$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143067.roa File: AS143067.roa (raw, json) Hash identifier: x8+SyeiR5Eyn+uk4DF51ZWGrxgrmc6Rr8YNp65moPAQ= Subject key identifier: 82:A8:B6:23:DF:6A:BD:B4:7B:55:95:51:91:3B:1B:B6:BA:42:B4:4F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5A894CFD82D2EE90A14D0BEB9D4A9D027A26AF5E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143067.roa Signing time: Wed 04 Mar 2026 06:07:16 +0000 ROA not before: Wed 04 Mar 2026 06:02:16 +0000 ROA not after: Wed 03 Mar 2027 06:07:16 +0000 asID: 143067 IP address blocks: 240a:a1a1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:89:4c:fd:82:d2:ee:90:a1:4d:0b:eb:9d:4a:9d:02:7a:26:af:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:16 2026 GMT Not After : Mar 3 06:07:16 2027 GMT Subject: CN=82A8B623DF6ABDB47B559551913B1BB6BA42B44F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:7b:e2:12:05:d0:27:59:7a:40:9b:d0:76: 80:33:b7:66:d3:e8:48:91:6a:f4:9a:cf:1f:f1:f0: 65:a0:7d:b3:12:66:b2:cb:78:ce:dd:f4:da:c8:a7: c3:cd:97:29:34:9a:6a:3a:6e:a3:5b:d9:ad:e7:30: 80:a7:e3:a7:48:41:80:dc:d7:3e:42:18:cd:e5:7e: ce:87:fe:47:bb:a8:54:23:d0:25:33:1b:0b:89:c1: 43:9d:12:3e:23:9f:99:ad:6a:42:cf:31:10:ac:77: d1:52:20:cb:c2:c2:71:35:a8:93:4b:48:70:d5:25: bf:3d:3a:04:87:67:90:d5:8d:b4:0d:ce:be:5d:ee: 14:fa:42:99:5f:2f:dd:d5:c6:31:c2:46:a2:65:3d: fe:c5:83:6c:ad:f3:f8:83:dd:f9:68:78:b9:6c:c4: 06:ab:c6:a4:57:2b:5f:e4:b2:50:35:dd:4a:34:7a: 8c:81:42:5f:15:5a:7b:0a:83:61:77:99:20:e1:59: 8c:6d:c0:97:3d:39:da:f1:21:5e:77:73:6f:dd:e6: a7:99:f2:87:89:9e:d0:14:b4:ac:20:2b:78:81:6e: ed:ca:b9:aa:dc:3c:20:22:ff:d9:54:6a:bb:6b:e3: c8:e6:d2:41:ff:4d:0e:87:0c:e9:d2:55:2a:91:27: 75:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A8:B6:23:DF:6A:BD:B4:7B:55:95:51:91:3B:1B:B6:BA:42:B4:4F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143067.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1a1::/32 Signature Algorithm: sha256WithRSAEncryption 9a:87:75:91:d2:f7:61:09:b3:40:18:05:7d:25:cf:5b:dd:37: 7e:71:ce:ad:f8:94:ee:67:3a:7c:08:d9:81:93:f3:41:ef:e4: b6:07:77:14:2a:71:d2:bf:97:79:dd:6d:71:65:91:cc:22:a5: 1d:0f:e1:75:6b:4e:e1:72:90:47:d2:c1:1e:01:d4:6a:72:a8: 39:01:73:dc:e1:a7:60:1e:33:14:73:08:3c:c8:57:e2:6d:b7: 07:d6:85:0f:7e:be:f4:d6:2d:4f:91:ca:6f:35:bd:88:af:da: 63:85:77:64:50:e3:57:ba:a4:f9:6c:30:fa:17:68:82:d1:ef: 23:df:bc:bd:4c:0c:32:f7:b5:19:da:12:b6:cf:ff:08:40:4d: eb:59:84:72:0c:0c:e5:b3:11:a2:93:e8:98:d0:6f:08:59:df: 0d:64:84:69:0c:f2:f6:1e:50:b5:86:eb:53:6a:f0:df:64:ef: f2:18:64:48:76:85:5b:b8:c2:b4:b6:28:97:7e:ac:ef:a5:5f: 34:73:2d:d7:81:62:42:97:35:96:72:b8:a4:55:73:06:aa:02: d6:8e:50:cf:75:46:9c:a5:9b:f5:32:e7:2d:55:21:e2:80:91: a5:a1:6b:df:7c:0a:ea:bc:b1:e7:ee:cd:94:37:f3:d4:91:9d: 84:32:78:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWolM/YLS7pChTQvrnUqdAnomr14wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxNloX DTI3MDMwMzA2MDcxNlowMzExMC8GA1UEAxMoODJBOEI2MjNERjZBQkRCNDdCNTU5 NTUxOTEzQjFCQjZCQTQyQjQ0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+re+ISBdAnWXpAm9B2gDO3ZtPoSJFq9JrPH/HwZaB9sxJmsst4zt302sin w82XKTSaajpuo1vZrecwgKfjp0hBgNzXPkIYzeV+zof+R7uoVCPQJTMbC4nBQ50S PiOfma1qQs8xEKx30VIgy8LCcTWok0tIcNUlvz06BIdnkNWNtA3Ovl3uFPpCmV8v 3dXGMcJGomU9/sWDbK3z+IPd+Wh4uWzEBqvGpFcrX+SyUDXdSjR6jIFCXxVaewqD YXeZIOFZjG3Alz052vEhXndzb93mp5nyh4me0BS0rCAreIFu7cq5qtw8ICL/2VRq u2vjyObSQf9NDocM6dJVKpEndVUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSCqLYj 32q9tHtVlVGROxu2ukK0TzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oaEwDQYJKoZIhvcNAQELBQADggEBAJqHdZHS92EJs0AYBX0lz1vdN35xzq34lO5n OnwI2YGT80Hv5LYHdxQqcdK/l3ndbXFlkcwipR0P4XVrTuFykEfSwR4B1GpyqDkB c9zhp2AeMxRzCDzIV+JttwfWhQ9+vvTWLU+Rym81vYiv2mOFd2RQ41e6pPlsMPoX aILR7yPfvL1MDDL3tRnaErbP/whATetZhHIMDOWzEaKT6JjQbwhZ3w1khGkM8vYe ULWG61Nq8N9k7/IYZEh2hVu4wrS2KJd+rO+lXzRzLdeBYkKXNZZyuKRVcwaqAtaO UM91Rpylm/Uy5y1VIeKAkaWha998Cuq8sefuzZQ389SRnYQyeG0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:19 2026 by rpki-client