$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142733.roa File: AS142733.roa (raw, json) Hash identifier: FiIXpe2IoBrAAWgWEfTjpfXH4Xogcd5/flrhTCL1i6M= Subject key identifier: EC:EA:37:AC:49:46:DF:2F:59:56:DD:29:0E:45:27:5D:A1:10:5E:AE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 67027B9230AA6B6FA5CFFC4BE88AF2D0C7DB3C8D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142733.roa Signing time: Wed 04 Mar 2026 06:06:32 +0000 ROA not before: Wed 04 Mar 2026 06:01:32 +0000 ROA not after: Wed 03 Mar 2027 06:06:32 +0000 asID: 142733 IP address blocks: 240a:a053::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:02:7b:92:30:aa:6b:6f:a5:cf:fc:4b:e8:8a:f2:d0:c7:db:3c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:32 2026 GMT Not After : Mar 3 06:06:32 2027 GMT Subject: CN=ECEA37AC4946DF2F5956DD290E45275DA1105EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:13:c1:a0:ec:9b:0e:d3:ce:83:43:cd:f5: 8e:b3:ee:27:0a:8a:a4:bf:bd:20:0e:52:5c:82:af: 99:f3:d3:66:75:d8:e1:87:ff:fe:cf:26:bc:3f:7a: 47:bd:c0:ca:52:81:35:1a:c4:7e:5b:f2:aa:2d:7b: 48:bf:18:95:18:39:52:6f:3b:c5:05:d5:f5:38:c0: df:8d:36:be:13:ad:89:41:d2:bd:91:ec:0b:97:16: 3a:3c:ef:48:8c:8b:4e:d9:c4:a7:02:35:33:22:94: e7:8e:20:e9:fd:ab:dd:41:05:6b:88:f4:75:e9:ea: ca:34:cd:ee:7b:a3:e9:5f:f3:1e:cf:1f:2d:f4:44: 26:74:95:ea:96:75:cf:ea:29:5d:db:97:ca:96:ca: 2c:b3:8d:12:3b:0b:84:ef:73:2b:ed:f1:50:8c:1b: c6:6e:ca:c5:26:17:93:57:01:5b:55:c1:0c:0a:c8: b2:7b:d7:79:31:7f:82:ee:43:26:73:5b:b7:4c:dd: a6:29:39:58:4d:d0:35:06:ea:de:76:03:84:06:92: 0e:d4:6f:13:89:08:db:b2:f5:83:46:a3:52:35:50: 71:44:00:e3:5c:79:af:06:04:17:c7:7d:74:cf:65: b6:18:9e:f5:eb:27:85:15:21:e4:6a:51:b7:4c:fb: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EA:37:AC:49:46:DF:2F:59:56:DD:29:0E:45:27:5D:A1:10:5E:AE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a053::/32 Signature Algorithm: sha256WithRSAEncryption a5:d8:fb:f9:19:de:e7:1d:e7:25:6c:60:d2:c5:8e:4e:7f:d1: 8f:87:35:02:f2:74:bf:42:01:a8:5a:90:e8:9f:da:2d:d4:0c: c0:3d:e7:6c:8b:59:71:48:4e:b8:51:02:55:83:82:e0:39:e8: 07:2a:c1:fc:94:03:f7:20:9c:3f:a0:8d:10:1a:d6:73:69:be: ad:f8:dd:a2:18:e9:d4:cc:b6:21:28:bc:35:ef:1e:b3:4f:6c: 45:77:0a:56:2f:28:0c:65:ef:26:06:10:d2:b5:13:8b:ce:47: f6:aa:84:c8:2b:bf:23:26:74:5c:d3:d1:92:43:f4:e1:ee:8a: e3:8f:7e:3d:1a:ac:a6:a1:fb:84:12:4e:40:28:07:00:84:f4: f6:0b:20:63:f8:d7:ac:0b:ab:7a:bb:e2:ef:ee:4b:68:43:58: ae:61:bc:f3:4e:23:f6:a1:66:48:3f:9b:1f:e4:e8:e6:66:12: b3:f9:40:5a:eb:19:c3:3b:af:4a:83:61:02:e2:73:b9:ef:5c: d9:67:8b:eb:ec:ec:d9:da:9f:ba:35:98:a7:e6:ea:04:d5:91: 99:75:23:09:ba:d1:88:5e:35:5f:b2:40:e7:d1:d9:97:67:70: 57:53:a1:57:73:18:b1:a6:e9:fb:95:ce:05:2a:1e:9e:3a:95: 7c:54:ed:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZwJ7kjCqa2+lz/xL6Iry0MfbPI0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzMloX DTI3MDMwMzA2MDYzMlowMzExMC8GA1UEAxMoRUNFQTM3QUM0OTQ2REYyRjU5NTZE RDI5MEU0NTI3NURBMTEwNUVBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmQE8Gg7JsO086DQ831jrPuJwqKpL+9IA5SXIKvmfPTZnXY4Yf//s8mvD96 R73AylKBNRrEflvyqi17SL8YlRg5Um87xQXV9TjA3402vhOtiUHSvZHsC5cWOjzv SIyLTtnEpwI1MyKU544g6f2r3UEFa4j0denqyjTN7nuj6V/zHs8fLfREJnSV6pZ1 z+opXduXypbKLLONEjsLhO9zK+3xUIwbxm7KxSYXk1cBW1XBDArIsnvXeTF/gu5D JnNbt0zdpik5WE3QNQbq3nYDhAaSDtRvE4kI27L1g0ajUjVQcUQA41x5rwYEF8d9 dM9lthie9esnhRUh5GpRt0z7gmcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTs6jes SUbfL1lW3SkORSddoRBerjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjczMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oFMwDQYJKoZIhvcNAQELBQADggEBAKXY+/kZ3ucd5yVsYNLFjk5/0Y+HNQLydL9C AahakOif2i3UDMA952yLWXFITrhRAlWDguA56AcqwfyUA/cgnD+gjRAa1nNpvq34 3aIY6dTMtiEovDXvHrNPbEV3ClYvKAxl7yYGENK1E4vOR/aqhMgrvyMmdFzT0ZJD 9OHuiuOPfj0arKah+4QSTkAoBwCE9PYLIGP416wLq3q74u/uS2hDWK5hvPNOI/ah Zkg/mx/k6OZmErP5QFrrGcM7r0qDYQLic7nvXNlni+vs7Nnan7o1mKfm6gTVkZl1 Iwm60YheNV+yQOfR2ZdncFdToVdzGLGm6fuVzgUqHp46lXxU7Xo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:36 2026 by rpki-client