$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142763.roa File: AS142763.roa (raw, json) Hash identifier: 0XAprwvJxEL0O8MImdrCCwxThjASH+WNXDVxgqpoj0E= Subject key identifier: 85:B7:4A:C3:9D:CA:41:A7:D6:DE:0E:24:59:2F:4E:A7:D2:15:EA:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48FC1EC4AE70415D7AB0BB8E9C798DDA2E3CA003 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142763.roa Signing time: Wed 04 Mar 2026 06:07:52 +0000 ROA not before: Wed 04 Mar 2026 06:02:52 +0000 ROA not after: Wed 03 Mar 2027 06:07:52 +0000 asID: 142763 IP address blocks: 240a:a071::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fc:1e:c4:ae:70:41:5d:7a:b0:bb:8e:9c:79:8d:da:2e:3c:a0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:52 2026 GMT Not After : Mar 3 06:07:52 2027 GMT Subject: CN=85B74AC39DCA41A7D6DE0E24592F4EA7D215EA02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:0d:f9:76:5a:40:c0:16:1f:0c:88:b5:de: 9d:f3:2e:6d:06:5c:ec:02:29:cf:52:99:50:ed:74: e0:c3:89:ca:7a:48:b3:48:23:da:cd:19:ec:e8:62: fa:42:93:85:6f:93:7e:e6:02:77:e4:6a:58:5f:0d: 23:8a:23:a6:3b:14:4f:82:93:51:55:4b:5a:cd:45: 19:35:12:dd:91:34:05:be:4f:8c:f3:44:e8:2b:e6: 3a:5e:a4:d9:e2:51:f0:ba:f0:e6:b9:cf:3d:10:32: 7d:7b:32:1f:60:c2:ce:f5:28:98:da:a8:2c:fd:cb: c3:8a:a9:13:89:1c:69:b7:d5:38:97:98:f0:73:0f: e9:11:77:b3:ec:5b:de:29:c6:c3:c2:2d:1b:b9:03: 2f:0d:24:c4:8a:2f:32:88:f5:cc:2a:ca:90:8a:b3: 1e:0a:3a:27:95:5f:9c:9d:d1:30:8e:82:23:58:6d: c6:8c:16:be:26:a8:a1:e0:06:4a:f8:3a:80:13:58: 89:ba:c9:ba:cc:e6:17:23:43:91:97:00:9e:d7:74: d0:56:d5:02:62:a8:42:bc:56:3b:5c:07:7e:25:83: e8:d5:dc:ff:25:da:37:2f:46:fc:5d:2e:b4:ce:31: 9d:c0:9d:52:7b:96:32:60:6d:8d:0f:04:d0:d5:af: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B7:4A:C3:9D:CA:41:A7:D6:DE:0E:24:59:2F:4E:A7:D2:15:EA:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142763.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a071::/32 Signature Algorithm: sha256WithRSAEncryption 9e:18:06:2b:32:d5:06:01:5b:c0:a3:63:2f:01:62:89:ff:68: d8:5b:58:0e:56:d9:69:5e:d1:95:87:f5:2e:78:20:8c:e8:be: 40:35:3a:3e:aa:d4:80:e9:ab:cc:e0:ed:52:26:70:c7:3e:00: 73:01:eb:1d:37:9d:97:db:66:87:ac:17:78:08:55:0d:76:ad: e1:f1:e1:67:d3:07:f8:11:d2:5c:11:37:f8:85:99:68:74:ff: 6f:d1:15:c9:86:79:3d:21:a9:91:85:21:8e:dd:30:42:0f:8f: 8e:60:11:70:a5:e8:ec:2b:12:90:bf:47:02:28:56:f0:84:1c: 74:39:61:54:ce:48:9e:ff:6d:0f:55:9d:29:88:3c:8f:f1:31: f2:2a:b4:03:6e:9d:00:d2:7e:5d:2a:09:aa:2a:4d:ea:bd:07: ac:21:22:1e:38:ad:79:8d:16:87:e0:7e:f3:c5:39:27:1e:ee: 7b:e1:f7:ce:d7:ef:6b:f8:b7:78:2a:86:45:76:bb:a0:bd:5c: 21:f2:f8:04:4c:43:e5:c3:50:41:71:8c:ef:3d:10:d8:3f:1e: 7a:9b:23:0f:f5:3a:4e:b4:ff:64:52:5a:68:0a:df:1a:e5:83: b5:54:fa:2d:38:5e:52:68:70:a1:b4:1d:d9:4f:82:d5:51:28: 0e:fc:c5:a2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSPwexK5wQV16sLuOnHmN2i48oAMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1MloX DTI3MDMwMzA2MDc1MlowMzExMC8GA1UEAxMoODVCNzRBQzM5RENBNDFBN0Q2REUw RTI0NTkyRjRFQTdEMjE1RUEwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkzDfl2WkDAFh8MiLXenfMubQZc7AIpz1KZUO104MOJynpIs0gj2s0Z7Ohi +kKThW+TfuYCd+RqWF8NI4ojpjsUT4KTUVVLWs1FGTUS3ZE0Bb5PjPNE6CvmOl6k 2eJR8Lrw5rnPPRAyfXsyH2DCzvUomNqoLP3Lw4qpE4kcabfVOJeY8HMP6RF3s+xb 3inGw8ItG7kDLw0kxIovMoj1zCrKkIqzHgo6J5VfnJ3RMI6CI1htxowWviaooeAG Svg6gBNYibrJuszmFyNDkZcAntd00FbVAmKoQrxWO1wHfiWD6NXc/yXaNy9G/F0u tM4xncCdUnuWMmBtjQ8E0NWvLkUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSFt0rD ncpBp9beDiRZL06n0hXqAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oHEwDQYJKoZIhvcNAQELBQADggEBAJ4YBisy1QYBW8CjYy8BYon/aNhbWA5W2Wle 0ZWH9S54IIzovkA1Oj6q1IDpq8zg7VImcMc+AHMB6x03nZfbZoesF3gIVQ12reHx 4WfTB/gR0lwRN/iFmWh0/2/RFcmGeT0hqZGFIY7dMEIPj45gEXCl6OwrEpC/RwIo VvCEHHQ5YVTOSJ7/bQ9VnSmIPI/xMfIqtANunQDSfl0qCaoqTeq9B6whIh44rXmN FofgfvPFOSce7nvh987X72v4t3gqhkV2u6C9XCHy+ARMQ+XDUEFxjO89ENg/Hnqb Iw/1Ok60/2RSWmgK3xrlg7VU+i04XlJocKG0HdlPgtVRKA78xaI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:49 2026 by rpki-client