$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142669.roa File: AS142669.roa (raw, json) Hash identifier: hh0eo8fvuJbS6UqBUTVr3L53HImtJVeI1kFaOelO/5M= Subject key identifier: 86:C2:0E:65:60:0C:BD:52:F7:64:57:36:A0:CC:0E:96:65:0E:6B:5F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48D3A4895A80CA8F0AF9AE0FA4ED6AB48B54AB27 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142669.roa Signing time: Wed 04 Mar 2026 06:06:39 +0000 ROA not before: Wed 04 Mar 2026 06:01:39 +0000 ROA not after: Wed 03 Mar 2027 06:06:39 +0000 asID: 142669 IP address blocks: 240a:a013::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d3:a4:89:5a:80:ca:8f:0a:f9:ae:0f:a4:ed:6a:b4:8b:54:ab:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:39 2026 GMT Not After : Mar 3 06:06:39 2027 GMT Subject: CN=86C20E65600CBD52F7645736A0CC0E96650E6B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:12:90:16:3d:c3:d4:c5:d8:83:0d:da:a4: 57:3f:e1:f6:f8:89:d1:42:9f:87:39:76:de:ff:4e: 33:0e:58:a4:fb:e6:f7:f9:3c:49:ff:d0:5d:c8:5f: a5:9e:cd:ab:44:fe:0d:0d:0a:16:d3:fe:cd:7d:f1: 57:fd:be:86:03:42:c6:3d:e3:90:1c:9a:81:21:9c: 59:06:72:21:c5:b6:bc:1e:5f:77:8a:17:0d:0d:57: fa:15:2f:b4:bc:3f:71:f3:76:8b:1c:d3:d6:2f:d4: 59:c4:b3:c7:79:a6:95:b4:3a:ae:df:2f:71:b3:0f: c6:e7:b3:97:98:a0:a2:d4:a2:1f:8e:de:47:d3:45: cb:28:88:37:c4:b5:d0:93:87:48:f9:31:c3:35:74: 90:0d:4d:48:a1:77:ca:c8:ab:1b:18:9e:6f:78:60: 04:30:cb:db:10:15:f5:ae:63:6d:99:ff:ab:bc:93: 6e:dd:cf:60:fd:9b:60:96:a3:4c:4f:2a:c8:df:a7: 30:e5:62:64:92:28:e1:bd:2b:6e:cc:f8:c1:a4:8c: 3b:d3:23:d8:81:9b:d5:72:9c:a2:ce:38:7f:82:39: e2:33:6d:2c:aa:5d:f1:74:db:c7:cb:04:8e:63:07: 38:f5:ff:cf:2a:7d:44:8e:79:e4:8d:18:fd:eb:02: ed:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C2:0E:65:60:0C:BD:52:F7:64:57:36:A0:CC:0E:96:65:0E:6B:5F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142669.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a013::/32 Signature Algorithm: sha256WithRSAEncryption 35:77:25:29:dc:75:1e:99:a8:1d:06:f2:b3:8a:56:3f:9c:da: 97:93:fe:a1:16:f6:7c:0b:fd:a5:ec:75:c5:2b:c5:d8:56:51: 6f:53:b9:38:82:c3:db:20:b9:eb:a3:26:0f:5e:7a:55:1b:b9: c0:33:76:75:fa:e3:9f:ee:b2:63:1c:b7:2c:58:97:20:90:43: 6d:f6:1b:91:ee:57:7b:c6:a8:44:b6:a4:9d:bc:82:51:81:6c: e0:b1:5f:00:c7:2c:fe:d4:b2:2e:e5:c9:e1:68:25:d5:74:e8: 3f:8e:e1:2a:6e:d0:95:58:d0:7a:ed:06:ae:e5:01:72:a9:ea: fc:6f:b9:be:2e:92:86:b1:da:f7:4c:bf:1f:5d:43:33:5b:17: b7:95:86:05:53:40:71:16:cd:30:69:56:73:89:27:10:71:c5: b5:bc:a6:16:e7:67:5c:b3:0d:a3:c4:37:56:e1:56:56:69:2b: 06:f7:4b:c8:8f:d1:92:a7:b8:d7:e0:ee:71:94:da:de:64:39: 91:09:6c:ea:21:e1:e1:70:cb:bd:c9:7e:19:0b:43:58:fa:dd: c1:c6:a0:6e:0b:f4:33:63:72:2a:89:f0:53:af:23:3d:d0:dd: f8:de:5c:a7:3b:e6:57:97:34:28:89:67:b4:2f:ea:be:22:da: ae:8e:6d:57 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSNOkiVqAyo8K+a4PpO1qtItUqycwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzOVoX DTI3MDMwMzA2MDYzOVowMzExMC8GA1UEAxMoODZDMjBFNjU2MDBDQkQ1MkY3NjQ1 NzM2QTBDQzBFOTY2NTBFNkI1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHEEpAWPcPUxdiDDdqkVz/h9viJ0UKfhzl23v9OMw5YpPvm9/k8Sf/QXchf pZ7Nq0T+DQ0KFtP+zX3xV/2+hgNCxj3jkByagSGcWQZyIcW2vB5fd4oXDQ1X+hUv tLw/cfN2ixzT1i/UWcSzx3mmlbQ6rt8vcbMPxuezl5igotSiH47eR9NFyyiIN8S1 0JOHSPkxwzV0kA1NSKF3ysirGxieb3hgBDDL2xAV9a5jbZn/q7yTbt3PYP2bYJaj TE8qyN+nMOViZJIo4b0rbsz4waSMO9Mj2IGb1XKcos44f4I54jNtLKpd8XTbx8sE jmMHOPX/zyp9RI555I0Y/esC7acCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSGwg5l YAy9UvdkVzagzA6WZQ5rXzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oBMwDQYJKoZIhvcNAQELBQADggEBADV3JSncdR6ZqB0G8rOKVj+c2peT/qEW9nwL /aXsdcUrxdhWUW9TuTiCw9sgueujJg9eelUbucAzdnX645/usmMctyxYlyCQQ232 G5HuV3vGqES2pJ28glGBbOCxXwDHLP7Usi7lyeFoJdV06D+O4Spu0JVY0HrtBq7l AXKp6vxvub4ukoax2vdMvx9dQzNbF7eVhgVTQHEWzTBpVnOJJxBxxbW8phbnZ1yz DaPEN1bhVlZpKwb3S8iP0ZKnuNfg7nGU2t5kOZEJbOoh4eFwy73JfhkLQ1j63cHG oG4L9DNjciqJ8FOvIz3Q3fjeXKc75leXNCiJZ7Qv6r4i2q6ObVc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:43 2026 by rpki-client