$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142747.roa File: AS142747.roa (raw, json) Hash identifier: oaloSthiUCrI+KqqFFw05slil4473CdCVZZ53T4WXng= Subject key identifier: 7B:D0:50:A7:75:83:11:9C:31:3D:B8:73:F9:0B:43:11:8A:DF:4D:49 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 33C1B9164EB2B50B24C3AD6C4E19052E4C4E99E3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142747.roa Signing time: Wed 04 Mar 2026 06:06:06 +0000 ROA not before: Wed 04 Mar 2026 06:01:06 +0000 ROA not after: Wed 03 Mar 2027 06:06:06 +0000 asID: 142747 IP address blocks: 240a:a061::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c1:b9:16:4e:b2:b5:0b:24:c3:ad:6c:4e:19:05:2e:4c:4e:99:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:06 2026 GMT Not After : Mar 3 06:06:06 2027 GMT Subject: CN=7BD050A77583119C313DB873F90B43118ADF4D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:08:a1:0f:fc:d7:15:4a:7f:93:4e:3e:53: 2c:04:3f:fe:05:7b:e3:37:8d:a0:20:57:34:09:7c: 67:3b:52:f0:ec:9a:de:66:b2:55:a2:dd:19:96:bb: 30:1f:5e:2f:fa:fa:ee:35:fd:65:1b:ee:55:91:7b: d3:27:97:ce:0a:ba:95:8c:36:d7:e9:66:1b:d7:59: bc:c6:d0:fa:ad:9a:22:86:4d:b0:c2:1f:c9:75:ee: bf:22:89:30:05:65:e0:9f:1b:f0:12:23:a7:d2:16: cf:9a:fb:fa:26:66:1e:91:83:eb:36:9f:ec:cc:ed: 12:25:a1:a0:71:38:7b:a3:20:32:d8:c1:20:be:70: 88:62:81:82:f6:89:5d:6a:2c:b2:82:64:72:78:f0: 4d:71:8b:45:59:50:05:0b:0a:11:8d:52:57:39:31: 9c:79:41:d6:72:2a:a7:de:95:1f:a4:92:6f:17:06: 8d:a3:f4:bc:c3:54:45:f4:66:0d:f0:df:c7:ec:e9: 56:de:6e:9a:8c:fd:25:26:34:2c:d9:d3:5a:a9:d8: 07:79:9f:29:61:b1:07:0e:c9:f8:9c:d2:13:b5:9f: da:69:c9:1b:a9:10:02:99:b8:79:be:ba:85:99:db: 3b:37:ff:8d:b7:19:4f:6f:fb:55:a2:89:16:4e:1f: 72:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D0:50:A7:75:83:11:9C:31:3D:B8:73:F9:0B:43:11:8A:DF:4D:49 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142747.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a061::/32 Signature Algorithm: sha256WithRSAEncryption 39:33:47:f9:db:62:a1:0a:be:a6:b0:41:62:e5:de:e7:93:cb: 2d:45:a3:e0:db:04:0f:d0:93:8a:81:72:79:8d:29:a5:b4:45: 4f:4a:c8:4c:8b:66:6c:89:8e:cf:e6:49:af:f3:15:80:04:10: 1d:38:97:d6:91:02:71:70:7b:4f:01:af:75:51:5b:c9:95:c1: 3c:5c:53:31:ad:87:7c:f7:2a:86:34:fd:33:19:59:f2:dc:3f: 79:e5:eb:0e:c3:3b:2a:45:07:73:26:b7:73:93:a9:3e:92:7e: 2b:42:f5:74:5d:0f:44:68:19:24:1c:0d:8d:45:60:df:b6:f9: ed:89:0f:4f:cf:8a:74:a5:a4:d8:ba:b0:77:35:c4:0d:79:a0: 63:50:3e:f3:0a:81:dc:4a:93:41:40:f3:4a:ec:16:89:f9:c8: 7f:e1:b6:bc:ba:ac:eb:69:fc:7a:02:15:11:e5:00:40:04:17: d4:ba:a3:ba:fd:2c:85:61:33:98:b2:a6:4d:e4:eb:88:76:f3: 6f:3e:9f:66:3f:49:3b:7b:a3:b6:ac:e3:d1:dd:62:7b:43:15: f3:25:6a:67:07:82:2c:5a:ad:23:e0:93:2c:33:1e:7c:d9:bf: 00:f8:90:1a:2f:07:0d:ad:87:42:8b:1b:08:9b:cc:2d:ff:29: 69:61:38:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM8G5Fk6ytQskw61sThkFLkxOmeMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwNloX DTI3MDMwMzA2MDYwNlowMzExMC8GA1UEAxMoN0JEMDUwQTc3NTgzMTE5QzMxM0RC ODczRjkwQjQzMTE4QURGNEQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgGCKEP/NcVSn+TTj5TLAQ//gV74zeNoCBXNAl8ZztS8Oya3mayVaLdGZa7 MB9eL/r67jX9ZRvuVZF70yeXzgq6lYw21+lmG9dZvMbQ+q2aIoZNsMIfyXXuvyKJ MAVl4J8b8BIjp9IWz5r7+iZmHpGD6zaf7MztEiWhoHE4e6MgMtjBIL5wiGKBgvaJ XWossoJkcnjwTXGLRVlQBQsKEY1SVzkxnHlB1nIqp96VH6SSbxcGjaP0vMNURfRm DfDfx+zpVt5umoz9JSY0LNnTWqnYB3mfKWGxBw7J+JzSE7Wf2mnJG6kQApm4eb66 hZnbOzf/jbcZT2/7VaKJFk4fcq0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR70FCn dYMRnDE9uHP5C0MRit9NSTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oGEwDQYJKoZIhvcNAQELBQADggEBADkzR/nbYqEKvqawQWLl3ueTyy1Fo+DbBA/Q k4qBcnmNKaW0RU9KyEyLZmyJjs/mSa/zFYAEEB04l9aRAnFwe08Br3VRW8mVwTxc UzGth3z3KoY0/TMZWfLcP3nl6w7DOypFB3Mmt3OTqT6SfitC9XRdD0RoGSQcDY1F YN+2+e2JD0/PinSlpNi6sHc1xA15oGNQPvMKgdxKk0FA80rsFon5yH/htry6rOtp /HoCFRHlAEAEF9S6o7r9LIVhM5iypk3k64h2828+n2Y/STt7o7as49HdYntDFfMl amcHgixarSPgkywzHnzZvwD4kBovBw2th0KLGwibzC3/KWlhOAY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:19 2026 by rpki-client