$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143151.roa File: AS143151.roa (raw, json) Hash identifier: vNn7ZGctWwQx5ZVj3JC5LbhICaCEd0TkGj0RmbdpFvk= Subject key identifier: 73:7A:63:FF:9F:6D:FD:5C:8E:E4:FC:DF:83:B7:14:2E:FE:69:7A:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0FC339A95714F8C1115D9859ADA5AE9628C39161 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143151.roa Signing time: Wed 04 Mar 2026 06:05:26 +0000 ROA not before: Wed 04 Mar 2026 06:00:26 +0000 ROA not after: Wed 03 Mar 2027 06:05:26 +0000 asID: 143151 IP address blocks: 240a:a1f5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c3:39:a9:57:14:f8:c1:11:5d:98:59:ad:a5:ae:96:28:c3:91:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:26 2026 GMT Not After : Mar 3 06:05:26 2027 GMT Subject: CN=737A63FF9F6DFD5C8EE4FCDF83B7142EFE697A6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:8d:c0:ab:2b:50:a3:e8:45:c6:c6:0b:70: a4:3f:52:26:a6:f7:13:39:a2:45:1c:bf:e1:a3:0c: 87:be:ff:8c:ff:bc:ac:0f:92:cc:b9:49:f8:3e:e3: 7a:59:ea:8c:c7:20:01:94:00:5a:36:e9:09:c0:56: 5b:c9:e4:92:0a:da:68:a9:09:07:54:d2:a7:7a:be: fd:6e:3c:b2:a2:40:9a:bc:76:01:0a:bd:19:ff:48: 9b:19:3b:da:a2:5d:0e:b2:ff:e8:50:d7:c5:b3:7f: fc:24:37:27:bb:97:2e:6b:21:c0:dc:93:f2:f0:dc: 5e:aa:75:d7:8b:7c:e3:65:6f:2a:b8:8e:b2:3e:74: ff:e5:78:ad:35:df:39:00:e8:62:7f:92:c4:d6:4d: 40:21:c5:da:c0:51:b9:60:14:18:b8:11:f3:45:d3: 84:9c:48:17:77:9a:6f:b5:89:47:90:96:81:e8:bf: c6:8b:3a:41:7f:b5:57:8b:b1:12:be:17:d8:6b:cc: fd:57:70:3d:2f:30:a7:8c:6a:e9:36:f8:9f:3c:a3: b6:da:eb:37:25:21:c2:63:db:0b:9d:2c:c5:91:cc: b4:da:eb:5d:23:6b:cc:e7:a6:f0:bd:be:d9:8f:3f: c1:21:aa:62:b2:a3:ec:b5:17:36:16:ad:11:7e:9c: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7A:63:FF:9F:6D:FD:5C:8E:E4:FC:DF:83:B7:14:2E:FE:69:7A:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143151.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1f5::/32 Signature Algorithm: sha256WithRSAEncryption 88:90:90:25:8e:b9:b0:1e:74:24:1b:67:45:0e:17:f1:e0:fe: 34:5a:2f:28:76:79:e0:13:ab:f2:97:58:48:a6:7b:41:c3:90: bc:51:21:ad:66:8c:42:e1:d5:17:20:c8:a3:51:10:29:45:3d: 33:c4:5c:ac:fc:ba:2a:8a:e6:fa:31:af:fd:0a:5f:21:0a:34: ef:45:8d:b9:8e:7d:e2:f1:1b:1e:34:d0:1c:29:4c:3f:2c:ba: d9:2f:cb:29:95:de:9a:78:ce:8c:11:17:b5:8e:97:9d:cd:af: 15:f8:47:05:b2:d3:cb:cb:21:ca:29:8d:35:4b:93:df:f9:f8: 9a:9b:eb:c6:97:88:8b:64:74:71:a2:15:da:18:e2:e5:27:2c: 77:5a:8c:e0:13:05:98:c7:27:75:e9:16:26:2c:37:bd:6e:b4: 38:44:33:0f:0c:2b:00:40:f0:df:ce:17:7b:0a:d4:17:28:4e: 8e:1d:d1:73:e3:da:e8:fe:b6:29:30:ee:97:4e:42:a3:cd:3c: ed:fd:a3:7e:54:31:00:31:0f:d1:2b:4f:26:3e:1e:a3:82:f7: 63:6a:ec:8b:2a:35:81:46:bd:c1:b6:79:b6:52:17:c0:9d:c8: 6a:67:a1:66:b1:d2:bd:2c:21:e5:73:c9:f0:5d:86:93:4e:d3: 25:12:b1:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUD8M5qVcU+MERXZhZraWulijDkWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyNloX DTI3MDMwMzA2MDUyNlowMzExMC8GA1UEAxMoNzM3QTYzRkY5RjZERkQ1QzhFRTRG Q0RGODNCNzE0MkVGRTY5N0E2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANn9jcCrK1Cj6EXGxgtwpD9SJqb3EzmiRRy/4aMMh77/jP+8rA+SzLlJ+D7j elnqjMcgAZQAWjbpCcBWW8nkkgraaKkJB1TSp3q+/W48sqJAmrx2AQq9Gf9Imxk7 2qJdDrL/6FDXxbN//CQ3J7uXLmshwNyT8vDcXqp114t842VvKriOsj50/+V4rTXf OQDoYn+SxNZNQCHF2sBRuWAUGLgR80XThJxIF3eab7WJR5CWgei/xos6QX+1V4ux Er4X2GvM/VdwPS8wp4xq6Tb4nzyjttrrNyUhwmPbC50sxZHMtNrrXSNrzOem8L2+ 2Y8/wSGqYrKj7LUXNhatEX6cBAkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRzemP/ n239XI7k/N+DtxQu/ml6bTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ofUwDQYJKoZIhvcNAQELBQADggEBAIiQkCWOubAedCQbZ0UOF/Hg/jRaLyh2eeAT q/KXWEime0HDkLxRIa1mjELh1RcgyKNREClFPTPEXKz8uiqK5voxr/0KXyEKNO9F jbmOfeLxGx400BwpTD8sutkvyymV3pp4zowRF7WOl53NrxX4RwWy08vLIcopjTVL k9/5+Jqb68aXiItkdHGiFdoY4uUnLHdajOATBZjHJ3XpFiYsN71utDhEMw8MKwBA 8N/OF3sK1BcoTo4d0XPj2uj+tikw7pdOQqPNPO39o35UMQAxD9ErTyY+HqOC92Nq 7IsqNYFGvcG2ebZSF8CdyGpnoWax0r0sIeVzyfBdhpNO0yUSsbE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:07 2026 by rpki-client