$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142744.roa File: AS142744.roa (raw, json) Hash identifier: ns5r+srDeGUO8QcxJyKWHuis6mh8BpKQjh+VWj3QkTI= Subject key identifier: BF:AB:8B:21:E6:49:AC:05:FF:32:8B:99:A2:36:3A:0E:ED:14:44:24 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 381BDBDA351DE3AB49F4D9E8E243346D7A7F4F25 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142744.roa Signing time: Wed 04 Mar 2026 06:07:21 +0000 ROA not before: Wed 04 Mar 2026 06:02:21 +0000 ROA not after: Wed 03 Mar 2027 06:07:21 +0000 asID: 142744 IP address blocks: 240a:a05e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1b:db:da:35:1d:e3:ab:49:f4:d9:e8:e2:43:34:6d:7a:7f:4f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:21 2026 GMT Not After : Mar 3 06:07:21 2027 GMT Subject: CN=BFAB8B21E649AC05FF328B99A2363A0EED144424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:96:d8:b7:2a:4a:4d:79:de:94:77:83:70: e6:f8:dc:58:36:03:0a:97:22:74:2f:ef:35:a6:62: ee:80:39:60:c0:69:9a:2b:12:e4:91:bd:55:62:29: 41:7d:fb:93:de:18:6f:a1:f2:7f:73:4e:cd:46:4c: 9e:14:a9:0e:12:56:45:71:b9:77:c2:34:aa:4f:ca: dc:e2:99:61:c6:46:48:89:8f:3f:f2:57:19:1d:14: 19:3f:1c:42:b2:98:86:18:66:3f:ac:5d:93:ee:b2: 90:c2:1d:80:74:c6:31:ad:58:66:62:62:0d:c2:57: 1a:a0:c6:8b:0e:00:dc:d7:a4:df:c9:b5:1a:7d:c2: d5:32:31:50:31:d1:0e:52:68:65:8a:87:2b:f3:5d: e3:d8:ca:89:3d:37:6a:28:3f:e0:4d:d9:6f:2d:5b: f9:8e:19:a4:b0:cf:dd:b1:25:79:c5:f0:14:91:d3: 38:ce:59:97:04:5c:c6:0e:ec:98:81:84:0e:7d:3c: 0a:ee:da:49:64:ff:7d:0b:fe:3b:02:3a:d9:2a:9a: 5a:d0:98:31:18:2e:b8:34:db:e7:ac:32:9a:d8:00: f9:db:bc:00:5a:90:ff:6e:73:a2:99:af:3b:31:5d: a8:98:3c:12:64:a3:e6:1b:85:57:9f:52:19:57:1d: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AB:8B:21:E6:49:AC:05:FF:32:8B:99:A2:36:3A:0E:ED:14:44:24 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142744.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a05e::/32 Signature Algorithm: sha256WithRSAEncryption a6:3b:7c:91:26:93:37:c1:03:f3:ff:e4:52:46:64:42:94:70: d7:29:0d:88:4e:46:62:85:43:bb:b0:aa:3d:99:b6:76:65:2e: e1:ff:9d:12:68:7e:ca:33:3e:88:d9:5b:3f:2d:33:75:4f:db: 0f:7a:37:f5:6e:ce:86:64:0e:37:d4:33:e1:9d:ea:fb:1e:f0: d1:a8:ce:af:4b:cb:9a:b4:25:1f:00:15:69:dc:9b:0e:2b:05: 93:3b:81:bd:cd:db:79:5a:2f:5b:a3:19:63:26:1f:3d:3c:b4: ba:80:e1:12:07:91:21:6a:04:7a:38:40:34:97:0b:d4:8d:ea: 42:3b:51:23:d0:a4:48:58:90:1e:d8:0e:9b:da:ce:8a:e5:fb: a5:30:20:9b:ca:e1:a1:50:3a:61:2f:59:0c:19:b6:53:eb:21: 68:48:3b:5b:d6:fe:33:e2:bd:14:79:5e:39:63:6e:8c:b2:9d: a5:4d:43:d0:a8:15:c4:ce:cc:38:bf:39:d0:ab:73:ad:b1:09: 07:d1:46:e1:64:21:9d:05:f5:05:3b:af:c0:75:4f:5b:9e:41: c3:fa:2e:95:08:b6:35:20:d0:82:3a:24:6a:97:50:63:ba:97: 79:1e:ac:63:89:95:a6:89:d9:9b:9f:47:f9:f2:b9:97:82:7e: 0a:1d:6a:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOBvb2jUd46tJ9Nno4kM0bXp/TyUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyMVoX DTI3MDMwMzA2MDcyMVowMzExMC8GA1UEAxMoQkZBQjhCMjFFNjQ5QUMwNUZGMzI4 Qjk5QTIzNjNBMEVFRDE0NDQyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMQlti3KkpNed6Ud4Nw5vjcWDYDCpcidC/vNaZi7oA5YMBpmisS5JG9VWIp QX37k94Yb6Hyf3NOzUZMnhSpDhJWRXG5d8I0qk/K3OKZYcZGSImPP/JXGR0UGT8c QrKYhhhmP6xdk+6ykMIdgHTGMa1YZmJiDcJXGqDGiw4A3Nek38m1Gn3C1TIxUDHR DlJoZYqHK/Nd49jKiT03aig/4E3Zby1b+Y4ZpLDP3bElecXwFJHTOM5ZlwRcxg7s mIGEDn08Cu7aSWT/fQv+OwI62SqaWtCYMRguuDTb56wymtgA+du8AFqQ/25zopmv OzFdqJg8EmSj5huFV59SGVcddscCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS/q4sh 5kmsBf8yi5miNjoO7RREJDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oF4wDQYJKoZIhvcNAQELBQADggEBAKY7fJEmkzfBA/P/5FJGZEKUcNcpDYhORmKF Q7uwqj2ZtnZlLuH/nRJofsozPojZWz8tM3VP2w96N/VuzoZkDjfUM+Gd6vse8NGo zq9Ly5q0JR8AFWncmw4rBZM7gb3N23laL1ujGWMmHz08tLqA4RIHkSFqBHo4QDSX C9SN6kI7USPQpEhYkB7YDpvazorl+6UwIJvK4aFQOmEvWQwZtlPrIWhIO1vW/jPi vRR5XjljboyynaVNQ9CoFcTOzDi/OdCrc62xCQfRRuFkIZ0F9QU7r8B1T1ueQcP6 LpUItjUg0II6JGqXUGO6l3kerGOJlaaJ2ZufR/nyuZeCfgodamA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:54 2026 by rpki-client