$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143047.roa File: AS143047.roa (raw, json) Hash identifier: /BwApaqa8BjquLY/jI/ueTfUXPMXM+Au7KzZ15G00nE= Subject key identifier: 8C:47:2A:B9:61:95:CF:E1:2C:06:9A:70:36:E1:B1:FB:CD:10:9E:C4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 47A8E7B5279BF64939FDDD68848E48D82F144E3F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143047.roa Signing time: Wed 04 Mar 2026 06:06:20 +0000 ROA not before: Wed 04 Mar 2026 06:01:20 +0000 ROA not after: Wed 03 Mar 2027 06:06:20 +0000 asID: 143047 IP address blocks: 240a:a18d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a8:e7:b5:27:9b:f6:49:39:fd:dd:68:84:8e:48:d8:2f:14:4e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:20 2026 GMT Not After : Mar 3 06:06:20 2027 GMT Subject: CN=8C472AB96195CFE12C069A7036E1B1FBCD109EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:65:93:7f:d7:94:bc:5e:e8:be:ff:c9:31:a3: d2:47:55:4d:6f:2d:69:a5:a9:8d:c5:e9:13:2a:43: d1:2a:db:32:5c:6a:0c:8c:0c:1f:e4:4f:c6:12:ec: 38:04:50:e8:76:c3:81:39:31:d9:b1:a4:fb:19:ca: 74:03:94:24:30:7b:18:86:75:0b:a9:83:87:a4:38: c4:c7:f9:0e:79:05:b9:9b:84:44:6c:df:d6:2f:4c: 32:98:c1:79:57:3c:37:d8:08:b4:6d:70:e5:74:66: 2b:69:62:84:4d:83:37:2c:bf:47:df:8d:c6:ef:7d: ff:af:47:da:e4:31:3b:b9:52:0a:a1:77:7c:0c:ce: 8b:51:f3:51:a7:de:13:85:d5:4a:e4:e7:f0:16:ed: a3:a5:b5:11:2e:b6:aa:d5:9b:c2:1a:e4:c5:87:82: 2d:df:6b:f7:d5:dd:f3:d3:bf:8d:88:07:bd:30:b6: a6:45:ee:f5:65:ec:7c:e1:df:28:55:0c:fc:e0:b2: 22:1b:94:8a:ed:56:39:5c:10:53:56:25:48:e8:b7: 8d:73:92:bb:d6:5b:17:17:a5:9a:a0:41:02:1c:70: 61:1d:c0:46:b7:5e:d6:ec:8f:97:c0:2a:e1:45:cc: 68:02:cf:c2:9c:81:85:c3:18:06:20:f8:ce:0d:58: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:47:2A:B9:61:95:CF:E1:2C:06:9A:70:36:E1:B1:FB:CD:10:9E:C4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143047.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a18d::/32 Signature Algorithm: sha256WithRSAEncryption 23:2c:ce:39:60:e1:83:3b:e7:0a:b3:04:9c:b4:37:b6:b9:40: 7f:c4:aa:ea:13:e7:de:00:0a:4e:94:9a:fa:b1:69:2e:1e:91: e6:c8:60:57:8e:b4:a9:62:70:97:4a:ce:89:16:12:49:00:9d: 91:86:3c:48:54:0b:91:4c:94:81:55:b8:05:80:38:17:e1:a8: 22:90:7d:44:21:c4:af:d2:4a:6a:cc:c1:1f:74:93:80:41:52: b0:64:1a:44:68:a8:e5:86:05:43:6b:92:d9:80:29:55:bc:27: cb:b6:e1:44:b5:09:4d:21:bb:96:34:bf:f9:7a:b5:9f:ce:25: 84:76:fc:1a:bc:f4:59:bc:8c:39:97:7a:28:a3:4a:ac:4b:64: 04:75:13:c2:ce:78:b2:64:c1:b7:01:79:db:eb:7d:76:2c:5a: 9a:60:d9:6f:ad:3a:a6:fe:09:c6:24:c7:68:d9:39:d7:c0:0c: aa:1b:02:1a:9b:9f:b1:24:31:89:8a:33:00:cd:1a:e9:fd:cf: d1:54:26:58:b3:76:04:80:70:4e:55:0b:0d:64:20:13:e1:68: d1:b9:35:f3:2c:04:ca:3a:ca:9a:93:fa:08:62:66:59:84:b2: 5b:0d:89:63:fd:6f:be:40:14:2f:c0:45:fe:1e:39:ef:fb:3a: ee:48:a0:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR6jntSeb9kk5/d1ohI5I2C8UTj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyMFoX DTI3MDMwMzA2MDYyMFowMzExMC8GA1UEAxMoOEM0NzJBQjk2MTk1Q0ZFMTJDMDY5 QTcwMzZFMUIxRkJDRDEwOUVDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAINlk3/XlLxe6L7/yTGj0kdVTW8taaWpjcXpEypD0SrbMlxqDIwMH+RPxhLs OARQ6HbDgTkx2bGk+xnKdAOUJDB7GIZ1C6mDh6Q4xMf5DnkFuZuERGzf1i9MMpjB eVc8N9gItG1w5XRmK2lihE2DNyy/R9+Nxu99/69H2uQxO7lSCqF3fAzOi1HzUafe E4XVSuTn8Bbto6W1ES62qtWbwhrkxYeCLd9r99Xd89O/jYgHvTC2pkXu9WXsfOHf KFUM/OCyIhuUiu1WOVwQU1YlSOi3jXOSu9ZbFxelmqBBAhxwYR3ARrde1uyPl8Aq 4UXMaALPwpyBhcMYBiD4zg1YA5kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSMRyq5 YZXP4SwGmnA24bH7zRCexDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oY0wDQYJKoZIhvcNAQELBQADggEBACMszjlg4YM75wqzBJy0N7a5QH/EquoT594A Ck6UmvqxaS4ekebIYFeOtKlicJdKzokWEkkAnZGGPEhUC5FMlIFVuAWAOBfhqCKQ fUQhxK/SSmrMwR90k4BBUrBkGkRoqOWGBUNrktmAKVW8J8u24US1CU0hu5Y0v/l6 tZ/OJYR2/Bq89Fm8jDmXeiijSqxLZAR1E8LOeLJkwbcBedvrfXYsWppg2W+tOqb+ CcYkx2jZOdfADKobAhqbn7EkMYmKMwDNGun9z9FUJlizdgSAcE5VCw1kIBPhaNG5 NfMsBMo6ypqT+ghiZlmEslsNiWP9b75AFC/ARf4eOe/7Ou5IoG0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:23 2026 by rpki-client