$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142685.roa File: AS142685.roa (raw, json) Hash identifier: i1bfutPVp62l8EJL2YDRANP9PGCmGAgffPwUyxvqsPw= Subject key identifier: 77:0A:B4:E7:D6:2E:7E:7E:FD:6A:FF:00:C4:44:E6:D0:7C:5B:AF:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: F962649188A639C6FD5FCB6A03E792584B5088 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142685.roa Signing time: Wed 04 Mar 2026 06:06:25 +0000 ROA not before: Wed 04 Mar 2026 06:01:25 +0000 ROA not after: Wed 03 Mar 2027 06:06:25 +0000 asID: 142685 IP address blocks: 240a:a023::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f9:62:64:91:88:a6:39:c6:fd:5f:cb:6a:03:e7:92:58:4b:50:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:25 2026 GMT Not After : Mar 3 06:06:25 2027 GMT Subject: CN=770AB4E7D62E7E7EFD6AFF00C444E6D07C5BAF31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ea:a1:d3:19:48:f4:8f:3a:ad:f9:6f:25:7b: fd:f6:e4:56:d7:e1:53:c2:8e:49:e5:f9:6b:a5:da: ce:8c:f0:21:c5:97:46:b6:8a:b4:59:80:f6:7e:f6: db:37:40:9a:f0:bf:02:94:79:39:0c:92:fd:fc:a2: b8:db:ec:46:a9:bc:64:3c:4d:c6:93:91:5c:b0:1b: 8c:f6:b2:2c:a8:ce:e8:ca:b1:70:54:d0:a4:cc:c7: d3:ca:6a:76:ad:95:0a:03:ab:3b:aa:f8:ba:f2:c6: f8:ed:43:bd:e2:44:17:c3:3b:7b:dc:30:a5:80:11: f5:c7:2c:24:fc:ea:71:06:23:ad:8d:65:06:64:05: 50:13:67:a4:5c:d6:21:9a:71:c1:d7:e2:8a:2a:97: fe:3f:44:38:aa:cc:83:4d:77:24:de:4b:9b:f3:53: 91:e6:92:98:02:b8:de:59:99:2c:70:a5:98:7e:cc: be:05:ff:cd:14:c4:50:59:3c:e5:c1:f2:f3:39:cd: 4d:97:50:75:ac:96:a2:a5:a8:22:58:8d:d2:b3:bb: 24:a1:d9:dd:66:48:cb:a0:8b:52:d0:1e:61:fc:a2: ad:9c:66:49:b2:9a:c3:12:59:21:f4:6d:ea:cb:70: a8:95:63:91:e4:c3:90:46:07:cd:5a:a3:d4:b5:95: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0A:B4:E7:D6:2E:7E:7E:FD:6A:FF:00:C4:44:E6:D0:7C:5B:AF:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142685.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a023::/32 Signature Algorithm: sha256WithRSAEncryption b5:a1:c3:79:04:af:98:67:54:aa:a3:8d:b1:7a:bc:9f:8c:28: 1f:ea:cb:ad:5c:8c:1b:88:39:fb:d8:1f:09:3b:3b:ed:f2:4e: 7e:c5:b4:9a:cf:f4:e5:52:55:e0:76:aa:a8:30:36:34:70:de: 4b:81:ac:a7:fb:cd:96:2b:73:87:07:17:be:4d:0e:20:92:44: ad:26:64:1c:2e:21:aa:22:d4:d2:cb:37:1b:77:a5:ff:0f:29: 85:b3:62:75:bd:ce:4d:21:a7:6c:9c:09:ad:f1:26:23:b8:69: eb:4b:c2:94:2d:fa:30:97:85:de:1f:43:9b:e1:68:1f:be:0b: de:d8:d1:97:50:9a:bf:2f:e1:f4:b4:3a:4a:27:35:fe:77:e6: 2c:af:30:3c:3b:6e:78:69:2f:68:5f:95:20:17:a0:ed:2d:27: 68:51:c2:59:b1:2c:3d:4a:9b:fc:1b:38:48:b5:2b:8f:a5:1d: c4:3e:62:fc:70:1e:38:ae:b9:d9:c3:b1:60:81:fc:c8:ce:c6: 00:7b:ba:05:9d:ed:b3:9e:14:5b:80:40:a1:90:b5:48:81:d1: 21:2d:7f:bc:17:6e:a6:e1:3d:5a:05:3b:75:90:25:36:15:ae: f0:2b:40:ee:f5:af:cd:5d:fe:e6:d5:38:fa:d5:08:42:ca:40: b0:aa:19:ef -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAPliZJGIpjnG/V/LagPnklhLUIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyNVoX DTI3MDMwMzA2MDYyNVowMzExMC8GA1UEAxMoNzcwQUI0RTdENjJFN0U3RUZENkFG RjAwQzQ0NEU2RDA3QzVCQUYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3qodMZSPSPOq35byV7/fbkVtfhU8KOSeX5a6XazozwIcWXRraKtFmA9n72 2zdAmvC/ApR5OQyS/fyiuNvsRqm8ZDxNxpORXLAbjPayLKjO6MqxcFTQpMzH08pq dq2VCgOrO6r4uvLG+O1DveJEF8M7e9wwpYAR9ccsJPzqcQYjrY1lBmQFUBNnpFzW IZpxwdfiiiqX/j9EOKrMg013JN5Lm/NTkeaSmAK43lmZLHClmH7MvgX/zRTEUFk8 5cHy8znNTZdQdayWoqWoIliN0rO7JKHZ3WZIy6CLUtAeYfyirZxmSbKawxJZIfRt 6stwqJVjkeTDkEYHzVqj1LWVl7cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR3CrTn 1i5+fv1q/wDERObQfFuvMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oCMwDQYJKoZIhvcNAQELBQADggEBALWhw3kEr5hnVKqjjbF6vJ+MKB/qy61cjBuI OfvYHwk7O+3yTn7FtJrP9OVSVeB2qqgwNjRw3kuBrKf7zZYrc4cHF75NDiCSRK0m ZBwuIaoi1NLLNxt3pf8PKYWzYnW9zk0hp2ycCa3xJiO4aetLwpQt+jCXhd4fQ5vh aB++C97Y0ZdQmr8v4fS0OkonNf535iyvMDw7bnhpL2hflSAXoO0tJ2hRwlmxLD1K m/wbOEi1K4+lHcQ+YvxwHjiuudnDsWCB/MjOxgB7ugWd7bOeFFuAQKGQtUiB0SEt f7wXbqbhPVoFO3WQJTYVrvArQO71r81d/ubVOPrVCELKQLCqGe8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:02 2026 by rpki-client