$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143140.roa File: AS143140.roa (raw, json) Hash identifier: R3bMhhRntHBoYaEQZYXIjyLrQDDrWroqs1m6Fbd3O2A= Subject key identifier: 3E:17:7E:28:7B:26:F7:3D:BA:44:3D:E7:F2:A2:1E:B0:BB:D5:4C:07 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 20EC6314D2B0B162D88DD6E2ED9D319589EA945B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143140.roa Signing time: Wed 04 Mar 2026 06:07:51 +0000 ROA not before: Wed 04 Mar 2026 06:02:51 +0000 ROA not after: Wed 03 Mar 2027 06:07:51 +0000 asID: 143140 IP address blocks: 240a:a1ea::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ec:63:14:d2:b0:b1:62:d8:8d:d6:e2:ed:9d:31:95:89:ea:94:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:51 2026 GMT Not After : Mar 3 06:07:51 2027 GMT Subject: CN=3E177E287B26F73DBA443DE7F2A21EB0BBD54C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:04:1d:9e:7f:b4:04:cb:46:36:e2:ec:ac: fc:e5:0b:63:66:56:6d:f8:18:e2:2d:57:8f:db:56: a7:d7:8e:9c:b7:ee:85:f0:d9:1b:70:d1:bb:76:61: 53:5b:ff:9d:6d:65:6f:21:64:60:60:ec:0b:f4:1a: e5:ed:12:7a:77:f7:0e:bf:23:b2:52:24:ea:57:38: 34:44:81:e0:2f:10:89:77:38:75:ca:d3:e2:66:bc: 97:4e:64:80:34:f7:b9:c8:bc:03:64:af:02:d1:b7: 34:a9:69:98:17:03:0b:e6:e0:91:83:7b:21:a0:6a: 17:6b:27:43:de:e9:c4:01:fb:29:3e:ff:92:10:78: ad:91:41:71:88:d3:06:89:9e:dd:fd:7a:59:bf:92: a9:e7:4a:fc:4a:b5:fb:4e:dd:b6:11:84:ce:9d:23: 6a:68:94:b0:d0:cb:68:30:b8:85:27:3d:ef:2d:11: 40:f9:bc:22:ea:42:8d:e9:ed:7a:72:5e:fd:bf:73: 08:a4:d4:3c:7f:be:7d:c1:f5:4b:7c:eb:72:a3:52: 5a:aa:10:59:1c:9d:a2:84:c8:40:b7:ee:bc:13:ce: 44:e0:b6:bc:c1:dd:48:b6:3c:59:f8:f6:08:03:f3: 90:32:31:c9:96:af:70:2b:5c:a0:e9:15:fe:9e:bc: db:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:17:7E:28:7B:26:F7:3D:BA:44:3D:E7:F2:A2:1E:B0:BB:D5:4C:07 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143140.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1ea::/32 Signature Algorithm: sha256WithRSAEncryption 5f:ab:cc:2d:99:ea:9b:1c:f1:a3:5b:d9:f4:da:e1:d6:73:5a: 82:89:9e:b6:52:0b:ea:01:22:68:7f:48:00:f2:73:11:97:33: 36:7b:98:a5:f4:74:27:3a:cb:f7:46:94:f1:b0:13:6b:4e:b7: cf:71:74:08:19:69:9d:22:c8:ac:62:7c:df:a5:74:ef:4a:48: b1:39:47:39:cb:5b:65:30:5e:a6:93:f1:0c:13:8c:9f:22:41: da:77:34:de:d5:91:f6:d7:15:1a:cb:fa:d2:8e:6a:d0:d1:f6: 3b:eb:92:7c:93:bf:59:dd:4e:7b:ce:a2:ad:f0:e5:67:56:76: 9a:12:13:59:5d:23:f6:92:f4:1d:3c:39:06:47:da:09:12:6c: 45:37:07:70:03:55:9a:57:37:cd:e7:c9:51:d3:16:9c:ea:06: dd:d7:1b:fe:c3:c6:d9:67:70:ff:ae:55:fe:7d:d1:82:0d:1d: 0b:ea:d5:71:6e:b1:7e:3b:06:fd:a1:1c:90:36:f8:f4:e9:92: 60:15:ad:88:ae:58:6d:5e:af:f7:28:89:a6:e2:dd:94:23:e0: f3:44:fb:a0:ee:5b:d1:7d:c3:df:78:6b:18:50:f1:69:e5:a8: 1b:3e:79:67:a7:98:bc:86:69:bc:d4:17:dc:f4:21:c1:6f:6a: 72:4f:52:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIOxjFNKwsWLYjdbi7Z0xlYnqlFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1MVoX DTI3MDMwMzA2MDc1MVowMzExMC8GA1UEAxMoM0UxNzdFMjg3QjI2RjczREJBNDQz REU3RjJBMjFFQjBCQkQ1NEMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcuBB2ef7QEy0Y24uys/OULY2ZWbfgY4i1Xj9tWp9eOnLfuhfDZG3DRu3Zh U1v/nW1lbyFkYGDsC/Qa5e0Senf3Dr8jslIk6lc4NESB4C8QiXc4dcrT4ma8l05k gDT3uci8A2SvAtG3NKlpmBcDC+bgkYN7IaBqF2snQ97pxAH7KT7/khB4rZFBcYjT Bome3f16Wb+SqedK/Eq1+07dthGEzp0jamiUsNDLaDC4hSc97y0RQPm8IupCjent enJe/b9zCKTUPH++fcH1S3zrcqNSWqoQWRydooTIQLfuvBPOROC2vMHdSLY8Wfj2 CAPzkDIxyZavcCtcoOkV/p682wECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ+F34o eyb3PbpEPefyoh6wu9VMBzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oeowDQYJKoZIhvcNAQELBQADggEBAF+rzC2Z6psc8aNb2fTa4dZzWoKJnrZSC+oB Imh/SADycxGXMzZ7mKX0dCc6y/dGlPGwE2tOt89xdAgZaZ0iyKxifN+ldO9KSLE5 RznLW2UwXqaT8QwTjJ8iQdp3NN7VkfbXFRrL+tKOatDR9jvrknyTv1ndTnvOoq3w 5WdWdpoSE1ldI/aS9B08OQZH2gkSbEU3B3ADVZpXN83nyVHTFpzqBt3XG/7Dxtln cP+uVf590YINHQvq1XFusX47Bv2hHJA2+PTpkmAVrYiuWG1er/coiabi3ZQj4PNE +6DuW9F9w994axhQ8WnlqBs+eWenmLyGabzUF9z0IcFvanJPUg0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:40 2026 by rpki-client