$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142673.roa File: AS142673.roa (raw, json) Hash identifier: oDEn3voL55xccGIGfAaasOQ+8jzNDrvi8in+agvcAuM= Subject key identifier: DF:E2:64:01:BC:A7:A3:18:28:E6:A7:D5:41:2B:FF:A4:A0:D1:49:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6BC7ECBBE8A1CE665695661819BAA38A2DA4686E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142673.roa Signing time: Wed 04 Mar 2026 06:06:56 +0000 ROA not before: Wed 04 Mar 2026 06:01:56 +0000 ROA not after: Wed 03 Mar 2027 06:06:56 +0000 asID: 142673 IP address blocks: 240a:a017::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c7:ec:bb:e8:a1:ce:66:56:95:66:18:19:ba:a3:8a:2d:a4:68:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:56 2026 GMT Not After : Mar 3 06:06:56 2027 GMT Subject: CN=DFE26401BCA7A31828E6A7D5412BFFA4A0D14931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:da:1e:27:b8:68:56:9a:8d:a1:90:b3:5f: 12:78:9b:04:ef:77:c5:40:4e:a5:f4:54:f2:fc:cf: 8d:95:79:07:f0:e4:b0:07:d4:84:7a:36:37:f1:92: 5f:db:64:ff:8e:c1:5a:c2:c8:ea:59:bf:06:11:53: 6d:62:18:db:ad:0d:71:03:ad:0c:04:dd:1d:e3:13: 11:54:0f:40:cc:e9:dd:f5:f1:52:ff:5d:fd:a0:3c: 63:1d:99:6d:59:c7:1c:79:77:a3:64:5f:1b:e0:ff: 2b:b9:b7:81:bb:1e:e7:1b:7e:1b:4f:be:3a:44:ad: 5e:ef:05:1d:46:61:f8:61:0d:3c:64:5f:a5:e7:36: a2:f6:54:ec:20:e9:1b:5e:fb:d9:9a:67:e8:39:7d: b8:c0:0d:24:bb:3d:fb:eb:87:d1:43:65:da:1a:f4: ea:c3:65:9b:9f:74:23:25:1a:0f:4b:2e:f3:80:01: 3f:ce:ae:c6:6d:e1:20:b2:3d:09:71:df:c3:ab:f9: 6a:99:56:2b:c5:29:5b:4b:b7:b2:af:50:d1:dc:7a: b6:01:ad:2c:a9:20:ce:db:5b:68:33:fd:00:d3:27: 4b:51:d2:79:9d:7d:5f:e7:07:a3:ab:77:d9:6a:da: 2f:e4:31:bc:7f:ea:7e:09:65:4d:b7:77:f3:90:15: 5d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E2:64:01:BC:A7:A3:18:28:E6:A7:D5:41:2B:FF:A4:A0:D1:49:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142673.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a017::/32 Signature Algorithm: sha256WithRSAEncryption 4e:90:58:64:8e:02:c0:a9:1e:63:4b:07:f6:c8:91:20:51:62: 7b:ba:a1:7d:a3:12:e7:d2:73:3e:ae:5d:76:a2:b9:35:0a:ea: 5b:c3:6e:74:14:47:99:d3:a5:57:5a:89:b7:a7:67:a5:20:7f: 6f:90:72:f8:fe:40:23:1f:bd:1e:63:c1:5b:4c:c8:9c:ec:d6: 33:61:39:21:3d:5e:a2:31:89:a4:6a:28:32:06:7a:ee:0f:8b: e0:ee:b2:2b:c4:41:1c:3e:0a:f3:65:97:cc:82:5a:a8:93:37: 1a:5c:45:48:f3:05:a9:25:c7:86:4d:10:2f:85:f1:3a:8f:86: ed:d2:49:e7:93:15:62:ba:20:3c:ac:9f:21:22:d3:f8:89:f8: 1c:5a:41:b7:ab:d3:e4:e1:56:82:13:0f:5e:95:36:5f:79:64: 47:b8:1d:26:08:db:19:1e:6e:5e:69:7b:31:c5:46:44:f5:5f: e5:d2:ea:9d:79:44:3e:9a:1d:1b:5c:b6:a6:5f:b6:de:61:a4: 37:e9:bc:ad:42:4d:91:1f:c4:fc:42:e5:3a:e4:f1:34:1a:1d: 56:d2:18:1d:43:25:2c:74:1c:7e:5b:77:8b:2c:e9:2e:29:39: e5:a1:55:74:c8:72:5c:86:fe:62:02:20:df:3d:e8:c6:31:0f: be:28:d6:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa8fsu+ihzmZWlWYYGbqjii2kaG4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1NloX DTI3MDMwMzA2MDY1NlowMzExMC8GA1UEAxMoREZFMjY0MDFCQ0E3QTMxODI4RTZB N0Q1NDEyQkZGQTRBMEQxNDkzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5U2h4nuGhWmo2hkLNfEnibBO93xUBOpfRU8vzPjZV5B/DksAfUhHo2N/GS X9tk/47BWsLI6lm/BhFTbWIY260NcQOtDATdHeMTEVQPQMzp3fXxUv9d/aA8Yx2Z bVnHHHl3o2RfG+D/K7m3gbse5xt+G0++OkStXu8FHUZh+GENPGRfpec2ovZU7CDp G1772Zpn6Dl9uMANJLs9++uH0UNl2hr06sNlm590IyUaD0su84ABP86uxm3hILI9 CXHfw6v5aplWK8UpW0u3sq9Q0dx6tgGtLKkgzttbaDP9ANMnS1HSeZ19X+cHo6t3 2WraL+QxvH/qfgllTbd385AVXZMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTf4mQB vKejGCjmp9VBK/+koNFJMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oBcwDQYJKoZIhvcNAQELBQADggEBAE6QWGSOAsCpHmNLB/bIkSBRYnu6oX2jEufS cz6uXXaiuTUK6lvDbnQUR5nTpVdaibenZ6Ugf2+Qcvj+QCMfvR5jwVtMyJzs1jNh OSE9XqIxiaRqKDIGeu4Pi+DusivEQRw+CvNll8yCWqiTNxpcRUjzBaklx4ZNEC+F 8TqPhu3SSeeTFWK6IDysnyEi0/iJ+BxaQber0+ThVoITD16VNl95ZEe4HSYI2xke bl5pezHFRkT1X+XS6p15RD6aHRtctqZftt5hpDfpvK1CTZEfxPxC5Trk8TQaHVbS GB1DJSx0HH5bd4ss6S4pOeWhVXTIclyG/mICIN896MYxD74o1oA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:37 2026 by rpki-client