$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143066.roa File: AS143066.roa (raw, json) Hash identifier: 3II0l4y3MwS8SZCxrMTq41uGobRxTY57HOoJhXP70Z4= Subject key identifier: B2:02:56:32:8F:12:C4:24:48:55:B7:D7:B3:87:6E:5A:89:05:A2:72 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 68542FC4D64720210DFA01820988C46A73D694E8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143066.roa Signing time: Wed 04 Mar 2026 06:06:48 +0000 ROA not before: Wed 04 Mar 2026 06:01:48 +0000 ROA not after: Wed 03 Mar 2027 06:06:48 +0000 asID: 143066 IP address blocks: 240a:a1a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:54:2f:c4:d6:47:20:21:0d:fa:01:82:09:88:c4:6a:73:d6:94:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:48 2026 GMT Not After : Mar 3 06:06:48 2027 GMT Subject: CN=B20256328F12C4244855B7D7B3876E5A8905A272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:5f:83:e0:e7:71:57:0c:d4:4e:65:53:3e: 57:92:9c:c3:eb:21:45:7a:94:9b:bf:e0:1b:60:e5: 02:6f:68:61:b1:17:d5:f1:79:69:f6:88:5d:a7:0a: 03:01:c9:f7:cb:ec:35:e8:84:54:bb:d0:ff:3c:52: 2b:6d:b8:80:45:c3:78:f2:7c:13:5e:91:d7:95:71: f7:5b:26:1d:cf:f1:f9:cf:17:0c:a3:dd:3a:c0:00: 78:99:3d:39:2a:d9:69:18:d6:15:24:49:01:94:f7: 6b:c3:11:3e:ae:6b:92:47:ba:e5:81:88:2b:88:d7: 69:d9:55:6a:b5:c8:5c:ba:7b:8a:57:93:be:1c:1b: ff:00:f8:ca:d1:a4:6f:c1:1d:c9:d8:2d:d3:1e:bd: 66:ce:c0:78:e9:1a:7e:dd:92:6a:0f:69:52:b0:a4: 48:6c:c0:21:42:51:df:25:f9:e3:85:ad:c5:3e:dc: 4f:5f:d1:bd:44:3e:a2:bf:b9:c1:5b:1f:2a:30:1d: 9d:04:41:dd:79:7e:65:38:70:d8:f1:3c:af:79:9e: 20:2b:0b:3d:b5:92:6d:6b:c5:5d:74:e8:9b:d1:0f: 42:71:e9:2b:9b:a2:2f:4f:30:7d:76:42:c8:d5:a8: 7c:5d:e6:ea:35:4a:05:50:8d:0a:67:8c:7d:21:8a: 51:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:02:56:32:8F:12:C4:24:48:55:B7:D7:B3:87:6E:5A:89:05:A2:72 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1a0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:a8:d4:6f:f8:a0:64:b0:9d:a7:3c:24:36:f7:e5:91:b2:ab: fc:a3:f2:cd:be:7c:64:7f:2c:14:97:aa:57:f9:4e:49:f9:de: 24:75:34:5b:a0:b7:55:e1:3a:8d:63:52:fa:37:93:57:d8:cb: 3f:88:4c:3e:4c:3d:ed:55:64:09:15:f2:e2:3f:3e:41:61:42: a9:73:c9:87:03:e1:3a:45:c3:92:df:63:38:57:e4:f3:4c:de: 45:06:8a:9b:38:79:2b:22:bb:d7:db:88:d6:3b:22:9b:9e:a2: 27:78:64:c0:a3:69:48:08:4d:49:cd:cc:af:da:02:47:ed:b5: f8:5a:34:4d:70:41:1f:db:b7:7f:f9:ff:cf:89:f0:61:54:2e: 2b:3f:3b:47:29:1c:3f:91:1e:67:c0:0e:d2:f4:79:e0:41:ae: b8:6a:6d:e7:fe:ce:a0:66:b0:78:5b:b1:92:ad:43:e8:a2:1c: 4d:85:31:0f:00:e5:45:3c:0e:28:34:d8:99:26:80:6b:74:a7: 43:cc:6c:a4:d0:0a:65:ce:20:e0:82:92:0f:18:2b:77:aa:4e: f1:9f:99:7b:16:48:6e:2d:bc:16:ef:9f:7c:e7:ef:2f:3c:aa: 1e:7a:4c:81:47:fb:b0:2f:a4:b0:00:e4:cb:0f:9f:07:a3:45: 6f:b1:0e:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaFQvxNZHICEN+gGCCYjEanPWlOgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0OFoX DTI3MDMwMzA2MDY0OFowMzExMC8GA1UEAxMoQjIwMjU2MzI4RjEyQzQyNDQ4NTVC N0Q3QjM4NzZFNUE4OTA1QTI3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMO/X4Pg53FXDNROZVM+V5Kcw+shRXqUm7/gG2DlAm9oYbEX1fF5afaIXacK AwHJ98vsNeiEVLvQ/zxSK224gEXDePJ8E16R15Vx91smHc/x+c8XDKPdOsAAeJk9 OSrZaRjWFSRJAZT3a8MRPq5rkke65YGIK4jXadlVarXIXLp7ileTvhwb/wD4ytGk b8Edydgt0x69Zs7AeOkaft2Sag9pUrCkSGzAIUJR3yX544WtxT7cT1/RvUQ+or+5 wVsfKjAdnQRB3Xl+ZThw2PE8r3meICsLPbWSbWvFXXTom9EPQnHpK5uiL08wfXZC yNWofF3m6jVKBVCNCmeMfSGKUR0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSyAlYy jxLEJEhVt9ezh25aiQWicjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oaAwDQYJKoZIhvcNAQELBQADggEBAA6o1G/4oGSwnac8JDb35ZGyq/yj8s2+fGR/ LBSXqlf5Tkn53iR1NFugt1XhOo1jUvo3k1fYyz+ITD5MPe1VZAkV8uI/PkFhQqlz yYcD4TpFw5LfYzhX5PNM3kUGips4eSsiu9fbiNY7Ipueoid4ZMCjaUgITUnNzK/a AkfttfhaNE1wQR/bt3/5/8+J8GFULis/O0cpHD+RHmfADtL0eeBBrrhqbef+zqBm sHhbsZKtQ+iiHE2FMQ8A5UU8Dig02JkmgGt0p0PMbKTQCmXOIOCCkg8YK3eqTvGf mXsWSG4tvBbvn3zn7y88qh56TIFH+7AvpLAA5MsPnwejRW+xDvg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:12 2026 by rpki-client