$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142671.roa File: AS142671.roa (raw, json) Hash identifier: AwAQkOxGtULSfpU/lZ3ETS8xf+A9dY7EvpyOMHL8ZAc= Subject key identifier: D9:AD:3B:3C:32:F7:AB:58:E6:9B:79:35:4C:E4:44:9C:4F:CA:F6:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E055EADAF562A36AD65D8995F5B16A32955D86C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142671.roa Signing time: Wed 04 Mar 2026 06:06:21 +0000 ROA not before: Wed 04 Mar 2026 06:01:21 +0000 ROA not after: Wed 03 Mar 2027 06:06:21 +0000 asID: 142671 IP address blocks: 240a:a015::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:05:5e:ad:af:56:2a:36:ad:65:d8:99:5f:5b:16:a3:29:55:d8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:21 2026 GMT Not After : Mar 3 06:06:21 2027 GMT Subject: CN=D9AD3B3C32F7AB58E69B79354CE4449C4FCAF6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:4c:c9:5e:72:53:d1:7a:59:5a:95:ea:f6: 86:88:7e:b5:a5:bf:3a:d3:a3:66:f0:b3:88:02:a5: 31:2c:18:ab:15:e6:dc:ba:b2:1d:52:ee:05:37:c5: 5b:73:29:8a:b3:dc:39:f3:48:86:b2:43:63:26:86: cf:e5:fe:af:3d:78:9a:a7:11:57:8e:cd:9d:b0:0c: 45:9d:fa:cf:28:f8:03:cf:f1:c8:ee:00:ac:78:65: 5e:76:a0:2f:4d:36:02:22:c4:56:24:19:45:08:6b: 59:f1:94:c3:48:e4:e5:cb:20:64:64:eb:00:7d:27: f0:0c:ee:75:4b:2d:93:bc:bc:74:fc:f2:02:c0:a7: 59:df:5d:91:5c:ff:f3:40:b6:7e:aa:38:30:81:56: d6:6f:51:76:3b:c0:5b:b8:4a:67:e2:18:ba:db:cb: a1:b3:4b:72:6f:ee:d4:29:84:8f:d8:73:59:89:3a: 23:85:f5:ba:44:6e:42:05:a3:f8:7c:ce:3d:c1:4e: 75:ff:48:29:8a:0a:2c:a2:ee:3f:ed:10:28:a3:a4: 8e:71:c9:95:f2:0d:b9:c1:44:c8:a5:72:ea:77:af: 0e:0f:e1:ac:6a:94:27:ea:2b:5f:06:9d:6c:5d:35: cb:97:c6:f7:a3:04:90:73:21:7f:3c:73:d1:74:ff: d6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AD:3B:3C:32:F7:AB:58:E6:9B:79:35:4C:E4:44:9C:4F:CA:F6:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142671.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a015::/32 Signature Algorithm: sha256WithRSAEncryption bf:c8:08:fa:7d:7f:71:39:89:dc:ca:77:89:19:5b:33:a4:ea: 41:59:8f:aa:a2:a7:26:7a:f9:4a:7d:bf:a7:dd:f3:07:92:9d: 5e:6a:a4:6b:c1:76:f1:e5:13:6e:ea:ba:61:ec:7b:fa:1d:32: b3:78:d0:10:c4:9b:f6:a5:13:c8:f9:60:a4:04:f8:05:5e:26: ca:40:a5:63:3a:8d:54:10:a0:4a:45:2e:25:de:2c:c0:64:10: 9a:fd:a5:f4:4a:ef:61:8f:d9:75:28:6a:14:e7:75:2e:2c:bb: 4a:be:ad:2d:2a:3b:35:c8:49:ff:c3:34:49:14:0b:df:a6:ef: 03:62:cc:a2:05:c2:38:a0:b3:4d:a9:92:f0:23:c7:3e:bd:52: 57:db:32:77:b4:d4:1d:d2:65:37:58:15:9a:80:fd:ac:a8:09: e9:ff:79:fd:f4:d0:b9:84:40:8b:5c:14:e1:f0:9d:71:5f:33: 72:c1:60:ce:f0:6b:d2:89:35:fd:dc:a8:06:33:b0:e7:5b:fb: c5:a1:65:47:cf:d4:f8:3a:a9:38:63:33:85:21:be:59:26:84: 39:62:f6:7b:b9:82:56:b0:f0:5d:fd:d8:3f:45:02:20:43:5a: d6:69:43:9a:b3:6f:cf:3d:1b:45:34:0e:e0:07:53:31:80:21: 74:55:00:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULgVera9WKjatZdiZX1sWoylV2GwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyMVoX DTI3MDMwMzA2MDYyMVowMzExMC8GA1UEAxMoRDlBRDNCM0MzMkY3QUI1OEU2OUI3 OTM1NENFNDQ0OUM0RkNBRjZBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9qTMleclPRellaler2hoh+taW/OtOjZvCziAKlMSwYqxXm3LqyHVLuBTfF W3MpirPcOfNIhrJDYyaGz+X+rz14mqcRV47NnbAMRZ36zyj4A8/xyO4ArHhlXnag L002AiLEViQZRQhrWfGUw0jk5csgZGTrAH0n8AzudUstk7y8dPzyAsCnWd9dkVz/ 80C2fqo4MIFW1m9RdjvAW7hKZ+IYutvLobNLcm/u1CmEj9hzWYk6I4X1ukRuQgWj +HzOPcFOdf9IKYoKLKLuP+0QKKOkjnHJlfINucFEyKVy6nevDg/hrGqUJ+orXwad bF01y5fG96MEkHMhfzxz0XT/1vMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTZrTs8 MverWOabeTVM5EScT8r2ozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oBUwDQYJKoZIhvcNAQELBQADggEBAL/ICPp9f3E5idzKd4kZWzOk6kFZj6qipyZ6 +Up9v6fd8weSnV5qpGvBdvHlE27qumHse/odMrN40BDEm/alE8j5YKQE+AVeJspA pWM6jVQQoEpFLiXeLMBkEJr9pfRK72GP2XUoahTndS4su0q+rS0qOzXISf/DNEkU C9+m7wNizKIFwjigs02pkvAjxz69UlfbMne01B3SZTdYFZqA/ayoCen/ef300LmE QItcFOHwnXFfM3LBYM7wa9KJNf3cqAYzsOdb+8WhZUfP1Pg6qThjM4UhvlkmhDli 9nu5glaw8F392D9FAiBDWtZpQ5qzb889G0U0DuAHUzGAIXRVAEU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:37 2026 by rpki-client