$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143191.roa File: AS143191.roa (raw, json) Hash identifier: WWip0gsWZfd2HTZNi9kPDI6dAOIxr9f30Kk6sJ8R3DE= Subject key identifier: DD:E6:BA:0E:14:25:4F:7F:DB:3C:C5:71:67:55:42:9A:56:27:BD:77 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6FA42BA6087269F5F95A84828FE1578249A460C2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143191.roa Signing time: Wed 04 Mar 2026 06:07:13 +0000 ROA not before: Wed 04 Mar 2026 06:02:13 +0000 ROA not after: Wed 03 Mar 2027 06:07:13 +0000 asID: 143191 IP address blocks: 240a:a21d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a4:2b:a6:08:72:69:f5:f9:5a:84:82:8f:e1:57:82:49:a4:60:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:13 2026 GMT Not After : Mar 3 06:07:13 2027 GMT Subject: CN=DDE6BA0E14254F7FDB3CC5716755429A5627BD77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:a9:e3:86:e9:24:e6:3e:a9:12:7d:ea:c7: 99:ce:22:20:12:fc:e7:33:6c:3b:ad:58:e0:b2:5e: 81:5f:d3:b8:40:e1:5b:b0:5f:05:51:07:da:f5:9e: b1:5e:a7:91:a2:39:d7:c8:b1:70:8b:db:f6:e0:08: 74:d5:78:20:80:91:e6:f1:44:a2:a5:09:56:c2:1e: 22:cd:25:26:a4:32:0b:05:c0:5f:51:e3:97:3e:52: 6b:a9:4f:3c:a5:e7:41:fc:c3:4a:bc:b7:33:db:00: 12:c0:78:7a:fb:37:07:29:bc:0e:80:21:14:fb:33: d8:e2:fe:7a:91:1b:db:a7:36:f1:6d:f5:4e:49:5d: 47:ef:b1:18:ac:28:d7:66:87:a6:86:23:03:c8:c1: e6:54:f1:86:02:37:4c:3d:f8:f7:2d:f4:c7:94:89: c0:a4:b3:c5:4a:54:38:78:2f:51:24:65:fc:42:7b: f5:f2:d8:7c:b0:18:fb:3d:3f:11:06:75:83:61:11: c2:c4:a8:19:24:21:e5:b4:63:7b:cc:c8:11:29:93: 22:49:c7:c9:f5:15:e4:26:26:bd:88:97:fd:f9:0f: 86:36:e0:d5:de:6c:dd:58:1e:2f:24:62:20:5b:38: 39:10:1a:81:3a:69:79:61:27:ce:e6:f7:0f:a7:59: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E6:BA:0E:14:25:4F:7F:DB:3C:C5:71:67:55:42:9A:56:27:BD:77 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143191.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a21d::/32 Signature Algorithm: sha256WithRSAEncryption a6:ff:5c:57:14:54:91:5c:63:0a:8a:e2:5d:d8:2a:de:3c:ee: 90:73:f1:ac:d2:24:66:52:a1:ed:2a:32:2b:7a:36:8f:3e:3d: 37:d9:e3:a1:44:16:db:3f:32:fb:cc:16:82:93:ff:04:9c:05: 22:68:9c:41:9a:b1:d9:ae:2e:fa:27:6c:a2:41:b3:5d:3f:c0: 18:30:2c:41:3f:45:ab:f2:de:34:19:7f:bf:a3:29:9f:37:a3: c2:bb:14:ee:f0:a2:8a:91:66:61:5a:64:ba:26:ad:00:ce:2c: 5f:8b:d3:92:ed:6b:7c:a2:e1:4d:39:88:c9:15:6a:fa:5c:a4: bf:ec:69:e7:0c:c9:a2:e9:3f:b1:dc:6e:08:86:92:8a:a7:52: da:52:04:a8:9d:24:1c:c8:0b:4b:32:1b:fb:92:74:1f:98:f9: 43:1d:38:13:90:29:82:ce:ab:a0:dc:ea:99:d6:e2:28:34:61: 56:bc:be:83:7f:f6:38:7a:ea:e9:68:08:19:d8:fa:c6:fe:20: 5d:f0:e2:6b:60:03:af:b1:1a:56:af:37:35:18:41:23:2e:8f: 1f:59:6b:a3:61:8d:81:20:fd:99:4e:a3:73:b6:dc:71:70:d4: 30:9f:8d:ab:b8:9a:b9:82:c4:ff:e5:26:97:8f:f1:78:f9:ea: 1c:00:ea:9b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUb6QrpghyafX5WoSCj+FXgkmkYMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxM1oX DTI3MDMwMzA2MDcxM1owMzExMC8GA1UEAxMoRERFNkJBMEUxNDI1NEY3RkRCM0ND NTcxNjc1NTQyOUE1NjI3QkQ3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANxAqeOG6STmPqkSferHmc4iIBL85zNsO61Y4LJegV/TuEDhW7BfBVEH2vWe sV6nkaI518ixcIvb9uAIdNV4IICR5vFEoqUJVsIeIs0lJqQyCwXAX1Hjlz5Sa6lP PKXnQfzDSry3M9sAEsB4evs3Bym8DoAhFPsz2OL+epEb26c28W31TkldR++xGKwo 12aHpoYjA8jB5lTxhgI3TD349y30x5SJwKSzxUpUOHgvUSRl/EJ79fLYfLAY+z0/ EQZ1g2ERwsSoGSQh5bRje8zIESmTIknHyfUV5CYmvYiX/fkPhjbg1d5s3VgeLyRi IFs4ORAagTppeWEnzub3D6dZmRcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTd5roO FCVPf9s8xXFnVUKaVie9dzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzE5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oh0wDQYJKoZIhvcNAQELBQADggEBAKb/XFcUVJFcYwqK4l3YKt487pBz8azSJGZS oe0qMit6No8+PTfZ46FEFts/MvvMFoKT/wScBSJonEGasdmuLvonbKJBs10/wBgw LEE/Ravy3jQZf7+jKZ83o8K7FO7wooqRZmFaZLomrQDOLF+L05Lta3yi4U05iMkV avpcpL/saecMyaLpP7HcbgiGkoqnUtpSBKidJBzIC0syG/uSdB+Y+UMdOBOQKYLO q6Dc6pnW4ig0YVa8voN/9jh66uloCBnY+sb+IF3w4mtgA6+xGlavNzUYQSMujx9Z a6NhjYEg/ZlOo3O23HFw1DCfjau4mrmCxP/lJpeP8Xj56hwA6ps= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:01 2026 by rpki-client