$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142721.roa File: AS142721.roa (raw, json) Hash identifier: DHxB9fju4QlgJDps+TeJKBlaUlvNbYcDagVm8weWCZk= Subject key identifier: 91:1E:4F:DE:5E:C4:95:A5:00:AA:81:22:E1:D5:11:1E:5B:A5:D4:65 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5CF2F6ED8F2A1AA1B00F62A8C76FF84C621FCC22 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142721.roa Signing time: Wed 04 Mar 2026 06:06:41 +0000 ROA not before: Wed 04 Mar 2026 06:01:41 +0000 ROA not after: Wed 03 Mar 2027 06:06:41 +0000 asID: 142721 IP address blocks: 240a:a047::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f2:f6:ed:8f:2a:1a:a1:b0:0f:62:a8:c7:6f:f8:4c:62:1f:cc:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:41 2026 GMT Not After : Mar 3 06:06:41 2027 GMT Subject: CN=911E4FDE5EC495A500AA8122E1D5111E5BA5D465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:d7:cb:02:10:91:82:1b:6b:7a:cb:23:fa: 82:01:b0:87:75:6e:01:44:57:28:c0:ee:a1:30:ed: c6:d0:24:03:9e:58:13:44:25:0d:fd:69:50:bb:9f: 3a:ad:90:e8:bd:db:ce:77:6e:7a:87:17:50:cf:38: 6e:91:ab:cf:76:72:22:0b:91:c9:ce:74:2c:d3:0e: b9:f5:d4:5e:3f:36:e5:b8:28:06:dc:76:45:47:24: 06:db:19:48:98:9a:66:c2:d9:94:29:55:75:5a:f2: ef:81:44:7c:80:1f:a5:d2:79:51:4e:a3:71:c6:08: 6e:f0:c0:98:0a:62:7e:61:de:6e:93:97:01:2e:08: ef:00:82:a6:cd:56:aa:11:7b:20:6e:a9:8c:c3:ca: 04:a7:ac:20:00:c8:b3:28:6f:b7:4a:aa:80:0e:12: 08:a2:48:80:b1:88:3e:a6:03:a4:77:cc:6a:0c:c5: 9e:4e:72:22:52:90:0f:69:9b:24:ca:0e:0d:f2:d3: 4d:6f:14:71:52:ad:d1:dc:a1:b8:83:76:5b:a9:86: dc:5f:bb:c2:ec:b7:79:06:38:15:40:b2:c0:7f:85: 9c:61:0d:aa:53:ad:a8:c2:27:2a:1e:98:94:d9:d5: 3a:8e:6f:ff:0d:dc:e9:10:59:5d:a8:b7:02:86:ca: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1E:4F:DE:5E:C4:95:A5:00:AA:81:22:E1:D5:11:1E:5B:A5:D4:65 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142721.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a047::/32 Signature Algorithm: sha256WithRSAEncryption 17:b3:0c:84:f8:a7:4a:b7:8c:0b:08:d8:d1:06:44:00:ca:0a: 44:a6:55:fa:6d:20:3d:3c:62:c0:bb:f5:19:77:f0:a6:b0:0e: 76:9a:eb:ea:59:7f:9e:2f:2e:f6:ef:5b:16:ef:33:34:39:b9: 12:a7:d3:dc:06:d6:58:57:d4:7b:e3:da:39:fb:26:24:da:d5: fa:1e:56:03:7e:23:c1:e1:62:f7:78:ce:d8:60:3a:39:29:1d: c2:21:e9:d7:43:25:eb:2d:85:d8:a0:d5:82:5b:16:4e:02:0b: 14:f5:ec:34:69:df:97:ba:1d:3e:4c:5a:d4:a1:2c:70:d0:e8: 06:eb:2b:db:69:72:cb:cd:63:70:24:23:c6:a6:39:0e:6e:cd: 10:ed:27:30:c9:af:b1:d9:83:72:50:91:31:88:a0:de:4c:b9: f2:56:fc:d6:85:37:24:55:84:37:70:cd:6c:50:27:c1:98:d8: fc:50:a6:22:e2:45:d5:04:2c:be:a0:76:77:15:8c:13:c1:c0: 61:d0:44:a1:97:b0:fe:a6:96:0c:a6:06:55:59:25:da:30:ce: a6:35:e6:b2:d2:ff:f2:0e:8d:b9:dd:10:d2:be:2e:94:c7:f8: 5d:93:5d:63:bb:3b:37:f7:c8:51:6a:23:d8:2f:28:62:2e:bc: 31:b7:17:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXPL27Y8qGqGwD2Kox2/4TGIfzCIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0MVoX DTI3MDMwMzA2MDY0MVowMzExMC8GA1UEAxMoOTExRTRGREU1RUM0OTVBNTAwQUE4 MTIyRTFENTExMUU1QkE1RDQ2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCe18sCEJGCG2t6yyP6ggGwh3VuAURXKMDuoTDtxtAkA55YE0QlDf1pULuf Oq2Q6L3bzndueocXUM84bpGrz3ZyIguRyc50LNMOufXUXj825bgoBtx2RUckBtsZ SJiaZsLZlClVdVry74FEfIAfpdJ5UU6jccYIbvDAmApifmHebpOXAS4I7wCCps1W qhF7IG6pjMPKBKesIADIsyhvt0qqgA4SCKJIgLGIPqYDpHfMagzFnk5yIlKQD2mb JMoODfLTTW8UcVKt0dyhuIN2W6mG3F+7wuy3eQY4FUCywH+FnGENqlOtqMInKh6Y lNnVOo5v/w3c6RBZXai3AobKqs0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSRHk/e XsSVpQCqgSLh1REeW6XUZTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjcyMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oEcwDQYJKoZIhvcNAQELBQADggEBABezDIT4p0q3jAsI2NEGRADKCkSmVfptID08 YsC79Rl38KawDnaa6+pZf54vLvbvWxbvMzQ5uRKn09wG1lhX1Hvj2jn7JiTa1foe VgN+I8HhYvd4zthgOjkpHcIh6ddDJesthdig1YJbFk4CCxT17DRp35e6HT5MWtSh LHDQ6AbrK9tpcsvNY3AkI8amOQ5uzRDtJzDJr7HZg3JQkTGIoN5MufJW/NaFNyRV hDdwzWxQJ8GY2PxQpiLiRdUELL6gdncVjBPBwGHQRKGXsP6mlgymBlVZJdowzqY1 5rLS//IOjbndENK+LpTH+F2TXWO7Ozf3yFFqI9gvKGIuvDG3F8E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:38 2026 by rpki-client