$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143080.roa File: AS143080.roa (raw, json) Hash identifier: O/DN2qGrQTtKuN1GM0Uf3hK3xq2Vwe22H4C33Zn77dk= Subject key identifier: E1:32:A9:98:48:61:C5:C0:14:8D:F8:05:18:8F:95:D6:2E:DB:0F:B7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 27B88F9572437BD82A8395FF67DCABB8D6F8E198 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143080.roa Signing time: Wed 04 Mar 2026 06:05:45 +0000 ROA not before: Wed 04 Mar 2026 06:00:45 +0000 ROA not after: Wed 03 Mar 2027 06:05:45 +0000 asID: 143080 IP address blocks: 240a:a1ae::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b8:8f:95:72:43:7b:d8:2a:83:95:ff:67:dc:ab:b8:d6:f8:e1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:45 2026 GMT Not After : Mar 3 06:05:45 2027 GMT Subject: CN=E132A9984861C5C0148DF805188F95D62EDB0FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:c7:2f:a7:6a:71:da:9c:d7:ef:cf:57:0f: dd:fc:c5:0a:19:54:13:e0:e6:d3:b8:53:21:92:4e: 99:5d:a5:20:3c:4e:19:3c:60:f9:07:84:63:7f:63: 22:7e:af:42:cf:1b:1b:db:de:88:e3:a0:29:81:eb: 92:a0:5d:51:2e:36:10:a6:bb:64:e9:57:62:94:ee: ee:e6:11:61:67:0a:21:9a:96:75:35:9a:d0:f7:23: 4d:ec:be:b8:34:55:75:9e:d5:9a:32:48:a0:10:23: e9:87:41:26:93:e4:57:82:98:19:0a:c8:73:c9:3e: 66:54:66:ec:d6:3b:23:0e:23:ef:74:73:39:8d:f5: 46:ec:c0:01:25:f3:6e:8d:7c:4a:ff:b5:c7:0f:9d: c9:b3:05:8a:25:56:ee:d6:ad:19:e6:be:00:3e:86: 3d:3c:8c:a3:eb:1d:f3:6b:c6:98:6d:b8:ed:91:36: c9:0a:66:a8:cf:69:27:11:c8:26:70:3d:40:79:5f: f7:4e:a6:25:51:3d:70:10:2d:bb:a1:63:a5:18:fe: 94:bc:14:93:d8:89:e9:9f:4d:b4:80:73:ff:d8:87: 78:29:02:54:75:8d:da:50:a1:d7:a2:f4:95:13:46: e8:b0:fd:8d:96:ed:52:f5:31:3b:1a:34:11:26:3b: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:32:A9:98:48:61:C5:C0:14:8D:F8:05:18:8F:95:D6:2E:DB:0F:B7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143080.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1ae::/32 Signature Algorithm: sha256WithRSAEncryption 3f:18:a1:da:fc:e4:de:3f:91:98:83:a4:a4:b2:52:d8:fa:b1: 1c:3e:6f:b9:6f:9e:77:c0:50:28:47:ee:32:22:5d:20:e9:b4: de:66:77:98:df:c9:6a:f5:72:4e:f5:63:13:db:6f:c1:af:ba: 6d:76:49:b0:e1:92:b2:92:09:73:9a:a0:fe:02:1f:93:d7:9e: a7:f9:d7:a7:96:64:74:28:9e:3c:dd:11:12:e0:82:8e:ce:f0: 85:8c:51:68:d8:29:1b:f1:cc:c2:da:0e:4d:d8:cc:d1:c6:c9: 50:c8:b9:a8:16:80:ad:33:e5:af:c0:e6:4d:bd:e1:f0:43:b9: f7:1f:a5:22:40:07:f7:85:89:a4:42:fb:36:af:6b:a8:a0:e1: 6b:ea:d6:fb:47:c5:75:57:fd:12:16:04:a2:e1:f5:ce:bb:0f: 4f:58:ee:1e:4f:c9:c4:a3:cf:ed:b0:54:42:45:6e:4b:14:c2: 64:b0:89:83:bb:6d:d3:e1:ae:da:0b:fd:08:24:fe:d8:84:ec: 01:a5:9a:5e:23:98:e8:b0:fc:44:d9:45:02:03:04:e7:f2:59: 8c:9c:ac:b1:e8:04:ec:18:8b:48:09:a2:b2:3d:70:f9:a9:17: 3c:8b:77:6d:49:27:52:8a:fd:b2:d0:23:de:bf:62:fc:5b:3e: 1e:e1:8b:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJ7iPlXJDe9gqg5X/Z9yruNb44ZgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0NVoX DTI3MDMwMzA2MDU0NVowMzExMC8GA1UEAxMoRTEzMkE5OTg0ODYxQzVDMDE0OERG ODA1MTg4Rjk1RDYyRURCMEZCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeyxy+nanHanNfvz1cP3fzFChlUE+Dm07hTIZJOmV2lIDxOGTxg+QeEY39j In6vQs8bG9veiOOgKYHrkqBdUS42EKa7ZOlXYpTu7uYRYWcKIZqWdTWa0PcjTey+ uDRVdZ7VmjJIoBAj6YdBJpPkV4KYGQrIc8k+ZlRm7NY7Iw4j73RzOY31RuzAASXz bo18Sv+1xw+dybMFiiVW7tatGea+AD6GPTyMo+sd82vGmG247ZE2yQpmqM9pJxHI JnA9QHlf906mJVE9cBAtu6FjpRj+lLwUk9iJ6Z9NtIBz/9iHeCkCVHWN2lCh16L0 lRNG6LD9jZbtUvUxOxo0ESY7dQUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBThMqmY SGHFwBSN+AUYj5XWLtsPtzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oa4wDQYJKoZIhvcNAQELBQADggEBAD8Yodr85N4/kZiDpKSyUtj6sRw+b7lvnnfA UChH7jIiXSDptN5md5jfyWr1ck71YxPbb8Gvum12SbDhkrKSCXOaoP4CH5PXnqf5 16eWZHQonjzdERLggo7O8IWMUWjYKRvxzMLaDk3YzNHGyVDIuagWgK0z5a/A5k29 4fBDufcfpSJAB/eFiaRC+zava6ig4Wvq1vtHxXVX/RIWBKLh9c67D09Y7h5PycSj z+2wVEJFbksUwmSwiYO7bdPhrtoL/Qgk/tiE7AGlml4jmOiw/ETZRQIDBOfyWYyc rLHoBOwYi0gJorI9cPmpFzyLd21JJ1KK/bLQI96/YvxbPh7hi60= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:59 2026 by rpki-client