$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142710.roa File: AS142710.roa (raw, json) Hash identifier: tgBVEPa0L8pgNzGABIZIMYWGINonaL0m1QPeuYJxnn0= Subject key identifier: 5F:D1:EF:78:A7:09:72:97:ED:16:62:9E:DE:A8:D8:9E:10:BB:76:DE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 25FEFA41C037EA8226098801E52ACA8648649997 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142710.roa Signing time: Wed 04 Mar 2026 06:07:44 +0000 ROA not before: Wed 04 Mar 2026 06:02:44 +0000 ROA not after: Wed 03 Mar 2027 06:07:44 +0000 asID: 142710 IP address blocks: 240a:a03c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fe:fa:41:c0:37:ea:82:26:09:88:01:e5:2a:ca:86:48:64:99:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:44 2026 GMT Not After : Mar 3 06:07:44 2027 GMT Subject: CN=5FD1EF78A7097297ED16629EDEA8D89E10BB76DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:af:c8:29:03:92:17:bc:56:31:2d:3c:66: b3:dc:14:cb:31:fb:7c:b7:b5:be:ed:31:74:9c:b5: 4f:46:dc:e5:bb:64:44:42:41:d8:c3:50:cb:24:d1: 09:68:3c:82:23:93:4a:7d:cd:4c:17:74:01:f3:d8: eb:bf:1e:06:07:9e:33:f2:b3:12:7c:b3:8a:13:2b: ab:8b:7c:b8:20:af:a8:2a:f3:6f:cc:82:40:68:52: 9d:56:2b:04:39:b5:65:3a:6b:d3:a1:d2:7f:de:44: 0f:b0:6a:0f:f8:14:40:0a:21:39:df:73:ef:a1:54: 6a:e1:87:44:56:39:7c:78:a3:e3:71:76:3b:22:db: 3b:ec:23:81:0e:14:1f:50:e6:36:f2:cb:42:6b:3d: 3b:09:38:df:7f:d9:98:dc:5d:59:d4:35:b6:a6:f7: 71:9a:32:2a:73:b6:21:64:75:c8:5a:0d:4b:46:d4: 15:c9:5f:e3:37:9e:f5:f0:76:09:5e:13:f1:61:d4: 6e:d4:d2:52:b1:54:4f:3d:9f:35:22:34:67:e2:87: cb:3d:02:87:bc:b1:b5:f4:b0:21:01:68:dd:a3:ab: 88:46:12:b3:c6:9c:c5:9e:39:29:7f:b6:c6:55:31: f9:95:bf:67:65:73:1c:23:fc:49:a4:fe:c7:7d:05: 1d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D1:EF:78:A7:09:72:97:ED:16:62:9E:DE:A8:D8:9E:10:BB:76:DE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142710.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a03c::/32 Signature Algorithm: sha256WithRSAEncryption 50:77:e1:5e:01:be:33:27:fe:a2:93:bb:52:2f:73:3b:8b:63: fb:1b:a2:1c:fb:6d:5a:13:bb:76:ed:b5:6d:51:ec:4a:ab:5e: 63:b6:57:0e:32:2d:19:f1:06:6e:2a:3a:d0:86:6b:6b:90:fa: 98:c2:06:3f:09:71:4f:db:6d:74:0e:82:17:91:28:92:50:40: f4:a4:af:20:ab:e0:45:b7:27:1b:d5:6b:67:06:fd:72:10:87: d3:87:d2:6f:2a:10:37:e9:ab:86:16:13:4b:65:9a:57:1b:3a: 6a:4a:b6:28:90:bc:0d:fe:34:32:b5:6c:a6:5c:c2:bd:4e:e5: 73:18:1b:e8:ce:46:9b:de:3d:36:f8:f3:9a:a7:72:3d:05:94: 9b:81:2c:ed:3c:f3:aa:dc:e1:b1:fa:15:df:df:9a:89:26:c7: 25:33:65:c6:7b:f3:0f:60:d9:b8:fa:8b:19:fd:6b:d7:41:90: ca:72:40:42:80:bc:72:f5:7c:ba:7c:bd:d5:90:44:f9:fe:cd: 3e:33:75:fc:50:ec:50:9f:80:cd:4b:c0:6d:33:fb:7d:ee:ed: ba:2b:29:4a:fc:e7:d4:06:60:85:57:94:f8:86:c5:17:37:ea: 5f:93:1c:93:3d:14:01:d0:fa:43:a6:32:bf:dd:16:f0:cb:d6: f8:fa:c9:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJf76QcA36oImCYgB5SrKhkhkmZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0NFoX DTI3MDMwMzA2MDc0NFowMzExMC8GA1UEAxMoNUZEMUVGNzhBNzA5NzI5N0VEMTY2 MjlFREVBOEQ4OUUxMEJCNzZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/9r8gpA5IXvFYxLTxms9wUyzH7fLe1vu0xdJy1T0bc5btkREJB2MNQyyTR CWg8giOTSn3NTBd0AfPY678eBgeeM/KzEnyzihMrq4t8uCCvqCrzb8yCQGhSnVYr BDm1ZTpr06HSf95ED7BqD/gUQAohOd9z76FUauGHRFY5fHij43F2OyLbO+wjgQ4U H1DmNvLLQms9Owk433/ZmNxdWdQ1tqb3cZoyKnO2IWR1yFoNS0bUFclf4zee9fB2 CV4T8WHUbtTSUrFUTz2fNSI0Z+KHyz0Ch7yxtfSwIQFo3aOriEYSs8acxZ45KX+2 xlUx+ZW/Z2VzHCP8SaT+x30FHasCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRf0e94 pwlyl+0WYp7eqNieELt23jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjcxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oDwwDQYJKoZIhvcNAQELBQADggEBAFB34V4BvjMn/qKTu1IvczuLY/sbohz7bVoT u3bttW1R7EqrXmO2Vw4yLRnxBm4qOtCGa2uQ+pjCBj8JcU/bbXQOgheRKJJQQPSk ryCr4EW3JxvVa2cG/XIQh9OH0m8qEDfpq4YWE0tlmlcbOmpKtiiQvA3+NDK1bKZc wr1O5XMYG+jORpvePTb485qncj0FlJuBLO0886rc4bH6Fd/fmokmxyUzZcZ78w9g 2bj6ixn9a9dBkMpyQEKAvHL1fLp8vdWQRPn+zT4zdfxQ7FCfgM1LwG0z+33u7bor KUr859QGYIVXlPiGxRc36l+THJM9FAHQ+kOmMr/dFvDL1vj6ybg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:50 2026 by rpki-client