:78:79:14:8e:a3:c3:de:95:bc:c8:10:8f:eb: 3d:bc:8a:81:93:aa:d7:5e:42:2b:d6:b3:8a:e1:46: 43:3f:1b:b0:bf:79:5e:d9:67:cb:a6:b3:2c:e7:36: 56:b5:c7:d9:36:54:a7:05:4b:08:e4:fc:14:77:b1: 7f:e9:3d:cc:dd:2d:48:b4:7b:b0:97:56:c2:65:83: 2f:d7:b6:7f:ac:3a:64:96:81:94:b4:11:5a:4d:f6: e1:d0:5d:9f:aa:9b:39:7f:3b:ac:e7:99:5f:e8:26: b8:7b:12:2a:a5:b1:0d:42:77:a0:cb:0d:cf:c0:a5: e1:b8:4f:e2:c4:ff:37:71:1f:3e:56:dc:f3:e8:4e: ac:1f:07:b2:ad:93:77:d7:43:35:fa:3f:1d:b0:9d: e8:fb:b9:17:56:b9:8d:90:87:ea:d6:69:6c:51:98: 0e:25:12:04:17:a4:4f:b8:ac:18:19:fc:8b:f3:c5: 6b:94:ce:96:a2:d5:e7:78:0c:fa:4c:30:e8:2b:81: 7a:b0:eb:01:68:fb:f5:b8:71:42:6f:3c:31:97:a1: e5:43:ec:0a:c8:dc:53:6e:30:af:b5:db:5f:08:a0: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:91:5C:CA:14:B1:F7:5B:65:6E:BF:16:02:E1:1E:9D:47:CC:CF:28 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143045.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a18b::/32 Signature Algorithm: sha256WithRSAEncryption 02:3b:37:20:9f:fe:f0:a3:be:b7:1e:1b:32:ad:c1:98:f7:b2: a4:e8:0b:85:b9:31:d4:95:3c:c7:81:4c:8b:8b:a3:7b:e1:9d: f3:06:49:94:b5:1d:22:e4:d2:bf:46:ba:3e:55:ea:d8:c0:97: 79:7a:f7:eb:f9:41:60:43:57:30:4b:ef:2a:68:b0:20:98:e9: bc:6a:58:fe:41:2b:9e:3e:77:67:4f:0e:eb:28:87:08:35:36: c0:1d:b9:b7:90:27:0c:38:5f:1a:25:15:01:ac:df:0c:53:ab: d6:74:06:77:52:48:4d:d0:22:38:2b:0c:99:49:8f:82:26:e4: 5b:26:d7:4c:b9:2a:ad:59:76:82:c1:c1:dd:f4:8a:22:f0:fa: 3d:eb:df:5e:4b:5b:2e:32:70:2d:e6:d4:22:c6:e8:87:33:ef: 60:ec:4f:cd:d2:29:cd:f2:c5:5b:08:6e:33:a6:ae:ef:ef:a1: d0:6a:21:9b:12:24:87:86:87:c1:fb:53:be:9f:4f:dc:17:14: da:f0:bd:55:76:42:aa:23:c8:c9:fe:52:5d:49:7e:dd:8c:bb: 25:f2:b1:ac:97:0c:56:4c:fc:39:8e:e7:68:3b:b2:1f:12:f6: d6:4d:95:e4:e6:e1:01:ef:2d:a2:96:f8:52:7d:b0:b4:e4:23: 78:af:80:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN70Dzckjbyd8xy/K1FHIlVE7PFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwNVoX DTI3MDMwMzA2MDYwNVowMzExMC8GA1UEAxMoRkE5MTVDQ0ExNEIxRjc1QjY1NkVC RjE2MDJFMTFFOUQ0N0NDQ0YyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4iqFKR9SOTrjWHIFOEUngm2DAj29ajyCFHxWf1YwV4eRSOo8PelbzIEI/r PbyKgZOq115CK9aziuFGQz8bsL95Xtlny6azLOc2VrXH2TZUpwVLCOT8FHexf+k9 zN0tSLR7sJdWwmWDL9e2f6w6ZJaBlLQRWk324dBdn6qbOX87rOeZX+gmuHsSKqWx DUJ3oMsNz8Cl4bhP4sT/N3EfPlbc8+hOrB8Hsq2Td9dDNfo/HbCd6Pu5F1a5jZCH 6tZpbFGYDiUSBBekT7isGBn8i/PFa5TOlqLV53gM+kww6CuBerDrAWj79bhxQm88 MZeh5UPsCsjcU24wr7XbXwigjn0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT6kVzK FLH3W2VuvxYC4R6dR8zPKDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oYswDQYJKoZIhvcNAQELBQADggEBAAI7NyCf/vCjvrceGzKtwZj3sqToC4W5MdSV PMeBTIuLo3vhnfMGSZS1HSLk0r9Guj5V6tjAl3l69+v5QWBDVzBL7yposCCY6bxq WP5BK54+d2dPDusohwg1NsAdubeQJww4XxolFQGs3wxTq9Z0BndSSE3QIjgrDJlJ j4Im5Fsm10y5Kq1ZdoLBwd30iiLw+j3r315LWy4ycC3m1CLG6Icz72DsT83SKc3y xVsIbjOmru/vodBqIZsSJIeGh8H7U76fT9wXFNrwvVV2QqojyMn+Ul1Jft2MuyXy sayXDFZM/DmO52g7sh8S9tZNleTm4QHvLaKW+FJ9sLTkI3ivgBQ= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:11 2026 by rpki-client