$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142754.roa File: AS142754.roa (raw, json) Hash identifier: hp8c0JNr8udvHEjJksVaK89vqmw5ZlkTEjh1ZhqlAno= Subject key identifier: 28:2C:A6:77:59:32:A5:85:5A:EC:1E:71:CD:77:A7:92:06:9F:C7:ED Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 380DACA9BE64B14B86AE258E9BF103059C34C8C8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142754.roa Signing time: Wed 04 Mar 2026 06:06:49 +0000 ROA not before: Wed 04 Mar 2026 06:01:49 +0000 ROA not after: Wed 03 Mar 2027 06:06:49 +0000 asID: 142754 IP address blocks: 240a:a068::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0d:ac:a9:be:64:b1:4b:86:ae:25:8e:9b:f1:03:05:9c:34:c8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:49 2026 GMT Not After : Mar 3 06:06:49 2027 GMT Subject: CN=282CA6775932A5855AEC1E71CD77A792069FC7ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:95:be:3a:38:79:b9:20:a5:74:e2:df:0f: 93:56:57:12:06:7f:01:49:81:e1:64:a2:f6:87:8d: 85:21:1f:7b:99:7a:e9:84:99:92:50:4f:2c:ae:39: 44:2b:8e:2c:1e:94:85:9d:9b:10:66:3c:03:6d:fe: 16:dc:79:eb:f3:0d:04:af:07:23:c1:13:a6:e9:bf: 91:70:89:02:93:14:d2:5c:8e:b6:49:6d:81:c4:2d: 36:5c:7f:e0:42:8f:b0:3f:48:37:46:b3:dc:e8:76: c7:a6:05:ff:83:29:82:14:ca:ca:0d:44:29:0b:12: 64:90:74:a3:5e:84:e5:4a:2e:7a:8b:17:8c:e8:55: 25:f3:7b:ce:84:75:cc:53:7b:07:74:64:35:f9:d9: 2c:c7:12:e4:17:b9:05:9c:f6:6d:59:3c:36:78:e9: a5:dc:57:d2:18:c9:36:50:cd:c3:1a:a5:0a:f1:1c: 51:5f:64:1b:02:2f:3d:7f:3b:5d:a4:86:8a:6d:c3: 8d:3e:15:69:0f:a0:8f:3c:a1:82:1f:7f:b6:c9:8a: 05:03:c6:f3:a2:75:ff:6c:ef:8f:c3:96:59:54:51: 45:bb:99:bf:4f:5a:59:99:ad:37:6b:c5:2b:2a:6f: 4e:70:f6:e5:cc:91:5a:9b:d2:11:97:ab:c1:82:86: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:A6:77:59:32:A5:85:5A:EC:1E:71:CD:77:A7:92:06:9F:C7:ED X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142754.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a068::/32 Signature Algorithm: sha256WithRSAEncryption 9d:55:16:11:5b:20:91:cc:7a:72:78:c4:b6:03:47:13:71:4e: 3d:b0:1e:79:fb:33:0b:08:f5:58:e9:2d:70:36:8e:40:5e:88: 0c:5e:b4:84:8c:bf:a5:e8:2e:e0:63:aa:e8:6d:7c:ea:cc:fc: f3:18:b0:e8:1b:d4:d4:61:59:90:be:64:56:8f:f7:47:47:0f: fd:dd:69:42:e5:ee:f4:18:28:62:b6:38:23:5e:27:7e:f9:77: e6:d9:3d:ef:50:cb:d4:a3:4f:39:ee:22:69:a8:1e:76:70:d5: 0c:ae:03:2a:18:2c:20:c8:53:13:d5:7c:6d:2b:41:5e:e3:d7: 3a:99:7c:18:12:cd:0c:f8:c8:3a:98:3b:2e:a5:7a:fd:25:07: fb:e0:b8:f2:28:e5:30:c9:41:6b:5b:2f:c1:74:fa:dd:fa:96: 58:5d:11:ae:2c:cf:20:92:7a:71:d0:e2:98:ec:92:92:51:46: 1f:8f:92:1a:f1:9a:04:84:ba:32:bc:bb:f0:5b:7d:05:8a:e0: 0d:44:be:9f:36:a5:f8:2c:f8:74:fb:60:b7:dc:69:82:c6:9f: 9a:8d:25:af:c5:94:88:9b:62:2d:c0:5f:17:ca:9e:b6:3a:76: 93:90:a0:79:73:96:23:0e:29:db:69:52:05:37:f9:e4:fe:f9: 9c:5b:d8:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOA2sqb5ksUuGriWOm/EDBZw0yMgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0OVoX DTI3MDMwMzA2MDY0OVowMzExMC8GA1UEAxMoMjgyQ0E2Nzc1OTMyQTU4NTVBRUMx RTcxQ0Q3N0E3OTIwNjlGQzdFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJpUlb46OHm5IKV04t8Pk1ZXEgZ/AUmB4WSi9oeNhSEfe5l66YSZklBPLK45 RCuOLB6UhZ2bEGY8A23+Ftx56/MNBK8HI8ETpum/kXCJApMU0lyOtkltgcQtNlx/ 4EKPsD9IN0az3Oh2x6YF/4MpghTKyg1EKQsSZJB0o16E5UoueosXjOhVJfN7zoR1 zFN7B3RkNfnZLMcS5Be5BZz2bVk8NnjppdxX0hjJNlDNwxqlCvEcUV9kGwIvPX87 XaSGim3DjT4VaQ+gjzyhgh9/tsmKBQPG86J1/2zvj8OWWVRRRbuZv09aWZmtN2vF KypvTnD25cyRWpvSEZerwYKGakUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQoLKZ3 WTKlhVrsHnHNd6eSBp/H7TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oGgwDQYJKoZIhvcNAQELBQADggEBAJ1VFhFbIJHMenJ4xLYDRxNxTj2wHnn7MwsI 9VjpLXA2jkBeiAxetISMv6XoLuBjquhtfOrM/PMYsOgb1NRhWZC+ZFaP90dHD/3d aULl7vQYKGK2OCNeJ375d+bZPe9Qy9SjTznuImmoHnZw1QyuAyoYLCDIUxPVfG0r QV7j1zqZfBgSzQz4yDqYOy6lev0lB/vguPIo5TDJQWtbL8F0+t36llhdEa4szyCS enHQ4pjskpJRRh+PkhrxmgSEujK8u/BbfQWK4A1Evp82pfgs+HT7YLfcaYLGn5qN Ja/FlIibYi3AXxfKnrY6dpOQoHlzliMOKdtpUgU3+eT++Zxb2NA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:43 2026 by rpki-client