$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143138.roa File: AS143138.roa (raw, json) Hash identifier: 5UYjVnEeHqos2VlFnNgTuZVQgsl888QxNBzq6lpB4/E= Subject key identifier: AD:3B:55:36:B9:CB:29:6E:E2:28:8F:7B:E2:93:D6:70:27:98:EB:B7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4F38C49926F739E95ED39FA3236B46C258B8E10F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143138.roa Signing time: Wed 04 Mar 2026 06:06:36 +0000 ROA not before: Wed 04 Mar 2026 06:01:36 +0000 ROA not after: Wed 03 Mar 2027 06:06:36 +0000 asID: 143138 IP address blocks: 240a:a1e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:38:c4:99:26:f7:39:e9:5e:d3:9f:a3:23:6b:46:c2:58:b8:e1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:36 2026 GMT Not After : Mar 3 06:06:36 2027 GMT Subject: CN=AD3B5536B9CB296EE2288F7BE293D6702798EBB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:63:b0:8d:cf:fa:b1:b2:7e:4d:c6:aa:34: 91:88:67:ed:06:9f:1f:1e:02:b6:f4:c8:ae:f8:c4: 72:46:62:b4:8b:77:52:dd:6a:eb:05:ad:54:b1:ec: e5:d2:ba:f2:f8:5d:61:a9:1b:0d:d5:ea:9c:b8:25: 7d:31:2f:c8:7e:f8:e7:d1:07:2f:49:10:fb:2c:cd: f2:f4:fb:e7:68:5f:da:19:26:7f:27:73:29:7d:22: ba:69:53:b8:83:76:d3:57:7d:83:ae:a4:39:cb:72: 69:94:e8:6d:1a:32:df:ba:96:b1:aa:1a:d2:42:f3: 85:48:35:b3:e5:07:1c:5e:f4:0a:ac:da:95:ce:8f: 96:7c:80:4a:57:66:52:3b:b9:05:38:cb:8c:da:1f: 96:a4:c5:85:98:d4:70:49:2d:64:ca:fb:81:b7:ff: 19:39:dd:8b:aa:e6:ee:3c:f4:f8:58:d0:6c:c2:23: b9:a5:5f:70:c4:f6:57:f9:37:0f:0d:c7:60:df:bd: 93:49:61:8a:ae:48:09:1b:ac:50:d2:d3:73:87:17: 60:bb:9d:8f:94:fe:02:17:be:f2:50:d0:fb:24:24: 9b:ea:24:9f:da:80:5d:fb:f8:16:a6:38:2e:64:bc: 6a:c8:38:4c:b8:82:2c:56:64:30:2b:69:9b:57:4c: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3B:55:36:B9:CB:29:6E:E2:28:8F:7B:E2:93:D6:70:27:98:EB:B7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1e8::/32 Signature Algorithm: sha256WithRSAEncryption c4:20:18:c7:35:3d:6a:a4:37:1f:70:30:82:d5:39:39:66:86: a2:60:a1:d9:3c:60:3d:95:fb:b7:4e:47:73:0f:01:7b:a2:74: 18:c3:8c:78:ba:67:21:88:90:bf:c9:09:2f:61:0a:d2:68:b0: 15:70:af:35:0b:c4:e3:e6:f7:97:07:d1:eb:d4:38:da:c9:bf: 33:b0:4b:8e:b2:3c:22:fb:36:6d:69:03:58:4a:72:58:b4:c3: 92:e5:3d:07:8d:06:1d:13:22:c1:69:b7:6c:40:19:e2:f7:2e: c4:8e:20:23:f7:f0:fc:11:2d:0c:d9:ed:10:44:9a:79:ac:25: 26:08:8a:cd:75:a1:13:08:42:8d:e7:2e:da:f8:72:66:7a:79: cc:82:4e:7e:73:7b:68:67:f7:62:21:25:4f:d8:5a:45:ee:a6: b3:06:f0:f5:dd:3d:0b:03:a4:fa:7f:3f:35:01:20:b5:4a:ff: 63:df:f6:05:c8:3a:75:03:db:c5:2a:8a:50:e3:bc:d8:0e:8c: ae:e9:24:ce:b2:be:fd:f7:23:e5:c0:1c:38:bd:af:40:c4:fd: 4c:c2:47:cd:68:cb:31:22:a5:66:47:1b:3a:cc:42:8d:61:90: 5b:e5:4e:f3:3a:67:af:aa:d7:01:57:ca:0d:10:9c:9a:a1:e0: a9:37:6a:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTzjEmSb3Oele05+jI2tGwli44Q8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzNloX DTI3MDMwMzA2MDYzNlowMzExMC8GA1UEAxMoQUQzQjU1MzZCOUNCMjk2RUUyMjg4 RjdCRTI5M0Q2NzAyNzk4RUJCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+lY7CNz/qxsn5Nxqo0kYhn7QafHx4CtvTIrvjEckZitIt3Ut1q6wWtVLHs 5dK68vhdYakbDdXqnLglfTEvyH7459EHL0kQ+yzN8vT752hf2hkmfydzKX0iumlT uIN201d9g66kOctyaZTobRoy37qWsaoa0kLzhUg1s+UHHF70Cqzalc6PlnyASldm Uju5BTjLjNoflqTFhZjUcEktZMr7gbf/GTndi6rm7jz0+FjQbMIjuaVfcMT2V/k3 Dw3HYN+9k0lhiq5ICRusUNLTc4cXYLudj5T+Ahe+8lDQ+yQkm+okn9qAXfv4FqY4 LmS8asg4TLiCLFZkMCtpm1dME2MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBStO1U2 ucspbuIoj3vik9ZwJ5jrtzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzEzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oegwDQYJKoZIhvcNAQELBQADggEBAMQgGMc1PWqkNx9wMILVOTlmhqJgodk8YD2V +7dOR3MPAXuidBjDjHi6ZyGIkL/JCS9hCtJosBVwrzULxOPm95cH0evUONrJvzOw S46yPCL7Nm1pA1hKcli0w5LlPQeNBh0TIsFpt2xAGeL3LsSOICP38PwRLQzZ7RBE mnmsJSYIis11oRMIQo3nLtr4cmZ6ecyCTn5ze2hn92IhJU/YWkXuprMG8PXdPQsD pPp/PzUBILVK/2Pf9gXIOnUD28UqilDjvNgOjK7pJM6yvv33I+XAHDi9r0DE/UzC R81oyzEipWZHGzrMQo1hkFvlTvM6Z6+q1wFXyg0QnJqh4Kk3ask= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:00 2026 by rpki-client