$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142742.roa File: AS142742.roa (raw, json) Hash identifier: ZbOeonHbpuJiYmsnOM1QkKt7fwJMxrlAWqaVUsTUvgY= Subject key identifier: 52:AD:5B:21:D3:B7:B4:2D:C7:20:ED:D9:64:22:A3:EC:AB:16:42:0A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C98E4749B1AEB009BE9447C9F6266A1AFDDABA1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142742.roa Signing time: Wed 04 Mar 2026 06:07:54 +0000 ROA not before: Wed 04 Mar 2026 06:02:54 +0000 ROA not after: Wed 03 Mar 2027 06:07:54 +0000 asID: 142742 IP address blocks: 240a:a05c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:98:e4:74:9b:1a:eb:00:9b:e9:44:7c:9f:62:66:a1:af:dd:ab:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:54 2026 GMT Not After : Mar 3 06:07:54 2027 GMT Subject: CN=52AD5B21D3B7B42DC720EDD96422A3ECAB16420A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:08:04:be:9f:6e:5d:e0:63:80:23:a6:4f: 9a:25:2c:34:65:4d:44:4d:88:1f:18:dd:4b:62:f2: 73:9f:8f:f3:a6:1c:cf:09:94:47:c6:ad:f3:8d:3d: f8:1a:7d:2d:54:ef:bb:bf:f7:c1:16:b3:81:72:b5: 54:22:be:8b:89:e8:b4:c9:9b:da:f7:75:53:65:13: e6:e2:5a:46:61:ec:b5:51:92:bb:61:00:4c:e4:14: 02:8f:6a:e2:18:c8:98:71:9f:95:55:2f:ad:35:d1: a8:cc:6b:c7:55:e0:8e:24:4f:18:df:7a:a9:d7:77: 6b:34:7c:e6:86:5c:3f:ad:fd:52:78:ec:9f:2d:db: 9a:0d:ce:0f:15:12:2d:51:72:a4:18:81:71:f5:32: a4:60:65:2c:6c:aa:d0:9d:3a:66:b9:f6:78:8b:2a: 29:a5:15:0b:c2:10:fb:31:a1:f3:d1:f2:49:c5:bc: fd:eb:04:9e:ab:10:64:b7:bd:36:3c:5f:d4:8e:9e: a1:f6:2d:41:4b:03:45:77:a9:22:9d:22:e5:6c:7c: a0:d7:3e:49:9c:ad:61:d5:be:ad:11:0c:91:7d:37: e0:23:a9:64:c8:3b:0e:76:ae:ac:4b:23:1f:0c:08: 12:ef:a7:50:a4:fc:0a:30:c8:e1:2d:8c:c1:84:bc: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AD:5B:21:D3:B7:B4:2D:C7:20:ED:D9:64:22:A3:EC:AB:16:42:0A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142742.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a05c::/32 Signature Algorithm: sha256WithRSAEncryption 86:e2:17:b0:ce:47:39:99:40:a3:78:60:21:6d:ed:90:41:05: 73:f1:d8:12:0f:a9:ef:1b:6d:23:37:83:05:e7:42:d2:7c:5c: 5e:a2:de:68:5d:03:31:94:f9:15:c6:c3:21:d8:cd:b7:8a:a1: 18:3d:d5:9f:7c:5a:ae:bc:85:bf:0d:54:c3:cf:85:e1:19:b7: a2:ed:4a:a6:ad:ae:c5:df:54:6d:e6:79:63:c9:10:8c:21:48: df:e4:08:36:46:2c:f2:f9:3d:ff:4c:08:69:1b:a3:46:18:41: 22:c2:97:f4:f4:45:33:cc:ad:be:84:d6:74:fb:ba:9c:7f:6c: ad:79:34:6b:f1:e4:3e:15:bd:68:28:b1:ac:d2:3a:22:a9:8a: 64:5c:88:a1:72:d3:75:81:41:d4:a3:20:63:fa:83:b7:5b:fd: 9a:00:24:91:0a:5b:7a:e6:8e:0c:d2:62:e5:6d:52:14:de:34: ba:66:44:fb:73:9a:4c:50:1e:af:62:15:84:bb:32:2d:49:9d: 1e:16:ae:da:ec:55:36:74:33:43:a5:f2:9b:3a:b2:97:0c:1f: d7:32:2b:de:53:5c:1a:86:f7:3f:61:3d:7b:65:2b:cb:b9:a8: 6f:d2:3a:5b:70:48:1c:14:bb:c9:61:39:ae:23:f2:35:1d:a2: ef:5f:4b:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfJjkdJsa6wCb6UR8n2Jmoa/dq6EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1NFoX DTI3MDMwMzA2MDc1NFowMzExMC8GA1UEAxMoNTJBRDVCMjFEM0I3QjQyREM3MjBF REQ5NjQyMkEzRUNBQjE2NDIwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANW0CAS+n25d4GOAI6ZPmiUsNGVNRE2IHxjdS2Lyc5+P86YczwmUR8at8409 +Bp9LVTvu7/3wRazgXK1VCK+i4notMmb2vd1U2UT5uJaRmHstVGSu2EATOQUAo9q 4hjImHGflVUvrTXRqMxrx1XgjiRPGN96qdd3azR85oZcP639Unjsny3bmg3ODxUS LVFypBiBcfUypGBlLGyq0J06Zrn2eIsqKaUVC8IQ+zGh89HyScW8/esEnqsQZLe9 Njxf1I6eofYtQUsDRXepIp0i5Wx8oNc+SZytYdW+rREMkX034COpZMg7DnaurEsj HwwIEu+nUKT8CjDI4S2MwYS8XJECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRSrVsh 07e0Lccg7dlkIqPsqxZCCjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oFwwDQYJKoZIhvcNAQELBQADggEBAIbiF7DORzmZQKN4YCFt7ZBBBXPx2BIPqe8b bSM3gwXnQtJ8XF6i3mhdAzGU+RXGwyHYzbeKoRg91Z98Wq68hb8NVMPPheEZt6Lt SqatrsXfVG3meWPJEIwhSN/kCDZGLPL5Pf9MCGkbo0YYQSLCl/T0RTPMrb6E1nT7 upx/bK15NGvx5D4VvWgosazSOiKpimRciKFy03WBQdSjIGP6g7db/ZoAJJEKW3rm jgzSYuVtUhTeNLpmRPtzmkxQHq9iFYS7Mi1JnR4WrtrsVTZ0M0Ol8ps6spcMH9cy K95TXBqG9z9hPXtlK8u5qG/SOltwSBwUu8lhOa4j8jUdou9fS9M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:30 2026 by rpki-client