$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143142.roa File: AS143142.roa (raw, json) Hash identifier: qPW054OUfJ8pJmZHoTOp47lFK36OUmltnqMu/bHK4sI= Subject key identifier: 2B:E2:E5:49:12:03:3F:CB:B9:A7:A0:F7:86:E2:86:D1:C7:15:AF:74 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0872FB1F8C5CD3F709E2198B025AB246FE60A445 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143142.roa Signing time: Wed 04 Mar 2026 06:07:00 +0000 ROA not before: Wed 04 Mar 2026 06:02:00 +0000 ROA not after: Wed 03 Mar 2027 06:07:00 +0000 asID: 143142 IP address blocks: 240a:a1ec::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:72:fb:1f:8c:5c:d3:f7:09:e2:19:8b:02:5a:b2:46:fe:60:a4:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:00 2026 GMT Not After : Mar 3 06:07:00 2027 GMT Subject: CN=2BE2E54912033FCBB9A7A0F786E286D1C715AF74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:bc:c0:c3:36:e4:1a:b9:c8:5a:83:9a:6c: b1:6d:a2:ad:58:cd:e0:7e:76:31:c5:66:38:0e:bc: d2:48:3c:1b:fd:39:7e:83:df:66:ab:72:0c:36:53: 82:95:b9:73:d1:5c:db:0e:0b:90:84:ea:bd:d3:3a: e1:ec:93:d0:92:c2:bf:f2:63:a9:01:94:64:a4:22: fb:df:b0:a6:f5:f3:fd:16:9d:fc:06:9f:0a:e7:1a: 79:2d:29:f5:f5:1e:2a:e3:91:a3:8f:f4:60:8a:f2: 6c:4a:86:f1:cf:a7:7d:94:f1:88:55:c7:54:0d:97: de:b7:3b:83:87:01:ab:d0:cb:b0:0a:f5:20:ee:ed: 96:ae:a6:bc:91:ea:73:cb:5c:b1:8d:ca:d9:74:4b: 52:dc:e8:21:1e:d7:93:02:5a:9a:8b:0a:91:23:63: db:a5:b8:1b:bf:70:51:db:79:38:d4:42:6c:1e:79: 3f:bf:f3:37:bd:97:ba:77:be:a0:b1:8f:8c:12:d0: 0b:bb:5a:8a:6c:64:3c:e5:c0:31:0f:33:7c:2b:eb: 8d:55:9d:41:83:72:59:11:db:34:d2:71:9a:ef:58: 84:e8:b4:97:a0:07:fe:50:86:b2:b8:83:68:4f:66: de:07:44:f2:e9:07:4f:1a:5e:44:91:b0:1a:1b:4d: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E2:E5:49:12:03:3F:CB:B9:A7:A0:F7:86:E2:86:D1:C7:15:AF:74 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143142.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1ec::/32 Signature Algorithm: sha256WithRSAEncryption b1:45:38:12:54:de:0a:46:72:e2:bd:31:ca:05:29:bb:70:3c: 9d:f5:f8:c3:f1:5f:9c:2a:09:bc:76:64:ff:b5:76:5b:13:9a: 6b:75:4e:93:3b:53:40:4e:81:68:da:91:6d:50:2d:50:26:96: 2f:f6:88:c9:33:71:68:86:15:cc:f0:b4:a8:45:8d:4f:4d:44: a9:e5:82:ab:0b:2b:f5:c0:5a:aa:67:e8:81:bf:7b:af:6b:ec: 7d:a1:41:54:c5:87:31:32:82:08:5a:e2:c8:a1:bb:d3:67:d9: 87:27:5c:e1:17:84:79:26:c5:bd:d2:da:36:99:11:09:59:f4: bd:ce:b8:42:17:00:60:cb:c8:88:49:2e:da:8d:6e:5d:4c:31: 05:01:fd:a7:69:90:54:72:81:5f:a9:b3:2d:25:9e:c6:84:3c: cd:86:31:44:03:b0:77:b4:5f:0c:88:37:cc:2d:3e:4d:b0:eb: 5c:c7:f4:b7:8e:1b:92:0f:10:1a:3d:9f:4f:a5:91:6a:b2:bc: ff:01:4a:7a:54:2f:22:82:fe:7c:5f:a4:7f:7a:d4:40:21:28: 9e:55:87:a9:db:f1:d1:5a:02:26:16:a2:5a:f5:7a:3f:9d:6e: 3f:63:00:d7:dc:57:45:75:6b:e9:9e:3a:60:45:7d:33:4c:43: d1:ff:d3:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCHL7H4xc0/cJ4hmLAlqyRv5gpEUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwMFoX DTI3MDMwMzA2MDcwMFowMzExMC8GA1UEAxMoMkJFMkU1NDkxMjAzM0ZDQkI5QTdB MEY3ODZFMjg2RDFDNzE1QUY3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFuvMDDNuQauchag5pssW2irVjN4H52McVmOA680kg8G/05foPfZqtyDDZT gpW5c9Fc2w4LkITqvdM64eyT0JLCv/JjqQGUZKQi+9+wpvXz/Rad/AafCucaeS0p 9fUeKuORo4/0YIrybEqG8c+nfZTxiFXHVA2X3rc7g4cBq9DLsAr1IO7tlq6mvJHq c8tcsY3K2XRLUtzoIR7XkwJamosKkSNj26W4G79wUdt5ONRCbB55P7/zN72Xune+ oLGPjBLQC7taimxkPOXAMQ8zfCvrjVWdQYNyWRHbNNJxmu9YhOi0l6AH/lCGsriD aE9m3gdE8ukHTxpeRJGwGhtNjjkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQr4uVJ EgM/y7mnoPeG4obRxxWvdDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oewwDQYJKoZIhvcNAQELBQADggEBALFFOBJU3gpGcuK9McoFKbtwPJ31+MPxX5wq Cbx2ZP+1dlsTmmt1TpM7U0BOgWjakW1QLVAmli/2iMkzcWiGFczwtKhFjU9NRKnl gqsLK/XAWqpn6IG/e69r7H2hQVTFhzEyggha4sihu9Nn2YcnXOEXhHkmxb3S2jaZ EQlZ9L3OuEIXAGDLyIhJLtqNbl1MMQUB/adpkFRygV+psy0lnsaEPM2GMUQDsHe0 XwyIN8wtPk2w61zH9LeOG5IPEBo9n0+lkWqyvP8BSnpULyKC/nxfpH961EAhKJ5V h6nb8dFaAiYWolr1ej+dbj9jANfcV0V1a+meOmBFfTNMQ9H/0/A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:33 2026 by rpki-client