$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142713.roa File: AS142713.roa (raw, json) Hash identifier: WOT0tNteGTmpiR7XH3BWnWyDS2wBZoCaTLwZbk37V/A= Subject key identifier: D8:72:9D:24:BA:EF:00:BF:3E:E0:36:F6:3E:C1:18:A7:D4:3F:BF:8E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 39EF205C66F46A35FBD688D9F345E1DB58A078C1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142713.roa Signing time: Wed 04 Mar 2026 06:07:30 +0000 ROA not before: Wed 04 Mar 2026 06:02:30 +0000 ROA not after: Wed 03 Mar 2027 06:07:30 +0000 asID: 142713 IP address blocks: 240a:a03f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ef:20:5c:66:f4:6a:35:fb:d6:88:d9:f3:45:e1:db:58:a0:78:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:30 2026 GMT Not After : Mar 3 06:07:30 2027 GMT Subject: CN=D8729D24BAEF00BF3EE036F63EC118A7D43FBF8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b8:6b:b0:85:9f:ba:fe:07:93:dc:e3:a6:d8: b3:ab:a3:80:64:6e:97:d2:18:0b:80:c3:45:88:24: c7:fd:02:ea:04:2c:a6:e8:3b:db:d0:db:49:60:7b: eb:38:07:93:4b:c8:91:11:2f:77:03:d0:6b:cf:ed: 27:ee:47:09:09:8d:cd:79:4f:9d:5a:be:f7:dc:f0: 88:c7:f0:03:7d:40:af:fc:c4:a3:05:b6:04:11:48: 46:6f:4a:9f:d9:df:4a:7c:b5:ab:1a:68:09:ce:7c: e4:66:41:8d:5b:ce:1a:1e:6d:6b:80:81:c8:6a:89: c2:29:77:18:47:2c:9e:ee:87:62:53:ce:6b:85:5b: 69:48:56:ef:73:f8:74:0f:97:65:56:04:ee:2b:79: 3a:55:74:7b:b7:13:dc:eb:55:69:d1:18:66:60:b9: 92:69:d0:b6:ca:30:05:c8:49:f0:b8:c5:8e:8a:06: 19:29:6c:35:47:47:1b:61:6d:c3:8b:9a:69:bc:20: 3b:19:8a:ea:9b:b3:18:4a:75:1a:1a:7c:f8:09:d3: d0:31:ff:65:23:d2:22:20:3a:25:9a:af:35:e0:ee: b4:37:af:ee:52:1e:65:63:71:29:44:51:6a:0c:b7: 10:9d:fe:34:6d:16:77:da:a0:4b:39:da:1c:7f:9b: d6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:72:9D:24:BA:EF:00:BF:3E:E0:36:F6:3E:C1:18:A7:D4:3F:BF:8E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142713.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a03f::/32 Signature Algorithm: sha256WithRSAEncryption cb:3c:27:0b:a6:b0:54:ee:80:ef:47:ab:21:99:f4:8d:99:a8: 24:6f:57:15:da:54:78:9a:70:83:7f:92:73:92:e8:c7:46:2e: 88:0a:49:7c:1a:93:73:f8:22:5d:a8:d5:37:81:3f:00:58:0c: 6d:e5:7e:63:c7:3a:45:41:1e:85:9b:ee:9c:b4:be:f3:81:83: 81:f7:4b:23:cc:04:39:b8:02:eb:6f:99:72:64:69:3b:7c:0f: 21:ad:1c:ea:bb:a4:85:b7:a3:a1:84:b3:c0:c9:26:01:7c:ae: 82:9e:93:38:d8:c9:4d:28:3c:df:fa:e5:9c:79:00:84:5e:1f: 5c:aa:ce:2c:b8:e5:e2:dc:d2:35:6e:38:1c:76:b3:05:88:e7: a6:8b:b7:dd:6a:c5:87:1c:ea:9f:ac:ac:05:49:e3:32:ae:b1: d6:84:3c:1c:3a:60:9d:ae:09:bb:18:42:88:91:c8:83:bf:14: cc:45:5e:ff:23:d9:5c:71:51:a7:21:f9:73:e1:85:4a:c1:6b: ce:e8:1c:04:a3:02:45:6c:b0:b0:95:14:e8:fc:19:5e:1f:e2: 4a:ea:0e:2a:0f:be:e4:29:b9:cd:59:79:71:12:21:2a:ed:cb: 25:87:82:0c:7a:67:c3:05:68:e5:7a:15:95:76:fd:f1:37:f1: 80:8f:3d:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOe8gXGb0ajX71ojZ80Xh21igeMEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzMFoX DTI3MDMwMzA2MDczMFowMzExMC8GA1UEAxMoRDg3MjlEMjRCQUVGMDBCRjNFRTAz NkY2M0VDMTE4QTdENDNGQkY4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPK4a7CFn7r+B5Pc46bYs6ujgGRul9IYC4DDRYgkx/0C6gQspug729DbSWB7 6zgHk0vIkREvdwPQa8/tJ+5HCQmNzXlPnVq+99zwiMfwA31Ar/zEowW2BBFIRm9K n9nfSny1qxpoCc585GZBjVvOGh5ta4CByGqJwil3GEcsnu6HYlPOa4VbaUhW73P4 dA+XZVYE7it5OlV0e7cT3OtVadEYZmC5kmnQtsowBchJ8LjFjooGGSlsNUdHG2Ft w4uaabwgOxmK6puzGEp1Ghp8+AnT0DH/ZSPSIiA6JZqvNeDutDev7lIeZWNxKURR agy3EJ3+NG0Wd9qgSznaHH+b1kUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTYcp0k uu8Avz7gNvY+wRin1D+/jjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjcxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oD8wDQYJKoZIhvcNAQELBQADggEBAMs8JwumsFTugO9HqyGZ9I2ZqCRvVxXaVHia cIN/knOS6MdGLogKSXwak3P4Il2o1TeBPwBYDG3lfmPHOkVBHoWb7py0vvOBg4H3 SyPMBDm4AutvmXJkaTt8DyGtHOq7pIW3o6GEs8DJJgF8roKekzjYyU0oPN/65Zx5 AIReH1yqziy45eLc0jVuOBx2swWI56aLt91qxYcc6p+srAVJ4zKusdaEPBw6YJ2u CbsYQoiRyIO/FMxFXv8j2VxxUach+XPhhUrBa87oHASjAkVssLCVFOj8GV4f4krq DioPvuQpuc1ZeXESISrtyyWHggx6Z8MFaOV6FZV2/fE38YCPPeA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:53 2026 by rpki-client