$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142720.roa File: AS142720.roa (raw, json) Hash identifier: 1ubAftbJrZ9n5yASiaCNwXHGxygTjm0My0NvoyhFROM= Subject key identifier: DF:03:E9:C2:14:20:D0:54:3F:09:71:78:36:B5:39:A3:6D:4A:4A:1C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 41128FF332EF17E5F92ADFD686CD0BAB485319 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142720.roa Signing time: Wed 04 Mar 2026 06:05:14 +0000 ROA not before: Wed 04 Mar 2026 06:00:14 +0000 ROA not after: Wed 03 Mar 2027 06:05:14 +0000 asID: 142720 IP address blocks: 240a:a046::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:12:8f:f3:32:ef:17:e5:f9:2a:df:d6:86:cd:0b:ab:48:53:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:14 2026 GMT Not After : Mar 3 06:05:14 2027 GMT Subject: CN=DF03E9C21420D0543F09717836B539A36D4A4A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:72:93:55:ba:b6:63:3c:06:5d:55:5d:c3: ac:ee:62:f2:09:da:94:99:f7:98:99:2f:61:be:ce: 28:a2:66:41:fe:0c:29:9b:89:8e:30:df:12:f9:b3: 43:f8:22:18:99:62:14:72:d4:69:ab:2d:95:9e:f3: 52:f1:ad:b3:44:bb:17:f1:c8:02:27:b5:77:38:ca: 27:60:22:11:3f:07:03:71:65:f4:cf:3d:e1:2b:b5: 56:2c:3a:fc:55:dc:ba:cf:ac:0d:67:0f:6b:04:15: a5:70:a7:34:e8:b5:57:42:e7:10:36:f4:d4:d9:2f: 9e:0b:cf:4c:f1:0b:34:8f:ef:fb:4e:85:96:08:05: 09:57:86:f7:65:a3:9d:f1:e5:7d:2f:49:ba:cc:ee: a6:a1:51:91:56:f9:99:ca:1b:da:c9:60:2b:1d:d8: df:1c:d2:34:f2:6e:85:29:56:3b:15:a4:78:b8:98: 24:aa:af:e3:0e:d4:21:66:da:95:ee:bf:df:2b:55: f2:52:3e:04:de:e3:32:64:c5:a4:52:5c:35:bf:c5: 88:a3:de:37:be:c2:d7:84:46:e0:1a:0a:76:c8:98: fe:70:d0:7f:91:dd:af:5f:28:e7:b2:f7:15:b1:37: dc:0a:f9:28:03:44:7a:44:bc:02:6b:9f:d9:6f:6d: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:03:E9:C2:14:20:D0:54:3F:09:71:78:36:B5:39:A3:6D:4A:4A:1C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142720.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a046::/32 Signature Algorithm: sha256WithRSAEncryption 18:63:55:2f:a5:de:a9:58:e6:8a:5e:e3:3b:d9:92:b4:34:ec: f3:f7:f8:22:b9:89:eb:17:67:50:98:e6:40:cf:4c:d3:61:2e: e7:c7:95:e6:64:c0:32:7c:3c:07:70:3a:60:58:65:df:0d:f7: 5b:4e:3e:fb:2b:82:5d:b6:9b:4b:b0:c4:27:cc:70:1e:ec:76: aa:75:b3:e2:8e:aa:94:3c:9c:8d:94:10:e9:d6:4c:cf:34:93: 08:64:89:4e:bb:c3:6f:61:72:0c:f7:f4:54:d7:28:54:d7:34: 8b:10:dc:6c:0d:39:9d:40:f5:84:2b:89:aa:b6:41:ca:f5:07: 20:c4:fc:54:c2:71:1b:b4:ff:83:4b:a1:0c:1b:38:dd:a3:31: e5:73:d2:bd:24:06:28:5c:c8:02:cd:db:9b:e0:87:98:fd:2f: 13:71:90:5e:be:31:49:40:ce:42:0f:cd:ac:e1:3f:21:8c:51: dd:b2:78:49:c0:90:87:51:cb:f1:83:d7:00:ff:f9:f1:70:19: a7:fb:2f:2d:b7:82:df:98:30:fb:91:ff:7b:f5:10:ec:89:d3: df:ff:85:86:b0:86:d3:b2:57:d7:9c:e4:87:ed:a9:ac:f1:49: 89:5d:0e:03:78:b2:90:6b:86:e9:55:f6:98:02:0e:4e:2e:89: 3f:79:b9:a4 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgITQRKP8zLvF+X5Kt/Whs0Lq0hTGTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDDAxBOTFFNUQ2MTAwMDExMTAvBgNVBAUTKDA1RkM5QzVCODg1 MDZGN0MwRDNGODYyQzg4OTVCRUQ2N0U5RjhFQkEwHhcNMjYwMzA0MDYwMDE0WhcN MjcwMzAzMDYwNTE0WjAzMTEwLwYDVQQDEyhERjAzRTlDMjE0MjBEMDU0M0YwOTcx NzgzNkI1MzlBMzZENEE0QTFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytFyk1W6tmM8Bl1VXcOs7mLyCdqUmfeYmS9hvs4oomZB/gwpm4mOMN8S+bND +CIYmWIUctRpqy2VnvNS8a2zRLsX8cgCJ7V3OMonYCIRPwcDcWX0zz3hK7VWLDr8 Vdy6z6wNZw9rBBWlcKc06LVXQucQNvTU2S+eC89M8Qs0j+/7ToWWCAUJV4b3ZaOd 8eV9L0m6zO6moVGRVvmZyhvayWArHdjfHNI08m6FKVY7FaR4uJgkqq/jDtQhZtqV 7r/fK1XyUj4E3uMyZMWkUlw1v8WIo943vsLXhEbgGgp2yJj+cNB/kd2vXyjnsvcV sTfcCvkoA0R6RLwCa5/Zb21pLQIDAQABo4IBxTCCAcEwHQYDVR0OBBYEFN8D6cIU INBUPwlxeDa1OaNtSkocMB8GA1UdIwQYMBaAFAX8nFuIUG98DT+GLIiVvtZ+n466 MA4GA1UdDwEB/wQEAwIHgDBjBgNVHR8EXDBaMFigVqBUhlJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wLzA1RkM5QzVCODg1MDZGN0MwRDNGODYy Qzg4OTVCRUQ2N0U5RjhFQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcw AoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0JmeWNXNGhRYjN3TlA0WXNpSlctMW42Zmpy by5jZXIwTgYIKwYBBQUHAQsEQjBAMD4GCCsGAQUFBzALhjJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTQyNzIwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAqg RjANBgkqhkiG9w0BAQsFAAOCAQEAGGNVL6XeqVjmil7jO9mStDTs8/f4IrmJ6xdn UJjmQM9M02Eu58eV5mTAMnw8B3A6YFhl3w33W04++yuCXbabS7DEJ8xwHux2qnWz 4o6qlDycjZQQ6dZMzzSTCGSJTrvDb2FyDPf0VNcoVNc0ixDcbA05nUD1hCuJqrZB yvUHIMT8VMJxG7T/g0uhDBs43aMx5XPSvSQGKFzIAs3bm+CHmP0vE3GQXr4xSUDO Qg/NrOE/IYxR3bJ4ScCQh1HL8YPXAP/58XAZp/svLbeC35gw+5H/e/UQ7InT3/+F hrCG07JX15zkh+2prPFJiV0OA3iykGuG6VX2mAIOTi6JP3m5pA== -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:46 2026 by rpki-client