$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143181.roa File: AS143181.roa (raw, json) Hash identifier: ynfeGunPtlWuOzrOPjZ/pQbGBtitIMN5HArhRmygtTs= Subject key identifier: E7:E5:16:7D:D4:8B:C1:BF:98:A1:EA:E1:49:8B:F8:9D:68:AA:2A:51 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 739D4D9B44834407CDF5DBFFE477C8C0FD8CE941 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143181.roa Signing time: Wed 04 Mar 2026 06:07:29 +0000 ROA not before: Wed 04 Mar 2026 06:02:29 +0000 ROA not after: Wed 03 Mar 2027 06:07:29 +0000 asID: 143181 IP address blocks: 240a:a213::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9d:4d:9b:44:83:44:07:cd:f5:db:ff:e4:77:c8:c0:fd:8c:e9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:29 2026 GMT Not After : Mar 3 06:07:29 2027 GMT Subject: CN=E7E5167DD48BC1BF98A1EAE1498BF89D68AA2A51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:e0:7d:7a:0e:f7:61:fd:76:2d:3f:28:2e: c4:5c:9c:66:14:61:a9:e3:92:3e:52:24:39:6a:30: 62:89:76:b4:2a:10:df:e5:4e:4e:f6:d0:e1:c6:50: a3:d9:8a:a2:9e:f5:ee:51:5f:c8:42:aa:98:32:6b: a8:29:80:f6:51:73:63:14:a9:e5:01:11:09:2d:85: a3:b6:79:62:4d:40:eb:f2:5b:89:92:2c:a6:03:61: e3:7d:84:e9:55:c8:27:50:f3:7d:b9:f2:e7:a7:e3: 4b:c2:74:4f:58:45:c2:b1:89:65:89:d0:8e:59:95: 11:4c:a9:ce:f5:c6:f8:75:5a:d8:36:85:18:7b:97: 36:dc:99:a9:cf:f9:3c:4b:d0:5f:de:0a:bc:f9:a2: bf:76:37:df:fa:d4:7f:ff:74:6a:62:47:cf:ef:bc: 23:84:97:59:69:2e:53:5d:67:bd:f8:e0:f2:6d:a2: bc:59:52:ae:8e:57:23:a9:bd:2c:95:ce:bc:4b:17: 3d:84:06:36:67:a9:55:4c:12:22:ab:09:5a:32:59: fa:2a:fb:7e:3e:f8:b6:f3:bc:9d:06:e3:be:42:e3: 72:a1:5a:f9:ef:8d:9d:f6:76:49:20:20:51:51:75: e7:c5:83:61:2c:cd:85:ba:95:0d:5b:b3:b4:3f:12: 94:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E5:16:7D:D4:8B:C1:BF:98:A1:EA:E1:49:8B:F8:9D:68:AA:2A:51 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143181.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a213::/32 Signature Algorithm: sha256WithRSAEncryption 65:97:00:19:27:bb:51:ad:90:c7:0c:11:74:ff:67:02:f2:f8: 65:ad:a9:cd:57:e0:04:e5:04:69:a9:3e:99:d9:de:9a:d5:18: 45:c2:7f:d4:9a:bd:81:b8:a4:f2:df:23:7d:48:cf:bb:d1:d5: cb:c8:93:cf:1d:49:92:7e:a1:d7:d1:26:8d:69:df:33:89:4c: af:eb:cd:47:fe:cc:11:06:3c:4e:81:c6:6f:3d:26:39:b5:d1: 8d:96:55:b1:78:8a:4d:91:90:e5:8e:f4:e7:10:36:01:86:f5: 64:85:eb:b0:85:5b:66:19:9e:b2:cc:f3:e8:31:1e:56:35:e2: 00:17:38:cb:eb:8f:9d:21:d9:e1:16:b5:d8:cf:cc:8d:5a:fb: ab:d6:a8:5a:9b:f0:e6:57:8e:7e:46:de:4c:31:c4:e0:f4:1a: 3a:e1:4f:b8:e1:a0:26:4e:2d:53:b8:54:3b:a1:e8:a9:9b:e2: b6:84:c6:a6:d3:4c:50:15:67:be:51:93:c5:df:9b:9a:74:ef: cf:76:5d:ea:18:ea:3f:5d:59:66:f9:91:8e:65:ef:32:a1:c2: 6c:39:0b:47:69:a1:56:c0:c5:7d:12:d5:1f:06:5d:93:f8:b2: a5:d1:7f:01:07:f4:32:b7:0a:f4:c4:49:ed:84:30:86:c9:9f: 40:33:63:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUc51Nm0SDRAfN9dv/5HfIwP2M6UEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyOVoX DTI3MDMwMzA2MDcyOVowMzExMC8GA1UEAxMoRTdFNTE2N0RENDhCQzFCRjk4QTFF QUUxNDk4QkY4OUQ2OEFBMkE1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdU4H16Dvdh/XYtPyguxFycZhRhqeOSPlIkOWowYol2tCoQ3+VOTvbQ4cZQ o9mKop717lFfyEKqmDJrqCmA9lFzYxSp5QERCS2Fo7Z5Yk1A6/JbiZIspgNh432E 6VXIJ1Dzfbny56fjS8J0T1hFwrGJZYnQjlmVEUypzvXG+HVa2DaFGHuXNtyZqc/5 PEvQX94KvPmiv3Y33/rUf/90amJHz++8I4SXWWkuU11nvfjg8m2ivFlSro5XI6m9 LJXOvEsXPYQGNmepVUwSIqsJWjJZ+ir7fj74tvO8nQbjvkLjcqFa+e+NnfZ2SSAg UVF158WDYSzNhbqVDVuztD8SlCcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTn5RZ9 1IvBv5ih6uFJi/idaKoqUTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ohMwDQYJKoZIhvcNAQELBQADggEBAGWXABknu1GtkMcMEXT/ZwLy+GWtqc1X4ATl BGmpPpnZ3prVGEXCf9SavYG4pPLfI31Iz7vR1cvIk88dSZJ+odfRJo1p3zOJTK/r zUf+zBEGPE6Bxm89Jjm10Y2WVbF4ik2RkOWO9OcQNgGG9WSF67CFW2YZnrLM8+gx HlY14gAXOMvrj50h2eEWtdjPzI1a+6vWqFqb8OZXjn5G3kwxxOD0GjrhT7jhoCZO LVO4VDuh6Kmb4raExqbTTFAVZ75Rk8Xfm5p07892XeoY6j9dWWb5kY5l7zKhwmw5 C0dpoVbAxX0S1R8GXZP4sqXRfwEH9DK3CvTESe2EMIbJn0AzY6s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:45 2026 by rpki-client