$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142750.roa File: AS142750.roa (raw, json) Hash identifier: T1OUbWsnZ67KKfEINzA+hrX859NBji3zQF4DHhB45iw= Subject key identifier: 95:01:C7:28:70:F3:0C:FA:1C:15:19:25:C1:D6:1D:09:03:73:B7:BD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5232A249573B9ADBEF7864FC27814949363767F8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142750.roa Signing time: Wed 04 Mar 2026 06:05:16 +0000 ROA not before: Wed 04 Mar 2026 06:00:16 +0000 ROA not after: Wed 03 Mar 2027 06:05:16 +0000 asID: 142750 IP address blocks: 240a:a064::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:32:a2:49:57:3b:9a:db:ef:78:64:fc:27:81:49:49:36:37:67:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:16 2026 GMT Not After : Mar 3 06:05:16 2027 GMT Subject: CN=9501C72870F30CFA1C151925C1D61D090373B7BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f3:db:15:cc:d2:a3:b9:ef:50:5b:b8:8d:45: d8:51:f0:92:af:1c:94:1a:69:84:40:8f:f2:ba:31: d7:db:04:8d:af:10:b2:2b:25:00:dc:a2:14:6e:fa: 92:86:ad:c2:d5:d5:3f:0e:81:5f:48:39:0f:9d:0c: 6a:d9:37:e8:56:f3:65:95:2e:dd:17:02:b9:18:70: 51:46:51:25:ed:f0:bc:8c:64:da:4b:57:99:71:1a: 5d:ea:fa:cc:6e:19:0d:d7:3f:d5:41:b1:10:9d:4c: f1:3f:0e:ce:48:3c:a1:6a:b2:9b:21:85:ac:21:bf: 18:d5:6f:b1:6b:18:dd:2c:3c:b8:e3:b1:9b:16:5d: 7f:b7:a2:4a:2b:c3:91:92:d9:34:8e:56:d3:1e:b7: da:ac:b9:e9:03:e4:b9:a2:c1:ad:a9:52:69:6c:9b: c7:0e:7b:62:d1:f6:cf:eb:93:99:7f:da:31:d0:e7: 42:c0:12:6f:eb:74:d1:5a:2c:ab:c0:e9:f6:3d:61: 65:db:3c:83:a4:b8:a9:ae:c8:a8:41:bb:03:39:aa: 25:03:32:42:06:c8:cb:5a:c4:ab:90:0b:2a:9a:16: 2b:d3:28:04:66:2d:c4:fb:ab:86:9e:3c:ba:3c:d4: 24:6a:b0:e5:cd:a3:db:9f:74:0f:03:d6:a3:66:d2: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:01:C7:28:70:F3:0C:FA:1C:15:19:25:C1:D6:1D:09:03:73:B7:BD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142750.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a064::/32 Signature Algorithm: sha256WithRSAEncryption 5c:4e:a7:ac:49:eb:c0:56:51:63:18:f6:0d:2d:3a:65:87:5d: 68:0d:a3:95:cc:41:5a:1e:8b:ad:1c:e0:b7:7b:ea:b9:dd:84: 1b:aa:82:2d:2a:41:23:88:37:ed:43:bd:24:d2:59:b4:0a:79: 43:a8:66:16:0c:fb:82:b5:3a:fb:2e:11:66:76:ef:35:b9:38: a3:08:9b:de:56:92:21:c5:40:2c:c8:cd:7d:b8:37:84:82:a5: d7:30:e9:d7:56:3f:97:05:22:ad:9d:40:5b:33:27:ea:53:63: 93:d3:c5:f3:7d:3d:e8:69:05:0e:b2:34:a9:9e:98:e1:d4:47: e6:61:c7:2d:ca:fd:ba:16:e2:9e:f1:95:58:c2:c4:a4:1f:f1: e5:5b:cf:b3:f0:3f:0b:13:60:aa:b4:5b:49:0d:d7:58:1e:72: 5f:78:49:e9:32:f0:16:b2:f2:34:d4:09:6d:69:12:f2:bf:7e: d2:7e:8e:1f:e4:6d:fc:42:44:88:3b:a9:6d:59:d2:19:9a:0f: d6:4a:23:7a:2e:06:68:e8:7c:91:88:0f:9f:86:08:b4:b6:c3: 93:5b:c6:40:42:94:21:a5:a9:f7:6a:68:45:ec:e5:3e:aa:ef: 47:7d:2f:a4:a2:69:25:1d:02:7a:eb:ca:3e:ef:72:04:d0:92: 83:c0:3a:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUjKiSVc7mtvveGT8J4FJSTY3Z/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxNloX DTI3MDMwMzA2MDUxNlowMzExMC8GA1UEAxMoOTUwMUM3Mjg3MEYzMENGQTFDMTUx OTI1QzFENjFEMDkwMzczQjdCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLz2xXM0qO571BbuI1F2FHwkq8clBpphECP8rox19sEja8QsislANyiFG76 koatwtXVPw6BX0g5D50Matk36FbzZZUu3RcCuRhwUUZRJe3wvIxk2ktXmXEaXer6 zG4ZDdc/1UGxEJ1M8T8Ozkg8oWqymyGFrCG/GNVvsWsY3Sw8uOOxmxZdf7eiSivD kZLZNI5W0x632qy56QPkuaLBralSaWybxw57YtH2z+uTmX/aMdDnQsASb+t00Vos q8Dp9j1hZds8g6S4qa7IqEG7AzmqJQMyQgbIy1rEq5ALKpoWK9MoBGYtxPurhp48 ujzUJGqw5c2j2590DwPWo2bSvS8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSVAcco cPMM+hwVGSXB1h0JA3O3vTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oGQwDQYJKoZIhvcNAQELBQADggEBAFxOp6xJ68BWUWMY9g0tOmWHXWgNo5XMQVoe i60c4Ld76rndhBuqgi0qQSOIN+1DvSTSWbQKeUOoZhYM+4K1OvsuEWZ27zW5OKMI m95WkiHFQCzIzX24N4SCpdcw6ddWP5cFIq2dQFszJ+pTY5PTxfN9PehpBQ6yNKme mOHUR+Zhxy3K/boW4p7xlVjCxKQf8eVbz7PwPwsTYKq0W0kN11gecl94Seky8Bay 8jTUCW1pEvK/ftJ+jh/kbfxCRIg7qW1Z0hmaD9ZKI3ouBmjofJGID5+GCLS2w5Nb xkBClCGlqfdqaEXs5T6q70d9L6SiaSUdAnrryj7vcgTQkoPAOqE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:14 2026 by rpki-client