$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143119.roa File: AS143119.roa (raw, json) Hash identifier: Ia+/74Vr7CLG5DNDoENdVPeMjbCphTKvFlUvRPpD4os= Subject key identifier: 45:0A:C0:F5:32:40:C2:79:DC:7B:22:9B:5A:77:3B:FB:99:25:01:7D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 184E4590B497BDDC2E4E4C4CD45E09D2C3D2FC13 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143119.roa Signing time: Wed 04 Mar 2026 06:05:42 +0000 ROA not before: Wed 04 Mar 2026 06:00:42 +0000 ROA not after: Wed 03 Mar 2027 06:05:42 +0000 asID: 143119 IP address blocks: 240a:a1d5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:4e:45:90:b4:97:bd:dc:2e:4e:4c:4c:d4:5e:09:d2:c3:d2:fc:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:42 2026 GMT Not After : Mar 3 06:05:42 2027 GMT Subject: CN=450AC0F53240C279DC7B229B5A773BFB9925017D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:cb:03:fd:b1:49:91:a6:72:6d:bb:0e:59:90: da:5e:42:2a:89:54:5b:14:96:6a:01:37:dc:7a:a5: 9e:41:96:1b:32:f5:b4:08:62:a6:bb:a4:f4:23:28: c9:6f:20:69:0b:64:86:65:a8:45:e8:7d:b9:c9:66: 87:60:90:42:ee:62:02:ac:1b:ff:17:9b:ae:fd:f7: 71:9f:fd:38:d7:d7:7e:05:4d:d7:a1:85:c6:25:9a: e8:bc:1b:9e:4a:a1:a8:88:eb:b9:d3:b8:43:b3:cf: e2:0f:b6:30:66:dc:29:a4:f3:c9:84:6d:da:89:d6: 76:c6:b5:32:de:bb:5e:47:50:94:14:d4:fc:1e:3c: 27:92:6d:5f:b9:a4:d6:43:b6:5d:b6:90:4f:a6:0d: d8:fc:26:61:fb:8f:15:86:d5:ef:2a:11:d4:3d:15: a1:7b:29:a7:b4:7a:db:14:da:fb:da:90:99:d5:9c: 14:0a:83:30:46:00:44:8f:10:9c:46:da:48:e9:d1: 30:1d:58:a5:16:5c:79:cc:03:d3:5e:bb:ec:1d:3c: 65:5b:7f:2e:ec:aa:93:f1:3d:08:a3:28:62:8f:a0: 53:9b:34:ce:48:e8:38:f6:d8:5c:99:df:9a:08:df: cd:d0:51:cf:17:c6:6a:a0:3f:99:84:8b:7e:a0:70: 83:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0A:C0:F5:32:40:C2:79:DC:7B:22:9B:5A:77:3B:FB:99:25:01:7D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143119.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1d5::/32 Signature Algorithm: sha256WithRSAEncryption db:89:0e:a9:c5:3c:04:ae:32:b5:4e:84:90:19:19:5b:c0:e0: 4d:e4:53:84:f7:e0:0a:56:21:0b:c4:dc:bb:1f:6c:ed:fb:c6: a7:2a:b4:df:07:d6:70:5b:0a:79:96:63:37:02:5a:a2:b5:55: 18:d7:83:30:cb:22:55:7b:28:7e:f5:a0:08:99:79:75:8c:92: 4f:96:95:e3:81:86:e8:92:26:a3:5a:42:18:3f:44:8c:6f:fc: c0:00:34:61:27:83:d4:40:60:ee:a7:b9:44:5c:09:b0:c7:3b: be:9f:03:9c:8e:eb:a2:ea:02:31:ef:97:64:30:30:6d:08:28: 53:02:bd:67:6e:a8:26:9b:34:f9:83:40:0a:ac:51:84:56:15: 4d:ca:f2:09:37:98:71:ad:3a:cf:25:56:10:41:7c:7c:59:1f: cc:29:1f:5e:d8:13:3a:ee:d7:dc:02:87:b7:15:e5:3d:94:dc: ed:ca:79:24:f9:2a:b9:0e:ab:e2:c9:b2:d0:8b:e9:8a:3d:aa: d5:d2:f4:e6:0f:8c:a4:de:b2:d5:ce:86:70:b9:1e:98:60:8d: b1:3e:9a:2d:1a:0d:2b:4b:21:1d:a8:6b:bf:1f:ac:1b:a9:8a: c3:a4:ce:39:3b:47:f2:f3:eb:2e:74:b5:e0:00:d1:92:92:e4: 1c:63:46:05 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGE5FkLSXvdwuTkxM1F4J0sPS/BMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0MloX DTI3MDMwMzA2MDU0MlowMzExMC8GA1UEAxMoNDUwQUMwRjUzMjQwQzI3OURDN0Iy MjlCNUE3NzNCRkI5OTI1MDE3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPjLA/2xSZGmcm27DlmQ2l5CKolUWxSWagE33HqlnkGWGzL1tAhipruk9CMo yW8gaQtkhmWoReh9uclmh2CQQu5iAqwb/xebrv33cZ/9ONfXfgVN16GFxiWa6Lwb nkqhqIjrudO4Q7PP4g+2MGbcKaTzyYRt2onWdsa1Mt67XkdQlBTU/B48J5JtX7mk 1kO2XbaQT6YN2PwmYfuPFYbV7yoR1D0VoXspp7R62xTa+9qQmdWcFAqDMEYARI8Q nEbaSOnRMB1YpRZcecwD01677B08ZVt/Luyqk/E9CKMoYo+gU5s0zkjoOPbYXJnf mgjfzdBRzxfGaqA/mYSLfqBwg4UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRFCsD1 MkDCedx7Iptadzv7mSUBfTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzExOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK odUwDQYJKoZIhvcNAQELBQADggEBANuJDqnFPASuMrVOhJAZGVvA4E3kU4T34ApW IQvE3LsfbO37xqcqtN8H1nBbCnmWYzcCWqK1VRjXgzDLIlV7KH71oAiZeXWMkk+W leOBhuiSJqNaQhg/RIxv/MAANGEng9RAYO6nuURcCbDHO76fA5yO66LqAjHvl2Qw MG0IKFMCvWduqCabNPmDQAqsUYRWFU3K8gk3mHGtOs8lVhBBfHxZH8wpH17YEzru 19wCh7cV5T2U3O3KeST5KrkOq+LJstCL6Yo9qtXS9OYPjKTestXOhnC5HphgjbE+ mi0aDStLIR2oa78frBupisOkzjk7R/Lz6y50teAA0ZKS5BxjRgU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:48 2026 by rpki-client