$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142695.roa File: AS142695.roa (raw, json) Hash identifier: jEeXKxgR0VCef58Mxhvg90aK9GwZAFsF7kV0m0yUKw8= Subject key identifier: CA:4C:97:3B:33:6C:4E:F1:78:8B:4B:A5:00:05:7E:17:B2:46:79:60 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 34174A936D85CBA3838FCAFEF5E1B221A996B0EF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142695.roa Signing time: Wed 04 Mar 2026 06:07:18 +0000 ROA not before: Wed 04 Mar 2026 06:02:18 +0000 ROA not after: Wed 03 Mar 2027 06:07:18 +0000 asID: 142695 IP address blocks: 240a:a02d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:17:4a:93:6d:85:cb:a3:83:8f:ca:fe:f5:e1:b2:21:a9:96:b0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:18 2026 GMT Not After : Mar 3 06:07:18 2027 GMT Subject: CN=CA4C973B336C4EF1788B4BA500057E17B2467960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:2d:f6:69:15:9e:f7:f7:1e:bd:5e:b1:ab: 06:15:1d:3f:74:aa:1b:33:b1:ec:81:d6:c3:1d:30: 25:c3:ce:48:33:92:c2:9a:ee:24:2c:f4:58:3a:e9: 8a:71:28:1e:94:dc:6c:0d:d8:e1:86:ac:d6:1b:07: a6:71:cf:d9:86:bf:6e:43:8c:08:a3:80:89:59:9a: 92:a6:11:c5:15:2b:97:3e:30:1f:49:fd:d1:6e:fc: 84:8f:f8:13:a6:c7:db:f9:8a:3e:ec:a7:bf:83:08: d5:cb:f2:92:81:30:25:d1:71:79:81:5b:0d:7b:ba: f5:df:65:7a:9e:fa:c2:24:52:7c:0c:2e:71:c8:1b: 38:f3:e2:8a:88:a3:1d:f2:b7:66:d2:3c:40:e1:a8: 70:15:7c:03:92:12:99:48:cb:39:bc:08:77:61:e0: 2f:c4:10:7e:87:b6:8a:52:c5:c1:a2:68:53:54:13: 42:67:a5:3f:84:9f:a1:a3:2f:1f:44:77:4a:91:20: 4f:55:a3:fb:c8:0f:53:6c:8c:f6:5a:31:69:d3:b2: 00:b6:b0:6a:d9:39:f0:74:0a:f2:fc:9a:55:a0:57: 9f:28:29:ba:90:f8:d8:69:ba:cb:f8:a1:09:0f:c7: 3a:08:06:89:24:52:ff:b0:25:dc:3e:23:63:4c:c8: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4C:97:3B:33:6C:4E:F1:78:8B:4B:A5:00:05:7E:17:B2:46:79:60 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142695.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a02d::/32 Signature Algorithm: sha256WithRSAEncryption db:de:4a:23:96:30:41:5d:5f:9d:7b:a2:a9:ec:67:a0:6c:63: 61:40:65:19:26:b9:5c:ab:a5:5d:a6:12:d8:80:6e:94:f9:5f: 18:cc:1b:2e:55:cd:53:f5:11:55:47:4e:bd:7e:a8:07:76:1c: 33:8f:d3:e4:46:72:82:d3:fe:c6:8c:7e:47:b7:65:81:6d:cd: 63:29:09:f9:f0:04:32:f0:25:0f:70:7d:c2:19:eb:68:e9:21: d6:e9:33:eb:55:ba:fd:8e:0f:82:4c:6e:27:46:d1:d8:5c:7b: 0f:ec:e7:55:8d:b4:2f:8d:fa:6f:e5:dc:da:b9:d2:b1:a2:d8: fd:b7:81:a7:26:77:99:11:58:83:3e:59:08:9a:43:a7:33:46: 84:a2:7e:63:3b:83:3b:d9:81:90:ff:2a:9d:18:30:80:9f:8c: 52:7a:da:ca:12:6b:f5:b2:5c:b7:16:c9:8c:d2:97:83:e0:88: 3e:f1:f3:45:66:1a:97:07:b0:eb:aa:74:d0:6f:d2:9c:41:b0: 90:aa:44:2d:ec:b5:2d:8a:8a:aa:19:6e:a0:e7:a4:d7:f9:bd: c1:c1:87:66:55:b1:be:fb:b1:69:f5:24:06:f2:57:56:8c:8b: 2f:a8:ad:f7:66:7c:94:8e:18:d2:20:3c:b1:aa:fa:90:e8:3b: c0:06:c9:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNBdKk22Fy6ODj8r+9eGyIamWsO8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxOFoX DTI3MDMwMzA2MDcxOFowMzExMC8GA1UEAxMoQ0E0Qzk3M0IzMzZDNEVGMTc4OEI0 QkE1MDAwNTdFMTdCMjQ2Nzk2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMmLfZpFZ739x69XrGrBhUdP3SqGzOx7IHWwx0wJcPOSDOSwpruJCz0WDrp inEoHpTcbA3Y4Yas1hsHpnHP2Ya/bkOMCKOAiVmakqYRxRUrlz4wH0n90W78hI/4 E6bH2/mKPuynv4MI1cvykoEwJdFxeYFbDXu69d9lep76wiRSfAwuccgbOPPiioij HfK3ZtI8QOGocBV8A5ISmUjLObwId2HgL8QQfoe2ilLFwaJoU1QTQmelP4SfoaMv H0R3SpEgT1Wj+8gPU2yM9loxadOyALawatk58HQK8vyaVaBXnygpupD42Gm6y/ih CQ/HOggGiSRS/7Al3D4jY0zImBMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTKTJc7 M2xO8XiLS6UABX4XskZ5YDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oC0wDQYJKoZIhvcNAQELBQADggEBANveSiOWMEFdX517oqnsZ6BsY2FAZRkmuVyr pV2mEtiAbpT5XxjMGy5VzVP1EVVHTr1+qAd2HDOP0+RGcoLT/saMfke3ZYFtzWMp CfnwBDLwJQ9wfcIZ62jpIdbpM+tVuv2OD4JMbidG0dhcew/s51WNtC+N+m/l3Nq5 0rGi2P23gacmd5kRWIM+WQiaQ6czRoSifmM7gzvZgZD/Kp0YMICfjFJ62soSa/Wy XLcWyYzSl4PgiD7x80VmGpcHsOuqdNBv0pxBsJCqRC3stS2KiqoZbqDnpNf5vcHB h2ZVsb77sWn1JAbyV1aMiy+orfdmfJSOGNIgPLGq+pDoO8AGyXs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:38 2026 by rpki-client