$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143062.roa File: AS143062.roa (raw, json) Hash identifier: 1E+2w9AWTs6KgX6G0XUpJCgxKN+MlGRf3uVjmIZMwGA= Subject key identifier: 71:36:A0:AF:2B:8D:2B:4E:93:56:98:58:7A:79:D1:B5:A8:FA:AE:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6F2E874F32E39F3C4454E1F0C44096F289536332 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143062.roa Signing time: Wed 04 Mar 2026 06:05:35 +0000 ROA not before: Wed 04 Mar 2026 06:00:35 +0000 ROA not after: Wed 03 Mar 2027 06:05:35 +0000 asID: 143062 IP address blocks: 240a:a19c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2e:87:4f:32:e3:9f:3c:44:54:e1:f0:c4:40:96:f2:89:53:63:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:35 2026 GMT Not After : Mar 3 06:05:35 2027 GMT Subject: CN=7136A0AF2B8D2B4E935698587A79D1B5A8FAAED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:91:54:36:15:a3:5d:86:87:e1:d6:23:93: cc:e1:1f:19:e8:a6:72:be:c7:87:4b:29:e4:91:1a: dc:e0:c7:6f:3f:58:d8:be:8d:96:27:b7:ec:4f:d3: 51:c5:bc:aa:81:a8:4e:26:c9:78:0d:67:2f:ea:6b: 6a:f7:dc:40:38:76:bf:90:39:88:c4:cb:35:3a:07: 68:77:12:d2:b4:99:83:6b:39:3e:09:dc:00:e9:ad: 93:3b:fe:b6:33:d9:f2:10:69:39:75:eb:eb:39:33: d1:92:e8:f3:c2:9c:76:8c:43:ab:aa:81:91:9f:01: 66:e0:a7:70:24:e8:42:4c:31:04:21:fd:2d:83:f5: 64:3d:97:f5:0b:17:1c:58:74:f1:d4:c8:92:75:61: 22:3a:50:a3:e5:38:f0:05:60:fa:2e:41:a3:af:56: b9:3a:ee:73:6b:c5:ac:ee:1f:21:9c:e1:8f:b5:86: b7:e0:6b:91:61:85:2b:9f:fd:19:5f:d6:8c:b5:a5: 2b:00:4e:9c:bc:ec:dc:80:99:54:96:05:f8:a5:26: f0:1c:f7:17:25:0f:de:7f:8a:f5:f4:e1:ef:db:4d: f4:17:d5:bc:1e:d5:f9:7d:ee:7c:64:eb:5d:6e:ab: 94:27:f3:18:e2:ce:eb:dd:73:e9:cd:c9:15:13:b5: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:36:A0:AF:2B:8D:2B:4E:93:56:98:58:7A:79:D1:B5:A8:FA:AE:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143062.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a19c::/32 Signature Algorithm: sha256WithRSAEncryption 40:75:ce:d8:5a:25:a0:87:0e:93:89:4c:0a:be:33:5b:3a:f5: fe:e6:c5:8e:dd:2e:4e:a4:7d:75:44:ba:76:7b:ea:57:e3:77: 53:eb:88:db:05:fb:82:81:59:d3:02:e6:6a:a3:f4:ae:37:fa: 29:97:1d:73:fe:e9:58:a7:1b:c1:0c:17:ed:61:bf:63:bf:e1: 67:7d:a8:bf:3c:54:d8:d1:25:70:77:ea:c7:8a:01:67:3a:96: 9c:e3:32:db:63:c0:52:13:d5:04:de:ab:57:6f:c3:3b:e0:0d: 76:92:a1:46:45:b4:a9:32:48:1f:aa:c5:8e:4d:61:09:7d:5d: 5f:32:a1:7a:f8:08:e8:e8:19:b7:ef:93:13:ed:fa:ae:18:f8: 6b:b4:53:60:05:02:da:3f:3c:dc:0a:a3:05:ce:8f:4b:59:b3: e7:6f:69:43:6b:5f:21:da:34:6b:43:99:1c:53:c5:51:e6:37: a3:48:68:da:b2:68:13:b5:e9:be:99:e6:c9:64:fd:cb:d2:c7: ea:ee:68:45:cb:70:78:0c:96:c6:ef:a4:72:04:32:53:49:c1: c6:e6:ec:86:cd:d6:9e:03:19:95:bc:7c:66:8c:a9:d6:22:25: a1:fa:58:0c:05:e9:2a:c2:0c:92:54:4d:76:61:c3:4f:8e:a6: 40:9a:79:ef -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUby6HTzLjnzxEVOHwxECW8olTYzIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzNVoX DTI3MDMwMzA2MDUzNVowMzExMC8GA1UEAxMoNzEzNkEwQUYyQjhEMkI0RTkzNTY5 ODU4N0E3OUQxQjVBOEZBQUVENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMr3kVQ2FaNdhofh1iOTzOEfGeimcr7Hh0sp5JEa3ODHbz9Y2L6Nlie37E/T UcW8qoGoTibJeA1nL+pravfcQDh2v5A5iMTLNToHaHcS0rSZg2s5PgncAOmtkzv+ tjPZ8hBpOXXr6zkz0ZLo88KcdoxDq6qBkZ8BZuCncCToQkwxBCH9LYP1ZD2X9QsX HFh08dTIknVhIjpQo+U48AVg+i5Bo69WuTruc2vFrO4fIZzhj7WGt+BrkWGFK5/9 GV/WjLWlKwBOnLzs3ICZVJYF+KUm8Bz3FyUP3n+K9fTh79tN9BfVvB7V+X3ufGTr XW6rlCfzGOLO691z6c3JFRO1vkkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRxNqCv K40rTpNWmFh6edG1qPqu1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oZwwDQYJKoZIhvcNAQELBQADggEBAEB1zthaJaCHDpOJTAq+M1s69f7mxY7dLk6k fXVEunZ76lfjd1PriNsF+4KBWdMC5mqj9K43+imXHXP+6VinG8EMF+1hv2O/4Wd9 qL88VNjRJXB36seKAWc6lpzjMttjwFIT1QTeq1dvwzvgDXaSoUZFtKkySB+qxY5N YQl9XV8yoXr4COjoGbfvkxPt+q4Y+Gu0U2AFAto/PNwKowXOj0tZs+dvaUNrXyHa NGtDmRxTxVHmN6NIaNqyaBO16b6Z5slk/cvSx+ruaEXLcHgMlsbvpHIEMlNJwcbm 7IbN1p4DGZW8fGaMqdYiJaH6WAwF6SrCDJJUTXZhw0+OpkCaee8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:05 2026 by rpki-client