$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142711.roa File: AS142711.roa (raw, json) Hash identifier: WDsFWcHRTxcVHi+7wUhulSGorxJmk2N+L6IBGcym5UE= Subject key identifier: 52:63:5D:6F:4E:84:6B:05:F6:E4:F0:84:B4:EE:41:40:49:76:04:3A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 142107E05BAB944AF565AEC3C6437251B6DDB47F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142711.roa Signing time: Wed 04 Mar 2026 06:06:33 +0000 ROA not before: Wed 04 Mar 2026 06:01:33 +0000 ROA not after: Wed 03 Mar 2027 06:06:33 +0000 asID: 142711 IP address blocks: 240a:a03d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:21:07:e0:5b:ab:94:4a:f5:65:ae:c3:c6:43:72:51:b6:dd:b4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:33 2026 GMT Not After : Mar 3 06:06:33 2027 GMT Subject: CN=52635D6F4E846B05F6E4F084B4EE41404976043A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c2:82:74:ef:aa:6c:3a:63:82:73:1e:b4:b9: d9:c7:3c:a7:9c:83:13:71:b3:1e:26:68:b5:8d:98: d2:65:36:ed:d8:82:41:5f:25:ce:96:a5:82:ae:1b: 91:83:5a:41:d6:ae:fd:80:77:6d:a7:11:b4:6b:1a: e2:ae:2e:b7:7d:dd:79:9c:ec:f5:d2:8f:49:0c:d4: c5:61:5b:72:03:92:68:dc:f6:bf:e9:e1:78:c4:e7: 00:35:55:8a:80:6f:1e:7a:1f:27:fa:8a:3e:36:d3: 57:48:d5:68:2e:79:68:e5:e3:a9:dc:e8:ad:44:d5: 49:4e:13:e2:d8:e5:a7:c5:7e:f5:7d:cf:be:47:2b: 93:97:73:28:f4:de:94:a4:a7:0b:97:76:12:16:d9: 93:ed:26:9a:a7:1d:32:5d:23:89:bd:d9:20:d6:ee: 33:fd:94:5c:d2:84:5e:00:f8:60:41:1e:a3:de:e1: ae:41:5f:49:10:e5:dc:5c:ac:20:38:8c:f3:b8:d7: ec:fd:83:cc:8f:16:28:96:7f:3b:c6:37:1f:59:a5: e9:80:50:66:78:15:eb:e2:34:95:88:ed:d0:5d:96: f6:8f:53:6d:c9:cc:eb:fe:c5:a9:75:c5:f2:82:20: 14:1b:c9:3f:54:3d:af:fe:9e:9f:cf:dc:24:b8:22: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:63:5D:6F:4E:84:6B:05:F6:E4:F0:84:B4:EE:41:40:49:76:04:3A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142711.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a03d::/32 Signature Algorithm: sha256WithRSAEncryption 89:65:3f:37:13:33:94:22:a4:90:0a:48:44:6f:7b:e0:ed:2c: e3:1a:cb:91:c5:15:41:c7:3b:ba:ad:7b:e7:65:72:2a:7c:cb: d5:00:25:a8:0f:1f:25:81:de:c6:9c:b5:14:80:d5:ab:14:a1: e9:e8:b0:de:9b:48:41:d7:b4:ab:73:5a:15:f2:4e:59:5a:c8: eb:d0:5c:08:0e:7f:7d:d8:85:0f:0f:45:b4:a0:ae:57:0a:9b: 98:92:1b:95:01:31:c0:a2:36:6c:59:88:fc:77:92:27:60:e5: ee:2d:e8:71:e3:15:09:91:af:33:7c:9f:4d:b7:b1:23:47:e4: 47:57:05:96:d9:39:92:9b:d5:c1:27:7f:de:9f:9f:d0:2a:2f: 36:c3:ca:44:d0:bd:3b:52:af:38:8a:87:60:ad:73:4f:27:38: 2a:12:80:51:4e:2a:fb:16:6b:66:19:ee:7e:19:da:72:99:40: b9:12:c0:b5:a7:d8:a8:17:1a:b7:88:80:13:57:85:13:2f:ed: fc:cd:63:f7:9a:b2:64:96:50:fe:68:20:91:e4:4f:83:8f:f2: f4:63:90:a8:e3:f3:91:df:e1:61:df:97:cb:fe:e7:c0:89:41: 51:2b:ed:dd:28:14:70:9f:4a:15:90:91:88:49:21:2b:dc:5c: 69:84:ea:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFCEH4FurlEr1Za7DxkNyUbbdtH8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzM1oX DTI3MDMwMzA2MDYzM1owMzExMC8GA1UEAxMoNTI2MzVENkY0RTg0NkIwNUY2RTRG MDg0QjRFRTQxNDA0OTc2MDQzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJDCgnTvqmw6Y4JzHrS52cc8p5yDE3GzHiZotY2Y0mU27diCQV8lzpalgq4b kYNaQdau/YB3bacRtGsa4q4ut33deZzs9dKPSQzUxWFbcgOSaNz2v+nheMTnADVV ioBvHnofJ/qKPjbTV0jVaC55aOXjqdzorUTVSU4T4tjlp8V+9X3Pvkcrk5dzKPTe lKSnC5d2EhbZk+0mmqcdMl0jib3ZINbuM/2UXNKEXgD4YEEeo97hrkFfSRDl3Fys IDiM87jX7P2DzI8WKJZ/O8Y3H1ml6YBQZngV6+I0lYjt0F2W9o9TbcnM6/7FqXXF 8oIgFBvJP1Q9r/6en8/cJLgiyCMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRSY11v ToRrBfbk8IS07kFASXYEOjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjcxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oD0wDQYJKoZIhvcNAQELBQADggEBAIllPzcTM5QipJAKSERve+DtLOMay5HFFUHH O7qte+dlcip8y9UAJagPHyWB3sactRSA1asUoenosN6bSEHXtKtzWhXyTllayOvQ XAgOf33YhQ8PRbSgrlcKm5iSG5UBMcCiNmxZiPx3kidg5e4t6HHjFQmRrzN8n023 sSNH5EdXBZbZOZKb1cEnf96fn9AqLzbDykTQvTtSrziKh2Ctc08nOCoSgFFOKvsW a2YZ7n4Z2nKZQLkSwLWn2KgXGreIgBNXhRMv7fzNY/easmSWUP5oIJHkT4OP8vRj kKjj85Hf4WHfl8v+58CJQVEr7d0oFHCfShWQkYhJISvcXGmE6qg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:34 2026 by rpki-client