$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143110.roa File: AS143110.roa (raw, json) Hash identifier: OR1GVRiCNg1OAwhBUPNDd90vPWWRmJmvQmVmsrvMJCw= Subject key identifier: AE:3D:C9:59:A6:A1:96:0C:68:EC:56:CD:02:42:5F:4A:2B:C1:3D:D9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 399E1A8896BF1D347381E45F3C5CBAE1C46A6272 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143110.roa Signing time: Wed 04 Mar 2026 06:05:38 +0000 ROA not before: Wed 04 Mar 2026 06:00:38 +0000 ROA not after: Wed 03 Mar 2027 06:05:38 +0000 asID: 143110 IP address blocks: 240a:a1cc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9e:1a:88:96:bf:1d:34:73:81:e4:5f:3c:5c:ba:e1:c4:6a:62:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:38 2026 GMT Not After : Mar 3 06:05:38 2027 GMT Subject: CN=AE3DC959A6A1960C68EC56CD02425F4A2BC13DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:c3:1e:21:bd:49:e8:7a:90:d3:f4:06:39: 32:70:07:95:14:7e:7d:7c:0e:95:72:ea:73:3a:d4: 5b:f3:33:03:d6:d6:70:1b:2e:5b:49:35:4c:2e:6a: 95:c6:20:5e:86:cc:9a:c9:fd:84:46:fd:17:b8:f3: 6f:da:b2:a2:11:cc:c4:da:e1:7b:cf:c0:45:55:0a: 20:8d:fa:0b:71:38:70:8c:9d:a9:03:f4:7e:0d:cc: d1:76:61:38:4e:a7:6d:3a:b8:13:77:02:a7:08:70: 3c:02:a9:45:68:14:ca:9e:ea:5f:25:3b:c7:7f:4b: 30:ef:cd:a7:ae:ca:14:4c:41:30:d5:ff:84:60:7d: 0e:61:82:8f:b7:63:a0:15:95:09:c3:f1:51:00:1e: 3a:99:e0:03:05:70:13:10:a0:a6:64:a3:aa:50:ff: 8d:96:95:6a:2e:da:cb:a4:12:8f:aa:18:94:f2:4e: 62:67:94:73:32:80:31:b4:40:10:33:99:b6:c9:cb: 46:70:9c:c1:bd:a4:98:41:a2:6e:2f:dd:62:68:f9: 9e:a1:50:3b:20:ca:46:4b:0c:1c:18:c5:ce:7b:9b: 72:11:cb:82:ae:f2:e3:b1:a4:b2:4b:ca:55:1b:f0: 74:37:fb:ba:74:ce:94:4a:00:8d:3b:ff:67:08:ac: 40:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3D:C9:59:A6:A1:96:0C:68:EC:56:CD:02:42:5F:4A:2B:C1:3D:D9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143110.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1cc::/32 Signature Algorithm: sha256WithRSAEncryption 80:87:7a:3f:f4:f3:37:71:54:2e:ed:61:5a:93:1b:78:4c:5f: 63:d9:f9:d6:33:ca:89:73:a5:00:d0:c8:68:7d:0f:8f:c7:7e: 6b:4f:89:c4:38:4a:cc:f5:f3:ee:18:60:76:11:40:95:24:61: 86:69:81:9d:95:6d:25:e2:99:9b:4d:88:1e:e5:6b:69:1e:fa: c8:84:12:99:f3:19:18:d3:45:7b:8b:ed:0e:79:27:23:0c:83: e8:4c:a4:8a:ee:1c:26:b7:4e:c3:fd:f2:c5:ce:92:59:d4:c0: 72:be:40:61:fc:9d:5c:36:8e:fd:ae:3c:6d:40:c3:78:8f:3e: 0a:8a:14:f0:84:f4:c6:2e:50:98:b6:b0:b9:2a:9e:de:b2:75: 09:1d:c9:49:84:69:a1:a1:a8:d7:06:66:4c:cb:c6:b8:c4:61: 90:d2:78:5c:09:58:ff:8d:d4:31:fc:c4:b9:1a:2d:82:35:07: 05:2b:30:2a:f5:63:7b:97:c2:3c:6e:50:e6:a3:7c:db:f7:eb: 35:b4:6a:4f:e7:0c:51:60:a4:7a:37:8c:e9:f2:df:ef:5e:bc: 2b:03:f9:13:98:a1:7a:9f:a6:01:bd:da:de:86:b2:1f:92:ea: a4:60:4a:cc:26:16:35:5f:dc:04:47:1e:a2:f8:ac:5a:cf:fd: 45:c6:a6:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOZ4aiJa/HTRzgeRfPFy64cRqYnIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzOFoX DTI3MDMwMzA2MDUzOFowMzExMC8GA1UEAxMoQUUzREM5NTlBNkExOTYwQzY4RUM1 NkNEMDI0MjVGNEEyQkMxM0REOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3Cwx4hvUnoepDT9AY5MnAHlRR+fXwOlXLqczrUW/MzA9bWcBsuW0k1TC5q lcYgXobMmsn9hEb9F7jzb9qyohHMxNrhe8/ARVUKII36C3E4cIydqQP0fg3M0XZh OE6nbTq4E3cCpwhwPAKpRWgUyp7qXyU7x39LMO/Np67KFExBMNX/hGB9DmGCj7dj oBWVCcPxUQAeOpngAwVwExCgpmSjqlD/jZaVai7ay6QSj6oYlPJOYmeUczKAMbRA EDOZtsnLRnCcwb2kmEGibi/dYmj5nqFQOyDKRksMHBjFznubchHLgq7y47GkskvK VRvwdDf7unTOlEoAjTv/ZwisQLkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSuPclZ pqGWDGjsVs0CQl9KK8E92TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzExMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ocwwDQYJKoZIhvcNAQELBQADggEBAICHej/08zdxVC7tYVqTG3hMX2PZ+dYzyolz pQDQyGh9D4/HfmtPicQ4Ssz18+4YYHYRQJUkYYZpgZ2VbSXimZtNiB7la2ke+siE EpnzGRjTRXuL7Q55JyMMg+hMpIruHCa3TsP98sXOklnUwHK+QGH8nVw2jv2uPG1A w3iPPgqKFPCE9MYuUJi2sLkqnt6ydQkdyUmEaaGhqNcGZkzLxrjEYZDSeFwJWP+N 1DH8xLkaLYI1BwUrMCr1Y3uXwjxuUOajfNv36zW0ak/nDFFgpHo3jOny3+9evCsD +ROYoXqfpgG92t6Gsh+S6qRgSswmFjVf3ARHHqL4rFrP/UXGpvo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:49 2026 by rpki-client