$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142729.roa File: AS142729.roa (raw, json) Hash identifier: kKK/CSKod0pb09twxSqS4NOkKhYwQAL6CdTKkst+6fg= Subject key identifier: DC:5B:DA:9E:7C:B4:46:DA:73:84:7A:F7:1E:C1:06:9F:25:16:E2:89 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5FA91E4F4A378910B2A93820C62372040556976E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142729.roa Signing time: Wed 04 Mar 2026 06:07:32 +0000 ROA not before: Wed 04 Mar 2026 06:02:32 +0000 ROA not after: Wed 03 Mar 2027 06:07:32 +0000 asID: 142729 IP address blocks: 240a:a04f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a9:1e:4f:4a:37:89:10:b2:a9:38:20:c6:23:72:04:05:56:97:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:32 2026 GMT Not After : Mar 3 06:07:32 2027 GMT Subject: CN=DC5BDA9E7CB446DA73847AF71EC1069F2516E289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:e7:7f:52:24:69:ee:03:d1:2e:4a:93:ef: 09:0f:69:c2:c4:88:0c:30:11:c3:8d:91:77:ba:6c: 4f:56:58:07:85:7b:08:cd:4a:1e:a8:c9:eb:cb:a9: a4:64:e2:0f:7d:7e:0d:1b:b3:8b:03:f5:89:c4:40: 79:1b:0f:10:fe:ca:04:cd:bc:41:f7:b9:9e:8d:d3: 1e:bf:1f:0f:65:c6:eb:74:8e:68:9e:39:39:d0:09: 99:01:cb:41:61:ff:5b:3f:18:e7:31:ac:d2:e2:4a: 1d:e5:0c:17:53:e7:eb:7a:52:47:85:15:8b:43:96: 56:9e:40:05:a1:7d:66:bc:49:04:57:ef:5e:25:e6: ae:3f:89:e0:90:80:a3:dd:c3:85:f0:05:86:c6:77: 31:d6:bc:e5:e6:92:87:a0:61:96:57:0c:1f:69:b2: 85:2d:0a:ad:60:05:fc:7e:29:c8:4b:e5:34:9b:39: 95:c9:ba:81:7c:83:84:3f:c0:7b:0e:1f:c3:41:4a: 2f:9f:9b:5c:00:e1:7c:51:4e:1c:90:eb:9b:5e:59: 80:29:76:7e:53:08:44:3f:9c:7d:32:2d:52:ab:65: 35:21:5b:ac:fa:73:ca:17:26:2b:20:c5:a2:64:23: eb:5e:c0:31:63:b6:4a:8a:30:da:28:f1:29:07:86: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5B:DA:9E:7C:B4:46:DA:73:84:7A:F7:1E:C1:06:9F:25:16:E2:89 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142729.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a04f::/32 Signature Algorithm: sha256WithRSAEncryption 43:0c:4e:05:b8:e4:4d:dd:a3:b5:20:4a:3f:2e:85:a3:7f:5d: 6a:cd:37:85:75:bb:2d:b2:66:be:64:e7:51:69:80:ae:bd:35: 64:2f:99:36:72:55:00:e6:b1:44:31:ce:e5:eb:3d:ed:a8:0d: 1c:bf:77:4a:7f:9a:d4:06:a1:3d:d4:d8:3b:80:a2:93:a1:76: fc:54:0b:ab:f2:3f:b2:ce:34:c1:3d:b2:41:81:c3:9e:85:3a: 30:39:fb:f2:89:7d:8f:e5:a8:df:1f:34:84:e7:f3:8a:2d:b5: 2b:7e:36:c0:68:80:fe:f1:21:d0:ee:8c:5b:d1:ab:9a:73:cc: ab:e6:63:bd:19:56:15:87:3d:2e:80:c7:62:fb:09:e6:25:95: 9a:b1:a0:cc:5e:11:cc:c9:12:63:17:96:2e:ca:01:28:1a:e4: 54:f8:fc:35:1b:93:27:a6:41:1a:61:49:24:3c:69:a7:42:f6: ae:5e:61:1a:1a:ec:f0:ae:2a:4e:68:37:0e:99:f5:17:90:ff: a7:2b:8b:3e:c3:ed:77:61:f1:7c:b0:a0:db:c2:52:f2:68:42: 3e:47:12:80:31:cb:74:2b:48:8d:ea:42:74:a9:56:23:82:f7: e5:07:1e:07:53:38:47:81:1c:91:d1:b6:1b:18:e8:c4:57:1b: b4:4e:06:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX6keT0o3iRCyqTggxiNyBAVWl24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzMloX DTI3MDMwMzA2MDczMlowMzExMC8GA1UEAxMoREM1QkRBOUU3Q0I0NDZEQTczODQ3 QUY3MUVDMTA2OUYyNTE2RTI4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKg0539SJGnuA9EuSpPvCQ9pwsSIDDARw42Rd7psT1ZYB4V7CM1KHqjJ68up pGTiD31+DRuziwP1icRAeRsPEP7KBM28Qfe5no3THr8fD2XG63SOaJ45OdAJmQHL QWH/Wz8Y5zGs0uJKHeUMF1Pn63pSR4UVi0OWVp5ABaF9ZrxJBFfvXiXmrj+J4JCA o93DhfAFhsZ3Mda85eaSh6BhllcMH2myhS0KrWAF/H4pyEvlNJs5lcm6gXyDhD/A ew4fw0FKL5+bXADhfFFOHJDrm15ZgCl2flMIRD+cfTItUqtlNSFbrPpzyhcmKyDF omQj617AMWO2Soow2ijxKQeGSMcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTcW9qe fLRG2nOEevcewQafJRbiiTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjcyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oE8wDQYJKoZIhvcNAQELBQADggEBAEMMTgW45E3do7UgSj8uhaN/XWrNN4V1uy2y Zr5k51FpgK69NWQvmTZyVQDmsUQxzuXrPe2oDRy/d0p/mtQGoT3U2DuAopOhdvxU C6vyP7LONME9skGBw56FOjA5+/KJfY/lqN8fNITn84ottSt+NsBogP7xIdDujFvR q5pzzKvmY70ZVhWHPS6Ax2L7CeYllZqxoMxeEczJEmMXli7KASga5FT4/DUbkyem QRphSSQ8aadC9q5eYRoa7PCuKk5oNw6Z9ReQ/6criz7D7Xdh8XywoNvCUvJoQj5H EoAxy3QrSI3qQnSpViOC9+UHHgdTOEeBHJHRthsY6MRXG7ROBo0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:14 2026 by rpki-client