$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143176.roa File: AS143176.roa (raw, json) Hash identifier: deDiqQPiyKEGF2fTZcUri62IMLBirOJvSZg6+29duC0= Subject key identifier: 0B:D1:03:5E:D1:CF:1A:8B:0B:0B:7C:5A:FE:7D:AC:1F:0B:49:2D:F5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E05EF034227E989F052280C2C1F959192433A47 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143176.roa Signing time: Wed 04 Mar 2026 06:05:16 +0000 ROA not before: Wed 04 Mar 2026 06:00:16 +0000 ROA not after: Wed 03 Mar 2027 06:05:16 +0000 asID: 143176 IP address blocks: 240a:a20e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:05:ef:03:42:27:e9:89:f0:52:28:0c:2c:1f:95:91:92:43:3a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:16 2026 GMT Not After : Mar 3 06:05:16 2027 GMT Subject: CN=0BD1035ED1CF1A8B0B0B7C5AFE7DAC1F0B492DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:e5:cd:27:a4:38:fe:37:82:a0:7f:92:90: e4:24:5f:bd:f4:db:03:f3:62:34:97:c9:ae:ff:5c: 51:3e:79:a1:08:33:55:67:fc:ce:e2:61:6a:b2:44: bb:03:49:7e:ba:dc:ac:34:cf:ce:03:fc:50:6e:68: 8d:66:80:5f:60:4c:3f:14:29:58:64:16:3a:90:fb: 10:c0:7f:d3:8e:ff:66:e7:9c:69:35:fc:58:ca:00: 5a:9a:88:34:7a:c4:ea:27:4c:e1:01:00:36:d9:0f: 2c:19:9c:82:fa:cf:ec:88:81:3d:d4:31:c8:54:29: b9:75:2d:cf:5f:64:3e:79:3d:64:f1:74:56:90:0f: 6b:a9:b3:9f:bf:8a:99:d3:7e:ba:b9:f4:26:01:f1: 3d:7a:e8:36:1c:ff:4a:a6:6c:c8:16:cf:2e:5f:2c: 1a:c7:9e:0e:9e:3b:2f:29:15:e4:08:25:c2:75:f8: 17:48:25:7b:e5:03:fb:f1:b0:cc:61:43:60:50:9a: 9e:0b:14:35:d3:75:7e:fd:02:bc:a0:7c:e6:df:d5: c9:12:b8:63:b3:35:4a:f4:90:77:44:75:ae:84:af: eb:bc:8c:aa:c1:a9:48:2c:e8:da:83:fa:09:f3:5f: a6:ac:fd:bb:5d:af:55:ac:ed:57:24:1f:71:8f:9c: 36:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D1:03:5E:D1:CF:1A:8B:0B:0B:7C:5A:FE:7D:AC:1F:0B:49:2D:F5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143176.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a20e::/32 Signature Algorithm: sha256WithRSAEncryption 0d:35:5b:3e:63:23:da:7f:01:aa:cf:4c:cc:0e:bf:2e:c2:9f: 22:1b:40:c9:38:a2:de:c6:43:ae:a5:df:56:f0:67:51:e1:9a: 2a:4e:09:fb:7d:17:90:aa:4c:8d:64:27:31:a0:7c:f0:21:93: c3:ec:83:0d:4a:e7:94:cb:ce:d4:55:27:5a:d5:32:8c:4a:07: a1:f5:47:5d:67:5e:a7:96:fb:d5:b7:cd:70:ee:39:8a:f7:e3: b0:1b:f9:f2:0f:5e:d0:74:03:18:e8:ff:58:e8:69:7e:22:9e: 78:78:53:c6:77:5d:a9:b6:8d:f5:55:61:e9:3f:5c:29:20:96: 70:38:e9:8c:47:9a:98:c9:c7:f1:f6:7a:41:d3:22:cd:0d:fe: dd:97:97:99:fe:d5:4a:2f:2c:14:5a:2f:c5:6b:66:75:af:4c: ec:2e:c6:44:fe:31:61:8f:dd:d3:c2:a9:5d:5f:b1:72:68:af: ce:b2:a2:67:dc:c4:c1:a4:f2:74:05:b3:cf:97:f1:07:a5:b2: 87:b5:da:c0:7b:d2:25:cd:53:dd:bd:45:48:84:b4:d6:cb:35: 49:38:5b:3e:7b:16:08:9c:54:8c:ab:2c:57:9c:72:fc:fc:34: dd:f4:41:26:2a:f8:fd:70:62:c9:3e:66:b2:03:e8:d4:38:8b: 60:60:a7:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULgXvA0In6YnwUigMLB+VkZJDOkcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxNloX DTI3MDMwMzA2MDUxNlowMzExMC8GA1UEAxMoMEJEMTAzNUVEMUNGMUE4QjBCMEI3 QzVBRkU3REFDMUYwQjQ5MkRGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAD5c0npDj+N4Kgf5KQ5CRfvfTbA/NiNJfJrv9cUT55oQgzVWf8zuJharJE uwNJfrrcrDTPzgP8UG5ojWaAX2BMPxQpWGQWOpD7EMB/047/ZuecaTX8WMoAWpqI NHrE6idM4QEANtkPLBmcgvrP7IiBPdQxyFQpuXUtz19kPnk9ZPF0VpAPa6mzn7+K mdN+urn0JgHxPXroNhz/SqZsyBbPLl8sGseeDp47LykV5AglwnX4F0gle+UD+/Gw zGFDYFCangsUNdN1fv0CvKB85t/VyRK4Y7M1SvSQd0R1roSv67yMqsGpSCzo2oP6 CfNfpqz9u12vVaztVyQfcY+cNgsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQL0QNe 0c8aiwsLfFr+fawfC0kt9TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK og4wDQYJKoZIhvcNAQELBQADggEBAA01Wz5jI9p/AarPTMwOvy7CnyIbQMk4ot7G Q66l31bwZ1HhmipOCft9F5CqTI1kJzGgfPAhk8Psgw1K55TLztRVJ1rVMoxKB6H1 R11nXqeW+9W3zXDuOYr347Ab+fIPXtB0Axjo/1joaX4innh4U8Z3Xam2jfVVYek/ XCkglnA46YxHmpjJx/H2ekHTIs0N/t2Xl5n+1UovLBRaL8VrZnWvTOwuxkT+MWGP 3dPCqV1fsXJor86yomfcxMGk8nQFs8+X8Qelsoe12sB70iXNU929RUiEtNbLNUk4 Wz57FgicVIyrLFeccvz8NN30QSYq+P1wYsk+ZrID6NQ4i2Bgp4s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:47 2026 by rpki-client