$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142762.roa File: AS142762.roa (raw, json) Hash identifier: r7SMN0y3zDTCCGNCa93Hiu+6BH8MScjV1P6/YqCcv7Q= Subject key identifier: 80:4A:A2:C4:94:20:EC:36:3C:2E:66:A2:0F:F8:DA:12:8C:4E:61:DB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7B544280732CBAEA9EA6F915303AD90354A41083 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142762.roa Signing time: Wed 04 Mar 2026 06:07:09 +0000 ROA not before: Wed 04 Mar 2026 06:02:09 +0000 ROA not after: Wed 03 Mar 2027 06:07:09 +0000 asID: 142762 IP address blocks: 240a:a070::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:54:42:80:73:2c:ba:ea:9e:a6:f9:15:30:3a:d9:03:54:a4:10:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:09 2026 GMT Not After : Mar 3 06:07:09 2027 GMT Subject: CN=804AA2C49420EC363C2E66A20FF8DA128C4E61DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:ed:39:69:f4:17:9b:0f:c6:e6:2f:de:5a: 18:f0:d8:e4:86:d1:26:7b:88:1c:23:47:94:8c:2c: 16:aa:a8:a0:be:76:c6:a5:7f:d1:99:b0:82:76:b5: ac:17:85:e9:ba:77:13:ee:62:4b:4f:71:77:da:d0: 87:67:42:f5:5c:a7:d8:20:fb:c3:81:44:eb:72:ed: 7b:c6:5c:ca:85:5e:04:47:c8:f9:ac:40:35:a9:10: 21:eb:58:02:78:c6:d3:70:be:8c:a9:0f:86:95:a5: b6:9e:04:cc:37:af:bb:bd:19:a1:89:b4:45:ab:5a: 01:01:c7:f8:f6:d0:c8:4d:eb:e5:4b:be:47:2e:47: 00:88:cb:51:73:23:5f:64:24:e6:31:3d:74:84:f6: bd:97:7d:ef:11:f4:00:e8:f1:05:a6:4d:d9:c2:2e: b7:66:27:e7:db:32:ce:a7:15:be:71:91:81:62:2d: 62:fb:8c:39:aa:04:c0:21:93:2a:37:8b:67:aa:07: e8:1a:80:1f:04:c1:45:26:a0:5d:ea:c4:7a:36:8d: d6:50:63:51:11:91:4d:cc:92:a4:b5:77:79:71:f5: bf:5b:e0:a7:03:17:d8:d6:a1:5f:fc:3e:8e:2d:f6: 53:5c:aa:bf:07:0b:cc:4f:31:69:d6:e8:77:50:0c: 7f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4A:A2:C4:94:20:EC:36:3C:2E:66:A2:0F:F8:DA:12:8C:4E:61:DB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142762.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a070::/32 Signature Algorithm: sha256WithRSAEncryption bb:97:17:9d:99:df:5f:ab:ca:ed:06:80:e0:73:f3:b7:56:85: 51:d9:aa:c3:eb:3b:cb:6b:1e:4e:4e:5a:9c:d4:24:8b:55:bb: 71:f4:d7:48:1c:7f:8a:6a:3b:b2:42:55:26:13:2f:3f:4e:67: 56:c8:6b:da:77:e8:da:76:ce:b7:8d:b3:96:58:8b:a6:a6:c0: 27:c9:85:16:bd:0a:8b:8a:94:e9:03:79:72:2d:60:7e:f8:09: cf:b8:d0:33:0d:c2:6e:12:7c:5b:1b:4a:7f:3f:eb:96:bf:bb: 2c:ed:f5:0c:a1:50:0b:03:a9:8d:b6:9e:4f:b6:c6:7b:01:23: 24:06:4e:51:e5:02:20:9d:e6:5d:02:26:11:8d:85:24:d5:0c: 67:e0:ff:d3:97:82:06:35:49:81:83:73:1e:61:5a:b7:56:dd: 15:38:6c:7a:79:4f:cc:3f:7d:50:c9:a1:30:b0:c0:58:b3:e7: 82:b3:5e:8b:ee:24:d1:4a:9c:8d:47:82:03:b3:1c:c2:7c:56: ad:77:62:21:06:92:8b:3d:f2:aa:0f:e5:f7:3d:c8:09:b5:8f: 3f:d0:e9:54:2a:c0:a7:7f:82:67:84:76:fe:93:71:42:e7:a6: ab:07:59:33:f7:c2:07:1f:4e:a0:67:25:09:cf:d8:04:6f:5e: 69:b4:e3:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUe1RCgHMsuuqepvkVMDrZA1SkEIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwOVoX DTI3MDMwMzA2MDcwOVowMzExMC8GA1UEAxMoODA0QUEyQzQ5NDIwRUMzNjNDMkU2 NkEyMEZGOERBMTI4QzRFNjFEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL587Tlp9BebD8bmL95aGPDY5IbRJnuIHCNHlIwsFqqooL52xqV/0Zmwgna1 rBeF6bp3E+5iS09xd9rQh2dC9Vyn2CD7w4FE63Lte8ZcyoVeBEfI+axANakQIetY AnjG03C+jKkPhpWltp4EzDevu70ZoYm0RataAQHH+PbQyE3r5Uu+Ry5HAIjLUXMj X2Qk5jE9dIT2vZd97xH0AOjxBaZN2cIut2Yn59syzqcVvnGRgWItYvuMOaoEwCGT KjeLZ6oH6BqAHwTBRSagXerEejaN1lBjURGRTcySpLV3eXH1v1vgpwMX2NahX/w+ ji32U1yqvwcLzE8xadbod1AMf2UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSASqLE lCDsNjwuZqIP+NoSjE5h2zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oHAwDQYJKoZIhvcNAQELBQADggEBALuXF52Z31+ryu0GgOBz87dWhVHZqsPrO8tr Hk5OWpzUJItVu3H010gcf4pqO7JCVSYTLz9OZ1bIa9p36Np2zreNs5ZYi6amwCfJ hRa9CouKlOkDeXItYH74Cc+40DMNwm4SfFsbSn8/65a/uyzt9QyhUAsDqY22nk+2 xnsBIyQGTlHlAiCd5l0CJhGNhSTVDGfg/9OXggY1SYGDcx5hWrdW3RU4bHp5T8w/ fVDJoTCwwFiz54KzXovuJNFKnI1HggOzHMJ8Vq13YiEGkos98qoP5fc9yAm1jz/Q 6VQqwKd/gmeEdv6TcULnpqsHWTP3wgcfTqBnJQnP2ARvXmm041s= -----END CERTIFICATE-----Generated at Sat Mar 28 13:06:12 2026 by rpki-client