$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143179.roa File: AS143179.roa (raw, json) Hash identifier: EK3fK/Irev2NsohL0/a+l/kOcGgkILPBcSJ6YeuE6uU= Subject key identifier: 4D:C9:53:C0:FB:58:68:6C:EB:36:47:6D:D7:FF:A3:91:34:43:9A:9B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0586DA85491FE0D5C3C20F9DCBCDA43B46A5647A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143179.roa Signing time: Wed 04 Mar 2026 06:06:13 +0000 ROA not before: Wed 04 Mar 2026 06:01:13 +0000 ROA not after: Wed 03 Mar 2027 06:06:13 +0000 asID: 143179 IP address blocks: 240a:a211::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:86:da:85:49:1f:e0:d5:c3:c2:0f:9d:cb:cd:a4:3b:46:a5:64:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:13 2026 GMT Not After : Mar 3 06:06:13 2027 GMT Subject: CN=4DC953C0FB58686CEB36476DD7FFA39134439A9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:c4:ed:8e:31:0f:86:1a:93:06:a5:e0:1c: f8:d4:1e:03:8b:6c:8c:01:75:0e:96:c2:31:6c:a6: db:5b:9d:10:62:55:11:e0:eb:5f:40:21:b6:75:51: aa:ae:95:c8:75:7d:4f:25:b7:0f:b8:5e:4d:ca:7d: 2f:26:1d:32:b8:da:8d:cc:96:92:6a:63:47:77:e7: 67:c1:4c:da:60:68:fe:85:c4:6c:27:e7:90:f5:9a: 9a:b7:92:1a:09:4b:d4:74:ad:27:e1:36:99:ec:87: 7f:a0:29:ad:ca:31:c6:bb:01:15:2e:6a:64:8f:91: 55:21:62:85:ba:d8:be:e6:ed:29:d6:53:de:4f:ca: 69:a0:58:8d:98:cd:34:d3:df:74:d4:04:32:59:b0: c9:1a:2d:2c:1a:84:3d:78:92:3e:79:e7:6c:31:f0: 81:55:03:1c:c3:8b:1d:6a:9f:ab:e3:12:20:d4:6d: 41:09:d7:b3:80:71:32:cd:0e:7f:b6:9d:76:2c:bf: 4e:ed:13:ee:13:5b:35:84:71:e3:47:8a:fa:f8:b1: cc:c0:a3:1b:d0:62:06:bb:88:c4:03:5c:3a:72:10: f2:66:ea:25:f7:ce:00:85:91:9b:cd:52:72:f0:49: c3:54:c7:d2:fe:eb:d6:70:05:44:58:05:d5:d6:14: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C9:53:C0:FB:58:68:6C:EB:36:47:6D:D7:FF:A3:91:34:43:9A:9B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143179.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a211::/32 Signature Algorithm: sha256WithRSAEncryption 06:bb:3a:3b:af:09:66:be:20:fe:69:13:c6:99:b7:df:c5:b9: ab:8b:63:af:2f:89:ad:c2:4c:4b:94:25:10:5f:24:7e:be:48: 82:45:b1:59:d0:06:89:53:b9:cd:b7:66:21:c8:32:25:d5:47: fc:19:6d:e3:0a:bf:bc:ac:96:36:78:d1:40:d7:05:41:be:76: ce:67:4d:2f:0f:b7:46:89:87:23:19:92:45:9a:d0:bf:3c:7a: 56:50:2e:c7:29:68:e2:16:72:6b:f4:c0:45:7c:c1:f5:a1:21: 01:c7:43:c7:51:36:29:6c:56:a1:e9:b5:68:43:60:b6:d8:87: 9e:ae:9d:26:2b:3a:a5:a2:d0:9b:0e:b1:58:50:8f:fd:cc:cc: 94:6e:9e:8e:db:36:ad:c2:42:68:bc:6f:94:39:a0:e9:cf:15: b1:1f:c1:f5:80:56:69:ba:51:ad:cc:50:3f:ea:12:46:be:71: 8d:f8:38:20:80:de:ed:b9:02:34:05:dc:2e:75:1e:fa:7c:89: 4c:40:23:24:63:c1:5d:bc:75:ab:42:96:5a:72:07:a2:c8:07: 93:48:ad:64:d7:6c:68:55:dd:31:e6:07:d6:b2:f8:5f:a3:2d: 06:87:09:2f:a7:12:18:c3:56:b5:52:f5:9e:9e:85:d0:79:53: d5:41:bb:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBYbahUkf4NXDwg+dy82kO0alZHowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExM1oX DTI3MDMwMzA2MDYxM1owMzExMC8GA1UEAxMoNERDOTUzQzBGQjU4Njg2Q0VCMzY0 NzZERDdGRkEzOTEzNDQzOUE5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMj/xO2OMQ+GGpMGpeAc+NQeA4tsjAF1DpbCMWym21udEGJVEeDrX0AhtnVR qq6VyHV9TyW3D7heTcp9LyYdMrjajcyWkmpjR3fnZ8FM2mBo/oXEbCfnkPWamreS GglL1HStJ+E2meyHf6AprcoxxrsBFS5qZI+RVSFihbrYvubtKdZT3k/KaaBYjZjN NNPfdNQEMlmwyRotLBqEPXiSPnnnbDHwgVUDHMOLHWqfq+MSINRtQQnXs4BxMs0O f7addiy/Tu0T7hNbNYRx40eK+vixzMCjG9BiBruIxANcOnIQ8mbqJffOAIWRm81S cvBJw1TH0v7r1nAFRFgF1dYUK20CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNyVPA +1hobOs2R23X/6ORNEOamzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ohEwDQYJKoZIhvcNAQELBQADggEBAAa7OjuvCWa+IP5pE8aZt9/FuauLY68via3C TEuUJRBfJH6+SIJFsVnQBolTuc23ZiHIMiXVR/wZbeMKv7ysljZ40UDXBUG+ds5n TS8Pt0aJhyMZkkWa0L88elZQLscpaOIWcmv0wEV8wfWhIQHHQ8dRNilsVqHptWhD YLbYh56unSYrOqWi0JsOsVhQj/3MzJRuno7bNq3CQmi8b5Q5oOnPFbEfwfWAVmm6 Ua3MUD/qEka+cY34OCCA3u25AjQF3C51Hvp8iUxAIyRjwV28datCllpyB6LIB5NI rWTXbGhV3THmB9ay+F+jLQaHCS+nEhjDVrVS9Z6ehdB5U9VBu+Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:49 2026 by rpki-client