$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143133.roa File: AS143133.roa (raw, json) Hash identifier: ELVDSOl4LYQD6AnZi4hBhoMNjidFlwfgUomnKkIoSjU= Subject key identifier: 37:17:65:64:53:24:35:BE:AF:1D:40:77:67:AF:9C:09:41:00:10:5B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 07A25A39EC3CA61AC84744AD824C63B21A87AAEB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143133.roa Signing time: Wed 04 Mar 2026 06:05:52 +0000 ROA not before: Wed 04 Mar 2026 06:00:52 +0000 ROA not after: Wed 03 Mar 2027 06:05:52 +0000 asID: 143133 IP address blocks: 240a:a1e3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a2:5a:39:ec:3c:a6:1a:c8:47:44:ad:82:4c:63:b2:1a:87:aa:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:52 2026 GMT Not After : Mar 3 06:05:52 2027 GMT Subject: CN=37176564532435BEAF1D407767AF9C094100105B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8a:49:6c:d1:9f:af:42:42:95:ac:71:17:97: 9b:0e:20:5a:0f:d3:f1:37:74:0b:18:42:80:f9:ad: 8a:4e:cb:08:3d:e9:73:6d:1a:2c:ad:82:87:af:21: 9d:ce:a9:9f:af:c1:1f:15:a6:4a:42:24:a8:3f:ac: 40:c3:14:51:73:d9:86:fb:06:16:2d:05:c1:ad:3b: 8a:4c:0e:86:11:9a:12:d2:90:29:5f:eb:db:11:0c: 1e:bb:5e:7c:6e:0e:79:28:10:31:59:c7:74:0e:88: 2b:1c:f0:3b:48:f9:b4:18:7e:df:7e:75:df:da:98: a5:6f:9d:c0:53:39:c0:55:76:10:d0:34:70:22:02: 9a:44:bb:5e:79:b3:b7:f7:63:8f:60:2f:49:2d:31: 8e:4a:37:61:5b:3c:78:b2:95:3e:f0:c0:bc:95:04: 2d:60:78:d0:1a:59:2b:26:09:1f:9c:c9:74:37:b1: 82:71:5a:71:f5:b7:cb:a4:4e:55:5f:8e:b9:b2:ea: fd:44:e6:22:22:d8:bb:36:ad:bb:01:dc:06:6e:21: 01:0f:06:b8:56:87:4e:87:af:b3:c5:c9:f4:ab:87: 2f:f6:31:14:f8:98:d9:3c:68:10:d7:cc:dd:c2:5b: 8d:17:63:87:3a:42:0f:c9:95:01:ab:24:b0:ff:e4: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:17:65:64:53:24:35:BE:AF:1D:40:77:67:AF:9C:09:41:00:10:5B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1e3::/32 Signature Algorithm: sha256WithRSAEncryption 51:29:d8:7f:d2:49:f3:d0:d4:17:59:99:79:be:84:24:e3:e7: 1e:67:22:e5:70:92:0d:48:1e:5d:88:49:86:ed:a9:18:d6:03: 2b:44:8a:d1:36:8b:e5:76:53:7f:60:b8:e0:db:86:10:bf:1e: 3e:48:b4:e3:6f:fe:44:8a:7e:8b:5c:f5:33:f4:07:0b:08:37: 1c:39:f8:b5:41:33:9a:77:08:d3:63:d0:d3:ef:ad:0c:3e:fa: 69:3c:44:a2:6c:a4:9c:92:d2:f9:d3:fd:19:17:0b:0d:a3:b1: 0b:57:3c:11:fd:30:29:73:35:15:4d:07:aa:75:ec:be:27:b5: 04:38:11:e4:90:ce:34:58:28:1b:83:d0:f8:10:bf:7d:24:ea: 94:3e:93:94:fb:58:88:34:3e:51:8b:aa:4e:fa:31:16:39:cf: 29:28:20:3c:4a:58:7d:e2:b6:df:75:87:1d:07:b0:f7:87:36: ed:0a:52:b3:b4:b9:1b:f1:51:6e:1a:87:0a:6b:96:ca:41:8f: 41:98:63:a0:48:3d:8a:39:ee:c3:c5:34:f0:02:31:8d:27:7f: f3:7e:0a:54:8f:5d:d5:54:72:a8:c7:c3:6d:86:de:63:36:b6: 00:46:7f:5d:c6:4b:6b:ad:57:c4:d1:3a:f3:81:31:9d:b5:a4: 0a:44:06:ca -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB6JaOew8phrIR0StgkxjshqHquswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1MloX DTI3MDMwMzA2MDU1MlowMzExMC8GA1UEAxMoMzcxNzY1NjQ1MzI0MzVCRUFGMUQ0 MDc3NjdBRjlDMDk0MTAwMTA1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOWKSWzRn69CQpWscReXmw4gWg/T8Td0CxhCgPmtik7LCD3pc20aLK2Ch68h nc6pn6/BHxWmSkIkqD+sQMMUUXPZhvsGFi0Fwa07ikwOhhGaEtKQKV/r2xEMHrte fG4OeSgQMVnHdA6IKxzwO0j5tBh+335139qYpW+dwFM5wFV2ENA0cCICmkS7Xnmz t/djj2AvSS0xjko3YVs8eLKVPvDAvJUELWB40BpZKyYJH5zJdDexgnFacfW3y6RO VV+OubLq/UTmIiLYuzatuwHcBm4hAQ8GuFaHToevs8XJ9KuHL/YxFPiY2TxoENfM 3cJbjRdjhzpCD8mVAasksP/krQkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ3F2Vk UyQ1vq8dQHdnr5wJQQAQWzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzEzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oeMwDQYJKoZIhvcNAQELBQADggEBAFEp2H/SSfPQ1BdZmXm+hCTj5x5nIuVwkg1I Hl2ISYbtqRjWAytEitE2i+V2U39guODbhhC/Hj5ItONv/kSKfotc9TP0BwsINxw5 +LVBM5p3CNNj0NPvrQw++mk8RKJspJyS0vnT/RkXCw2jsQtXPBH9MClzNRVNB6p1 7L4ntQQ4EeSQzjRYKBuD0PgQv30k6pQ+k5T7WIg0PlGLqk76MRY5zykoIDxKWH3i tt91hx0HsPeHNu0KUrO0uRvxUW4ahwprlspBj0GYY6BIPYo57sPFNPACMY0nf/N+ ClSPXdVUcqjHw22G3mM2tgBGf13GS2utV8TROvOBMZ21pApEBso= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:35 2026 by rpki-client