$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143120.roa File: AS143120.roa (raw, json) Hash identifier: QmkHt05WCXItFoDibCNi9VKGlJvXUWYn8spL0/eBiXI= Subject key identifier: 93:D9:EA:B6:61:C1:0F:ED:51:8F:93:FB:27:6D:42:9D:10:D6:DD:72 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 35D669F6651213A1DFE28632D5EF1030B279FA98 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143120.roa Signing time: Wed 04 Mar 2026 06:06:59 +0000 ROA not before: Wed 04 Mar 2026 06:01:59 +0000 ROA not after: Wed 03 Mar 2027 06:06:59 +0000 asID: 143120 IP address blocks: 240a:a1d6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d6:69:f6:65:12:13:a1:df:e2:86:32:d5:ef:10:30:b2:79:fa:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:59 2026 GMT Not After : Mar 3 06:06:59 2027 GMT Subject: CN=93D9EAB661C10FED518F93FB276D429D10D6DD72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:aa:73:c3:19:a9:88:6a:fb:00:04:85:51: 72:8a:63:61:4c:19:56:5a:7a:d7:f3:08:e6:b7:2e: a1:78:0e:64:08:3d:6e:b3:15:4d:00:dd:b6:52:e1: 6b:64:31:67:37:8c:9a:73:cb:3a:6d:30:14:1d:64: 77:17:a5:3a:8d:77:07:ce:1c:40:15:6a:5e:c9:00: 30:c6:3b:4a:26:c8:60:06:9d:b4:61:c2:8f:aa:c8: ea:d0:16:15:e9:b1:0c:de:a4:c1:15:6f:71:74:14: 0c:b2:f5:6c:21:c4:4c:1c:88:ba:f3:22:d8:77:3d: f4:53:7e:ce:83:88:89:6a:c4:20:89:e8:34:f8:5d: cc:f1:34:cc:8d:ee:d5:b2:81:a9:59:93:c4:6d:b0: 6e:30:20:0e:5a:c8:d0:92:01:47:4b:01:c3:af:7a: 03:52:74:ab:bc:01:ac:15:d0:ea:25:01:b3:1a:9f: 62:44:a3:ee:29:65:a2:6d:9e:2c:06:8b:66:0d:16: 14:d1:15:c0:56:74:67:d7:4a:33:43:68:57:35:86: 4d:a0:c0:e3:b9:fc:e7:a8:b8:63:7d:ea:ba:62:72: e8:a6:d8:0c:54:3e:1e:0e:6d:d6:35:b3:e7:3a:4c: fe:dc:c4:a7:f3:a4:b5:a1:0b:14:62:36:9b:90:6a: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D9:EA:B6:61:C1:0F:ED:51:8F:93:FB:27:6D:42:9D:10:D6:DD:72 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143120.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1d6::/32 Signature Algorithm: sha256WithRSAEncryption 3d:ac:b1:7c:1e:50:3e:79:6a:da:c4:96:d5:5c:90:d0:2f:cc: ab:d4:c4:4b:8f:67:74:87:f0:c8:93:ab:a7:40:b6:c6:b7:8b: ea:66:b0:5e:bb:48:3a:04:ae:48:f2:e1:8e:55:36:68:23:cb: fc:3f:b5:e6:68:ed:64:d7:26:15:00:5b:48:e6:bc:a9:3b:1d: c8:85:07:64:17:f6:0d:a8:59:bd:98:f7:4a:4b:f6:ea:9e:fc: e2:c5:c1:2d:a6:39:2d:93:6f:1d:78:2c:f4:7c:96:25:fb:ba: 35:c0:8f:4e:ac:4f:66:ec:ec:4e:21:1c:f1:d2:aa:2a:c8:4c: df:ad:9b:87:4c:b6:ef:78:1c:d0:0f:91:15:35:14:6d:c8:34: 85:f6:70:b2:53:a4:47:98:20:fc:71:4a:e2:47:bb:7e:e9:94: 3b:ee:41:23:3a:4f:26:bd:1e:17:d2:6a:e7:41:19:0b:a9:db: ca:09:e0:f6:59:3f:a5:5a:ac:73:b1:a4:b9:7f:51:39:df:21: d9:7c:fb:c2:71:12:8e:c2:8a:3d:2f:45:19:9b:d8:96:c8:e5: 61:67:c0:39:89:5e:b3:9a:5c:14:9e:11:76:4b:36:df:06:f0: d9:dd:9c:ad:97:3b:82:4b:bc:cf:cb:5e:02:d0:27:16:b2:fd: 99:9f:14:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNdZp9mUSE6Hf4oYy1e8QMLJ5+pgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1OVoX DTI3MDMwMzA2MDY1OVowMzExMC8GA1UEAxMoOTNEOUVBQjY2MUMxMEZFRDUxOEY5 M0ZCMjc2RDQyOUQxMEQ2REQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLdqnPDGamIavsABIVRcopjYUwZVlp61/MI5rcuoXgOZAg9brMVTQDdtlLh a2QxZzeMmnPLOm0wFB1kdxelOo13B84cQBVqXskAMMY7SibIYAadtGHCj6rI6tAW FemxDN6kwRVvcXQUDLL1bCHETByIuvMi2Hc99FN+zoOIiWrEIInoNPhdzPE0zI3u 1bKBqVmTxG2wbjAgDlrI0JIBR0sBw696A1J0q7wBrBXQ6iUBsxqfYkSj7illom2e LAaLZg0WFNEVwFZ0Z9dKM0NoVzWGTaDA47n856i4Y33qumJy6KbYDFQ+Hg5t1jWz 5zpM/tzEp/OktaELFGI2m5Bq4BUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBST2eq2 YcEP7VGPk/snbUKdENbdcjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzEyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK odYwDQYJKoZIhvcNAQELBQADggEBAD2ssXweUD55atrEltVckNAvzKvUxEuPZ3SH 8MiTq6dAtsa3i+pmsF67SDoErkjy4Y5VNmgjy/w/teZo7WTXJhUAW0jmvKk7HciF B2QX9g2oWb2Y90pL9uqe/OLFwS2mOS2Tbx14LPR8liX7ujXAj06sT2bs7E4hHPHS qirITN+tm4dMtu94HNAPkRU1FG3INIX2cLJTpEeYIPxxSuJHu37plDvuQSM6Tya9 HhfSaudBGQup28oJ4PZZP6VarHOxpLl/UTnfIdl8+8JxEo7Cij0vRRmb2JbI5WFn wDmJXrOaXBSeEXZLNt8G8NndnK2XO4JLvM/LXgLQJxay/ZmfFOA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:50 2026 by rpki-client