$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143130.roa File: AS143130.roa (raw, json) Hash identifier: tIVQC7kmfz0W1kPhrJbU3MDY9k41cYwPvCtfivbEHVo= Subject key identifier: C0:C2:16:BC:24:5A:D9:B4:B3:27:2D:46:84:2A:97:7E:34:D3:CD:97 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 03880B9A44C36C04050AB6B8B00612CFBB5CED4E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143130.roa Signing time: Wed 04 Mar 2026 06:05:32 +0000 ROA not before: Wed 04 Mar 2026 06:00:32 +0000 ROA not after: Wed 03 Mar 2027 06:05:32 +0000 asID: 143130 IP address blocks: 240a:a1e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:88:0b:9a:44:c3:6c:04:05:0a:b6:b8:b0:06:12:cf:bb:5c:ed:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:32 2026 GMT Not After : Mar 3 06:05:32 2027 GMT Subject: CN=C0C216BC245AD9B4B3272D46842A977E34D3CD97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:30:19:17:0a:68:53:08:82:05:ed:f1:8f: d8:0d:3e:cf:2d:54:d8:79:3b:77:93:ab:b1:6d:ba: 40:fe:93:c5:91:54:94:87:b4:2c:9c:77:23:b3:4a: ec:91:bc:1a:b6:1d:6b:cb:a0:ef:3e:26:92:5c:cd: 56:fe:73:0e:47:9c:0c:35:b4:04:fc:26:f7:86:1a: 4e:9a:0e:a4:5f:8a:a0:e9:57:72:30:d8:d7:15:e3: 16:35:91:c1:00:26:76:d3:69:ef:e6:05:f8:2b:28: 0a:5a:e9:5a:c8:88:43:46:d1:91:4e:d5:d9:fb:35: 2a:10:8d:9f:da:9d:85:87:f8:88:07:e0:9c:c6:d0: ea:41:3a:a5:5c:a2:f9:46:fd:1a:95:1b:ee:2c:1f: df:bc:a8:9a:93:67:cd:03:f6:d3:fd:25:d2:b3:9b: 00:a4:f2:b1:08:e5:a1:b9:c4:39:6b:7e:fd:93:36: 5c:21:19:08:00:97:fb:cf:35:4f:58:63:0a:bf:ed: 66:3c:44:f6:77:ea:74:5f:fe:61:e4:f0:09:8a:e4: 65:f2:3d:76:32:e2:ec:3f:d1:2d:51:95:0d:db:c6: c9:8c:17:46:bb:3f:31:f0:a6:70:d5:fd:12:46:61: ab:9d:de:4b:39:aa:5c:d9:44:63:84:26:14:aa:04: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C2:16:BC:24:5A:D9:B4:B3:27:2D:46:84:2A:97:7E:34:D3:CD:97 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1e0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:fb:98:a4:11:27:05:ed:a4:d1:6c:71:6e:92:3d:b3:ee:59: 81:66:bf:be:ed:78:ed:f0:82:c2:f7:d6:65:dd:e9:41:47:fb: b8:4f:44:fa:bd:ff:57:c6:05:05:1e:eb:6a:1a:53:6e:68:3f: f2:0d:38:97:01:f5:27:e3:c8:bf:7b:a8:1f:1a:bd:ff:db:c0: fd:2d:f3:91:96:e2:d7:ae:f5:5d:0d:59:9a:cd:cb:e4:6f:39: a4:8f:f5:d8:2d:e4:63:a6:f8:12:83:5a:d4:d6:f6:10:ee:4d: 9c:5c:c5:d6:45:43:f8:33:0e:45:25:45:5b:18:ee:66:ce:f1: 79:3d:cf:bd:20:2c:bb:d7:f4:ae:3f:91:e5:b8:7f:31:19:d8: 85:da:0b:8e:f5:6a:3f:81:fd:b2:17:68:ee:47:4f:70:6f:30: 91:6b:a5:fe:ef:63:cb:13:38:06:b1:fd:17:4c:34:7b:f0:51: 6c:ac:ad:8e:45:b6:ab:11:43:4b:c6:f9:15:5e:f8:5f:06:7d: cf:c9:c6:e9:40:01:ec:c5:27:7a:66:59:e2:12:2b:1a:2a:23: 2a:ef:43:fe:51:d4:c9:52:0f:8b:d9:03:f9:f7:f9:e7:89:54: 9e:97:b3:d3:07:75:ca:2f:e2:c5:97:9f:61:e1:92:c0:70:15: 50:bd:0c:32 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUA4gLmkTDbAQFCra4sAYSz7tc7U4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzMloX DTI3MDMwMzA2MDUzMlowMzExMC8GA1UEAxMoQzBDMjE2QkMyNDVBRDlCNEIzMjcy RDQ2ODQyQTk3N0UzNEQzQ0Q5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDVMBkXCmhTCIIF7fGP2A0+zy1U2Hk7d5OrsW26QP6TxZFUlIe0LJx3I7NK 7JG8GrYda8ug7z4mklzNVv5zDkecDDW0BPwm94YaTpoOpF+KoOlXcjDY1xXjFjWR wQAmdtNp7+YF+CsoClrpWsiIQ0bRkU7V2fs1KhCNn9qdhYf4iAfgnMbQ6kE6pVyi +Ub9GpUb7iwf37yompNnzQP20/0l0rObAKTysQjlobnEOWt+/ZM2XCEZCACX+881 T1hjCr/tZjxE9nfqdF/+YeTwCYrkZfI9djLi7D/RLVGVDdvGyYwXRrs/MfCmcNX9 EkZhq53eSzmqXNlEY4QmFKoEFOsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTAwha8 JFrZtLMnLUaEKpd+NNPNlzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzEzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oeAwDQYJKoZIhvcNAQELBQADggEBAD37mKQRJwXtpNFscW6SPbPuWYFmv77teO3w gsL31mXd6UFH+7hPRPq9/1fGBQUe62oaU25oP/INOJcB9SfjyL97qB8avf/bwP0t 85GW4teu9V0NWZrNy+RvOaSP9dgt5GOm+BKDWtTW9hDuTZxcxdZFQ/gzDkUlRVsY 7mbO8Xk9z70gLLvX9K4/keW4fzEZ2IXaC471aj+B/bIXaO5HT3BvMJFrpf7vY8sT OAax/RdMNHvwUWysrY5FtqsRQ0vG+RVe+F8Gfc/JxulAAezFJ3pmWeISKxoqIyrv Q/5R1MlSD4vZA/n3+eeJVJ6Xs9MHdcov4sWXn2HhksBwFVC9DDI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:14 2026 by rpki-client