$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142684.roa File: AS142684.roa (raw, json) Hash identifier: WBOEPPCApvGT7hwfUizAP6TENxZo2F3xYZmEg8MrH1Q= Subject key identifier: 66:2A:E2:B5:CD:19:5B:51:19:B8:DD:FE:D9:02:E8:E8:4A:94:09:56 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6BA451B6BE0429D3545AC751913F5072A40A1CA7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142684.roa Signing time: Wed 04 Mar 2026 06:07:35 +0000 ROA not before: Wed 04 Mar 2026 06:02:35 +0000 ROA not after: Wed 03 Mar 2027 06:07:35 +0000 asID: 142684 IP address blocks: 240a:a022::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a4:51:b6:be:04:29:d3:54:5a:c7:51:91:3f:50:72:a4:0a:1c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:35 2026 GMT Not After : Mar 3 06:07:35 2027 GMT Subject: CN=662AE2B5CD195B5119B8DDFED902E8E84A940956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:d5:07:84:e2:10:e7:7e:62:13:d1:cf:29: d7:91:61:9e:8b:77:38:3e:de:4e:c5:32:1e:01:b4: a0:c3:31:bb:78:dc:6e:f3:d5:11:15:b7:fd:9f:15: 8a:75:45:bd:02:68:36:2d:05:1d:a7:a9:65:37:97: 03:42:8c:ae:44:0c:68:80:83:62:f2:8d:d6:62:aa: e1:62:e8:4a:67:a0:5d:79:dd:d0:39:97:2d:26:3b: 1e:81:2e:8f:60:b0:3d:79:06:e6:7d:bd:d9:64:ce: 84:11:63:fd:b7:94:21:0f:60:3a:78:5b:3b:80:c2: 9d:9d:e9:c7:74:a8:70:1a:08:ce:49:0e:79:0d:7a: b3:a4:56:b9:0d:ef:e9:58:a4:ab:1e:ab:a5:02:45: d9:50:11:8e:8c:c2:b8:5f:9d:65:81:55:c8:b3:ea: bf:b9:fa:26:79:82:9b:ba:4a:29:fc:20:45:3d:91: e7:50:e7:1e:e9:b2:fe:3f:6c:66:42:90:67:d3:de: 72:26:ae:a0:4f:70:1e:f9:e9:61:d2:e5:8d:b7:8c: 6d:cc:3a:4b:f5:f8:ef:72:f5:35:51:5a:5d:e4:8d: dc:f0:50:61:6a:f5:4a:45:93:54:38:5c:eb:54:9d: 9a:4f:f7:86:6d:68:75:37:87:53:ee:54:01:e9:44: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2A:E2:B5:CD:19:5B:51:19:B8:DD:FE:D9:02:E8:E8:4A:94:09:56 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142684.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a022::/32 Signature Algorithm: sha256WithRSAEncryption cf:9f:a8:42:a4:10:fc:31:65:93:ac:a5:63:6a:31:c1:b1:6a: 0b:de:c2:2e:be:04:74:33:f9:4d:c3:83:0e:29:c1:22:7e:51: 8b:0a:63:84:ef:f8:e3:43:c7:27:b9:00:0b:75:22:e8:ce:8e: b9:ef:60:8a:bb:ee:da:bd:bf:5d:32:2e:42:05:bb:c7:41:03: 98:75:9c:d1:47:05:ab:ce:e7:47:98:40:23:fd:53:cb:0a:e0: b6:b5:6c:ce:0b:a1:b8:54:ed:92:a8:4d:23:14:b2:9e:cc:d1: 17:04:87:d5:6a:3d:3b:d6:5f:ee:07:9a:a1:70:03:c6:89:11: 72:6c:02:f1:29:5b:49:66:cf:26:62:2a:52:19:c7:ec:e6:60: f9:11:fc:91:dc:72:d1:ac:a2:3d:d3:2a:fd:5b:37:03:b2:0e: 19:6c:f0:9c:51:e1:cc:38:96:b9:24:5d:1c:7d:aa:4d:5f:79: 5f:90:2e:bf:11:f8:89:5a:38:99:ea:32:c0:fe:4c:d2:72:40: e1:14:7f:46:1f:74:45:b8:4c:c4:43:5e:b1:d1:8e:7e:e9:6b: 05:d5:3d:ac:81:2c:ec:b2:37:50:00:a1:19:a6:ac:9a:dd:89: 41:06:5e:19:81:90:59:c2:a7:17:01:8b:79:d0:76:ec:bc:b4: 04:7c:fb:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa6RRtr4EKdNUWsdRkT9QcqQKHKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzNVoX DTI3MDMwMzA2MDczNVowMzExMC8GA1UEAxMoNjYyQUUyQjVDRDE5NUI1MTE5QjhE REZFRDkwMkU4RTg0QTk0MDk1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRS1QeE4hDnfmIT0c8p15Fhnot3OD7eTsUyHgG0oMMxu3jcbvPVERW3/Z8V inVFvQJoNi0FHaepZTeXA0KMrkQMaICDYvKN1mKq4WLoSmegXXnd0DmXLSY7HoEu j2CwPXkG5n292WTOhBFj/beUIQ9gOnhbO4DCnZ3px3SocBoIzkkOeQ16s6RWuQ3v 6Vikqx6rpQJF2VARjozCuF+dZYFVyLPqv7n6JnmCm7pKKfwgRT2R51DnHumy/j9s ZkKQZ9PeciauoE9wHvnpYdLljbeMbcw6S/X473L1NVFaXeSN3PBQYWr1SkWTVDhc 61Sdmk/3hm1odTeHU+5UAelEhI0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRmKuK1 zRlbURm43f7ZAujoSpQJVjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oCIwDQYJKoZIhvcNAQELBQADggEBAM+fqEKkEPwxZZOspWNqMcGxagvewi6+BHQz +U3Dgw4pwSJ+UYsKY4Tv+ONDxye5AAt1IujOjrnvYIq77tq9v10yLkIFu8dBA5h1 nNFHBavO50eYQCP9U8sK4La1bM4LobhU7ZKoTSMUsp7M0RcEh9VqPTvWX+4HmqFw A8aJEXJsAvEpW0lmzyZiKlIZx+zmYPkR/JHcctGsoj3TKv1bNwOyDhls8JxR4cw4 lrkkXRx9qk1feV+QLr8R+IlaOJnqMsD+TNJyQOEUf0YfdEW4TMRDXrHRjn7pawXV PayBLOyyN1AAoRmmrJrdiUEGXhmBkFnCpxcBi3nQduy8tAR8+00= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:05 2026 by rpki-client