$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143117.roa File: AS143117.roa (raw, json) Hash identifier: P7JUNE5kkz+YFvfv2J6PrfKWRhShZxrJYz19HBsyOQE= Subject key identifier: A0:2D:C9:6C:6E:BE:D3:C6:21:31:67:DB:E6:D0:99:67:F9:21:E9:88 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4FD3D0088A8398947B9995D4A1DDEFFF27A80312 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143117.roa Signing time: Wed 04 Mar 2026 06:08:03 +0000 ROA not before: Wed 04 Mar 2026 06:03:03 +0000 ROA not after: Wed 03 Mar 2027 06:08:03 +0000 asID: 143117 IP address blocks: 240a:a1d3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d3:d0:08:8a:83:98:94:7b:99:95:d4:a1:dd:ef:ff:27:a8:03:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:03 2026 GMT Not After : Mar 3 06:08:03 2027 GMT Subject: CN=A02DC96C6EBED3C6213167DBE6D09967F921E988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:5e:f8:bc:32:6b:50:69:41:45:0a:c3:15: 24:69:cf:3d:d2:bb:59:43:80:19:99:a3:c7:b7:ea: 2a:0d:bd:ba:3f:04:e2:3b:8c:ba:09:07:e7:d4:64: 37:fa:5f:d8:19:7d:fd:3f:c3:1b:85:fd:21:62:60: aa:fb:fc:96:f9:36:01:5b:47:ee:d0:a7:8c:27:ac: ca:63:8f:e8:4f:1b:fd:22:8c:20:28:5a:d0:5f:a6: 6f:cc:2d:3d:fc:61:2b:27:81:63:88:07:9c:20:9e: 64:26:79:54:3b:2c:86:cc:19:f6:08:8d:c1:83:56: a7:37:31:69:a8:f1:5a:a2:f5:b0:94:74:86:8d:0a: 34:f4:5c:5d:40:a7:17:00:26:68:45:a2:82:07:89: b0:83:03:f3:49:c6:f9:00:8b:ab:61:31:65:bd:1c: b3:5d:f8:d9:57:28:89:95:91:ab:9a:d9:08:a8:b7: bc:68:e6:bd:ab:c2:44:75:55:73:84:3b:cd:fa:c5: dd:a4:40:46:ee:dc:ef:8c:f5:2d:f9:53:c2:5c:6c: 00:8b:0b:27:a4:38:ff:13:71:39:a6:8f:72:eb:14: 1a:a8:21:63:7e:4e:e2:ee:9c:31:9a:b3:06:ab:b8: 27:9c:a0:3b:9a:9a:79:6e:4c:68:6a:fe:26:28:8e: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2D:C9:6C:6E:BE:D3:C6:21:31:67:DB:E6:D0:99:67:F9:21:E9:88 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143117.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1d3::/32 Signature Algorithm: sha256WithRSAEncryption d3:23:0e:ea:86:0c:5e:3e:46:0e:46:de:2a:47:cb:c2:f1:1f: 7b:4c:d7:e8:2f:21:08:f9:2b:c8:15:32:47:f2:24:06:6a:c7: cb:af:29:59:2c:1c:bd:87:dc:68:6a:95:0d:a5:fc:6d:d9:46: 03:e3:e0:ac:da:1f:7f:42:d4:d8:af:e6:24:e3:de:ac:9e:c2: 49:4c:55:b3:9a:1c:27:99:49:cf:ad:f8:39:ba:8f:01:f4:28: 59:90:57:69:a3:01:12:4d:52:59:76:6c:6a:3b:dc:e7:ec:d0: 32:75:9b:e3:65:14:62:62:41:54:0e:e6:49:d2:df:4b:60:23: 39:9e:0f:f3:03:12:28:09:7f:b5:51:76:db:86:b1:d1:58:61: 86:95:d5:a8:ca:40:0f:57:73:0e:66:35:66:a4:cc:3e:17:1a: 7a:45:de:86:70:3d:91:4c:a4:61:ab:64:70:0c:cd:82:59:34: 20:f5:85:be:c0:6e:17:6a:c3:81:52:1c:5a:f6:b8:a2:99:f1: 41:db:dc:7f:cc:99:b0:2b:5a:47:cb:30:39:01:20:36:49:e6: 80:b9:d6:2f:e7:f3:2c:8d:aa:58:06:d7:f4:46:61:25:02:e1: cd:45:05:6b:d2:0d:1f:9e:ee:67:9a:d1:a1:ff:a6:a3:2d:0f: bf:53:1a:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUT9PQCIqDmJR7mZXUod3v/yeoAxIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwM1oX DTI3MDMwMzA2MDgwM1owMzExMC8GA1UEAxMoQTAyREM5NkM2RUJFRDNDNjIxMzE2 N0RCRTZEMDk5NjdGOTIxRTk4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+bXvi8MmtQaUFFCsMVJGnPPdK7WUOAGZmjx7fqKg29uj8E4juMugkH59Rk N/pf2Bl9/T/DG4X9IWJgqvv8lvk2AVtH7tCnjCesymOP6E8b/SKMICha0F+mb8wt PfxhKyeBY4gHnCCeZCZ5VDsshswZ9giNwYNWpzcxaajxWqL1sJR0ho0KNPRcXUCn FwAmaEWiggeJsIMD80nG+QCLq2ExZb0cs1342VcoiZWRq5rZCKi3vGjmvavCRHVV c4Q7zfrF3aRARu7c74z1LflTwlxsAIsLJ6Q4/xNxOaaPcusUGqghY35O4u6cMZqz Bqu4J5ygO5qaeW5MaGr+JiiOvTsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSgLcls br7TxiExZ9vm0Jln+SHpiDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzExNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK odMwDQYJKoZIhvcNAQELBQADggEBANMjDuqGDF4+Rg5G3ipHy8LxH3tM1+gvIQj5 K8gVMkfyJAZqx8uvKVksHL2H3GhqlQ2l/G3ZRgPj4KzaH39C1Niv5iTj3qyewklM VbOaHCeZSc+t+Dm6jwH0KFmQV2mjARJNUll2bGo73Ofs0DJ1m+NlFGJiQVQO5knS 30tgIzmeD/MDEigJf7VRdtuGsdFYYYaV1ajKQA9Xcw5mNWakzD4XGnpF3oZwPZFM pGGrZHAMzYJZNCD1hb7Abhdqw4FSHFr2uKKZ8UHb3H/MmbArWkfLMDkBIDZJ5oC5 1i/n8yyNqlgG1/RGYSUC4c1FBWvSDR+e7mea0aH/pqMtD79TGqw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:33 2026 by rpki-client