$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142757.roa File: AS142757.roa (raw, json) Hash identifier: qQrcHVTwk59FTjKYqd5+7riunAbRZqsQAdyR3QP4wBo= Subject key identifier: 76:D5:15:ED:93:78:47:F8:E8:23:75:CA:51:14:B4:46:6F:A3:36:B7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6F3330A74806C06A497BC2905BC738CDDE9EA564 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142757.roa Signing time: Wed 04 Mar 2026 06:06:01 +0000 ROA not before: Wed 04 Mar 2026 06:01:01 +0000 ROA not after: Wed 03 Mar 2027 06:06:01 +0000 asID: 142757 IP address blocks: 240a:a06b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:33:30:a7:48:06:c0:6a:49:7b:c2:90:5b:c7:38:cd:de:9e:a5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:01 2026 GMT Not After : Mar 3 06:06:01 2027 GMT Subject: CN=76D515ED937847F8E82375CA5114B4466FA336B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:40:02:2f:3f:df:40:b3:15:af:99:3e:08: 26:bd:82:86:aa:26:77:92:6b:39:82:41:de:20:8d: 95:d6:e5:00:8c:c7:3e:0e:85:3e:1b:82:4c:66:4f: db:51:96:51:1d:56:fa:d8:d8:a3:10:f5:84:c7:8e: de:90:fa:48:d0:bc:d4:5c:04:f7:98:dc:64:4e:ac: b3:18:cf:2c:f1:83:d4:70:c8:88:f4:26:07:21:46: 1e:8d:3f:30:a3:a3:32:ef:12:e6:2b:06:63:64:29: 7b:8d:b0:2f:b7:f0:e8:cd:11:71:92:df:18:fc:68: 62:54:20:05:c3:0b:d3:fa:ad:67:0a:01:81:dd:5d: 66:99:c1:bd:46:c0:18:67:64:2a:c3:2f:3d:0c:3c: 9a:74:b9:75:82:e3:93:6a:7b:4e:ef:bd:75:44:1f: fb:95:10:63:34:7e:2c:d7:8a:da:b7:72:b7:a4:62: 9d:48:00:cd:25:f1:94:fb:49:28:94:cd:07:43:d6: 85:11:45:87:63:5a:a3:95:3c:bf:73:73:73:b0:45: b2:bb:9b:4f:66:ed:58:03:e7:75:44:c0:71:ce:00: 48:cb:93:21:7a:b9:ac:81:ef:6e:bb:51:7e:18:23: 21:5e:e2:3e:e1:91:a1:ff:47:fa:0e:41:c9:45:ae: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D5:15:ED:93:78:47:F8:E8:23:75:CA:51:14:B4:46:6F:A3:36:B7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142757.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a06b::/32 Signature Algorithm: sha256WithRSAEncryption be:cd:a1:e2:39:36:46:7c:96:c3:9e:12:06:e5:e3:72:64:69: ad:40:3b:af:ea:86:cd:1b:8d:17:1c:0c:c1:8e:a4:03:df:d5: 41:90:c7:eb:ca:7d:ad:cf:57:9a:ae:40:49:39:1d:05:d2:e5: 50:90:0e:31:7b:50:b6:94:41:e7:e6:11:98:d9:ad:3e:b6:94: 7d:b9:69:52:b9:52:03:8e:92:73:10:05:d8:7c:d7:0d:94:0b: 60:a1:74:8d:a4:5d:fa:b3:36:a2:19:38:9e:d0:76:56:b9:2f: 98:73:a7:ae:f1:4f:dc:b7:92:22:f5:05:00:86:54:35:5e:0a: 4c:15:a4:b7:3d:13:16:f4:23:e9:43:73:c8:7c:7f:68:a3:7b: 23:a0:13:19:a5:32:51:73:8a:31:39:a9:ff:05:3d:03:a3:cd: af:84:cf:ec:a5:00:1f:11:c3:37:b1:ae:8f:af:14:5a:63:df: 38:64:e3:52:d7:f0:23:82:cb:7d:7a:9c:92:79:b5:9a:d8:4e: b8:87:d9:6b:bd:19:41:0c:6a:b7:79:3e:e6:92:ab:a1:68:9f: 53:52:91:ad:31:bc:f4:2c:9c:1a:cb:fa:fc:60:2d:66:4c:39: 1e:70:8d:40:e1:2d:f6:5b:41:84:37:a5:4d:ae:8e:ad:86:75: cf:9d:3c:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbzMwp0gGwGpJe8KQW8c4zd6epWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwMVoX DTI3MDMwMzA2MDYwMVowMzExMC8GA1UEAxMoNzZENTE1RUQ5Mzc4NDdGOEU4MjM3 NUNBNTExNEI0NDY2RkEzMzZCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCoQAIvP99AsxWvmT4IJr2Chqomd5JrOYJB3iCNldblAIzHPg6FPhuCTGZP 21GWUR1W+tjYoxD1hMeO3pD6SNC81FwE95jcZE6ssxjPLPGD1HDIiPQmByFGHo0/ MKOjMu8S5isGY2Qpe42wL7fw6M0RcZLfGPxoYlQgBcML0/qtZwoBgd1dZpnBvUbA GGdkKsMvPQw8mnS5dYLjk2p7Tu+9dUQf+5UQYzR+LNeK2rdyt6RinUgAzSXxlPtJ KJTNB0PWhRFFh2Nao5U8v3Nzc7BFsrubT2btWAPndUTAcc4ASMuTIXq5rIHvbrtR fhgjIV7iPuGRof9H+g5ByUWuD0UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR21RXt k3hH+OgjdcpRFLRGb6M2tzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oGswDQYJKoZIhvcNAQELBQADggEBAL7NoeI5NkZ8lsOeEgbl43Jkaa1AO6/qhs0b jRccDMGOpAPf1UGQx+vKfa3PV5quQEk5HQXS5VCQDjF7ULaUQefmEZjZrT62lH25 aVK5UgOOknMQBdh81w2UC2ChdI2kXfqzNqIZOJ7Qdla5L5hzp67xT9y3kiL1BQCG VDVeCkwVpLc9Exb0I+lDc8h8f2ijeyOgExmlMlFzijE5qf8FPQOjza+Ez+ylAB8R wzexro+vFFpj3zhk41LX8COCy316nJJ5tZrYTriH2Wu9GUEMard5PuaSq6Fon1NS ka0xvPQsnBrL+vxgLWZMOR5wjUDhLfZbQYQ3pU2ujq2Gdc+dPFo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:40 2026 by rpki-client