$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143081.roa File: AS143081.roa (raw, json) Hash identifier: 7yyIiShqqvHqb1hYR6w+FLPmZiTNR5Yx+VrBYhE9dmY= Subject key identifier: CD:02:46:29:34:85:5D:F6:07:88:9C:06:89:25:E5:6F:AB:88:5E:F2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4261A6CE2C17E0947300746AD3E2AE2E857A8A0B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143081.roa Signing time: Wed 04 Mar 2026 06:07:46 +0000 ROA not before: Wed 04 Mar 2026 06:02:46 +0000 ROA not after: Wed 03 Mar 2027 06:07:46 +0000 asID: 143081 IP address blocks: 240a:a1af::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:61:a6:ce:2c:17:e0:94:73:00:74:6a:d3:e2:ae:2e:85:7a:8a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:46 2026 GMT Not After : Mar 3 06:07:46 2027 GMT Subject: CN=CD02462934855DF607889C068925E56FAB885EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:0f:50:bf:28:a5:b8:1b:11:35:87:56:fe: 23:4a:16:3d:14:e3:52:b3:3d:81:a2:27:47:27:60: 2d:de:64:b7:54:b7:ff:20:71:4f:21:48:20:66:30: 6c:c5:47:37:4d:70:5a:af:2b:6d:a0:c1:88:23:9e: ef:48:be:b9:0a:67:af:31:fa:46:a7:57:78:40:63: b1:79:96:16:39:51:53:1f:0b:fb:07:67:ee:02:f8: f2:7d:51:a8:55:9b:37:91:b3:77:31:a5:90:04:23: 2e:83:3e:83:78:0a:c5:2b:4c:d3:c4:a2:61:c0:64: 38:66:e1:9d:23:02:22:1a:9a:f3:40:53:55:f8:de: d2:be:2a:18:d6:0b:91:cb:6c:54:24:2a:92:be:b0: d9:d5:43:9a:98:38:6f:e1:29:79:bb:48:e1:41:c7: e8:a3:03:a3:8a:af:b0:64:e3:78:d6:6b:d7:4e:29: 15:ee:6b:3c:09:0c:b0:8e:1d:cd:b8:3c:1d:5f:5b: 97:e7:8a:f0:fb:9c:17:ae:30:4b:d1:05:04:eb:de: cf:09:4e:2d:bf:9b:b6:fe:f5:7d:33:5e:d4:c3:1b: 1f:fe:80:10:6a:07:22:fd:5b:71:46:23:5a:e0:cd: 61:8f:fd:ad:39:a2:06:fe:ca:e8:71:0e:fe:44:35: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:02:46:29:34:85:5D:F6:07:88:9C:06:89:25:E5:6F:AB:88:5E:F2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143081.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1af::/32 Signature Algorithm: sha256WithRSAEncryption c2:df:a2:03:95:87:2d:88:1d:ca:8d:ca:da:45:41:28:9d:1b: 66:1b:83:bc:a8:29:99:e3:a3:07:b4:5b:e2:cb:0a:d3:fc:ed: 53:30:09:9a:c1:b7:33:82:6c:87:52:b3:f5:ff:b2:c1:eb:cc: 0b:ba:a3:f8:e4:0f:5e:ab:37:c1:0c:6f:d5:dd:54:f7:fd:f9: 73:84:fb:d7:63:87:3c:8e:9c:58:88:eb:d4:03:e2:8e:16:e4: f6:6a:4a:61:09:a4:c4:d8:8c:09:67:b0:11:cf:d6:ae:ce:26: d1:f4:3d:ea:94:86:e3:86:69:8c:94:46:03:e1:20:83:18:51: 63:32:e8:e4:54:85:0c:b8:d2:8a:ec:2e:e6:ad:be:1c:b4:6a: d6:eb:c9:3e:1a:dc:20:4a:ff:b9:ca:ab:21:68:e7:8b:ad:ea: 99:44:1c:a1:b0:04:2a:9a:5e:7b:8f:38:0e:9f:63:38:b9:e6: 0a:24:7a:f8:ec:80:1f:97:c7:b9:8f:20:2f:37:7c:d4:7d:68: 62:71:8b:8a:c5:a8:f0:ad:c0:bd:60:9a:83:77:6d:0d:ed:56: 60:14:1d:4a:da:d5:65:47:75:45:3f:5e:80:c7:b7:57:5d:cf: 0d:d1:24:e7:f6:72:fd:bf:26:29:c6:92:df:f0:11:cb:ec:e4: 14:2b:92:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQmGmziwX4JRzAHRq0+KuLoV6igswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0NloX DTI3MDMwMzA2MDc0NlowMzExMC8GA1UEAxMoQ0QwMjQ2MjkzNDg1NURGNjA3ODg5 QzA2ODkyNUU1NkZBQjg4NUVGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQCD1C/KKW4GxE1h1b+I0oWPRTjUrM9gaInRydgLd5kt1S3/yBxTyFIIGYw bMVHN01wWq8rbaDBiCOe70i+uQpnrzH6RqdXeEBjsXmWFjlRUx8L+wdn7gL48n1R qFWbN5GzdzGlkAQjLoM+g3gKxStM08SiYcBkOGbhnSMCIhqa80BTVfje0r4qGNYL kctsVCQqkr6w2dVDmpg4b+EpebtI4UHH6KMDo4qvsGTjeNZr104pFe5rPAkMsI4d zbg8HV9bl+eK8PucF64wS9EFBOvezwlOLb+btv71fTNe1MMbH/6AEGoHIv1bcUYj WuDNYY/9rTmiBv7K6HEO/kQ1MtECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTNAkYp NIVd9geInAaJJeVvq4he8jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oa8wDQYJKoZIhvcNAQELBQADggEBAMLfogOVhy2IHcqNytpFQSidG2Ybg7yoKZnj owe0W+LLCtP87VMwCZrBtzOCbIdSs/X/ssHrzAu6o/jkD16rN8EMb9XdVPf9+XOE +9djhzyOnFiI69QD4o4W5PZqSmEJpMTYjAlnsBHP1q7OJtH0PeqUhuOGaYyURgPh IIMYUWMy6ORUhQy40orsLuatvhy0atbryT4a3CBK/7nKqyFo54ut6plEHKGwBCqa XnuPOA6fYzi55gokevjsgB+Xx7mPIC83fNR9aGJxi4rFqPCtwL1gmoN3bQ3tVmAU HUra1WVHdUU/XoDHt1ddzw3RJOf2cv2/JinGkt/wEcvs5BQrkns= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:38 2026 by rpki-client