$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143160.roa File: AS143160.roa (raw, json) Hash identifier: 5IY1m84jsj8U4O+KFiQfbMN3t3+yx3yKgpgyvTnyi34= Subject key identifier: 91:9B:09:F7:2C:86:34:76:E1:B1:4E:51:29:7C:00:DD:68:58:71:DC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 104F0A73E2E33CDC4AEFB350FF28F4C638B4EDD6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143160.roa Signing time: Wed 04 Mar 2026 06:05:30 +0000 ROA not before: Wed 04 Mar 2026 06:00:30 +0000 ROA not after: Wed 03 Mar 2027 06:05:30 +0000 asID: 143160 IP address blocks: 240a:a1fe::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4f:0a:73:e2:e3:3c:dc:4a:ef:b3:50:ff:28:f4:c6:38:b4:ed:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:30 2026 GMT Not After : Mar 3 06:05:30 2027 GMT Subject: CN=919B09F72C863476E1B14E51297C00DD685871DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:d1:ab:45:da:9a:bb:4c:91:74:96:4c:54: d0:c2:97:a2:76:71:3b:a8:88:6a:59:a6:f7:61:3f: 4c:72:b5:46:22:d0:59:33:11:3e:a1:73:6a:2f:65: f8:68:1a:10:4b:b0:64:c1:fa:b6:43:1f:6a:0e:d7: d5:11:4c:1d:2a:c6:e6:58:0e:99:df:91:fb:67:a8: d4:52:ac:8a:b9:f7:6d:89:cd:0e:e6:75:78:39:ed: e4:29:23:8a:2c:ee:c6:b4:6a:e3:55:b6:20:da:05: ac:ac:d7:28:a5:b0:cb:76:56:37:55:0a:cb:4c:af: c4:a3:65:4f:c9:85:ce:6e:75:e6:a1:f3:80:84:05: 87:73:92:2b:c5:5f:f0:d3:a4:b1:c8:aa:da:02:f8: 07:10:e9:e4:37:48:08:56:4e:11:7f:a7:e2:88:21: 88:e5:12:f8:d5:2f:7f:ec:f2:81:0d:32:f4:0e:d8: 3f:7b:73:2c:ce:6f:c4:09:c2:20:64:46:fa:8c:10: 1c:da:3c:4a:4d:95:79:4e:b1:2e:f7:e5:bf:17:15: 1f:64:8c:99:3b:19:d8:9d:12:63:5f:71:70:44:6d: 43:e6:57:cd:9e:0a:29:5e:49:f4:3c:e8:8a:0b:a7: d5:ce:65:73:92:fa:34:58:33:67:43:21:d8:41:39: c3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9B:09:F7:2C:86:34:76:E1:B1:4E:51:29:7C:00:DD:68:58:71:DC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143160.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1fe::/32 Signature Algorithm: sha256WithRSAEncryption 09:07:89:60:1c:81:38:1c:39:c5:21:49:aa:b0:e5:bd:2d:3e: fa:75:e1:80:fb:7f:bc:42:5a:46:ee:5a:3e:b2:2f:2b:b8:fc: 43:15:92:a4:96:50:81:c0:92:c3:30:4e:88:c5:18:c4:40:ae: 1f:60:99:db:9a:09:4e:17:1f:e7:01:66:f2:05:8e:bf:4b:76: 0b:5f:fc:6e:3b:32:9a:e6:5f:89:61:25:d4:44:5d:ab:3d:ff: 95:e7:f7:07:40:f5:35:c6:c1:5a:f6:1e:44:f9:50:63:ba:a9: 57:c5:c1:61:17:a6:79:56:65:f8:71:83:ac:71:99:96:a8:77: 18:65:d4:3b:65:61:00:9e:a0:ce:25:f2:89:c4:e4:79:cd:c0: 81:ce:73:dc:a5:40:41:f7:b9:e2:30:bd:a0:26:a7:81:f5:6e: df:c7:b9:50:81:4c:3b:34:17:02:c1:0d:3d:f0:11:eb:73:bb: 4c:dd:b3:74:61:ba:27:1b:73:c6:db:ec:a0:cb:7d:85:ff:3a: da:22:f1:ee:e0:fd:1e:7d:22:04:b6:de:8d:6f:3c:d1:c8:7e: f7:e8:3d:d6:8d:36:e7:2d:d1:8c:62:a0:c0:e4:64:39:14:03: 23:bd:58:c0:97:89:75:01:8f:c3:9c:12:b1:48:cf:bc:0e:62: 32:d8:a2:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEE8Kc+LjPNxK77NQ/yj0xji07dYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzMFoX DTI3MDMwMzA2MDUzMFowMzExMC8GA1UEAxMoOTE5QjA5RjcyQzg2MzQ3NkUxQjE0 RTUxMjk3QzAwREQ2ODU4NzFEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpT0atF2pq7TJF0lkxU0MKXonZxO6iIalmm92E/THK1RiLQWTMRPqFzai9l +GgaEEuwZMH6tkMfag7X1RFMHSrG5lgOmd+R+2eo1FKsirn3bYnNDuZ1eDnt5Ckj iizuxrRq41W2INoFrKzXKKWwy3ZWN1UKy0yvxKNlT8mFzm515qHzgIQFh3OSK8Vf 8NOksciq2gL4BxDp5DdICFZOEX+n4oghiOUS+NUvf+zygQ0y9A7YP3tzLM5vxAnC IGRG+owQHNo8Sk2VeU6xLvflvxcVH2SMmTsZ2J0SY19xcERtQ+ZXzZ4KKV5J9Dzo igun1c5lc5L6NFgzZ0Mh2EE5w40CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSRmwn3 LIY0duGxTlEpfADdaFhx3DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK of4wDQYJKoZIhvcNAQELBQADggEBAAkHiWAcgTgcOcUhSaqw5b0tPvp14YD7f7xC WkbuWj6yLyu4/EMVkqSWUIHAksMwTojFGMRArh9gmduaCU4XH+cBZvIFjr9Ldgtf /G47MprmX4lhJdREXas9/5Xn9wdA9TXGwVr2HkT5UGO6qVfFwWEXpnlWZfhxg6xx mZaodxhl1DtlYQCeoM4l8onE5HnNwIHOc9ylQEH3ueIwvaAmp4H1bt/HuVCBTDs0 FwLBDT3wEetzu0zds3Rhuicbc8bb7KDLfYX/Otoi8e7g/R59IgS23o1vPNHIfvfo PdaNNuct0YxioMDkZDkUAyO9WMCXiXUBj8OcErFIz7wOYjLYopQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:46 2026 by rpki-client