$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142670.roa File: AS142670.roa (raw, json) Hash identifier: uA14K7Y8s3loSOBeVorCeSqvsVWJU7Qxh16BjbJs2ns= Subject key identifier: 5D:59:28:EF:1D:56:07:22:58:21:D9:D7:78:55:D5:D0:69:89:AA:8F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6BDB44277EE7F9E97B3B4977ECA32874068EB821 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142670.roa Signing time: Wed 04 Mar 2026 06:05:10 +0000 ROA not before: Wed 04 Mar 2026 06:00:10 +0000 ROA not after: Wed 03 Mar 2027 06:05:10 +0000 asID: 142670 IP address blocks: 240a:a014::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:db:44:27:7e:e7:f9:e9:7b:3b:49:77:ec:a3:28:74:06:8e:b8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:10 2026 GMT Not After : Mar 3 06:05:10 2027 GMT Subject: CN=5D5928EF1D5607225821D9D77855D5D06989AA8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:67:03:e0:57:ea:bb:71:ec:2e:7a:80:a3: 13:ef:f1:61:5d:d1:c1:f6:85:22:78:28:86:09:62: bc:f1:5c:46:0d:26:fc:6d:c8:99:bf:8e:6e:5f:7a: 17:9e:f8:8b:16:24:42:e4:66:9e:9b:9d:d2:4e:e3: 33:77:9b:2c:f4:a1:a1:de:24:3e:4b:b9:47:ae:a6: 3e:15:10:08:76:e4:6b:dc:1f:41:57:61:e9:2e:d2: 79:8e:81:92:39:d6:53:ab:50:27:a2:4c:88:3f:31: f7:57:83:dc:75:8d:c4:13:49:bb:b0:13:ce:71:2d: 92:63:ec:4f:4c:db:c4:84:df:11:0c:1f:67:cb:7c: cc:8b:86:46:e1:ba:8e:b2:fa:15:84:bf:00:4a:fc: f6:47:10:ec:97:84:5c:f5:10:07:61:51:2c:d0:30: 46:70:f9:6e:ae:eb:21:06:1a:8d:b9:6a:4a:d2:fc: 02:7e:f2:69:90:3e:3d:6f:43:91:49:b1:2a:d0:a6: fb:9e:c6:6d:7f:4b:1d:5e:23:29:58:f2:6d:9f:96: fb:dc:67:dc:00:87:dc:09:f8:70:05:ca:4d:4b:59: 5a:2a:6a:15:c3:b3:a0:6a:0b:8e:11:64:db:8a:52: 35:6b:50:a7:e6:f2:ea:4a:a2:a3:41:4b:dc:9e:44: 73:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:59:28:EF:1D:56:07:22:58:21:D9:D7:78:55:D5:D0:69:89:AA:8F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142670.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a014::/32 Signature Algorithm: sha256WithRSAEncryption 9d:77:a5:80:66:4c:6e:17:7e:1f:74:e8:29:ec:6b:1c:4d:f7: 8b:9a:01:41:5f:ea:57:12:5b:7a:16:db:37:b8:20:a2:2f:12: 9b:5a:1f:0d:c6:3b:07:34:ef:15:dd:28:98:f7:87:d3:fb:55: f8:a0:1a:43:0e:c0:ff:30:ac:a9:b8:9b:f2:81:ed:54:67:bf: 24:c2:30:5c:e7:95:84:f2:7d:c0:d8:c7:06:30:26:64:b0:94: 4b:ff:bc:24:49:c4:fc:7b:da:79:a7:55:82:f4:89:4d:e1:a9: bf:0c:c5:2a:0b:36:97:44:9d:5f:85:fa:e8:62:59:38:8c:05: 77:26:c9:12:5d:f4:ea:e5:09:f9:96:30:c6:4c:63:bb:a7:c8: f0:b6:58:8b:b9:a1:85:38:bf:13:d9:8b:31:a9:60:dd:db:24: 56:ab:a1:3f:dd:b2:ea:eb:66:98:10:e3:0d:5c:f9:d1:c6:20: 39:c7:37:8c:b1:80:d3:6d:3f:1b:29:3a:15:84:70:0e:3d:9c: bd:c4:0c:3f:7a:f1:b8:72:36:a4:13:f3:c2:39:03:0c:20:d4: 85:d9:c0:71:16:c9:0d:16:16:31:70:1a:0a:2e:a8:17:7c:e9: 77:da:4f:5b:bd:87:9d:44:57:45:8a:0f:8f:38:48:24:60:9a: 2a:67:78:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa9tEJ37n+el7O0l37KModAaOuCEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxMFoX DTI3MDMwMzA2MDUxMFowMzExMC8GA1UEAxMoNUQ1OTI4RUYxRDU2MDcyMjU4MjFE OUQ3Nzg1NUQ1RDA2OTg5QUE4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkeZwPgV+q7cewueoCjE+/xYV3RwfaFIngohglivPFcRg0m/G3Imb+Obl96 F574ixYkQuRmnpud0k7jM3ebLPShod4kPku5R66mPhUQCHbka9wfQVdh6S7SeY6B kjnWU6tQJ6JMiD8x91eD3HWNxBNJu7ATznEtkmPsT0zbxITfEQwfZ8t8zIuGRuG6 jrL6FYS/AEr89kcQ7JeEXPUQB2FRLNAwRnD5bq7rIQYajblqStL8An7yaZA+PW9D kUmxKtCm+57GbX9LHV4jKVjybZ+W+9xn3ACH3An4cAXKTUtZWipqFcOzoGoLjhFk 24pSNWtQp+by6kqio0FL3J5EcykCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRdWSjv HVYHIlgh2dd4VdXQaYmqjzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oBQwDQYJKoZIhvcNAQELBQADggEBAJ13pYBmTG4Xfh906CnsaxxN94uaAUFf6lcS W3oW2ze4IKIvEptaHw3GOwc07xXdKJj3h9P7VfigGkMOwP8wrKm4m/KB7VRnvyTC MFznlYTyfcDYxwYwJmSwlEv/vCRJxPx72nmnVYL0iU3hqb8MxSoLNpdEnV+F+uhi WTiMBXcmyRJd9OrlCfmWMMZMY7unyPC2WIu5oYU4vxPZizGpYN3bJFaroT/dsurr ZpgQ4w1c+dHGIDnHN4yxgNNtPxspOhWEcA49nL3EDD968bhyNqQT88I5Awwg1IXZ wHEWyQ0WFjFwGgouqBd86XfaT1u9h51EV0WKD484SCRgmipnePI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:06 2026 by rpki-client