$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142692.roa File: AS142692.roa (raw, json) Hash identifier: Ne+KeeELN4dCxKk6EjqX+j3PtQ7oq9yF3frXbj2eIPw= Subject key identifier: 05:4C:9D:70:09:E8:28:72:2A:2C:7A:2B:24:37:A6:AD:07:EC:14:75 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 062E3081C079D32945147D9515AF2C34449038C8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142692.roa Signing time: Wed 04 Mar 2026 06:07:00 +0000 ROA not before: Wed 04 Mar 2026 06:02:00 +0000 ROA not after: Wed 03 Mar 2027 06:07:00 +0000 asID: 142692 IP address blocks: 240a:a02a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2e:30:81:c0:79:d3:29:45:14:7d:95:15:af:2c:34:44:90:38:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:00 2026 GMT Not After : Mar 3 06:07:00 2027 GMT Subject: CN=054C9D7009E828722A2C7A2B2437A6AD07EC1475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:21:fe:95:c4:fe:84:36:46:55:d5:ce:e3: 2c:c2:08:3f:85:80:c4:41:b6:3d:86:ef:fb:21:cf: 68:8c:40:41:bb:a4:71:d9:9d:8f:b1:12:39:53:48: 87:e4:9a:11:64:ab:ea:97:c9:7c:da:9b:72:37:1f: 27:63:31:92:f8:79:d9:7a:a3:ee:9c:0a:6e:ec:0f: 86:ea:c2:82:1d:d7:e3:bd:64:49:9f:f3:ab:6c:28: 05:ea:e5:48:ce:b3:35:d0:33:75:78:01:01:cb:c3: 68:bb:74:84:84:ec:2d:5b:d7:fd:16:ca:86:5c:c3: 6f:e0:50:60:09:68:6b:30:5e:c3:95:dc:40:df:24: f0:3d:ed:67:c7:2a:98:fc:e0:d0:2d:c0:9f:bb:67: a7:80:0b:1a:aa:e9:12:7e:2b:75:f7:51:86:5b:45: ee:ae:bf:58:9f:65:8f:88:3b:99:6b:08:5c:7d:62: bc:73:14:74:c0:c4:a1:28:dc:fb:9a:17:67:3c:65: 86:0c:eb:60:d0:51:ed:f1:ce:6a:43:d2:cb:4a:b9: 69:dd:82:f3:f6:e7:6d:c1:57:4d:7d:0b:53:05:2d: a6:64:5f:2d:63:0b:ce:14:91:48:4a:b7:7c:ad:cc: c3:85:fe:7d:db:aa:2d:32:6d:7f:1e:53:a0:6d:bc: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4C:9D:70:09:E8:28:72:2A:2C:7A:2B:24:37:A6:AD:07:EC:14:75 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a02a::/32 Signature Algorithm: sha256WithRSAEncryption cc:bf:e6:05:5d:05:94:14:91:4f:d6:a0:97:d0:22:f2:38:45: f7:b6:1e:e1:4b:d3:0a:2f:82:0a:39:2d:82:68:1a:fb:32:6f: 91:67:43:38:ed:d3:d0:ca:fe:84:9c:64:f8:49:99:7a:83:84: 0b:ba:8f:ae:63:5c:67:1c:68:d0:74:5e:43:64:4e:82:05:9c: 64:f8:6d:77:2b:cf:b7:80:fc:ae:87:1f:99:09:17:79:8d:01: c6:0e:06:b4:5f:9d:70:1d:08:53:6e:0a:18:b1:39:15:d8:fd: ca:24:ba:6f:c8:4e:a2:b5:67:44:3c:18:7b:38:42:b7:fb:2d: a9:cb:eb:c0:07:bf:8b:77:0a:9d:78:38:4a:18:85:ba:d8:a8: cc:91:fc:4c:f1:23:42:a7:44:a7:ce:ad:70:6b:90:99:c0:99: 90:ef:f0:2d:01:21:b4:a5:44:29:e4:00:4b:62:73:77:ee:f8: 59:82:55:5b:c2:7f:9c:cf:fa:4d:0f:a6:e2:2b:dd:1b:ba:3e: 75:fb:88:42:a5:8b:6b:f9:01:6d:28:b4:29:f1:0c:ee:ad:12: 20:0a:03:b7:36:8f:18:a8:af:d6:db:90:36:b7:17:7b:02:1d: fd:09:89:0f:15:ee:2f:d1:6d:3a:2c:f5:37:07:c0:fb:c9:8b: 1a:84:c4:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBi4wgcB50ylFFH2VFa8sNESQOMgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwMFoX DTI3MDMwMzA2MDcwMFowMzExMC8GA1UEAxMoMDU0QzlENzAwOUU4Mjg3MjJBMkM3 QTJCMjQzN0E2QUQwN0VDMTQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+rIf6VxP6ENkZV1c7jLMIIP4WAxEG2PYbv+yHPaIxAQbukcdmdj7ESOVNI h+SaEWSr6pfJfNqbcjcfJ2Mxkvh52Xqj7pwKbuwPhurCgh3X471kSZ/zq2woBerl SM6zNdAzdXgBAcvDaLt0hITsLVvX/RbKhlzDb+BQYAloazBew5XcQN8k8D3tZ8cq mPzg0C3An7tnp4ALGqrpEn4rdfdRhltF7q6/WJ9lj4g7mWsIXH1ivHMUdMDEoSjc +5oXZzxlhgzrYNBR7fHOakPSy0q5ad2C8/bnbcFXTX0LUwUtpmRfLWMLzhSRSEq3 fK3Mw4X+fduqLTJtfx5ToG28Hl0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQFTJ1w CegocioseiskN6atB+wUdTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oCowDQYJKoZIhvcNAQELBQADggEBAMy/5gVdBZQUkU/WoJfQIvI4Rfe2HuFL0wov ggo5LYJoGvsyb5FnQzjt09DK/oScZPhJmXqDhAu6j65jXGccaNB0XkNkToIFnGT4 bXcrz7eA/K6HH5kJF3mNAcYOBrRfnXAdCFNuChixORXY/cokum/ITqK1Z0Q8GHs4 Qrf7LanL68AHv4t3Cp14OEoYhbrYqMyR/EzxI0KnRKfOrXBrkJnAmZDv8C0BIbSl RCnkAEtic3fu+FmCVVvCf5zP+k0PpuIr3Ru6PnX7iEKli2v5AW0otCnxDO6tEiAK A7c2jxior9bbkDa3F3sCHf0JiQ8V7i/RbTos9TcHwPvJixqExLg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:39 2026 by rpki-client