$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142719.roa File: AS142719.roa (raw, json) Hash identifier: NdHvKVi+7SlVDJgIdUeBXGEikCHrIxD5JsrG50Ssjfg= Subject key identifier: 44:CA:4F:08:B7:64:00:9C:7A:7E:45:FA:20:31:82:BD:0D:72:FC:7F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 081F21E50BEB0AC8800C0453ABC7E516CF60F827 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142719.roa Signing time: Wed 04 Mar 2026 06:06:04 +0000 ROA not before: Wed 04 Mar 2026 06:01:04 +0000 ROA not after: Wed 03 Mar 2027 06:06:04 +0000 asID: 142719 IP address blocks: 240a:a045::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1f:21:e5:0b:eb:0a:c8:80:0c:04:53:ab:c7:e5:16:cf:60:f8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:04 2026 GMT Not After : Mar 3 06:06:04 2027 GMT Subject: CN=44CA4F08B764009C7A7E45FA203182BD0D72FC7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:74:c5:bb:27:f5:65:10:a3:34:d3:15:c2: 30:60:7e:cd:ee:cb:b5:c9:bc:0b:4b:4b:59:e2:4b: 76:58:54:3c:99:6c:2f:35:1b:4d:21:b0:b5:10:d7: 43:7a:aa:26:35:2e:f1:90:b9:33:20:64:69:f8:f0: 3f:05:c8:fd:1e:76:cb:33:da:95:ee:c0:fd:e1:a5: eb:3f:5f:2b:c8:1c:7d:c4:4f:fa:ce:80:0e:ef:ce: b3:df:0d:ad:bb:10:b9:f3:24:26:14:49:10:14:e9: 67:07:1f:6a:a7:6e:b9:67:49:30:8a:04:0f:8d:32: c6:45:57:2a:4b:e9:8d:6f:29:ab:63:02:79:f6:76: d8:b5:3f:0d:a6:60:6f:3e:76:d2:2d:0f:c0:d7:f5: 1d:bb:e6:eb:ec:c2:b8:c9:69:3d:e5:0b:6e:a6:22: 03:57:0e:13:35:4c:6b:26:eb:de:b7:85:fe:72:c2: 07:cd:06:69:a4:ef:fb:ca:b2:62:ba:3d:4b:52:e3: 61:25:c3:0e:7f:71:c3:a5:d0:2b:62:09:90:44:e6: 00:b3:55:1f:7f:d1:de:5a:b6:b4:af:c0:b7:65:54: 04:6c:5a:bd:a0:11:0e:25:34:7c:c5:7c:5f:8d:08: 77:7c:d8:58:3a:13:1c:e2:4c:8c:e0:a6:0b:9e:ce: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CA:4F:08:B7:64:00:9C:7A:7E:45:FA:20:31:82:BD:0D:72:FC:7F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142719.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a045::/32 Signature Algorithm: sha256WithRSAEncryption bc:a2:17:38:39:49:bb:54:11:3f:5f:7a:31:63:50:29:4a:f9: fa:3a:52:8a:54:f9:c6:09:f8:d8:e5:14:45:b4:44:d1:dc:6c: 65:5f:f3:d6:03:4a:f5:58:7f:25:6b:31:6e:2b:86:d5:d2:04: 4a:5a:51:5b:b1:f9:a6:5d:6e:4c:ce:7f:5e:8d:3f:78:57:00: a0:1e:09:a4:eb:b2:a6:b6:4f:e4:b2:65:f6:44:3b:ce:56:37: 90:16:e1:58:13:bc:ff:71:48:2b:a2:f2:05:16:fd:ab:d4:dc: 42:9f:17:15:ec:f0:d6:07:74:a9:02:15:7e:cb:8b:70:8a:60: 37:0a:76:22:36:d3:84:55:47:1b:81:71:71:65:53:c3:d7:d6: 24:f4:0a:73:f0:c3:15:c5:5a:5d:66:bb:38:29:7a:ff:93:e6: 9d:17:41:d3:e9:40:e8:bb:44:f3:4e:d5:fa:1c:d9:5e:31:1b: db:27:8d:37:b4:c2:0d:3d:68:88:0c:d4:7c:46:e4:06:b2:89: 69:f1:ba:f8:81:c3:8b:6d:92:ed:ad:27:80:43:50:78:51:c1: f6:e3:5b:03:bd:b4:36:3c:41:9d:e3:5a:8f:64:d6:54:17:1d: ca:10:34:c2:db:a0:14:b8:b6:40:1e:1a:30:93:7a:10:4e:93: 3b:6e:84:e1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCB8h5QvrCsiADARTq8flFs9g+CcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwNFoX DTI3MDMwMzA2MDYwNFowMzExMC8GA1UEAxMoNDRDQTRGMDhCNzY0MDA5QzdBN0U0 NUZBMjAzMTgyQkQwRDcyRkM3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZ4dMW7J/VlEKM00xXCMGB+ze7Ltcm8C0tLWeJLdlhUPJlsLzUbTSGwtRDX Q3qqJjUu8ZC5MyBkafjwPwXI/R52yzPale7A/eGl6z9fK8gcfcRP+s6ADu/Os98N rbsQufMkJhRJEBTpZwcfaqduuWdJMIoED40yxkVXKkvpjW8pq2MCefZ22LU/DaZg bz520i0PwNf1Hbvm6+zCuMlpPeULbqYiA1cOEzVMaybr3reF/nLCB80GaaTv+8qy Yro9S1LjYSXDDn9xw6XQK2IJkETmALNVH3/R3lq2tK/At2VUBGxavaARDiU0fMV8 X40Id3zYWDoTHOJMjOCmC57OGwECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBREyk8I t2QAnHp+RfogMYK9DXL8fzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjcxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oEUwDQYJKoZIhvcNAQELBQADggEBALyiFzg5SbtUET9fejFjUClK+fo6UopU+cYJ +NjlFEW0RNHcbGVf89YDSvVYfyVrMW4rhtXSBEpaUVux+aZdbkzOf16NP3hXAKAe CaTrsqa2T+SyZfZEO85WN5AW4VgTvP9xSCui8gUW/avU3EKfFxXs8NYHdKkCFX7L i3CKYDcKdiI204RVRxuBcXFlU8PX1iT0CnPwwxXFWl1muzgpev+T5p0XQdPpQOi7 RPNO1foc2V4xG9snjTe0wg09aIgM1HxG5AayiWnxuviBw4ttku2tJ4BDUHhRwfbj WwO9tDY8QZ3jWo9k1lQXHcoQNMLboBS4tkAeGjCTehBOkztuhOE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:34 2026 by rpki-client