$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143168.roa File: AS143168.roa (raw, json) Hash identifier: w5Ek8cuwmYbRWFSQ4+a6814966B326MWBTNTajFCGzk= Subject key identifier: 3B:F9:55:A3:63:B2:39:AA:13:F2:A4:07:FB:F9:C5:7E:40:5D:7B:CB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3DB33440C069E79EB1CA41D31E0CE186E957653A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143168.roa Signing time: Wed 04 Mar 2026 06:07:11 +0000 ROA not before: Wed 04 Mar 2026 06:02:11 +0000 ROA not after: Wed 03 Mar 2027 06:07:11 +0000 asID: 143168 IP address blocks: 240a:a206::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b3:34:40:c0:69:e7:9e:b1:ca:41:d3:1e:0c:e1:86:e9:57:65:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:11 2026 GMT Not After : Mar 3 06:07:11 2027 GMT Subject: CN=3BF955A363B239AA13F2A407FBF9C57E405D7BCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:01:74:e0:59:cb:e7:07:de:cc:2d:45:21: 65:cd:d5:06:c3:02:2f:f0:f3:cf:f7:14:23:35:97: 76:e5:35:2e:b2:e6:93:44:69:27:88:8e:ab:45:a7: 2c:f0:10:f3:0d:2c:e3:1c:14:5f:b7:33:a9:60:15: ab:e9:31:f8:61:56:74:42:a8:17:d9:bb:5f:ff:cb: 4a:00:f7:96:3b:8d:83:08:c6:cc:0e:c6:b3:51:22: 2e:f1:44:a0:b8:88:5a:15:2d:a7:f1:d7:84:3c:69: 9c:1a:57:6e:3b:b8:46:2d:39:c6:e0:a2:e4:fe:ec: bc:dd:49:b3:e0:ce:0d:64:e3:23:a7:a3:e8:a2:21: ed:42:7d:b0:09:83:33:8c:84:0d:8b:24:7e:45:ac: b9:b9:17:97:02:6e:71:9a:8d:42:66:47:ed:27:91: 68:8a:bf:15:f3:35:f6:c5:ff:a2:28:b2:b8:09:78: 91:f2:7a:16:51:db:f5:f3:7c:df:71:60:22:55:71: a9:9f:57:e7:7e:50:9a:67:81:8d:6b:04:7c:bd:ad: 1a:8f:20:57:79:cf:a9:9c:b2:03:50:77:96:86:89: 68:1a:ed:2e:c7:f2:6a:f6:c0:bc:04:69:31:d3:8a: bf:53:de:9b:dd:27:f1:a6:af:41:d1:a6:16:a4:c5: 92:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F9:55:A3:63:B2:39:AA:13:F2:A4:07:FB:F9:C5:7E:40:5D:7B:CB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143168.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a206::/32 Signature Algorithm: sha256WithRSAEncryption 2e:5e:ad:f0:cc:c1:1c:5f:77:8b:3c:63:eb:dc:c7:f9:bb:1c: 73:1c:2c:78:ca:70:5c:28:57:49:cb:b5:4c:b2:66:a7:bc:3c: 24:96:dd:5a:60:d5:77:3b:90:83:d8:4e:94:1d:98:83:0f:36: ed:29:4b:78:bc:67:ba:04:fc:8a:e8:26:ca:2f:08:62:de:ff: dc:69:29:7b:09:a6:c7:08:3b:55:ee:99:59:e1:2d:35:d9:bc: 6a:e6:e6:6c:b9:59:82:bb:c1:f7:55:45:b2:8f:92:bc:0d:9b: dc:07:d0:5a:07:af:bd:6c:50:8c:37:56:17:d2:28:53:77:56: a2:b5:db:8c:63:3c:f6:bb:f5:6d:40:7a:0d:b4:2b:23:2c:a2: 59:39:04:cf:a4:49:5a:1b:f4:66:dc:86:33:6f:c0:1e:b2:c5: 7f:eb:01:dc:cc:01:6e:b6:f4:9b:6b:6d:92:44:5c:ac:e5:76: 45:9c:e2:82:c5:c0:48:ec:f9:54:fa:85:0a:d5:c9:58:2d:3d: 1e:c4:47:c1:2e:73:9f:d7:59:bb:e8:2b:85:2a:61:19:ae:9a: 04:7c:e2:11:3e:d3:50:81:d1:c3:93:55:8a:1d:82:2c:5a:2f: 2a:c3:81:4f:d7:3a:00:47:74:67:00:e9:53:e2:00:13:18:8c: d5:d4:d9:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPbM0QMBp556xykHTHgzhhulXZTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxMVoX DTI3MDMwMzA2MDcxMVowMzExMC8GA1UEAxMoM0JGOTU1QTM2M0IyMzlBQTEzRjJB NDA3RkJGOUM1N0U0MDVEN0JDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2GAXTgWcvnB97MLUUhZc3VBsMCL/Dzz/cUIzWXduU1LrLmk0RpJ4iOq0Wn LPAQ8w0s4xwUX7czqWAVq+kx+GFWdEKoF9m7X//LSgD3ljuNgwjGzA7Gs1EiLvFE oLiIWhUtp/HXhDxpnBpXbju4Ri05xuCi5P7svN1Js+DODWTjI6ej6KIh7UJ9sAmD M4yEDYskfkWsubkXlwJucZqNQmZH7SeRaIq/FfM19sX/oiiyuAl4kfJ6FlHb9fN8 33FgIlVxqZ9X535QmmeBjWsEfL2tGo8gV3nPqZyyA1B3loaJaBrtLsfyavbAvARp MdOKv1Pem90n8aavQdGmFqTFkrkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ7+VWj Y7I5qhPypAf7+cV+QF17yzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ogYwDQYJKoZIhvcNAQELBQADggEBAC5erfDMwRxfd4s8Y+vcx/m7HHMcLHjKcFwo V0nLtUyyZqe8PCSW3Vpg1Xc7kIPYTpQdmIMPNu0pS3i8Z7oE/IroJsovCGLe/9xp KXsJpscIO1XumVnhLTXZvGrm5my5WYK7wfdVRbKPkrwNm9wH0FoHr71sUIw3VhfS KFN3VqK124xjPPa79W1Aeg20KyMsolk5BM+kSVob9GbchjNvwB6yxX/rAdzMAW62 9JtrbZJEXKzldkWc4oLFwEjs+VT6hQrVyVgtPR7ER8Euc5/XWbvoK4UqYRmumgR8 4hE+01CB0cOTVYodgixaLyrDgU/XOgBHdGcA6VPiABMYjNXU2eA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:48 2026 by rpki-client