$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142749.roa File: AS142749.roa (raw, json) Hash identifier: 5O7w5+25duzFCp8hmBN8yoS4DeJePDlT1twEAn0Aaw4= Subject key identifier: F1:62:13:F2:6F:01:23:97:80:C5:85:3E:57:AD:1E:12:1D:ED:76:6F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5186EAB4A43499EB062D955E3C11B84D2D14F151 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142749.roa Signing time: Wed 04 Mar 2026 06:05:42 +0000 ROA not before: Wed 04 Mar 2026 06:00:42 +0000 ROA not after: Wed 03 Mar 2027 06:05:42 +0000 asID: 142749 IP address blocks: 240a:a063::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:86:ea:b4:a4:34:99:eb:06:2d:95:5e:3c:11:b8:4d:2d:14:f1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:42 2026 GMT Not After : Mar 3 06:05:42 2027 GMT Subject: CN=F16213F26F01239780C5853E57AD1E121DED766F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:9d:04:9f:f2:b3:59:d1:97:52:c4:9d:e1: e8:b9:d2:45:70:86:ae:39:d1:4e:74:ab:fc:80:5d: b1:a9:06:8c:48:b1:ab:7a:4f:f4:36:6d:45:c7:a0: ca:db:26:26:bb:48:7f:fd:50:3b:5f:ba:a0:95:c5: 9d:91:01:52:6b:41:a6:a1:5d:bd:2c:03:b4:26:70: d5:e1:16:9b:38:21:b5:f9:2d:90:df:d5:b8:9c:45: fd:12:66:60:29:e3:1b:47:f7:18:df:c8:92:00:52: c5:6d:99:b2:ac:61:5f:ca:db:71:a5:94:de:42:99: 6e:1f:0b:d1:75:fe:1e:75:18:7f:43:14:71:ac:14: 1b:72:cc:15:41:78:ef:ad:c1:f5:33:8f:a8:fa:e8: b4:e3:91:41:50:07:05:d1:b6:fa:fd:ba:6f:1d:be: 83:83:7e:69:de:af:15:47:36:8f:f9:14:df:37:10: 93:50:f2:27:f1:f0:c0:11:90:67:41:84:95:51:25: 69:4e:06:2f:94:0f:ea:b5:5c:1e:50:ae:f5:92:94: b7:43:3d:da:ea:8c:95:48:48:27:20:b0:1f:d6:f2: ba:b5:30:85:c8:b2:b4:c1:29:09:d6:45:d5:06:b9: e5:af:dd:73:41:6a:e0:95:20:b9:18:8a:3e:13:21: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:62:13:F2:6F:01:23:97:80:C5:85:3E:57:AD:1E:12:1D:ED:76:6F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142749.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a063::/32 Signature Algorithm: sha256WithRSAEncryption c2:e4:8f:c6:62:c9:9c:3d:e5:a1:81:d7:98:80:bd:e6:eb:b2: 1f:d6:4d:ae:40:78:4c:9c:4e:cd:da:7b:ac:9b:56:32:6d:a8: ea:39:99:21:98:64:90:94:0e:87:d5:08:f6:06:98:7e:cf:3b: 76:28:23:f1:e4:2a:1c:5f:1b:4d:83:65:63:54:e3:ae:0a:1a: 50:04:8c:d5:0a:b8:16:e3:38:52:56:ea:d2:2d:53:5b:c9:18: 31:6a:0d:bc:62:30:c4:5b:aa:19:bb:1c:df:6a:69:53:d0:d5: 4f:c8:14:d9:d9:2c:74:33:a2:f3:5c:2b:24:78:10:ae:83:19: 53:7d:fe:f7:d5:d6:b6:6b:a5:af:e1:39:2f:05:08:59:2f:6c: 6f:d2:a6:bf:0a:87:a0:29:b9:e9:01:a1:49:c2:5d:eb:ad:5c: 32:93:f5:66:e6:6f:3b:0f:6e:eb:ef:18:7a:4e:be:b4:a0:22: 89:2b:9d:55:4b:68:dc:b3:9c:10:a3:55:70:42:dc:5b:ca:3d: ee:d6:64:ae:cc:e3:74:60:8b:a6:e4:03:0d:c0:12:e4:c9:a6: 0d:bb:2e:b3:3f:cb:1e:f4:62:06:38:d7:2d:c1:8a:ae:1d:89: 98:8e:87:20:94:d3:61:36:34:d0:07:29:ba:3f:fa:02:fb:2e: a8:bb:80:ba -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUYbqtKQ0mesGLZVePBG4TS0U8VEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0MloX DTI3MDMwMzA2MDU0MlowMzExMC8GA1UEAxMoRjE2MjEzRjI2RjAxMjM5NzgwQzU4 NTNFNTdBRDFFMTIxREVENzY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwinQSf8rNZ0ZdSxJ3h6LnSRXCGrjnRTnSr/IBdsakGjEixq3pP9DZtRceg ytsmJrtIf/1QO1+6oJXFnZEBUmtBpqFdvSwDtCZw1eEWmzghtfktkN/VuJxF/RJm YCnjG0f3GN/IkgBSxW2ZsqxhX8rbcaWU3kKZbh8L0XX+HnUYf0MUcawUG3LMFUF4 763B9TOPqProtOORQVAHBdG2+v26bx2+g4N+ad6vFUc2j/kU3zcQk1DyJ/HwwBGQ Z0GElVElaU4GL5QP6rVcHlCu9ZKUt0M92uqMlUhIJyCwH9byurUwhciytMEpCdZF 1Qa55a/dc0Fq4JUguRiKPhMhk00CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTxYhPy bwEjl4DFhT5XrR4SHe12bzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oGMwDQYJKoZIhvcNAQELBQADggEBAMLkj8ZiyZw95aGB15iAvebrsh/WTa5AeEyc Ts3ae6ybVjJtqOo5mSGYZJCUDofVCPYGmH7PO3YoI/HkKhxfG02DZWNU464KGlAE jNUKuBbjOFJW6tItU1vJGDFqDbxiMMRbqhm7HN9qaVPQ1U/IFNnZLHQzovNcKyR4 EK6DGVN9/vfV1rZrpa/hOS8FCFkvbG/Spr8Kh6ApuekBoUnCXeutXDKT9WbmbzsP buvvGHpOvrSgIokrnVVLaNyznBCjVXBC3FvKPe7WZK7M43Rgi6bkAw3AEuTJpg27 LrM/yx70YgY41y3Biq4diZiOhyCU02E2NNAHKbo/+gL7Lqi7gLo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:03 2026 by rpki-client