$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143182.roa File: AS143182.roa (raw, json) Hash identifier: /Mnnw+tzUk6REIRlFJta6i4DDaNB9FjlEGPAJjiTT1g= Subject key identifier: 02:51:24:65:CA:EB:C8:84:F0:F1:EC:16:8E:BD:1B:B9:90:F6:B2:03 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0CE4D97DEED74D4BE9F6069DA99034DA4327998E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143182.roa Signing time: Wed 04 Mar 2026 06:06:58 +0000 ROA not before: Wed 04 Mar 2026 06:01:58 +0000 ROA not after: Wed 03 Mar 2027 06:06:58 +0000 asID: 143182 IP address blocks: 240a:a214::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e4:d9:7d:ee:d7:4d:4b:e9:f6:06:9d:a9:90:34:da:43:27:99:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:58 2026 GMT Not After : Mar 3 06:06:58 2027 GMT Subject: CN=02512465CAEBC884F0F1EC168EBD1BB990F6B203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:32:f5:31:52:d3:46:a6:0c:07:0a:bd:63: f6:e9:60:7f:2b:27:84:99:bd:2b:0b:e4:4a:c1:15: 1e:ae:f6:1b:fb:13:e5:49:b5:49:bc:b6:cd:0b:7b: a0:58:43:35:88:6e:13:f6:76:25:fc:f9:b5:7c:03: 20:90:1d:2d:5a:2f:1d:4b:6a:91:a3:f7:aa:bf:dd: 96:4d:89:55:37:5e:82:f5:b6:d1:fe:a2:4b:d0:54: bb:4d:74:95:a4:18:c6:c3:1c:b0:6c:4a:53:66:d7: 1b:79:9b:f7:4f:b0:1f:8e:5f:4b:9c:c1:ce:6b:55: dd:d0:b0:bf:e9:38:a2:a8:4b:cc:5b:28:5e:dd:1a: 33:27:9f:c6:cf:2a:b9:97:9f:9c:26:1f:08:d9:c3: 07:88:d1:a8:46:86:5c:43:e3:ea:6f:5b:dd:ee:7b: a5:17:98:b1:43:7f:f3:56:ac:47:30:a2:5c:18:4e: 77:fe:78:27:ac:67:fa:7d:4f:bf:1c:ea:5c:af:3a: 53:c4:7e:3d:ae:32:8c:87:f3:2f:43:13:6e:f7:1f: 53:12:22:8e:b8:7c:cc:4d:94:81:2f:75:a3:2e:8a: ad:2b:fe:82:30:82:0a:d0:67:57:ff:8f:a2:cf:89: 35:86:0b:6f:69:13:10:e5:6e:d0:cc:e6:63:3b:84: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:51:24:65:CA:EB:C8:84:F0:F1:EC:16:8E:BD:1B:B9:90:F6:B2:03 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143182.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a214::/32 Signature Algorithm: sha256WithRSAEncryption 4d:36:b7:ff:ee:68:73:d8:c9:6d:dd:7e:23:7e:40:8c:d3:d3: 30:ff:e4:04:0e:28:40:c3:38:ea:04:16:a6:b6:6c:5d:07:f9: 11:3a:d7:b0:8e:52:9d:29:bf:5b:b3:23:b1:7c:b1:38:94:f9: 65:ce:6d:04:ee:71:3a:e1:e9:a3:64:3e:33:8c:57:64:0b:bd: d4:92:5a:7d:9c:a4:7f:f3:79:09:f6:2f:b8:f4:dc:2d:8c:8f: 36:d6:fa:40:dc:10:59:55:9c:13:3e:74:e3:b5:86:51:56:b3: d1:0e:ad:e4:19:02:10:a5:be:35:06:bc:56:4f:af:7b:88:47: ff:35:e5:ae:83:8e:2b:5f:a9:56:fd:cf:87:aa:bf:d0:23:07: 01:6f:0d:9e:e9:55:b4:e5:48:ed:18:bc:ad:ab:9b:c1:5e:65: 59:e6:d5:66:65:e5:5c:39:9a:e5:0e:ae:cd:9f:f4:ca:d9:f8: 2a:dd:35:ee:41:47:a9:3a:37:40:dc:b8:d3:7e:c9:2d:9d:6b: f6:92:aa:aa:c5:ce:bb:16:b6:00:bc:04:a1:fc:05:cf:15:48: ff:48:e5:67:36:57:0b:7f:7a:58:07:10:56:fe:b3:59:8b:32: a7:0f:7f:ce:70:c7:ca:b3:eb:c4:46:9e:51:e1:d2:80:d4:71: df:af:05:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDOTZfe7XTUvp9gadqZA02kMnmY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1OFoX DTI3MDMwMzA2MDY1OFowMzExMC8GA1UEAxMoMDI1MTI0NjVDQUVCQzg4NEYwRjFF QzE2OEVCRDFCQjk5MEY2QjIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRKMvUxUtNGpgwHCr1j9ulgfysnhJm9KwvkSsEVHq72G/sT5Um1Sby2zQt7 oFhDNYhuE/Z2Jfz5tXwDIJAdLVovHUtqkaP3qr/dlk2JVTdegvW20f6iS9BUu010 laQYxsMcsGxKU2bXG3mb90+wH45fS5zBzmtV3dCwv+k4oqhLzFsoXt0aMyefxs8q uZefnCYfCNnDB4jRqEaGXEPj6m9b3e57pReYsUN/81asRzCiXBhOd/54J6xn+n1P vxzqXK86U8R+Pa4yjIfzL0MTbvcfUxIijrh8zE2UgS91oy6KrSv+gjCCCtBnV/+P os+JNYYLb2kTEOVu0MzmYzuEYH8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQCUSRl yuvIhPDx7BaOvRu5kPayAzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ohQwDQYJKoZIhvcNAQELBQADggEBAE02t//uaHPYyW3dfiN+QIzT0zD/5AQOKEDD OOoEFqa2bF0H+RE617COUp0pv1uzI7F8sTiU+WXObQTucTrh6aNkPjOMV2QLvdSS Wn2cpH/zeQn2L7j03C2MjzbW+kDcEFlVnBM+dOO1hlFWs9EOreQZAhClvjUGvFZP r3uIR/815a6DjitfqVb9z4eqv9AjBwFvDZ7pVbTlSO0YvK2rm8FeZVnm1WZl5Vw5 muUOrs2f9MrZ+CrdNe5BR6k6N0DcuNN+yS2da/aSqqrFzrsWtgC8BKH8Bc8VSP9I 5Wc2Vwt/elgHEFb+s1mLMqcPf85wx8qz68RGnlHh0oDUcd+vBYI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:33 2026 by rpki-client