$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143058.roa File: AS143058.roa (raw, json) Hash identifier: EZhn8NI3lcVX77hWi9QcRFWk+/g0bBS7KpnAhUUz83o= Subject key identifier: 19:2F:A5:51:5E:61:8C:23:EC:DB:62:1D:70:BC:8A:C0:FB:76:61:37 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1076871B0746CB293B47632C32C2C52408F3B088 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143058.roa Signing time: Wed 04 Mar 2026 06:07:19 +0000 ROA not before: Wed 04 Mar 2026 06:02:19 +0000 ROA not after: Wed 03 Mar 2027 06:07:19 +0000 asID: 143058 IP address blocks: 240a:a198::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:76:87:1b:07:46:cb:29:3b:47:63:2c:32:c2:c5:24:08:f3:b0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:19 2026 GMT Not After : Mar 3 06:07:19 2027 GMT Subject: CN=192FA5515E618C23ECDB621D70BC8AC0FB766137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3a:43:20:56:5f:97:af:ae:d7:16:15:51:64: 49:71:9a:06:72:09:b9:1c:9c:f4:64:89:5a:46:c2: 3e:50:6e:4b:1c:7f:79:8a:4e:69:07:60:90:bf:9f: 4d:ea:f5:19:70:af:0a:93:73:26:a3:a5:0b:8e:a7: d3:61:78:19:0d:d0:12:2a:3e:c2:26:d4:86:2b:dc: 78:e2:43:4f:f1:de:46:16:74:9d:73:3e:5a:e1:87: 86:7d:99:a1:d2:da:2f:f7:d7:9c:2d:c4:77:6f:7b: 51:47:a4:fd:59:f1:8d:34:f8:3d:5f:d7:6e:4c:1b: 44:1b:f0:67:4f:ba:a4:de:32:77:a6:65:5b:ae:d2: 43:d1:77:af:49:42:b1:6e:0d:fb:00:9c:ee:d7:c2: d2:95:3b:42:e5:8d:c2:2d:4c:f0:c8:16:b2:7a:f2: b5:6e:2b:95:4a:85:ff:3d:15:c6:c1:22:1b:00:0a: 9d:d5:5d:8f:99:27:d3:f3:50:63:07:7f:64:3b:db: e9:1d:b0:8a:15:6c:30:5c:7e:e6:59:c6:cc:d8:ae: 43:96:e1:00:2b:ba:be:51:6a:9a:36:b2:54:3d:e0: aa:75:d9:80:aa:58:7e:1d:51:fb:a3:d5:25:2a:98: 87:74:b6:41:f0:ed:bf:a0:e3:a1:6f:ed:36:87:15: fa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2F:A5:51:5E:61:8C:23:EC:DB:62:1D:70:BC:8A:C0:FB:76:61:37 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143058.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a198::/32 Signature Algorithm: sha256WithRSAEncryption d1:c8:4e:7d:ec:f2:3e:43:95:f9:16:54:ab:5a:82:f2:67:3d: 04:93:1f:58:1b:85:cd:40:76:b5:35:ca:0d:bb:cb:7f:9f:38: b3:75:c1:1f:63:f0:e4:95:4a:8e:43:33:ff:f3:06:a2:7f:c4: 91:0f:7d:af:8d:e2:71:3d:3b:c9:f3:e8:71:18:78:5e:9e:f5: 46:53:80:dc:7b:28:a1:97:76:f3:f8:d8:b4:58:db:8a:49:f2: 7b:8d:17:63:7a:77:b7:4b:01:20:59:39:0e:8b:4e:52:71:4e: 5d:95:f2:ad:7d:8d:1d:fd:12:20:c0:30:4f:2f:b3:2a:6f:49: 26:19:5c:cf:dc:d7:0c:95:c5:bb:b8:d1:a5:74:40:12:26:ef: 45:f7:dc:f7:14:5b:26:da:a4:54:b3:2f:0d:55:56:2c:0e:70: e8:3a:99:e8:7f:7b:c9:21:b2:13:8e:fc:fe:d1:bb:e4:96:ca: 32:1a:ed:65:cb:bf:04:6b:aa:c4:ab:16:24:b4:9b:1a:af:f7: 32:22:ce:14:78:8c:a5:0b:b8:6e:74:42:c0:a3:34:9d:71:1b: 69:9c:0d:e2:8f:63:63:99:b9:e9:42:eb:38:d4:59:c0:03:f9: cf:a3:3a:9d:f2:3e:e1:02:81:d0:39:ab:ac:10:2e:dd:83:8a: db:44:b5:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEHaHGwdGyyk7R2MsMsLFJAjzsIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxOVoX DTI3MDMwMzA2MDcxOVowMzExMC8GA1UEAxMoMTkyRkE1NTE1RTYxOEMyM0VDREI2 MjFENzBCQzhBQzBGQjc2NjEzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANI6QyBWX5evrtcWFVFkSXGaBnIJuRyc9GSJWkbCPlBuSxx/eYpOaQdgkL+f Ter1GXCvCpNzJqOlC46n02F4GQ3QEio+wibUhivceOJDT/HeRhZ0nXM+WuGHhn2Z odLaL/fXnC3Ed297UUek/VnxjTT4PV/XbkwbRBvwZ0+6pN4yd6ZlW67SQ9F3r0lC sW4N+wCc7tfC0pU7QuWNwi1M8MgWsnrytW4rlUqF/z0VxsEiGwAKndVdj5kn0/NQ Ywd/ZDvb6R2wihVsMFx+5lnGzNiuQ5bhACu6vlFqmjayVD3gqnXZgKpYfh1R+6PV JSqYh3S2QfDtv6DjoW/tNocV+lkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQZL6VR XmGMI+zbYh1wvIrA+3ZhNzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oZgwDQYJKoZIhvcNAQELBQADggEBANHITn3s8j5DlfkWVKtagvJnPQSTH1gbhc1A drU1yg27y3+fOLN1wR9j8OSVSo5DM//zBqJ/xJEPfa+N4nE9O8nz6HEYeF6e9UZT gNx7KKGXdvP42LRY24pJ8nuNF2N6d7dLASBZOQ6LTlJxTl2V8q19jR39EiDAME8v sypvSSYZXM/c1wyVxbu40aV0QBIm70X33PcUWybapFSzLw1VViwOcOg6meh/e8kh shOO/P7Ru+SWyjIa7WXLvwRrqsSrFiS0mxqv9zIizhR4jKULuG50QsCjNJ1xG2mc DeKPY2OZuelC6zjUWcAD+c+jOp3yPuECgdA5q6wQLt2DittEtao= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:58 2026 by rpki-client