$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143123.roa File: AS143123.roa (raw, json) Hash identifier: L9Ywj5cKfRz9I9Wrz9pRMwJb+cG0Yiru0K91Tudv67g= Subject key identifier: D4:D9:5C:CF:31:51:EE:A0:71:B7:77:94:5D:9C:4E:87:60:0C:AF:BB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5536124CADB8B6EFB557136771FDF1095554D4C9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143123.roa Signing time: Wed 04 Mar 2026 06:06:33 +0000 ROA not before: Wed 04 Mar 2026 06:01:33 +0000 ROA not after: Wed 03 Mar 2027 06:06:33 +0000 asID: 143123 IP address blocks: 240a:a1d9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:36:12:4c:ad:b8:b6:ef:b5:57:13:67:71:fd:f1:09:55:54:d4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:33 2026 GMT Not After : Mar 3 06:06:33 2027 GMT Subject: CN=D4D95CCF3151EEA071B777945D9C4E87600CAFBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:8b:a1:0b:a4:97:fb:73:e7:4c:7d:e3:47: c2:e1:2e:72:50:8c:e2:c1:bc:60:59:0a:fe:74:b7: 8d:a5:e9:34:01:65:6c:cb:3f:82:da:31:74:cc:d5: ba:db:f0:0a:31:09:80:6d:ba:d8:18:0a:67:95:c0: 5f:62:f0:3a:47:65:8d:95:42:7a:be:c5:5d:a7:20: 85:ad:9f:a6:67:17:d5:d0:fb:c0:32:1d:cb:57:e6: 79:f4:3e:04:6c:1c:f0:ee:f4:59:79:76:18:bf:30: b4:39:2e:5e:14:1e:5f:f4:56:90:44:51:94:97:6e: 57:ff:dc:5c:3e:94:86:9d:0b:aa:f2:81:f1:ac:79: 01:38:ac:8d:37:b1:cc:2c:cc:44:dc:35:fc:9c:00: 33:65:88:30:69:20:1a:28:9f:8a:d4:1c:b7:14:99: a1:2f:68:51:71:ee:f7:d5:3c:e0:76:a5:7b:9e:e4: e2:f4:38:51:c4:90:e1:7c:03:fc:2f:3e:d7:5e:00: 0a:cb:05:3d:fd:5e:b4:24:36:53:a4:81:61:43:2d: 03:84:88:78:55:4b:c7:e0:bf:26:c2:84:b8:94:aa: 3a:de:01:6a:9d:be:ef:92:a7:af:f1:95:37:62:c3: 01:93:1b:fc:6d:0c:a9:7a:96:f0:60:3d:6f:09:1a: 34:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D9:5C:CF:31:51:EE:A0:71:B7:77:94:5D:9C:4E:87:60:0C:AF:BB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1d9::/32 Signature Algorithm: sha256WithRSAEncryption 31:3b:f1:fa:c1:64:5d:fb:44:c8:65:05:09:3c:08:04:5c:45: 24:2f:af:78:83:11:bb:85:7f:55:f9:af:6a:26:79:59:e0:b7: df:bc:25:2d:22:37:b9:c4:2b:13:32:2c:51:c5:c1:a5:c3:1f: 73:fb:27:3a:a4:12:83:a0:85:d4:57:60:70:62:e9:0a:2e:a5: 2f:22:7d:e2:38:02:78:73:b5:af:f4:c8:8f:44:50:e0:73:0a: d7:c5:80:95:ce:4f:93:ac:26:d8:54:ca:35:88:e5:99:2c:2a: cb:b8:d3:dd:81:52:6d:bb:3b:02:c9:eb:01:de:79:6e:9f:25: b3:ab:b8:70:47:26:13:a5:31:e6:c6:25:b8:b6:3a:c8:35:25: d8:82:a2:ab:fb:b4:b6:8c:b6:e6:2a:3b:97:1c:ac:0f:a4:05: fc:dc:c2:fd:01:b1:95:a2:d4:2f:ca:db:b5:45:63:70:e1:0a: 84:6b:b7:76:62:fd:f5:72:a2:5f:68:20:85:96:37:77:07:16: 37:17:6a:d7:77:f6:40:4b:9f:3b:70:c6:6e:76:5c:e1:13:e1: 83:87:c6:be:ce:6c:87:5e:c9:c2:28:03:fb:56:ea:de:aa:29: f9:6a:de:49:7f:81:19:04:8a:81:ee:60:41:ad:07:bc:03:4a: 9e:27:95:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVTYSTK24tu+1VxNncf3xCVVU1MkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzM1oX DTI3MDMwMzA2MDYzM1owMzExMC8GA1UEAxMoRDREOTVDQ0YzMTUxRUVBMDcxQjc3 Nzk0NUQ5QzRFODc2MDBDQUZCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKF3i6ELpJf7c+dMfeNHwuEuclCM4sG8YFkK/nS3jaXpNAFlbMs/gtoxdMzV utvwCjEJgG262BgKZ5XAX2LwOkdljZVCer7FXacgha2fpmcX1dD7wDIdy1fmefQ+ BGwc8O70WXl2GL8wtDkuXhQeX/RWkERRlJduV//cXD6Uhp0LqvKB8ax5ATisjTex zCzMRNw1/JwAM2WIMGkgGiifitQctxSZoS9oUXHu99U84Hale57k4vQ4UcSQ4XwD /C8+114ACssFPf1etCQ2U6SBYUMtA4SIeFVLx+C/JsKEuJSqOt4Bap2+75Knr/GV N2LDAZMb/G0MqXqW8GA9bwkaNLkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTU2VzP MVHuoHG3d5RdnE6HYAyvuzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzEyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK odkwDQYJKoZIhvcNAQELBQADggEBADE78frBZF37RMhlBQk8CARcRSQvr3iDEbuF f1X5r2omeVngt9+8JS0iN7nEKxMyLFHFwaXDH3P7JzqkEoOghdRXYHBi6QoupS8i feI4Anhzta/0yI9EUOBzCtfFgJXOT5OsJthUyjWI5ZksKsu4092BUm27OwLJ6wHe eW6fJbOruHBHJhOlMebGJbi2Osg1JdiCoqv7tLaMtuYqO5ccrA+kBfzcwv0BsZWi 1C/K27VFY3DhCoRrt3Zi/fVyol9oIIWWN3cHFjcXatd39kBLnztwxm52XOET4YOH xr7ObIdeycIoA/tW6t6qKflq3kl/gRkEioHuYEGtB7wDSp4nlcs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:28 2026 by rpki-client