$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143108.roa File: AS143108.roa (raw, json) Hash identifier: BQCDBE+lNe0c7E8vYrr8Wu+EDG7yhjbCPo/UmPoK28E= Subject key identifier: 3A:F5:E3:28:45:00:88:E6:B6:35:DD:DD:66:8B:C2:CA:12:45:DD:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2EE281D3FC2BDE73F2CD840181B52F6BC892AFFF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143108.roa Signing time: Wed 04 Mar 2026 06:07:04 +0000 ROA not before: Wed 04 Mar 2026 06:02:04 +0000 ROA not after: Wed 03 Mar 2027 06:07:04 +0000 asID: 143108 IP address blocks: 240a:a1ca::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e2:81:d3:fc:2b:de:73:f2:cd:84:01:81:b5:2f:6b:c8:92:af:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:04 2026 GMT Not After : Mar 3 06:07:04 2027 GMT Subject: CN=3AF5E328450088E6B635DDDD668BC2CA1245DD31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:21:bb:6f:7a:94:c2:56:be:14:f6:6b:7b: d2:f4:1d:39:86:f3:15:f6:61:43:41:2d:8b:50:c7: b3:4a:4b:5d:e5:5f:a8:dd:a1:24:61:29:05:93:34: e3:31:22:30:2e:1f:cb:2c:a6:af:9c:60:da:a7:76: 1c:ae:b2:13:5e:a3:9b:30:69:22:13:8c:54:37:af: ab:24:40:e7:b3:fb:0e:9f:2d:29:f9:d2:5e:73:23: 0f:1b:38:bd:17:7e:f8:49:0b:ab:3d:27:a1:93:7d: 88:40:f7:b0:9f:0e:c4:7e:94:80:14:3d:9c:78:fd: 3b:8b:23:c9:61:46:eb:f8:a8:3f:85:9e:d6:e1:34: 4a:54:c8:6a:37:8f:3b:c0:b2:3a:27:98:d2:77:1e: c5:5b:f4:95:b5:eb:b5:0a:79:2d:47:a8:c8:ca:a4: 76:14:f9:09:cf:79:bd:c6:a8:4e:8f:8f:7e:85:28: 7e:cb:4e:64:24:c9:d1:1f:e7:7f:35:c5:48:e6:eb: 85:96:56:23:a0:5c:eb:b2:92:3b:4f:13:9c:32:56: 0a:42:ec:c6:10:b3:83:a5:d5:e3:9d:1b:65:7f:86: 30:87:86:52:a6:0d:e1:58:f4:0a:a6:87:f6:ed:58: 3f:70:82:a3:8d:a0:d3:41:85:cd:84:8b:c3:e9:9c: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F5:E3:28:45:00:88:E6:B6:35:DD:DD:66:8B:C2:CA:12:45:DD:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143108.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1ca::/32 Signature Algorithm: sha256WithRSAEncryption 40:3a:00:9c:eb:1f:99:85:ce:0a:96:2c:02:0d:88:a1:b2:ba: 37:91:83:97:20:ac:8b:82:23:8e:29:81:2d:40:9c:22:d5:b0: 0a:16:5b:4f:8d:80:51:02:37:f0:5b:f3:33:34:2d:aa:cb:88: 9e:a4:18:3a:25:d2:82:2e:c2:a8:d1:8e:82:9b:ca:ee:de:95: a9:66:85:3e:0d:f9:7a:5e:2d:05:24:b5:10:55:84:91:65:aa: 0d:5b:9d:5d:99:b5:d1:d3:72:43:03:ca:99:78:88:3b:d8:91: 0a:6a:88:d8:53:90:9b:4c:fc:c2:8d:12:70:09:7c:0b:49:63: a8:52:ab:9f:0b:b3:ef:fb:c1:96:fb:7f:d8:5b:5a:82:71:e8: 8b:74:40:0b:a6:62:b8:bb:82:bd:6b:43:6c:6f:4c:20:b6:c8: 68:ec:bb:d0:f7:4a:22:d4:57:18:13:bc:ff:db:7d:5e:73:e2: 93:62:f1:93:cc:24:bf:3e:cb:fc:27:91:a2:80:4d:18:30:db: bc:7b:25:eb:75:7c:ae:ca:56:bc:71:90:9f:d5:68:5c:85:c1: 6e:48:39:20:68:8f:e3:f5:d2:fc:fa:5d:70:79:0c:91:9b:4e: 46:72:16:3b:9e:37:3b:5c:da:66:80:23:2c:a8:f9:9e:16:44: 1b:03:1e:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULuKB0/wr3nPyzYQBgbUva8iSr/8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwNFoX DTI3MDMwMzA2MDcwNFowMzExMC8GA1UEAxMoM0FGNUUzMjg0NTAwODhFNkI2MzVE RERENjY4QkMyQ0ExMjQ1REQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMF9IbtvepTCVr4U9mt70vQdOYbzFfZhQ0Eti1DHs0pLXeVfqN2hJGEpBZM0 4zEiMC4fyyymr5xg2qd2HK6yE16jmzBpIhOMVDevqyRA57P7Dp8tKfnSXnMjDxs4 vRd++EkLqz0noZN9iED3sJ8OxH6UgBQ9nHj9O4sjyWFG6/ioP4We1uE0SlTIajeP O8CyOieY0ncexVv0lbXrtQp5LUeoyMqkdhT5Cc95vcaoTo+PfoUofstOZCTJ0R/n fzXFSObrhZZWI6Bc67KSO08TnDJWCkLsxhCzg6XV450bZX+GMIeGUqYN4Vj0CqaH 9u1YP3CCo42g00GFzYSLw+mcAI8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ69eMo RQCI5rY13d1mi8LKEkXdMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzEwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ocowDQYJKoZIhvcNAQELBQADggEBAEA6AJzrH5mFzgqWLAINiKGyujeRg5cgrIuC I44pgS1AnCLVsAoWW0+NgFECN/Bb8zM0LarLiJ6kGDol0oIuwqjRjoKbyu7elalm hT4N+XpeLQUktRBVhJFlqg1bnV2ZtdHTckMDypl4iDvYkQpqiNhTkJtM/MKNEnAJ fAtJY6hSq58Ls+/7wZb7f9hbWoJx6It0QAumYri7gr1rQ2xvTCC2yGjsu9D3SiLU VxgTvP/bfV5z4pNi8ZPMJL8+y/wnkaKATRgw27x7Jet1fK7KVrxxkJ/VaFyFwW5I OSBoj+P10vz6XXB5DJGbTkZyFjueNztc2maAIyyo+Z4WRBsDHmA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:06:16 2026 by rpki-client