$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143111.roa File: AS143111.roa (raw, json) Hash identifier: oYfj8WUh39ZmSvz8v7m9lZDnkc6yC3ctObfoh26bpSE= Subject key identifier: 6C:0D:3F:E8:22:97:B2:12:8E:73:1F:67:0E:93:9D:F3:3C:EC:51:70 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1BE12FB238E593730769D7AD5897437171DB7395 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143111.roa Signing time: Wed 04 Mar 2026 06:07:36 +0000 ROA not before: Wed 04 Mar 2026 06:02:36 +0000 ROA not after: Wed 03 Mar 2027 06:07:36 +0000 asID: 143111 IP address blocks: 240a:a1cd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e1:2f:b2:38:e5:93:73:07:69:d7:ad:58:97:43:71:71:db:73:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:36 2026 GMT Not After : Mar 3 06:07:36 2027 GMT Subject: CN=6C0D3FE82297B2128E731F670E939DF33CEC5170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:93:02:01:d5:39:83:2f:23:8a:e4:36:e7: e6:b1:4a:5f:b0:83:22:f2:2a:9f:62:cf:21:77:c8: a4:64:12:f5:78:e3:61:1b:ae:3e:5c:58:03:67:53: d6:22:5f:60:78:57:de:01:9b:1c:34:5c:7a:14:c8: 16:21:d8:09:d4:4d:d9:bf:b8:91:e2:d8:1b:1c:c2: 22:a5:fa:e1:9d:91:9c:66:54:4d:ff:75:2f:8f:42: df:91:8e:12:50:ac:61:d2:0e:c9:3b:c6:c9:e5:3f: ae:3e:68:3e:91:02:47:e6:ef:0d:80:bd:90:76:a7: 13:0c:5f:49:c3:66:0a:c0:be:17:62:8e:a0:98:58: 63:0c:4c:cb:68:5f:d8:ba:2e:8d:31:bc:9a:c0:68: 02:fa:f1:1c:03:86:39:86:00:f2:a1:90:92:0c:78: 6e:2b:eb:f9:aa:b2:ef:11:3c:85:38:76:44:d9:bd: 7b:45:f3:c6:98:80:a0:5d:66:b5:e9:63:eb:48:d1: 1b:b8:a6:52:f1:6a:d9:62:14:c6:27:90:69:bf:66: 71:a9:17:45:0c:90:3c:75:0f:5e:a3:7c:cd:3e:ba: 61:a7:2b:4f:c1:30:53:d8:c2:58:da:b9:52:c8:71: fe:bb:17:e9:1e:1d:d2:da:df:db:ac:73:55:59:c1: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0D:3F:E8:22:97:B2:12:8E:73:1F:67:0E:93:9D:F3:3C:EC:51:70 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1cd::/32 Signature Algorithm: sha256WithRSAEncryption c1:ff:9b:3f:2c:aa:3a:53:12:e3:9b:0e:c5:1d:8f:56:f8:33: f1:28:9d:7c:63:bd:6d:00:94:ba:68:dd:ff:9f:85:7b:4e:6d: 89:a2:e5:00:f8:bf:5d:35:a6:a8:b6:43:24:03:ec:9f:1e:34: 77:d4:fe:4a:96:ac:9a:1a:ff:2f:be:16:5f:7c:0c:ec:4c:1b: 9c:89:87:1d:b0:4e:8b:31:f0:74:ce:84:b2:de:da:6f:df:4c: 6b:52:50:34:59:68:b1:13:81:bc:00:51:49:c7:23:4d:d7:05: ae:f8:56:3f:54:64:32:23:f3:43:62:1c:7b:c4:38:a0:a6:79: 0f:d5:16:6f:3d:ac:20:db:7c:96:89:34:10:25:1c:57:a8:01: 36:9b:5f:76:ae:b6:3c:9c:94:de:11:1a:54:9c:a2:bb:0d:f8: 12:04:6e:c8:f3:01:8d:3d:c6:40:5b:c5:3b:84:9f:a8:ba:48: ea:37:4a:62:8e:3f:e4:00:6b:08:83:31:fe:14:26:60:6a:f0: e6:6b:f3:08:3a:e8:4a:cd:fc:8b:6a:d9:3b:fb:e8:06:f8:fa: 0b:de:a9:72:7e:8b:f4:bf:b2:18:91:65:84:9c:4f:43:b1:df: 73:a6:50:79:99:2d:26:e1:d9:12:b3:01:08:11:44:ac:a7:a5: c8:8e:ed:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG+Evsjjlk3MHadetWJdDcXHbc5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzNloX DTI3MDMwMzA2MDczNlowMzExMC8GA1UEAxMoNkMwRDNGRTgyMjk3QjIxMjhFNzMx RjY3MEU5MzlERjMzQ0VDNTE3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+UkwIB1TmDLyOK5Dbn5rFKX7CDIvIqn2LPIXfIpGQS9XjjYRuuPlxYA2dT 1iJfYHhX3gGbHDRcehTIFiHYCdRN2b+4keLYGxzCIqX64Z2RnGZUTf91L49C35GO ElCsYdIOyTvGyeU/rj5oPpECR+bvDYC9kHanEwxfScNmCsC+F2KOoJhYYwxMy2hf 2LoujTG8msBoAvrxHAOGOYYA8qGQkgx4bivr+aqy7xE8hTh2RNm9e0XzxpiAoF1m telj60jRG7imUvFq2WIUxieQab9mcakXRQyQPHUPXqN8zT66YacrT8EwU9jCWNq5 Ushx/rsX6R4d0trf26xzVVnBKpkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRsDT/o IpeyEo5zH2cOk53zPOxRcDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzExMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oc0wDQYJKoZIhvcNAQELBQADggEBAMH/mz8sqjpTEuObDsUdj1b4M/EonXxjvW0A lLpo3f+fhXtObYmi5QD4v101pqi2QyQD7J8eNHfU/kqWrJoa/y++Fl98DOxMG5yJ hx2wTosx8HTOhLLe2m/fTGtSUDRZaLETgbwAUUnHI03XBa74Vj9UZDIj80NiHHvE OKCmeQ/VFm89rCDbfJaJNBAlHFeoATabX3autjyclN4RGlScorsN+BIEbsjzAY09 xkBbxTuEn6i6SOo3SmKOP+QAawiDMf4UJmBq8OZr8wg66ErN/Itq2Tv76Ab4+gve qXJ+i/S/shiRZYScT0Ox33OmUHmZLSbh2RKzAQgRRKynpciO7Q4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:05 2026 by rpki-client