$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143163.roa File: AS143163.roa (raw, json) Hash identifier: xh1relEWHa6mOvNeiMOeumkysV0J+h2u77ipY8FjG94= Subject key identifier: 2C:39:63:A3:D0:37:1E:41:4C:D4:97:3E:97:D2:EE:C9:A0:C1:E5:5B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 166FC51B45FF82F4C48ABD9EB100A6045B5E7CCA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143163.roa Signing time: Wed 04 Mar 2026 06:07:24 +0000 ROA not before: Wed 04 Mar 2026 06:02:24 +0000 ROA not after: Wed 03 Mar 2027 06:07:24 +0000 asID: 143163 IP address blocks: 240a:a201::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6f:c5:1b:45:ff:82:f4:c4:8a:bd:9e:b1:00:a6:04:5b:5e:7c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:24 2026 GMT Not After : Mar 3 06:07:24 2027 GMT Subject: CN=2C3963A3D0371E414CD4973E97D2EEC9A0C1E55B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:d7:7f:e3:4d:af:58:a0:0c:1a:d1:9f:6d: 70:74:b0:80:dc:0d:52:e8:17:5c:7d:9b:71:24:2f: 22:1f:71:b5:31:8d:df:d3:b2:9e:fc:7f:88:cd:15: b6:82:53:bc:a4:09:49:f6:6c:52:6c:5c:03:7d:65: e4:2c:46:ef:70:ac:40:4b:3a:f2:db:c2:33:80:c0: d7:a0:ec:f0:07:6b:41:15:9b:e7:91:e1:52:66:2a: 13:de:e6:af:d0:28:c8:a6:dd:ac:38:99:39:c7:af: ad:6f:ac:81:85:90:bd:1c:d9:d1:d3:b7:80:d4:62: d3:5e:1f:b1:37:ff:18:69:03:69:f4:d8:fa:6e:a8: 99:23:9c:2c:1c:b4:4c:64:e4:dd:53:57:23:fe:b5: 56:79:86:7b:fd:6a:3c:4a:8d:da:25:fc:3a:fc:37: 09:8a:7d:0c:09:71:61:d0:71:3f:46:6e:1c:46:66: 53:19:b4:5f:1f:02:96:51:d0:79:e2:ea:22:c6:7b: 5c:f3:12:cf:a8:4c:d2:c2:53:a9:99:01:cf:fe:da: 9d:62:58:04:2c:99:4f:6a:33:f6:d7:2d:07:d2:7a: c5:f5:ed:04:94:90:ec:36:99:5d:9c:5c:37:7b:b7: d7:20:5d:c0:c0:70:31:b1:84:d6:22:bc:99:c0:44: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:39:63:A3:D0:37:1E:41:4C:D4:97:3E:97:D2:EE:C9:A0:C1:E5:5B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143163.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a201::/32 Signature Algorithm: sha256WithRSAEncryption a1:83:b3:a8:12:d8:c2:b9:4d:a6:1e:bc:71:00:0c:ff:73:af: 0e:3c:d1:f4:92:d0:93:a1:09:fe:6a:a8:f2:63:a1:a3:c7:81: 57:df:76:12:bf:f2:b6:3d:09:e1:46:9f:05:1e:35:ff:64:9c: 90:33:0a:5b:33:db:9d:92:48:61:43:08:9a:18:82:f8:e2:b1: 6c:f2:91:46:06:fe:c9:ff:a9:a1:07:eb:ae:33:44:99:f0:be: 01:85:47:d0:e5:a7:c9:6b:c2:8f:bb:3c:e7:9a:05:19:92:cf: a1:a1:1d:8f:11:35:31:4b:e7:f2:50:f6:71:2b:a3:ac:67:20: ba:95:63:65:19:e0:6f:87:cb:3f:d5:21:7c:55:e6:44:f7:d3: 82:ef:2e:8d:8b:8b:6c:c8:0d:61:2a:71:4c:ba:98:63:ca:97: 29:80:68:9f:93:b6:51:2c:c6:c0:43:49:b4:96:dc:91:43:df: df:c3:ee:70:64:da:9f:0d:99:71:9a:7d:3e:4e:4d:a3:0f:7f: c3:26:de:96:74:f6:59:b9:cf:3f:70:c6:93:b7:68:dc:89:25: 89:70:a3:ac:91:95:74:8b:a6:75:f0:26:80:cb:c7:0b:ad:b6: 3c:97:a5:dc:41:e2:b9:35:30:96:ab:4c:b3:22:fa:ce:b2:5e: b3:de:d8:a2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFm/FG0X/gvTEir2esQCmBFtefMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyNFoX DTI3MDMwMzA2MDcyNFowMzExMC8GA1UEAxMoMkMzOTYzQTNEMDM3MUU0MTRDRDQ5 NzNFOTdEMkVFQzlBMEMxRTU1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMb813/jTa9YoAwa0Z9tcHSwgNwNUugXXH2bcSQvIh9xtTGN39Oynvx/iM0V toJTvKQJSfZsUmxcA31l5CxG73CsQEs68tvCM4DA16Ds8AdrQRWb55HhUmYqE97m r9AoyKbdrDiZOcevrW+sgYWQvRzZ0dO3gNRi014fsTf/GGkDafTY+m6omSOcLBy0 TGTk3VNXI/61VnmGe/1qPEqN2iX8Ovw3CYp9DAlxYdBxP0ZuHEZmUxm0Xx8CllHQ eeLqIsZ7XPMSz6hM0sJTqZkBz/7anWJYBCyZT2oz9tctB9J6xfXtBJSQ7DaZXZxc N3u31yBdwMBwMbGE1iK8mcBEHi8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQsOWOj 0DceQUzUlz6X0u7JoMHlWzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ogEwDQYJKoZIhvcNAQELBQADggEBAKGDs6gS2MK5TaYevHEADP9zrw480fSS0JOh Cf5qqPJjoaPHgVffdhK/8rY9CeFGnwUeNf9knJAzClsz252SSGFDCJoYgvjisWzy kUYG/sn/qaEH664zRJnwvgGFR9Dlp8lrwo+7POeaBRmSz6GhHY8RNTFL5/JQ9nEr o6xnILqVY2UZ4G+Hyz/VIXxV5kT304LvLo2Li2zIDWEqcUy6mGPKlymAaJ+TtlEs xsBDSbSW3JFD39/D7nBk2p8NmXGafT5OTaMPf8Mm3pZ09lm5zz9wxpO3aNyJJYlw o6yRlXSLpnXwJoDLxwuttjyXpdxB4rk1MJarTLMi+s6yXrPe2KI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:39 2026 by rpki-client