$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142759.roa File: AS142759.roa (raw, json) Hash identifier: n7wiJQIf3pfEULztpZbwDXqILJDsmgux4Oj9WZMD3Ik= Subject key identifier: 73:99:A3:D3:22:BB:4C:98:5E:9D:18:D2:78:CE:65:B9:41:75:A7:42 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4C21AC51038B5EAAD78A60272A8F2EF6524A47EA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142759.roa Signing time: Wed 04 Mar 2026 06:05:36 +0000 ROA not before: Wed 04 Mar 2026 06:00:36 +0000 ROA not after: Wed 03 Mar 2027 06:05:36 +0000 asID: 142759 IP address blocks: 240a:a06d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:21:ac:51:03:8b:5e:aa:d7:8a:60:27:2a:8f:2e:f6:52:4a:47:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:36 2026 GMT Not After : Mar 3 06:05:36 2027 GMT Subject: CN=7399A3D322BB4C985E9D18D278CE65B94175A742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:35:4c:37:08:f0:47:a5:db:f7:d4:0c:f2: 77:14:6b:38:43:2e:c0:97:5b:3b:50:a2:6b:9e:a2: fd:4c:33:8f:cd:87:6b:04:8d:ec:90:cf:f3:a6:ca: a2:95:22:d7:d4:2c:44:f3:60:ba:7d:8b:0b:09:4b: 09:a3:cc:e9:6d:9c:46:d2:d7:68:fb:d8:a8:54:50: 57:f1:a3:46:d7:41:34:f4:29:c5:e5:46:1f:cb:cc: 9c:f2:88:39:d4:fc:b5:58:06:40:3e:a1:74:4a:43: 75:e6:49:11:9b:97:b8:3b:b2:ae:ef:0c:80:bc:de: 6d:62:41:5c:f2:99:c4:d0:76:da:b0:a5:af:26:d1: 4e:bf:1d:07:27:b4:17:65:31:fd:8f:48:fe:ad:f4: c8:45:64:e0:d1:66:97:7b:6b:02:0c:83:2a:6d:fc: 60:8a:85:19:cc:f4:b4:2a:ae:0d:c5:2e:c4:85:41: 85:e6:18:a4:74:a4:e0:a6:a9:69:74:5e:61:9b:61: 46:e2:e3:b9:72:df:0d:32:f0:58:b3:ac:ae:58:05: 6d:40:2c:0d:87:fa:b4:46:01:9b:8e:98:64:14:6e: 2e:0b:ce:ee:94:23:a2:b1:3b:10:46:a1:05:9b:17: 91:b0:f8:dd:3a:65:f2:c3:d5:3c:21:ce:6c:1a:cc: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:99:A3:D3:22:BB:4C:98:5E:9D:18:D2:78:CE:65:B9:41:75:A7:42 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142759.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a06d::/32 Signature Algorithm: sha256WithRSAEncryption 96:57:cb:47:20:40:83:4c:e4:13:5c:9d:98:2b:2e:fd:ff:0a: 08:95:f2:c5:d7:2b:98:50:f9:cb:0c:8b:03:3d:d2:cc:ab:0e: 5f:37:bd:2d:2b:9e:80:93:9b:47:b8:f9:3d:a6:a4:b1:a3:fe: 7a:3c:69:5f:05:8a:be:ba:2c:de:8e:6c:a0:38:23:cd:ea:87: 52:f6:61:ff:20:2c:9b:27:5f:fc:1c:32:25:bb:38:25:95:09: 2d:88:6a:7e:02:5f:62:5a:40:2c:69:4d:5b:89:d7:bb:0d:37: bd:ed:62:23:78:58:28:93:00:c7:28:b5:c6:fe:9d:f7:5e:f3: 65:f6:7d:34:3e:be:7d:5b:a2:cd:e2:f5:d8:7e:a9:71:77:5c: 15:a1:04:58:2f:b1:5b:a5:ff:57:26:d5:41:07:1d:40:d7:cc: c2:ef:5b:d1:12:aa:78:fb:c9:05:53:1a:d4:2e:03:be:d6:90: 2b:0c:8d:7e:00:a8:82:5f:42:3a:ff:39:65:84:44:65:76:63: 23:ec:18:b4:a4:55:5d:53:08:5f:dc:b9:74:73:ef:47:fe:38: c9:50:2a:68:54:cb:db:37:28:4a:de:d4:56:f1:4b:f9:8a:0a: d5:4c:23:4b:1e:b6:17:1c:45:a9:34:24:2f:33:1a:f1:7f:ce: 1a:a8:26:08 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTCGsUQOLXqrXimAnKo8u9lJKR+owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzNloX DTI3MDMwMzA2MDUzNlowMzExMC8GA1UEAxMoNzM5OUEzRDMyMkJCNEM5ODVFOUQx OEQyNzhDRTY1Qjk0MTc1QTc0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKsNUw3CPBHpdv31AzydxRrOEMuwJdbO1Cia56i/Uwzj82HawSN7JDP86bK opUi19QsRPNgun2LCwlLCaPM6W2cRtLXaPvYqFRQV/GjRtdBNPQpxeVGH8vMnPKI OdT8tVgGQD6hdEpDdeZJEZuXuDuyru8MgLzebWJBXPKZxNB22rClrybRTr8dBye0 F2Ux/Y9I/q30yEVk4NFml3trAgyDKm38YIqFGcz0tCquDcUuxIVBheYYpHSk4Kap aXReYZthRuLjuXLfDTLwWLOsrlgFbUAsDYf6tEYBm46YZBRuLgvO7pQjorE7EEah BZsXkbD43Tpl8sPVPCHObBrMCvkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRzmaPT IrtMmF6dGNJ4zmW5QXWnQjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oG0wDQYJKoZIhvcNAQELBQADggEBAJZXy0cgQINM5BNcnZgrLv3/CgiV8sXXK5hQ +csMiwM90syrDl83vS0rnoCTm0e4+T2mpLGj/no8aV8Fir66LN6ObKA4I83qh1L2 Yf8gLJsnX/wcMiW7OCWVCS2Ian4CX2JaQCxpTVuJ17sNN73tYiN4WCiTAMcotcb+ nfde82X2fTQ+vn1bos3i9dh+qXF3XBWhBFgvsVul/1cm1UEHHUDXzMLvW9ESqnj7 yQVTGtQuA77WkCsMjX4AqIJfQjr/OWWERGV2YyPsGLSkVV1TCF/cuXRz70f+OMlQ KmhUy9s3KEre1FbxS/mKCtVMI0sethccRak0JC8zGvF/zhqoJgg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:57 2026 by rpki-client