$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143103.roa File: AS143103.roa (raw, json) Hash identifier: KwLnvmrx+HEsWJ9Q1ewvG/Yvf4wj/wuyMBtZ7MJxO4k= Subject key identifier: 00:FA:4C:EB:87:A3:38:CC:C1:2E:F3:17:E7:E3:E9:AE:AA:FB:34:6E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4C68381D34318D5E03324AEBE7A89FF43EF22B75 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143103.roa Signing time: Wed 04 Mar 2026 06:06:11 +0000 ROA not before: Wed 04 Mar 2026 06:01:11 +0000 ROA not after: Wed 03 Mar 2027 06:06:11 +0000 asID: 143103 IP address blocks: 240a:a1c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:68:38:1d:34:31:8d:5e:03:32:4a:eb:e7:a8:9f:f4:3e:f2:2b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:11 2026 GMT Not After : Mar 3 06:06:11 2027 GMT Subject: CN=00FA4CEB87A338CCC12EF317E7E3E9AEAAFB346E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:3e:b4:27:65:47:ec:7b:23:78:db:49:bf: da:22:87:05:13:f6:ec:74:1d:ca:b5:48:9d:b4:0d: f2:9a:89:15:a7:16:3b:2b:b4:12:c4:a4:41:01:26: 75:33:98:fb:d3:63:9d:5a:a8:c4:6d:2c:06:a7:1c: 95:e4:eb:a9:8e:9a:d5:5c:cd:8a:b2:48:2e:dc:09: 87:24:73:03:a8:21:51:b4:2f:b1:25:c5:b1:e8:0a: ea:d9:97:a6:d1:a1:31:9b:5e:94:76:e7:4a:5c:e1: 87:3d:26:33:69:48:32:71:c9:99:57:75:76:4b:08: fb:d3:24:cf:96:8d:a4:c0:91:b3:ae:37:7f:0a:ac: ea:b4:21:f3:53:fa:04:c2:c4:98:5f:d5:f5:ea:46: 94:45:8c:84:dc:32:43:dd:30:e9:80:67:27:9d:14: af:ea:d6:1b:f3:77:ec:67:88:1c:22:28:c7:6c:4d: ea:f2:47:ad:5c:aa:a9:d4:f6:01:38:2b:eb:39:d0: f8:00:e5:31:0a:2e:3e:ea:3d:41:e0:04:40:23:d0: b6:c8:aa:e6:c5:ab:1a:7c:ea:9d:8c:fa:45:33:71: 80:e0:9d:5a:66:a8:95:77:22:76:0d:c7:be:91:32: 73:c3:1d:8c:40:f0:4f:e8:f2:5a:79:84:7e:2d:1d: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:4C:EB:87:A3:38:CC:C1:2E:F3:17:E7:E3:E9:AE:AA:FB:34:6E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1c5::/32 Signature Algorithm: sha256WithRSAEncryption cd:e5:81:7d:89:42:28:dc:d6:83:d3:61:ab:e9:c2:d1:72:6b: 94:de:59:cf:91:a3:71:b0:10:62:3a:88:eb:82:7f:4b:f8:00: 42:13:ab:62:f2:8d:03:37:53:95:b0:6a:4b:bf:15:df:c4:fc: 30:32:22:5e:11:c7:a1:4e:db:23:0a:9e:df:7f:14:f6:2a:28: 4f:fd:c9:95:f7:b6:ac:b7:a5:a2:58:b1:95:d6:4e:0e:af:f4: 7d:ca:a4:fb:1a:e1:c8:02:b7:3a:8c:c2:96:99:86:c4:08:01: 90:5e:14:9b:39:84:0b:c7:02:c8:f2:5a:3b:ba:4c:17:86:94: e8:8a:1d:fc:15:b5:73:a8:fa:02:30:0d:f8:89:d4:ae:0b:16: 43:88:c1:f2:cc:14:c3:1c:20:ea:89:08:29:fb:f9:de:48:04: 89:dc:a8:0a:f3:6f:c6:b4:8f:a3:e1:37:0a:62:66:40:f4:1d: 44:44:be:95:b3:0f:72:29:67:8d:49:fc:32:0b:1d:85:0a:3e: d4:b1:d8:5b:cb:c0:01:f7:9b:99:69:57:04:ac:52:ce:ba:dd: ee:a9:9c:9f:10:25:9d:dc:ab:57:2e:a5:d7:68:00:1f:50:ab: 51:7f:a1:72:20:a6:39:73:60:01:d1:5a:2e:3f:cd:f0:64:e7: 34:ee:aa:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTGg4HTQxjV4DMkrr56if9D7yK3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExMVoX DTI3MDMwMzA2MDYxMVowMzExMC8GA1UEAxMoMDBGQTRDRUI4N0EzMzhDQ0MxMkVG MzE3RTdFM0U5QUVBQUZCMzQ2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3lPrQnZUfseyN420m/2iKHBRP27HQdyrVInbQN8pqJFacWOyu0EsSkQQEm dTOY+9NjnVqoxG0sBqccleTrqY6a1VzNirJILtwJhyRzA6ghUbQvsSXFsegK6tmX ptGhMZtelHbnSlzhhz0mM2lIMnHJmVd1dksI+9Mkz5aNpMCRs643fwqs6rQh81P6 BMLEmF/V9epGlEWMhNwyQ90w6YBnJ50Ur+rWG/N37GeIHCIox2xN6vJHrVyqqdT2 ATgr6znQ+ADlMQouPuo9QeAEQCPQtsiq5sWrGnzqnYz6RTNxgOCdWmaolXcidg3H vpEyc8MdjEDwT+jyWnmEfi0dopsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQA+kzr h6M4zMEu8xfn4+muqvs0bjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzEwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ocUwDQYJKoZIhvcNAQELBQADggEBAM3lgX2JQijc1oPTYavpwtFya5TeWc+Ro3Gw EGI6iOuCf0v4AEITq2LyjQM3U5Wwaku/Fd/E/DAyIl4Rx6FO2yMKnt9/FPYqKE/9 yZX3tqy3paJYsZXWTg6v9H3KpPsa4cgCtzqMwpaZhsQIAZBeFJs5hAvHAsjyWju6 TBeGlOiKHfwVtXOo+gIwDfiJ1K4LFkOIwfLMFMMcIOqJCCn7+d5IBIncqArzb8a0 j6PhNwpiZkD0HUREvpWzD3IpZ41J/DILHYUKPtSx2FvLwAH3m5lpVwSsUs663e6p nJ8QJZ3cq1cupddoAB9Qq1F/oXIgpjlzYAHRWi4/zfBk5zTuqvw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:03 2026 by rpki-client