$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143166.roa File: AS143166.roa (raw, json) Hash identifier: EO6YVhvPIedrHzZSe99VEcInpd4UelW5uXKCLFAY6Co= Subject key identifier: C8:2F:D6:D8:43:30:F1:C9:02:96:D2:7B:46:EE:DE:73:01:01:78:15 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7A05874E28F54E3EBFDC0850FB9A0E7F640F4CD9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143166.roa Signing time: Wed 04 Mar 2026 06:07:04 +0000 ROA not before: Wed 04 Mar 2026 06:02:04 +0000 ROA not after: Wed 03 Mar 2027 06:07:04 +0000 asID: 143166 IP address blocks: 240a:a204::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:05:87:4e:28:f5:4e:3e:bf:dc:08:50:fb:9a:0e:7f:64:0f:4c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:04 2026 GMT Not After : Mar 3 06:07:04 2027 GMT Subject: CN=C82FD6D84330F1C90296D27B46EEDE7301017815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:07:f8:27:85:8f:b0:73:f1:e0:4b:95:2a: 0d:b9:a2:b3:6e:c4:5d:a2:9e:57:0b:e5:13:51:1b: cd:08:89:42:ef:f3:93:9c:31:0b:da:a8:8a:8e:8a: 77:0f:3f:28:f4:d9:07:2f:73:64:05:e1:85:26:13: 11:db:9e:4e:97:f0:b6:74:e9:41:c0:62:57:19:c0: e8:44:44:23:a9:90:05:96:f0:d0:17:43:b2:84:0f: 2c:92:08:83:fa:6c:85:97:16:e8:de:a7:8b:00:dd: 6b:4d:ef:df:16:6a:33:20:23:a7:46:4a:21:e2:1f: 08:bf:3e:b8:d0:2b:b9:99:65:27:74:cb:c9:7a:86: 8c:31:26:3c:33:60:cd:89:a3:49:e6:4c:88:e2:12: c8:50:58:fc:6e:24:8c:0f:ae:64:b3:9f:83:ea:17: e4:47:47:ee:30:f2:6a:39:12:d9:d4:54:5b:a6:7d: 9c:6d:c9:09:0e:43:0f:af:9b:fb:35:db:55:40:6e: 92:81:9d:33:b3:4c:6d:a4:c5:49:1b:a2:a0:e7:ee: 29:3c:3b:a6:69:fc:fe:da:04:3c:d5:6e:79:bf:89: 3f:0b:8f:21:1b:06:b4:b3:97:65:09:82:a7:51:ce: f4:77:f3:fb:0c:4a:e3:25:c4:49:e4:f0:44:71:5a: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2F:D6:D8:43:30:F1:C9:02:96:D2:7B:46:EE:DE:73:01:01:78:15 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143166.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a204::/32 Signature Algorithm: sha256WithRSAEncryption 53:e1:91:5c:72:4f:a8:0f:5c:2a:47:37:63:d5:fa:b9:eb:af: 63:cc:ca:be:95:fc:83:89:76:46:d5:a0:9e:ab:7f:6f:35:2f: 2b:d5:e1:46:18:93:4d:e4:b5:be:6a:67:e7:24:3e:40:60:86: 6a:fd:04:02:f6:9e:06:a2:ea:86:8e:4e:a5:5b:d4:0e:d4:07: 7e:c6:69:7d:b8:6c:6e:49:4e:44:4b:15:fe:93:36:8c:6d:32: 0a:9c:63:b6:8d:9e:02:8b:51:4c:06:9d:2b:90:44:47:53:85: 34:7c:e8:86:63:09:e2:e5:f7:76:42:d1:81:37:40:aa:84:2d: 32:18:9e:71:a0:84:bb:c6:0b:82:93:3b:7f:82:f2:e5:02:fa: 06:a4:2e:2a:85:8a:e9:3b:02:3f:0a:ae:9a:07:46:69:9b:5f: c3:8d:92:15:8e:a2:bc:14:c2:15:fa:f5:ff:a5:24:34:41:60: 1e:c6:f1:03:9c:c9:7e:c6:3b:39:73:72:87:cf:42:a2:97:d9: 1d:a8:74:cc:ba:15:84:c6:31:c5:44:32:0d:68:d5:ee:d3:5c: 4f:ad:40:57:0f:af:3b:0e:07:d8:5a:30:ae:36:05:1f:8f:ad: 98:87:0a:10:80:9a:bd:f0:90:5c:57:b6:ce:c6:06:3b:cd:61: a5:29:56:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUegWHTij1Tj6/3AhQ+5oOf2QPTNkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwNFoX DTI3MDMwMzA2MDcwNFowMzExMC8GA1UEAxMoQzgyRkQ2RDg0MzMwRjFDOTAyOTZE MjdCNDZFRURFNzMwMTAxNzgxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRBB/gnhY+wc/HgS5UqDbmis27EXaKeVwvlE1EbzQiJQu/zk5wxC9qoio6K dw8/KPTZBy9zZAXhhSYTEdueTpfwtnTpQcBiVxnA6EREI6mQBZbw0BdDsoQPLJII g/pshZcW6N6niwDda03v3xZqMyAjp0ZKIeIfCL8+uNAruZllJ3TLyXqGjDEmPDNg zYmjSeZMiOISyFBY/G4kjA+uZLOfg+oX5EdH7jDyajkS2dRUW6Z9nG3JCQ5DD6+b +zXbVUBukoGdM7NMbaTFSRuioOfuKTw7pmn8/toEPNVueb+JPwuPIRsGtLOXZQmC p1HO9Hfz+wxK4yXESeTwRHFaHk8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTIL9bY QzDxyQKW0ntG7t5zAQF4FTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ogQwDQYJKoZIhvcNAQELBQADggEBAFPhkVxyT6gPXCpHN2PV+rnrr2PMyr6V/IOJ dkbVoJ6rf281LyvV4UYYk03ktb5qZ+ckPkBghmr9BAL2ngai6oaOTqVb1A7UB37G aX24bG5JTkRLFf6TNoxtMgqcY7aNngKLUUwGnSuQREdThTR86IZjCeLl93ZC0YE3 QKqELTIYnnGghLvGC4KTO3+C8uUC+gakLiqFiuk7Aj8KrpoHRmmbX8ONkhWOorwU whX69f+lJDRBYB7G8QOcyX7GOzlzcofPQqKX2R2odMy6FYTGMcVEMg1o1e7TXE+t QFcPrzsOB9haMK42BR+PrZiHChCAmr3wkFxXts7GBjvNYaUpVqM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:23 2026 by rpki-client