$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143115.roa File: AS143115.roa (raw, json) Hash identifier: brDT49RdP0pP8mEhnlIpiWz7bFTOQjuTVDy3H1D2+jw= Subject key identifier: 33:D3:42:DD:57:6E:DC:EF:C8:11:E0:7A:C3:14:9A:E8:6E:E0:06:5E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4B539C30C2EE93411866787F8FF996A0D5D18686 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143115.roa Signing time: Wed 04 Mar 2026 06:06:16 +0000 ROA not before: Wed 04 Mar 2026 06:01:16 +0000 ROA not after: Wed 03 Mar 2027 06:06:16 +0000 asID: 143115 IP address blocks: 240a:a1d1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:53:9c:30:c2:ee:93:41:18:66:78:7f:8f:f9:96:a0:d5:d1:86:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:16 2026 GMT Not After : Mar 3 06:06:16 2027 GMT Subject: CN=33D342DD576EDCEFC811E07AC3149AE86EE0065E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:19:af:72:09:92:03:0c:55:cb:c8:0d:28: 2b:19:44:64:74:9c:60:3e:de:ff:30:32:3e:db:bb: 6b:a7:66:c8:b0:a7:9e:e4:5b:80:45:22:36:1f:5c: 98:26:70:fd:de:6e:5d:fb:6c:16:2a:85:9e:b2:ac: a7:04:b7:6f:10:85:9d:ee:54:d5:98:d8:48:17:86: 8a:80:cf:76:44:5b:15:5f:d8:62:2a:37:7a:80:0e: 53:8a:88:5e:e2:9c:fd:61:99:f0:37:fd:80:7c:6a: fe:07:07:61:1a:2f:fb:5d:76:64:82:c1:8b:d0:62: 46:ae:aa:0b:bf:ca:4c:c3:4e:48:7d:2c:1f:ed:92: 18:66:bc:ae:14:f8:8e:a7:e1:ce:7b:19:cb:5c:c8: 09:dd:17:0f:a8:09:f4:f6:60:aa:1c:d1:95:79:90: 38:17:42:44:d2:cf:8f:30:53:09:db:07:0e:d6:35: 6c:47:b7:92:71:d9:e2:6e:ed:fc:d3:f1:0f:d1:85: 6e:0b:11:f8:5a:f8:43:c4:04:a3:8f:80:da:d4:69: 38:fb:77:7b:b0:b2:a5:70:4d:6a:5b:d7:00:50:41: 23:31:b8:6f:0c:6e:8a:94:e4:49:ac:e1:65:73:bf: 88:11:06:0b:25:d6:1b:c5:bd:0d:3c:29:c0:4f:60: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D3:42:DD:57:6E:DC:EF:C8:11:E0:7A:C3:14:9A:E8:6E:E0:06:5E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1d1::/32 Signature Algorithm: sha256WithRSAEncryption 3f:cf:64:e3:65:9c:72:fc:51:e7:b7:3a:1d:86:5f:e7:bb:df: a8:ae:c6:4c:4b:f7:67:f6:69:3c:20:7f:8e:1f:7e:6b:b8:5d: f7:f9:cb:b6:64:92:03:21:78:b7:dd:f1:4f:21:fe:e7:91:f3: 40:1f:88:b4:91:e1:49:c8:30:85:d6:8e:ec:04:6e:65:74:74: 4f:03:58:67:b5:29:4a:0c:2c:3e:80:35:30:5f:fe:d7:f0:9d: 6d:bc:34:c1:0f:d5:7e:95:32:e3:f8:e4:58:8e:72:17:b5:d2: 19:c5:38:71:99:ba:27:88:75:78:5e:5c:04:0f:9b:ca:37:ec: 12:36:bc:fc:4a:6a:94:56:f9:3f:ee:8d:92:4a:25:9b:e9:cb: 27:9e:40:32:c0:72:29:d3:1b:af:0a:88:4c:d9:94:09:8c:69: 02:99:54:5d:6d:d1:47:e7:38:44:90:1c:e5:1d:8b:2e:5e:20: b2:3c:77:e8:88:e1:55:bc:ab:96:5e:a0:b4:89:05:2e:dd:fe: d1:7c:f9:38:76:79:46:7f:eb:11:09:83:a3:38:fe:9d:35:e1: be:cd:2a:c9:4b:29:94:90:72:99:1f:45:0e:04:09:9e:6e:c7: cb:07:52:fd:bf:a3:d2:0e:61:9c:09:ec:0f:18:c5:88:a5:ee: f2:02:e2:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS1OcMMLuk0EYZnh/j/mWoNXRhoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExNloX DTI3MDMwMzA2MDYxNlowMzExMC8GA1UEAxMoMzNEMzQyREQ1NzZFRENFRkM4MTFF MDdBQzMxNDlBRTg2RUUwMDY1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/cGa9yCZIDDFXLyA0oKxlEZHScYD7e/zAyPtu7a6dmyLCnnuRbgEUiNh9c mCZw/d5uXftsFiqFnrKspwS3bxCFne5U1ZjYSBeGioDPdkRbFV/YYio3eoAOU4qI XuKc/WGZ8Df9gHxq/gcHYRov+112ZILBi9BiRq6qC7/KTMNOSH0sH+2SGGa8rhT4 jqfhznsZy1zICd0XD6gJ9PZgqhzRlXmQOBdCRNLPjzBTCdsHDtY1bEe3knHZ4m7t /NPxD9GFbgsR+Fr4Q8QEo4+A2tRpOPt3e7CypXBNalvXAFBBIzG4bwxuipTkSazh ZXO/iBEGCyXWG8W9DTwpwE9gSqMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQz00Ld V27c78gR4HrDFJrobuAGXjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzExNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK odEwDQYJKoZIhvcNAQELBQADggEBAD/PZONlnHL8Uee3Oh2GX+e736iuxkxL92f2 aTwgf44ffmu4Xff5y7ZkkgMheLfd8U8h/ueR80AfiLSR4UnIMIXWjuwEbmV0dE8D WGe1KUoMLD6ANTBf/tfwnW28NMEP1X6VMuP45FiOche10hnFOHGZuieIdXheXAQP m8o37BI2vPxKapRW+T/ujZJKJZvpyyeeQDLAcinTG68KiEzZlAmMaQKZVF1t0Ufn OESQHOUdiy5eILI8d+iI4VW8q5ZeoLSJBS7d/tF8+Th2eUZ/6xEJg6M4/p014b7N KslLKZSQcpkfRQ4ECZ5ux8sHUv2/o9IOYZwJ7A8YxYil7vIC4go= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:46 2026 by rpki-client