$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143132.roa File: AS143132.roa (raw, json) Hash identifier: d9BhnFJ9GshonSR+50oUvCN0pCcLpq/VzUk1fKYD7mk= Subject key identifier: 16:55:78:1A:8D:8A:A9:03:75:E9:E3:B2:D9:A7:83:59:91:4D:64:7F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2FB8C1D16EE0043A48442BEEFCA98D8872D2F0CD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143132.roa Signing time: Wed 04 Mar 2026 06:06:39 +0000 ROA not before: Wed 04 Mar 2026 06:01:39 +0000 ROA not after: Wed 03 Mar 2027 06:06:39 +0000 asID: 143132 IP address blocks: 240a:a1e2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b8:c1:d1:6e:e0:04:3a:48:44:2b:ee:fc:a9:8d:88:72:d2:f0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:39 2026 GMT Not After : Mar 3 06:06:39 2027 GMT Subject: CN=1655781A8D8AA90375E9E3B2D9A78359914D647F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:38:dd:e4:9b:ee:f9:6a:75:82:50:b2:a8: ed:16:3b:e7:35:ba:c7:7f:b0:cd:09:7a:5a:ce:88: dd:75:70:bf:b1:0b:c0:25:db:e7:af:c1:47:22:e1: ed:04:02:ec:ab:38:25:00:26:bc:42:64:b2:bd:02: b9:d5:e0:28:eb:49:24:f7:42:2e:4a:e6:df:4d:03: 06:67:9a:61:96:d2:a5:c9:fb:3e:77:38:f8:b0:17: 8a:18:33:29:9d:71:a0:b0:65:a1:13:4a:63:78:98: c1:56:7b:9f:3e:b9:c6:e6:bb:e7:3b:2d:ef:d1:d5: a3:75:4b:71:85:05:86:ee:b2:a7:c0:42:e3:d9:c1: 0d:eb:02:0c:43:21:67:a7:6c:e5:65:54:10:65:bf: 74:33:90:35:89:20:86:48:25:61:72:c2:c3:a1:21: b1:42:28:76:be:d1:c5:7f:f4:39:08:5d:b6:f2:9b: 2f:66:ff:ff:e2:78:99:8c:d2:8c:9c:a2:75:9e:d2: 5c:8f:76:74:2b:f8:f3:61:b3:3e:cf:8f:ab:b8:0c: ee:5d:a4:3f:f6:09:7a:cd:22:fa:4d:25:dc:0c:44: dd:3e:23:04:35:51:38:f2:37:e4:af:3c:6f:4c:7f: 24:9e:9f:c7:39:82:5a:2d:91:ed:eb:d0:f4:0f:d2: f4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:55:78:1A:8D:8A:A9:03:75:E9:E3:B2:D9:A7:83:59:91:4D:64:7F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1e2::/32 Signature Algorithm: sha256WithRSAEncryption 69:11:5c:c9:ba:9e:d1:c4:7d:f4:74:29:b7:68:15:fe:78:99: a4:77:79:14:22:e3:67:92:40:41:bf:e9:7d:cb:c8:ce:05:ba: d2:7a:35:25:7b:f9:57:42:d0:0b:d1:d9:76:6c:11:dd:89:90: fa:77:25:98:58:b4:35:c6:5b:23:7b:b3:d1:10:c4:6e:04:67: eb:7c:07:56:da:27:c9:88:72:23:95:12:3c:a0:66:85:78:bb: e2:f1:b9:f6:e8:f6:13:b4:e2:bb:5b:4b:5a:39:d3:05:e8:54: 8e:46:32:78:e1:65:15:68:a9:0b:5e:fc:7a:db:7c:3a:5f:2f: 8f:85:ca:50:2c:88:1d:b1:c2:d3:6e:fd:48:c6:0e:14:a2:99: 46:f6:9c:eb:05:d8:48:b1:ca:b2:c1:0e:dd:37:37:03:17:d8: fd:4e:7e:f1:f9:42:ed:bf:de:8c:9c:d4:06:40:3c:8a:91:61: 54:ec:07:5e:e0:9d:93:fb:1f:69:42:1d:ab:40:8a:7a:aa:d0: 0b:ff:d0:b9:9c:9c:60:a9:cb:90:ad:10:c6:f5:47:8b:bd:db: c6:f4:b7:58:4f:7c:a8:2e:cc:3e:d3:40:1b:03:d2:2d:04:36: 09:07:2a:41:fb:55:79:19:96:27:f2:be:28:53:f0:e8:ed:63: 0f:34:b0:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUL7jB0W7gBDpIRCvu/KmNiHLS8M0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzOVoX DTI3MDMwMzA2MDYzOVowMzExMC8GA1UEAxMoMTY1NTc4MUE4RDhBQTkwMzc1RTlF M0IyRDlBNzgzNTk5MTRENjQ3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0PON3km+75anWCULKo7RY75zW6x3+wzQl6Ws6I3XVwv7ELwCXb56/BRyLh 7QQC7Ks4JQAmvEJksr0CudXgKOtJJPdCLkrm300DBmeaYZbSpcn7Pnc4+LAXihgz KZ1xoLBloRNKY3iYwVZ7nz65xua75zst79HVo3VLcYUFhu6yp8BC49nBDesCDEMh Z6ds5WVUEGW/dDOQNYkghkglYXLCw6EhsUIodr7RxX/0OQhdtvKbL2b//+J4mYzS jJyidZ7SXI92dCv482GzPs+Pq7gM7l2kP/YJes0i+k0l3AxE3T4jBDVROPI35K88 b0x/JJ6fxzmCWi2R7evQ9A/S9GECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQWVXga jYqpA3Xp47LZp4NZkU1kfzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzEzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oeIwDQYJKoZIhvcNAQELBQADggEBAGkRXMm6ntHEffR0KbdoFf54maR3eRQi42eS QEG/6X3LyM4FutJ6NSV7+VdC0AvR2XZsEd2JkPp3JZhYtDXGWyN7s9EQxG4EZ+t8 B1baJ8mIciOVEjygZoV4u+Lxufbo9hO04rtbS1o50wXoVI5GMnjhZRVoqQte/Hrb fDpfL4+FylAsiB2xwtNu/UjGDhSimUb2nOsF2EixyrLBDt03NwMX2P1OfvH5Qu2/ 3oyc1AZAPIqRYVTsB17gnZP7H2lCHatAinqq0Av/0LmcnGCpy5CtEMb1R4u928b0 t1hPfKguzD7TQBsD0i0ENgkHKkH7VXkZlifyvihT8OjtYw80sNE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:40 2026 by rpki-client