$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142716.roa File: AS142716.roa (raw, json) Hash identifier: c5ImBc42L93kq3KHHpiK/Ve0V7hkZbrAdgBEQyWZPQs= Subject key identifier: 60:D1:2F:C9:C5:79:A7:B2:08:44:F6:15:0D:5B:84:2D:55:F4:11:36 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2D53E4AD6E60F368055A13D93E5FE2DEDF222E1B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142716.roa Signing time: Wed 04 Mar 2026 06:06:34 +0000 ROA not before: Wed 04 Mar 2026 06:01:34 +0000 ROA not after: Wed 03 Mar 2027 06:06:34 +0000 asID: 142716 IP address blocks: 240a:a042::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:53:e4:ad:6e:60:f3:68:05:5a:13:d9:3e:5f:e2:de:df:22:2e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:34 2026 GMT Not After : Mar 3 06:06:34 2027 GMT Subject: CN=60D12FC9C579A7B20844F6150D5B842D55F41136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:6e:90:75:71:3d:f9:0a:82:42:2a:39:d3: 1a:cc:7a:79:95:c2:d5:3a:bd:bb:23:a9:a9:b5:55: 4a:6a:e0:40:b2:c4:c9:27:a2:5f:94:d1:86:bc:b3: 4b:08:27:dd:c5:46:41:dd:94:69:03:9e:b7:80:6c: c6:6a:de:57:0b:c9:97:86:a5:32:96:9c:7b:40:50: a6:e0:67:22:24:46:83:e5:ad:73:c0:2a:6f:63:99: 03:cb:08:ec:34:73:63:e4:ed:14:12:4b:d8:fc:71: 96:4e:2f:82:ae:4a:e5:77:6b:42:22:8d:5f:b4:d3: 29:d6:5b:b4:fb:0a:55:65:3f:8c:08:0f:9f:90:e1: 42:c6:64:9e:a3:ce:c5:5f:07:ab:96:b8:ac:37:eb: 3c:d0:f5:82:9f:fb:45:1b:c9:69:10:58:bf:17:8d: 76:e7:c7:f8:be:bf:75:c4:aa:11:75:72:27:1d:36: 55:54:38:2f:d0:14:6b:76:d3:9a:a8:b4:f6:79:93: e3:0e:a7:0a:63:0b:c8:92:fd:55:e5:fe:64:56:b2: 8b:94:d8:0d:1a:12:68:36:7c:7a:c5:94:54:ac:ea: 50:de:0f:27:9f:31:21:3c:70:dc:19:f1:a2:f7:6e: 81:10:81:f0:66:9f:4c:75:4e:dc:d7:de:c8:ef:c7: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:2F:C9:C5:79:A7:B2:08:44:F6:15:0D:5B:84:2D:55:F4:11:36 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142716.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a042::/32 Signature Algorithm: sha256WithRSAEncryption 26:58:98:6a:7f:0c:50:16:30:09:9e:83:5e:05:1a:d1:e3:2a: 54:7e:82:e7:8b:2a:aa:52:77:6a:f5:34:c7:ce:53:6c:0a:0f: f0:aa:d3:1a:cf:a0:b0:59:e0:d3:08:ec:c7:9d:92:6d:c2:c5: 7a:58:41:01:ce:82:6e:bb:1c:b3:d9:14:45:7a:a5:6a:b9:16: b1:b9:52:97:ae:37:03:29:44:5d:fc:ed:17:0b:80:39:16:5c: 03:d6:18:8a:1f:8f:a0:0f:f2:b4:59:8a:33:cd:98:68:dc:30: 3e:91:d0:c2:9a:20:6b:1a:1d:75:2a:a8:9c:f3:65:e7:38:1b: 2d:a8:e1:b2:a1:1b:d4:06:16:32:e9:55:f5:ab:18:bc:e3:51: ca:46:8a:b5:bb:77:41:89:12:04:1e:eb:c0:dd:3b:15:5d:6e: 4c:3f:d9:b6:e6:92:fe:12:1c:84:ca:4f:40:ab:01:f9:d4:99: bc:56:44:56:37:75:12:53:24:12:60:bc:65:2b:f5:30:46:38: 54:35:2b:93:a7:08:85:3f:96:15:6e:c1:ea:03:0f:62:e3:ad: c6:04:0c:0d:d1:cc:0d:73:6f:cc:90:a8:a1:94:75:1e:8d:20: aa:fd:83:17:bd:a6:b7:fd:17:7a:db:c3:3e:4e:3f:23:3d:f7: 06:be:27:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULVPkrW5g82gFWhPZPl/i3t8iLhswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzNFoX DTI3MDMwMzA2MDYzNFowMzExMC8GA1UEAxMoNjBEMTJGQzlDNTc5QTdCMjA4NDRG NjE1MEQ1Qjg0MkQ1NUY0MTEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlVbpB1cT35CoJCKjnTGsx6eZXC1Tq9uyOpqbVVSmrgQLLEySeiX5TRhryz Swgn3cVGQd2UaQOet4BsxmreVwvJl4alMpace0BQpuBnIiRGg+Wtc8Aqb2OZA8sI 7DRzY+TtFBJL2Pxxlk4vgq5K5XdrQiKNX7TTKdZbtPsKVWU/jAgPn5DhQsZknqPO xV8Hq5a4rDfrPND1gp/7RRvJaRBYvxeNdufH+L6/dcSqEXVyJx02VVQ4L9AUa3bT mqi09nmT4w6nCmMLyJL9VeX+ZFayi5TYDRoSaDZ8esWUVKzqUN4PJ58xITxw3Bnx ovdugRCB8GafTHVO3NfeyO/H1nsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRg0S/J xXmnsghE9hUNW4QtVfQRNjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjcxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oEIwDQYJKoZIhvcNAQELBQADggEBACZYmGp/DFAWMAmeg14FGtHjKlR+gueLKqpS d2r1NMfOU2wKD/Cq0xrPoLBZ4NMI7Medkm3CxXpYQQHOgm67HLPZFEV6pWq5FrG5 UpeuNwMpRF387RcLgDkWXAPWGIofj6AP8rRZijPNmGjcMD6R0MKaIGsaHXUqqJzz Zec4Gy2o4bKhG9QGFjLpVfWrGLzjUcpGirW7d0GJEgQe68DdOxVdbkw/2bbmkv4S HITKT0CrAfnUmbxWRFY3dRJTJBJgvGUr9TBGOFQ1K5OnCIU/lhVuweoDD2LjrcYE DA3RzA1zb8yQqKGUdR6NIKr9gxe9prf9F3rbwz5OPyM99wa+J5E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:59 2026 by rpki-client