$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143162.roa File: AS143162.roa (raw, json) Hash identifier: iF+dV+HqrqbZ9jLxdsfUfmeQqZzWt9V1zucBe/MMuDU= Subject key identifier: 2D:97:B4:A5:30:D9:EA:7E:F9:FB:CA:3F:17:9D:52:2D:A5:64:F3:47 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6511EF0F4AD114CF4786792FB21F694F160287A8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143162.roa Signing time: Wed 04 Mar 2026 06:07:03 +0000 ROA not before: Wed 04 Mar 2026 06:02:03 +0000 ROA not after: Wed 03 Mar 2027 06:07:03 +0000 asID: 143162 IP address blocks: 240a:a200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:11:ef:0f:4a:d1:14:cf:47:86:79:2f:b2:1f:69:4f:16:02:87:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:03 2026 GMT Not After : Mar 3 06:07:03 2027 GMT Subject: CN=2D97B4A530D9EA7EF9FBCA3F179D522DA564F347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:38:87:13:9c:39:ee:da:83:f2:bb:c5:a2:ee: 73:f0:ad:55:3d:cb:1b:37:fb:8e:6d:b6:61:82:0a: 6f:e7:6e:86:bd:8d:dc:69:73:59:bf:91:3a:7e:9f: 2e:1e:c9:19:ba:1b:45:dd:cd:e5:0d:4e:8d:4a:8e: 30:35:9a:33:31:c9:fc:2b:88:cb:1c:66:8e:3a:0d: fe:d4:eb:de:c4:3a:8b:ce:f0:e6:4e:f8:71:39:90: d3:44:79:75:31:7f:0f:db:3c:c8:d3:df:da:66:fa: 8b:ab:55:2d:ef:c4:b7:fd:da:5c:7d:ad:ec:ff:a7: d0:e2:68:0b:4a:5a:6d:6d:3c:7d:c2:ab:3b:69:07: 6c:6f:f8:c1:a7:0d:92:4b:cf:e5:a4:15:bc:af:41: 29:49:55:25:7c:9a:6a:4c:6d:2b:49:8e:0e:3b:13: 95:14:eb:61:c5:0c:80:fb:5c:00:c7:5f:31:9f:de: ab:a2:d7:be:67:c3:01:a8:e8:16:0f:f5:0f:fd:17: da:2b:ed:76:4c:0d:e5:c4:5a:fc:1e:47:70:c1:38: 46:7f:f8:6f:0e:5a:32:11:2a:ca:d8:1b:e7:dc:81: c0:2c:99:8e:90:b8:7b:76:48:44:0c:c3:ca:b7:a2: e7:e0:99:f8:2d:2e:cc:6a:5e:53:a4:8d:40:77:c8: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:97:B4:A5:30:D9:EA:7E:F9:FB:CA:3F:17:9D:52:2D:A5:64:F3:47 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143162.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a200::/32 Signature Algorithm: sha256WithRSAEncryption 9c:17:19:3f:84:d3:c8:23:c5:34:9c:cb:1d:27:a4:53:03:a5: b6:08:72:17:ab:e6:4f:5f:4b:0d:f4:71:6c:83:55:ae:4f:29: c5:87:c1:f9:d7:19:2d:16:29:03:63:b0:c1:fe:9b:93:f0:ea: b4:af:b2:61:67:b3:62:be:7e:20:80:21:11:7d:f3:f1:82:1c: 3e:47:05:8e:87:da:76:47:6d:3c:f6:cc:7f:e6:d0:b2:6f:db: 70:94:62:40:8e:7b:06:e5:33:83:d6:76:3d:e3:99:97:23:b6: 74:99:35:2a:05:0c:e2:2a:21:81:22:0a:7f:f3:ef:27:42:08: a9:1d:8d:11:0e:5d:06:d3:51:3c:64:61:44:c1:84:ca:0d:d9: 3d:14:9c:c0:4d:2b:af:b6:d6:09:47:b2:c3:b2:4d:f4:63:b7: 5d:7f:ce:82:c5:30:1e:fb:38:1d:d1:72:17:44:c6:b9:02:25: c2:66:22:13:cc:27:02:3d:9d:2b:33:72:f1:db:62:ae:f2:04: 52:23:03:23:cf:ca:2d:34:de:1b:15:5c:cc:b0:e5:c8:0e:48: b5:d4:7a:42:9b:77:61:3f:cd:94:17:06:a2:8f:c8:46:2b:c2: aa:36:ae:be:c8:c2:51:2a:1a:07:fb:6d:ea:02:5d:36:16:dc: 42:be:37:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZRHvD0rRFM9Hhnkvsh9pTxYCh6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwM1oX DTI3MDMwMzA2MDcwM1owMzExMC8GA1UEAxMoMkQ5N0I0QTUzMEQ5RUE3RUY5RkJD QTNGMTc5RDUyMkRBNTY0RjM0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANU4hxOcOe7ag/K7xaLuc/CtVT3LGzf7jm22YYIKb+duhr2N3GlzWb+ROn6f Lh7JGbobRd3N5Q1OjUqOMDWaMzHJ/CuIyxxmjjoN/tTr3sQ6i87w5k74cTmQ00R5 dTF/D9s8yNPf2mb6i6tVLe/Et/3aXH2t7P+n0OJoC0pabW08fcKrO2kHbG/4wacN kkvP5aQVvK9BKUlVJXyaakxtK0mODjsTlRTrYcUMgPtcAMdfMZ/eq6LXvmfDAajo Fg/1D/0X2ivtdkwN5cRa/B5HcME4Rn/4bw5aMhEqytgb59yBwCyZjpC4e3ZIRAzD yrei5+CZ+C0uzGpeU6SNQHfIu3MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQtl7Sl MNnqfvn7yj8XnVItpWTzRzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ogAwDQYJKoZIhvcNAQELBQADggEBAJwXGT+E08gjxTScyx0npFMDpbYIcher5k9f Sw30cWyDVa5PKcWHwfnXGS0WKQNjsMH+m5Pw6rSvsmFns2K+fiCAIRF98/GCHD5H BY6H2nZHbTz2zH/m0LJv23CUYkCOewblM4PWdj3jmZcjtnSZNSoFDOIqIYEiCn/z 7ydCCKkdjREOXQbTUTxkYUTBhMoN2T0UnMBNK6+21glHssOyTfRjt11/zoLFMB77 OB3RchdExrkCJcJmIhPMJwI9nSszcvHbYq7yBFIjAyPPyi003hsVXMyw5cgOSLXU ekKbd2E/zZQXBqKPyEYrwqo2rr7IwlEqGgf7beoCXTYW3EK+N1A= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:36 2026 by rpki-client