$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142731.roa File: AS142731.roa (raw, json) Hash identifier: 7VEqDXRe+fv+EZQkI+mJ8K9EwlmbTscf4pAqBSQTsC8= Subject key identifier: 33:F2:91:93:A6:7A:BF:77:F2:98:93:C8:2F:5E:8B:D8:0D:0C:50:95 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6AE52A5E0794E9D03C711BC3E03B3726CA23F80C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142731.roa Signing time: Wed 04 Mar 2026 06:05:28 +0000 ROA not before: Wed 04 Mar 2026 06:00:28 +0000 ROA not after: Wed 03 Mar 2027 06:05:28 +0000 asID: 142731 IP address blocks: 240a:a051::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e5:2a:5e:07:94:e9:d0:3c:71:1b:c3:e0:3b:37:26:ca:23:f8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:28 2026 GMT Not After : Mar 3 06:05:28 2027 GMT Subject: CN=33F29193A67ABF77F29893C82F5E8BD80D0C5095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:dd:68:cb:21:ca:45:ed:4b:1d:89:e0:1f: 80:8d:1b:d5:b5:1e:4f:3f:00:bf:58:63:59:c2:40: 91:75:b8:80:da:6a:bc:06:cb:95:85:c6:4e:6f:b2: 02:2b:c3:df:e5:db:67:08:b9:08:9c:36:2a:82:28: 51:20:73:02:95:fd:b2:d7:40:37:2e:81:ac:0b:f7: 32:96:22:80:a3:54:04:fa:ca:bf:1a:27:99:95:d1: 32:84:ae:ba:c1:56:01:ff:e6:77:b4:93:0a:1d:12: ca:c8:06:75:a4:51:62:8a:9f:36:a6:ec:cb:83:4d: 16:8d:80:fa:b8:8a:77:32:6c:fe:8a:ea:57:89:96: 37:b3:f3:29:02:16:12:ac:03:6b:e4:0e:8c:e9:d6: 37:02:6d:77:0a:a2:dd:24:fa:a6:d3:ab:30:18:2b: fd:48:b3:89:66:57:65:2a:ee:ad:49:0d:20:0b:da: 11:79:5f:dc:d6:50:bb:a6:52:56:62:0e:30:49:88: 93:4c:1f:c8:d1:83:42:63:b8:c2:10:55:ec:42:5a: 6c:a4:5e:64:22:ab:45:20:3f:91:c9:aa:46:87:7a: 84:e0:27:e4:7e:53:3b:2c:79:8d:9f:56:37:c6:13: 6a:ff:29:c1:6e:33:47:7b:4c:8a:27:ae:06:e6:e4: 3c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F2:91:93:A6:7A:BF:77:F2:98:93:C8:2F:5E:8B:D8:0D:0C:50:95 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a051::/32 Signature Algorithm: sha256WithRSAEncryption 1b:3f:51:57:1c:2d:9d:47:e8:da:56:1d:62:d4:72:b8:93:8f: 41:3e:67:7e:9c:99:94:17:cb:97:2a:6a:f7:8a:71:1c:3d:0d: 80:a8:dc:ed:57:c2:3e:3c:96:2a:c7:38:ef:3e:7c:ce:f7:39: 5b:cb:41:a9:0d:7d:ea:be:04:bc:8e:3f:07:97:0d:52:4b:af: 1a:a2:4b:fa:e7:56:19:0f:3e:55:b2:74:be:e3:4a:75:fb:57: 8c:2b:f9:b0:2a:ad:d3:df:b7:3e:c4:51:b0:97:e0:40:a3:0c: 48:5d:64:70:b4:01:32:3b:11:6a:d2:63:2f:bf:79:9e:9d:d8: dc:a4:97:42:46:b8:21:0e:a1:76:25:a4:8f:6a:6e:38:47:bf: 06:8b:07:aa:cb:76:97:5b:a2:56:9d:56:e5:91:2d:e8:e7:51: cb:05:07:86:c9:83:f0:76:0c:77:5c:c3:2b:4e:2f:72:cb:96: 3e:08:3a:c3:c1:e7:2c:e7:19:ae:a0:3b:37:92:de:f8:34:c2: 0e:16:cb:d5:45:4b:35:e2:1d:67:1d:1d:62:3b:72:05:2e:21: d6:3f:b6:0b:24:14:79:ed:32:1d:4d:8e:47:03:66:36:98:97: 76:8f:82:2a:1f:33:6a:5f:3c:09:53:7f:c3:43:ee:e3:bb:8e: 88:87:ca:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUauUqXgeU6dA8cRvD4Ds3Jsoj+AwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyOFoX DTI3MDMwMzA2MDUyOFowMzExMC8GA1UEAxMoMzNGMjkxOTNBNjdBQkY3N0YyOTg5 M0M4MkY1RThCRDgwRDBDNTA5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRD3WjLIcpF7UsdieAfgI0b1bUeTz8Av1hjWcJAkXW4gNpqvAbLlYXGTm+y AivD3+XbZwi5CJw2KoIoUSBzApX9stdANy6BrAv3MpYigKNUBPrKvxonmZXRMoSu usFWAf/md7STCh0SysgGdaRRYoqfNqbsy4NNFo2A+riKdzJs/orqV4mWN7PzKQIW EqwDa+QOjOnWNwJtdwqi3ST6ptOrMBgr/UiziWZXZSrurUkNIAvaEXlf3NZQu6ZS VmIOMEmIk0wfyNGDQmO4whBV7EJabKReZCKrRSA/kcmqRod6hOAn5H5TOyx5jZ9W N8YTav8pwW4zR3tMiieuBubkPAECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQz8pGT pnq/d/KYk8gvXovYDQxQlTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjczMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oFEwDQYJKoZIhvcNAQELBQADggEBABs/UVccLZ1H6NpWHWLUcriTj0E+Z36cmZQX y5cqaveKcRw9DYCo3O1Xwj48lirHOO8+fM73OVvLQakNfeq+BLyOPweXDVJLrxqi S/rnVhkPPlWydL7jSnX7V4wr+bAqrdPftz7EUbCX4ECjDEhdZHC0ATI7EWrSYy+/ eZ6d2Nykl0JGuCEOoXYlpI9qbjhHvwaLB6rLdpdboladVuWRLejnUcsFB4bJg/B2 DHdcwytOL3LLlj4IOsPB5yznGa6gOzeS3vg0wg4Wy9VFSzXiHWcdHWI7cgUuIdY/ tgskFHntMh1NjkcDZjaYl3aPgiofM2pfPAlTf8ND7uO7joiHyv8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:26 2026 by rpki-client