$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142746.roa File: AS142746.roa (raw, json) Hash identifier: pXL8CFDu+OMilbGBtRJJcuyo5NqYh+OOE6ydAD7cpsE= Subject key identifier: 91:45:0E:39:78:04:2F:FA:E4:75:B8:35:72:84:A4:BA:13:3B:C6:4E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0E9FC4AA04E381E8804BB5243DE23CA9D6E7A063 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142746.roa Signing time: Wed 04 Mar 2026 06:05:24 +0000 ROA not before: Wed 04 Mar 2026 06:00:24 +0000 ROA not after: Wed 03 Mar 2027 06:05:24 +0000 asID: 142746 IP address blocks: 240a:a060::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9f:c4:aa:04:e3:81:e8:80:4b:b5:24:3d:e2:3c:a9:d6:e7:a0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:24 2026 GMT Not After : Mar 3 06:05:24 2027 GMT Subject: CN=91450E3978042FFAE475B8357284A4BA133BC64E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:17:42:10:d1:32:a3:18:cb:de:5b:7f:ec: b5:c4:65:9d:cc:3a:e2:a9:ad:63:8e:1d:ce:fd:d2: 60:df:97:75:61:88:3e:25:15:1b:e4:50:e0:b5:6b: b8:01:4e:af:33:46:f8:21:76:c0:15:37:a5:da:3a: ec:83:10:60:79:1e:61:b9:95:d3:fe:4a:4d:25:30: a3:6e:67:16:20:d8:ec:a1:ea:a4:59:3d:52:ce:17: 38:e4:47:98:0e:17:0b:0a:dc:d2:6d:0e:7b:e9:2b: 64:72:4e:99:e0:db:db:c4:33:a3:b6:bb:4b:40:50: e7:57:e9:28:fd:33:8e:e8:5e:87:ec:74:68:cb:06: ee:32:12:96:35:0c:bf:b7:78:38:e3:fd:f2:f6:b4: 67:8e:aa:83:77:28:8a:ff:c4:ff:c0:d1:ec:79:4f: 88:63:3c:0f:86:5b:85:64:44:3b:2b:7a:1d:d2:a8: 27:d5:83:54:c5:39:97:15:45:50:07:a0:99:61:bb: 96:e7:f1:a3:69:2c:6a:9f:80:40:58:a3:c9:d2:6d: 12:29:85:d4:78:b1:f0:2c:10:97:58:f8:95:c6:32: 70:f1:1e:7a:2e:f2:e8:e7:9a:14:1d:56:92:1f:73: 36:51:af:53:1d:70:03:f1:38:5c:41:bb:d8:91:0e: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:45:0E:39:78:04:2F:FA:E4:75:B8:35:72:84:A4:BA:13:3B:C6:4E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142746.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a060::/32 Signature Algorithm: sha256WithRSAEncryption 0a:3b:b6:2e:e0:a1:a7:db:53:e3:25:30:49:b8:08:85:16:c8: a0:ae:0a:ba:d7:4f:2b:a0:19:a8:64:58:0d:8d:88:ef:b0:02: db:1f:7d:75:c3:78:8f:62:83:f3:9c:e7:f2:e8:34:e3:12:9f: 3d:b3:3e:bc:8d:20:9b:7c:b2:78:85:12:73:e8:ef:bd:c6:ac: f2:dc:7b:9b:f9:21:8d:d1:2a:36:9a:86:7b:d9:04:be:6b:ee: d3:92:57:16:56:c6:02:23:52:a4:ec:32:e0:7b:e0:c3:fb:18: d5:61:f1:ef:c9:14:27:54:0f:02:bc:c9:f5:df:0e:2e:01:0a: c3:52:59:76:23:e4:f3:e6:97:c2:fe:c0:cc:16:38:db:9f:30: 09:49:1b:0a:a0:99:df:90:4e:28:16:48:1e:89:27:f6:c1:83: 9f:80:00:68:a7:65:09:02:50:37:8e:70:c1:fd:1e:ac:9a:f9: d7:ab:b7:d6:06:13:a5:c6:5b:0c:fb:19:60:08:d4:39:b1:18: ca:9d:9c:0b:ea:1a:8d:c1:7f:f8:90:8a:d7:38:71:cd:56:b6: b9:cb:f3:cc:24:f0:dd:a0:a9:30:22:c3:4a:a0:f9:e9:6a:31: f4:76:49:23:25:eb:01:11:8f:bb:28:1d:ab:0b:ed:6d:02:84: 0d:cf:ab:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDp/EqgTjgeiAS7UkPeI8qdbnoGMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyNFoX DTI3MDMwMzA2MDUyNFowMzExMC8GA1UEAxMoOTE0NTBFMzk3ODA0MkZGQUU0NzVC ODM1NzI4NEE0QkExMzNCQzY0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKO0F0IQ0TKjGMveW3/stcRlncw64qmtY44dzv3SYN+XdWGIPiUVG+RQ4LVr uAFOrzNG+CF2wBU3pdo67IMQYHkeYbmV0/5KTSUwo25nFiDY7KHqpFk9Us4XOORH mA4XCwrc0m0Oe+krZHJOmeDb28Qzo7a7S0BQ51fpKP0zjuheh+x0aMsG7jISljUM v7d4OOP98va0Z46qg3coiv/E/8DR7HlPiGM8D4ZbhWREOyt6HdKoJ9WDVMU5lxVF UAegmWG7lufxo2ksap+AQFijydJtEimF1Hix8CwQl1j4lcYycPEeei7y6OeaFB1W kh9zNlGvUx1wA/E4XEG72JEOaMsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSRRQ45 eAQv+uR1uDVyhKS6EzvGTjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oGAwDQYJKoZIhvcNAQELBQADggEBAAo7ti7goafbU+MlMEm4CIUWyKCuCrrXTyug GahkWA2NiO+wAtsffXXDeI9ig/Oc5/LoNOMSnz2zPryNIJt8sniFEnPo773GrPLc e5v5IY3RKjaahnvZBL5r7tOSVxZWxgIjUqTsMuB74MP7GNVh8e/JFCdUDwK8yfXf Di4BCsNSWXYj5PPml8L+wMwWONufMAlJGwqgmd+QTigWSB6JJ/bBg5+AAGinZQkC UDeOcMH9Hqya+dert9YGE6XGWwz7GWAI1DmxGMqdnAvqGo3Bf/iQitc4cc1WtrnL 88wk8N2gqTAiw0qg+elqMfR2SSMl6wERj7soHasL7W0ChA3Pq/k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:36 2026 by rpki-client