$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143149.roa File: AS143149.roa (raw, json) Hash identifier: x9/moovEV5qD6cbhhDFYXJ/8T3gxikgOLBz3PUVjaXY= Subject key identifier: DE:72:15:21:56:BA:28:F4:05:0D:AC:8C:B6:1B:D5:8E:42:08:FB:BE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 74DB6532944DCE9A2518A369C0749B42B79776C6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143149.roa Signing time: Wed 04 Mar 2026 06:06:50 +0000 ROA not before: Wed 04 Mar 2026 06:01:50 +0000 ROA not after: Wed 03 Mar 2027 06:06:50 +0000 asID: 143149 IP address blocks: 240a:a1f3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:db:65:32:94:4d:ce:9a:25:18:a3:69:c0:74:9b:42:b7:97:76:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:50 2026 GMT Not After : Mar 3 06:06:50 2027 GMT Subject: CN=DE72152156BA28F4050DAC8CB61BD58E4208FBBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:0e:45:f5:d2:df:99:5c:24:e8:30:01:03: e1:f0:85:ee:3e:06:78:27:74:3c:ad:38:36:ef:8e: bd:a5:5f:17:0f:e3:fa:51:34:3a:97:44:68:7b:d9: 88:33:f7:ba:19:15:d9:df:c4:3d:24:39:f5:36:90: cb:80:9f:08:62:f9:e7:cf:7d:8b:93:61:8f:7f:5f: a4:a7:e0:09:f1:75:27:41:d0:9c:0a:3b:7c:b9:83: 24:1f:43:90:32:9a:37:9d:9f:65:2c:36:15:f6:b6: 63:43:44:d2:6b:06:69:21:6b:65:97:8e:dc:14:17: c8:74:d5:71:4e:98:b2:45:c2:f1:3a:2d:d9:ea:b7: 27:1a:13:1b:4a:c8:96:59:3d:76:4b:11:22:cb:78: 4c:dd:90:a6:c0:3b:96:0b:e7:59:ad:39:b1:d2:85: b0:f1:71:22:f7:1d:bc:64:55:54:15:9b:69:d4:7c: 89:f8:7e:fc:77:2c:86:42:fe:f3:6b:92:da:8e:a2: 97:f1:7c:85:ed:d5:20:65:71:28:9e:30:b0:d0:66: dc:81:bf:34:ac:7b:95:ee:56:52:1c:bc:48:1e:82: 7c:b6:e7:4b:e0:39:7c:71:79:b0:17:f6:1b:a9:90: 74:c3:1d:68:f6:e7:8d:55:af:99:98:b3:c1:93:e1: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:72:15:21:56:BA:28:F4:05:0D:AC:8C:B6:1B:D5:8E:42:08:FB:BE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143149.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1f3::/32 Signature Algorithm: sha256WithRSAEncryption 83:cd:04:f6:91:5c:e1:ba:80:a2:c4:43:ba:ff:e1:f0:16:db: f1:14:94:1a:04:f2:04:9f:c5:8f:92:78:a3:a6:b4:6c:20:10: 4f:0d:e9:c5:c1:50:56:58:2b:aa:10:37:9b:87:d4:8b:95:7f: 54:e2:93:99:35:36:3f:2c:29:8d:e0:0f:30:a6:55:7f:c0:b3: de:02:2a:ff:a9:fa:50:87:22:8d:8f:3c:98:a6:7f:9b:49:5a: db:9c:65:f3:73:07:ab:cf:35:64:f7:d4:15:92:34:f0:25:fd: 03:a3:d8:51:31:b4:6e:d8:78:b4:6a:83:d0:e4:16:e1:10:ca: 55:02:02:23:ca:b7:eb:d4:f1:18:73:54:3d:0c:55:b3:b5:3a: 93:1b:f5:48:36:2f:fb:86:fc:4c:d7:2b:34:d5:14:be:14:e8: 91:68:8c:cf:f5:0e:3e:d6:44:77:a3:b8:e3:70:a9:2e:09:26: 77:60:60:90:ad:8e:6b:4b:f2:e6:2b:4b:e2:e9:9c:29:77:fa: cc:da:af:eb:98:84:32:99:8f:97:3d:bf:3e:6d:ea:10:cc:16: 97:7a:cf:01:89:bb:38:2e:e9:d5:19:78:17:35:b9:cb:4f:31: 27:52:a6:1f:22:b0:8f:6c:c6:a5:34:86:cc:93:18:e4:bc:1d: 80:ab:49:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdNtlMpRNzpolGKNpwHSbQreXdsYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1MFoX DTI3MDMwMzA2MDY1MFowMzExMC8GA1UEAxMoREU3MjE1MjE1NkJBMjhGNDA1MERB QzhDQjYxQkQ1OEU0MjA4RkJCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKc5DkX10t+ZXCToMAED4fCF7j4GeCd0PK04Nu+OvaVfFw/j+lE0OpdEaHvZ iDP3uhkV2d/EPSQ59TaQy4CfCGL55899i5Nhj39fpKfgCfF1J0HQnAo7fLmDJB9D kDKaN52fZSw2Ffa2Y0NE0msGaSFrZZeO3BQXyHTVcU6YskXC8Tot2eq3JxoTG0rI llk9dksRIst4TN2QpsA7lgvnWa05sdKFsPFxIvcdvGRVVBWbadR8ifh+/HcshkL+ 82uS2o6il/F8he3VIGVxKJ4wsNBm3IG/NKx7le5WUhy8SB6CfLbnS+A5fHF5sBf2 G6mQdMMdaPbnjVWvmZizwZPhdlMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTechUh Vroo9AUNrIy2G9WOQgj7vjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ofMwDQYJKoZIhvcNAQELBQADggEBAIPNBPaRXOG6gKLEQ7r/4fAW2/EUlBoE8gSf xY+SeKOmtGwgEE8N6cXBUFZYK6oQN5uH1IuVf1Tik5k1Nj8sKY3gDzCmVX/As94C Kv+p+lCHIo2PPJimf5tJWtucZfNzB6vPNWT31BWSNPAl/QOj2FExtG7YeLRqg9Dk FuEQylUCAiPKt+vU8RhzVD0MVbO1OpMb9Ug2L/uG/EzXKzTVFL4U6JFojM/1Dj7W RHejuONwqS4JJndgYJCtjmtL8uYrS+LpnCl3+szar+uYhDKZj5c9vz5t6hDMFpd6 zwGJuzgu6dUZeBc1uctPMSdSph8isI9sxqU0hsyTGOS8HYCrSQI= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:30 2026 by rpki-client