$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143148.roa File: AS143148.roa (raw, json) Hash identifier: /zj9apSN1hqKf4yinYtuT/d3uSIu0mNQUdB+E059uHM= Subject key identifier: 9C:18:9A:AC:CD:00:35:88:92:3D:10:BA:85:BA:D8:7A:6B:76:A1:73 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 65FB2A9970CEF2624CC5132D8CD00B4B849BBB28 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143148.roa Signing time: Wed 04 Mar 2026 06:07:22 +0000 ROA not before: Wed 04 Mar 2026 06:02:22 +0000 ROA not after: Wed 03 Mar 2027 06:07:22 +0000 asID: 143148 IP address blocks: 240a:a1f2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fb:2a:99:70:ce:f2:62:4c:c5:13:2d:8c:d0:0b:4b:84:9b:bb:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:22 2026 GMT Not After : Mar 3 06:07:22 2027 GMT Subject: CN=9C189AACCD003588923D10BA85BAD87A6B76A173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:1d:f3:cb:0a:56:1f:73:eb:4c:38:58:a0: c2:81:d5:17:a8:4c:20:b3:83:db:a9:19:59:52:73: a6:65:73:57:56:e0:dc:78:76:c5:3c:b9:cd:e2:e1: 19:5a:54:e0:49:4b:3c:31:29:09:c5:59:d5:26:e4: 3c:d7:a8:3a:82:0c:94:1c:fd:9a:3f:17:0b:d2:aa: 1a:c8:4a:09:e9:f2:82:55:ed:22:0c:65:11:cd:8b: ea:11:48:3d:4f:32:39:10:c5:d1:f4:09:60:4f:bc: e2:25:90:ad:d6:2c:91:fc:bf:2a:35:fb:4d:40:0e: ab:9e:e0:39:45:80:60:93:fc:9c:f0:6e:a6:5a:60: 99:84:b3:c3:ee:60:7e:ff:dd:20:8b:8c:79:38:20: 25:c4:44:ed:a5:bb:a0:c9:87:ce:d3:40:13:6e:c6: 16:c7:1e:98:81:df:92:70:d9:20:85:45:ed:d2:ce: 10:02:29:55:2b:97:6d:52:fd:e4:91:9d:c3:fe:96: c8:b1:2e:39:e8:ba:83:ed:8e:02:f8:92:7b:1d:9a: 0b:87:44:92:40:cc:3c:ed:9a:08:7d:de:00:16:88: db:48:1c:2c:5f:8a:3d:05:3a:0b:4b:52:f9:1a:5d: 3b:9a:a3:1e:81:67:4f:14:18:b8:6c:db:5e:e4:aa: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:18:9A:AC:CD:00:35:88:92:3D:10:BA:85:BA:D8:7A:6B:76:A1:73 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143148.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1f2::/32 Signature Algorithm: sha256WithRSAEncryption 66:a2:94:bc:7e:be:95:b8:5c:1c:3a:66:6d:5d:ea:a6:b2:90: 51:5e:be:08:bf:d8:b7:62:b2:44:d7:44:27:f3:40:f9:a8:15: 26:ae:ea:fb:b8:a9:47:2e:ae:fb:a5:6e:68:ed:f2:cc:e8:f5: 66:41:6c:72:31:fc:db:a9:3a:71:40:9f:c5:0c:94:ed:ad:cd: ff:21:2d:0d:3d:b8:8c:97:4c:d6:e1:0e:4a:22:46:29:03:f0: 2a:0b:a9:38:c1:5e:97:97:c5:76:80:75:79:7d:e8:2c:d0:a1: 28:c1:a4:9e:cc:c7:52:16:dc:29:29:47:c6:ff:05:80:74:49: dc:f3:3b:83:88:9b:2d:36:fa:0f:8a:fe:21:9f:a5:bb:ec:63: ee:54:bf:a8:ee:e1:ce:fb:71:df:a7:47:48:cc:83:d1:03:d0: 35:d6:a2:b3:1f:eb:58:f3:51:d5:77:6f:5d:7c:b6:3d:49:08: 0c:cd:72:f1:c4:e6:14:9e:4f:82:db:c1:e5:69:1d:84:58:2e: 36:35:30:d4:4f:41:89:7d:1f:fd:af:7e:34:c0:b0:ac:18:b6: 44:c9:91:c6:84:23:c2:7e:f0:b8:a3:6c:40:26:90:78:00:a6: c0:82:41:9c:c8:4a:5d:6b:3e:c8:66:36:e5:ca:a6:c2:a1:31: 31:c8:a8:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZfsqmXDO8mJMxRMtjNALS4SbuygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyMloX DTI3MDMwMzA2MDcyMlowMzExMC8GA1UEAxMoOUMxODlBQUNDRDAwMzU4ODkyM0Qx MEJBODVCQUQ4N0E2Qjc2QTE3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8wHfPLClYfc+tMOFigwoHVF6hMILOD26kZWVJzpmVzV1bg3Hh2xTy5zeLh GVpU4ElLPDEpCcVZ1SbkPNeoOoIMlBz9mj8XC9KqGshKCenyglXtIgxlEc2L6hFI PU8yORDF0fQJYE+84iWQrdYskfy/KjX7TUAOq57gOUWAYJP8nPBuplpgmYSzw+5g fv/dIIuMeTggJcRE7aW7oMmHztNAE27GFscemIHfknDZIIVF7dLOEAIpVSuXbVL9 5JGdw/6WyLEuOei6g+2OAviSex2aC4dEkkDMPO2aCH3eABaI20gcLF+KPQU6C0tS +RpdO5qjHoFnTxQYuGzbXuSqigsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBScGJqs zQA1iJI9ELqFuth6a3ahczAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ofIwDQYJKoZIhvcNAQELBQADggEBAGailLx+vpW4XBw6Zm1d6qaykFFevgi/2Ldi skTXRCfzQPmoFSau6vu4qUcurvulbmjt8szo9WZBbHIx/NupOnFAn8UMlO2tzf8h LQ09uIyXTNbhDkoiRikD8CoLqTjBXpeXxXaAdXl96CzQoSjBpJ7Mx1IW3CkpR8b/ BYB0SdzzO4OImy02+g+K/iGfpbvsY+5Uv6ju4c77cd+nR0jMg9ED0DXWorMf61jz UdV3b118tj1JCAzNcvHE5hSeT4LbweVpHYRYLjY1MNRPQYl9H/2vfjTAsKwYtkTJ kcaEI8J+8LijbEAmkHgApsCCQZzISl1rPshmNuXKpsKhMTHIqHo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:44 2026 by rpki-client