$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142758.roa File: AS142758.roa (raw, json) Hash identifier: nCBOKRbarkPzM7JO+J8FBuItSR5R81gz9A8Ve3ttdFk= Subject key identifier: DA:2A:8E:DF:95:C1:0E:66:53:CC:32:9B:D2:15:D4:0A:0E:58:88:EE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3C7EFA3FBA5EAC2FE3DDBD881A67BA7B6444F83C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142758.roa Signing time: Wed 04 Mar 2026 06:05:41 +0000 ROA not before: Wed 04 Mar 2026 06:00:41 +0000 ROA not after: Wed 03 Mar 2027 06:05:41 +0000 asID: 142758 IP address blocks: 240a:a06c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7e:fa:3f:ba:5e:ac:2f:e3:dd:bd:88:1a:67:ba:7b:64:44:f8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:41 2026 GMT Not After : Mar 3 06:05:41 2027 GMT Subject: CN=DA2A8EDF95C10E6653CC329BD215D40A0E5888EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:1d:8a:80:32:c2:0e:2c:66:6e:af:5f:a4: 0c:d2:c9:de:6d:00:cc:53:5f:c6:75:22:a0:b3:9c: 17:34:7f:0e:35:f8:31:3c:98:50:3d:80:9f:5c:15: ff:0f:93:94:9e:98:7d:13:f2:10:5f:83:30:52:7a: 87:13:5c:d1:2a:88:46:ee:1e:74:21:18:9b:32:e5: 3c:af:06:ca:dc:0a:41:fe:ba:f5:6b:19:be:57:af: 1d:50:26:9b:c0:a4:18:1e:a1:31:1d:82:ed:d6:d0: 2c:ff:b2:84:78:02:1c:9b:92:75:a6:15:a1:03:ed: 44:ac:fc:5b:18:fb:e0:82:d9:34:66:bb:9c:13:0a: c6:00:83:2f:ab:49:57:80:cf:47:82:27:67:20:55: c3:64:38:43:9c:ab:f5:1f:8b:a2:13:f4:9d:ee:d7: 51:4b:75:45:8a:4e:8b:4f:aa:65:3c:a5:69:82:53: d4:ab:b7:be:b4:df:f2:25:a9:b1:1d:05:82:81:a9: fb:71:38:8f:c1:dd:a4:07:9c:f6:58:26:47:1a:a0: 27:13:2c:a8:d0:16:ae:30:a8:52:ca:7e:70:ac:5e: 77:8c:38:da:b0:20:67:70:2a:b9:60:39:eb:fd:b1: ce:75:8e:ec:74:7a:99:0d:3a:d6:97:5f:7f:54:e4: b4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2A:8E:DF:95:C1:0E:66:53:CC:32:9B:D2:15:D4:0A:0E:58:88:EE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142758.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a06c::/32 Signature Algorithm: sha256WithRSAEncryption ce:3a:4a:59:c3:79:eb:c2:20:84:8b:56:95:1f:7c:06:0a:62: 10:fa:e9:82:c1:8f:66:00:e4:c0:ab:f2:d8:b4:45:15:75:7a: 63:84:09:c7:66:f3:51:e9:7d:1f:3f:09:b0:b7:18:43:65:53: c1:47:3e:a1:9a:45:ee:1a:8c:bb:72:8e:fb:2d:81:3d:b0:d4: d9:dd:48:fa:81:34:77:b1:17:1a:8c:07:33:5e:29:d6:4d:d0: 59:a9:a6:8b:3b:97:0d:4b:06:30:24:b0:ea:5e:4a:26:0b:d9: 6d:f0:54:50:ec:33:84:42:d8:be:46:f6:26:c8:c0:6e:eb:10: 19:17:7a:7e:42:1b:aa:63:e3:7f:a3:72:72:f3:b8:df:b1:0e: 7f:1b:a0:bb:c9:85:6e:b2:e8:36:b5:4b:f1:e2:35:c8:53:fc: 19:b9:a6:9f:f8:23:79:93:14:a4:c6:df:ae:a4:74:46:b2:88: b0:53:ff:06:7d:62:7e:13:73:9c:c7:b0:6e:e6:de:3b:63:8e: bc:9c:96:e8:d4:49:fa:9e:69:93:7d:b4:cf:3d:78:fe:1a:68: 55:79:2c:01:5a:b6:c8:ce:ef:c4:f2:07:d8:53:9f:d5:f8:13: 85:d0:54:67:cf:6f:0c:d1:0a:fc:32:60:92:56:88:fc:70:8f: ac:aa:de:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPH76P7perC/j3b2IGme6e2RE+DwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0MVoX DTI3MDMwMzA2MDU0MVowMzExMC8GA1UEAxMoREEyQThFREY5NUMxMEU2NjUzQ0Mz MjlCRDIxNUQ0MEEwRTU4ODhFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2BHYqAMsIOLGZur1+kDNLJ3m0AzFNfxnUioLOcFzR/DjX4MTyYUD2An1wV /w+TlJ6YfRPyEF+DMFJ6hxNc0SqIRu4edCEYmzLlPK8GytwKQf669WsZvlevHVAm m8CkGB6hMR2C7dbQLP+yhHgCHJuSdaYVoQPtRKz8Wxj74ILZNGa7nBMKxgCDL6tJ V4DPR4InZyBVw2Q4Q5yr9R+LohP0ne7XUUt1RYpOi0+qZTylaYJT1Ku3vrTf8iWp sR0FgoGp+3E4j8HdpAec9lgmRxqgJxMsqNAWrjCoUsp+cKxed4w42rAgZ3AquWA5 6/2xznWO7HR6mQ061pdff1TktN0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTaKo7f lcEOZlPMMpvSFdQKDliI7jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oGwwDQYJKoZIhvcNAQELBQADggEBAM46SlnDeevCIISLVpUffAYKYhD66YLBj2YA 5MCr8ti0RRV1emOECcdm81HpfR8/CbC3GENlU8FHPqGaRe4ajLtyjvstgT2w1Nnd SPqBNHexFxqMBzNeKdZN0Fmppos7lw1LBjAksOpeSiYL2W3wVFDsM4RC2L5G9ibI wG7rEBkXen5CG6pj43+jcnLzuN+xDn8boLvJhW6y6Da1S/HiNchT/Bm5pp/4I3mT FKTG366kdEayiLBT/wZ9Yn4Tc5zHsG7m3jtjjryclujUSfqeaZN9tM89eP4aaFV5 LAFatsjO78TyB9hTn9X4E4XQVGfPbwzRCvwyYJJWiPxwj6yq3ko= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:07 2026 by rpki-client