$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142697.roa File: AS142697.roa (raw, json) Hash identifier: /e2CXfPCY7b2bkg95H3tZi2lRA7dR2jy4GDppG2XD/8= Subject key identifier: E6:28:31:9C:67:7F:7F:86:E5:B8:26:D1:A6:5F:7D:94:97:34:FA:88 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51378A50E795594454CC96596C3E71E44A41C4CF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142697.roa Signing time: Wed 04 Mar 2026 06:05:09 +0000 ROA not before: Wed 04 Mar 2026 06:00:09 +0000 ROA not after: Wed 03 Mar 2027 06:05:09 +0000 asID: 142697 IP address blocks: 240a:a02f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:37:8a:50:e7:95:59:44:54:cc:96:59:6c:3e:71:e4:4a:41:c4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:09 2026 GMT Not After : Mar 3 06:05:09 2027 GMT Subject: CN=E628319C677F7F86E5B826D1A65F7D949734FA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:9a:d9:87:80:8a:bb:60:35:53:05:9c:66: bd:ab:a3:90:f9:85:fd:61:3c:ae:8b:71:9f:b6:c9: 47:ef:83:23:9e:4a:12:24:4a:10:f9:4f:01:b0:87: 7e:1d:0d:fc:a2:8b:83:51:2b:b8:d8:53:f1:cd:1c: 22:59:80:c9:70:47:53:fd:df:c1:2d:2f:b3:9a:24: 57:36:60:8b:92:5b:01:8c:f0:1c:9a:d6:ac:ae:36: d4:36:e7:0c:65:f0:75:14:39:02:1a:5b:f2:54:49: 49:84:94:32:b6:9d:87:c4:fe:e2:fe:28:d1:8f:b2: 70:d8:e7:d1:3d:7e:fc:45:18:85:19:14:7a:a8:dd: e2:72:0f:c2:83:44:9e:12:52:d9:e0:45:88:4c:83: 66:ce:8f:e6:b9:ed:2c:da:bb:01:4f:5b:e0:46:db: 88:fa:18:8f:50:23:5a:99:7e:2a:e9:52:58:48:41: b3:97:bc:fa:24:38:fd:2c:a3:2a:c3:ca:79:99:f9: af:8b:0a:af:cf:14:e3:69:8f:78:ee:47:45:4a:c4: de:ba:ef:9a:8f:6b:2c:16:54:c5:02:83:fe:ea:88: 48:5c:9f:8a:fd:bd:ae:30:3c:1f:d0:ce:cb:4a:30: 39:6d:6f:3a:8b:d4:a3:40:c5:b1:22:d5:3b:7b:bc: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:28:31:9C:67:7F:7F:86:E5:B8:26:D1:A6:5F:7D:94:97:34:FA:88 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142697.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a02f::/32 Signature Algorithm: sha256WithRSAEncryption 07:76:a3:b2:01:ed:36:bf:8c:20:af:cc:9d:15:59:73:46:09: dd:86:4b:c4:65:f4:26:d0:75:58:82:77:d3:d1:10:bf:b3:e2: 80:b8:ba:4f:93:b6:da:13:be:1b:1d:8e:72:ec:56:64:27:c6: a9:57:45:ae:ce:cd:77:6e:a0:a7:7e:d1:d6:ae:26:db:e3:ec: 5e:73:9e:87:5b:64:46:51:be:fd:e8:73:45:8b:d2:44:3d:f6: 69:d9:fc:f4:35:06:88:98:2c:5e:ca:28:79:0a:ae:da:96:dc: 22:e1:fa:80:ac:9c:63:3d:6e:89:8f:e4:3c:c5:7c:fc:05:5e: 25:26:ca:50:25:f5:dd:23:a3:e3:17:22:26:bd:71:a3:87:3d: ce:1d:39:a9:d3:f6:f2:6e:50:6a:65:c5:80:47:9c:86:f7:5f: e9:19:ce:c9:68:c4:54:e7:a5:a8:d6:30:af:56:b0:de:7b:69: f4:40:fc:f3:73:09:ce:a5:2c:37:a6:7e:e2:84:38:63:4e:04: 27:03:44:8a:7f:37:61:25:f5:ca:31:26:98:ff:4b:5a:30:07: 72:d1:30:07:b0:55:ba:7b:be:be:7c:b8:1a:c9:fe:43:58:2c: 34:66:90:a9:dc:80:62:cd:64:cd:11:b8:c1:75:da:0c:91:13: 90:90:64:e5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUTeKUOeVWURUzJZZbD5x5EpBxM8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAwOVoX DTI3MDMwMzA2MDUwOVowMzExMC8GA1UEAxMoRTYyODMxOUM2NzdGN0Y4NkU1Qjgy NkQxQTY1RjdEOTQ5NzM0RkE4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFfmtmHgIq7YDVTBZxmvaujkPmF/WE8rotxn7bJR++DI55KEiRKEPlPAbCH fh0N/KKLg1EruNhT8c0cIlmAyXBHU/3fwS0vs5okVzZgi5JbAYzwHJrWrK421Dbn DGXwdRQ5Ahpb8lRJSYSUMradh8T+4v4o0Y+ycNjn0T1+/EUYhRkUeqjd4nIPwoNE nhJS2eBFiEyDZs6P5rntLNq7AU9b4EbbiPoYj1AjWpl+KulSWEhBs5e8+iQ4/Syj KsPKeZn5r4sKr88U42mPeO5HRUrE3rrvmo9rLBZUxQKD/uqISFyfiv29rjA8H9DO y0owOW1vOovUo0DFsSLVO3u8KTUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTmKDGc Z39/huW4JtGmX32UlzT6iDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjY5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oC8wDQYJKoZIhvcNAQELBQADggEBAAd2o7IB7Ta/jCCvzJ0VWXNGCd2GS8Rl9CbQ dViCd9PREL+z4oC4uk+TttoTvhsdjnLsVmQnxqlXRa7OzXduoKd+0dauJtvj7F5z nodbZEZRvv3oc0WL0kQ99mnZ/PQ1BoiYLF7KKHkKrtqW3CLh+oCsnGM9bomP5DzF fPwFXiUmylAl9d0jo+MXIia9caOHPc4dOanT9vJuUGplxYBHnIb3X+kZzsloxFTn pajWMK9WsN57afRA/PNzCc6lLDemfuKEOGNOBCcDRIp/N2El9coxJpj/S1owB3LR MAewVbp7vr58uBrJ/kNYLDRmkKncgGLNZM0RuMF12gyRE5CQZOU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:07 2026 by rpki-client