$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142775.roa File: AS142775.roa (raw, json) Hash identifier: amyo2r3YmhypL+mttrNNlyN5Pk1zxzys63Q5kTLv7eo= Subject key identifier: 16:3E:8E:1C:CC:13:DB:05:B7:42:A5:C3:FE:5A:3E:83:7C:9D:BE:5E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 34D9010D1FA8E9EC011D72B9AC60720E9D5DB9DF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142775.roa Signing time: Wed 04 Mar 2026 06:06:31 +0000 ROA not before: Wed 04 Mar 2026 06:01:31 +0000 ROA not after: Wed 03 Mar 2027 06:06:31 +0000 asID: 142775 IP address blocks: 240a:a07d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d9:01:0d:1f:a8:e9:ec:01:1d:72:b9:ac:60:72:0e:9d:5d:b9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:31 2026 GMT Not After : Mar 3 06:06:31 2027 GMT Subject: CN=163E8E1CCC13DB05B742A5C3FE5A3E837C9DBE5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:0a:12:72:0d:71:c7:7e:86:6d:e6:35:4c: 5f:df:29:97:89:ea:c3:f5:03:20:38:a6:9f:c9:a1: 58:ff:17:27:91:50:95:1e:27:83:9d:bf:76:df:8d: 29:bd:97:68:73:35:86:b8:3a:06:01:3f:05:74:88: 3c:41:cc:fd:ff:34:5e:92:56:f4:81:5b:57:ce:3a: 41:e9:a2:28:63:d3:c1:d4:fc:10:d0:1b:79:56:18: d0:62:53:4b:d0:8d:7f:a8:a7:2b:b0:00:36:45:fe: 81:a4:98:62:3d:08:14:22:d0:48:39:7d:5e:77:b6: a1:fe:4d:35:0f:a9:f2:ce:b8:e7:1a:f8:5b:7e:e0: 63:7f:9d:24:50:c4:f2:34:24:f1:6b:57:ad:a1:14: f0:5a:b6:dd:f7:fd:1a:33:d2:ce:aa:c0:df:c2:a7: 20:bb:ea:f5:f8:39:48:6c:5f:09:8f:15:44:0d:c4: 01:74:3e:f9:0d:85:5c:f9:ea:9c:9b:31:cb:60:d0: 4c:7b:e6:35:f1:01:13:d9:e8:af:43:4b:ff:f2:13: 75:ad:bd:be:0b:cc:0f:0e:d6:5a:87:4e:3e:b2:f7: a6:9f:07:e2:b0:6b:09:58:a1:7a:90:3b:f4:7a:47: d9:2c:49:03:8b:3d:61:d9:45:ce:27:68:e2:38:35: 6d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3E:8E:1C:CC:13:DB:05:B7:42:A5:C3:FE:5A:3E:83:7C:9D:BE:5E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142775.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a07d::/32 Signature Algorithm: sha256WithRSAEncryption 2f:63:c8:b5:b3:bb:9d:9e:15:78:14:01:13:39:8f:7a:a7:e8: a8:d1:54:4e:28:94:26:ef:c2:c6:03:7d:07:59:49:c7:eb:1c: e4:02:bd:25:ee:3e:d4:18:b0:38:cb:e6:a6:6c:79:ec:49:05: 29:e7:28:8e:90:a8:c0:1a:c6:e7:65:a1:cb:6d:da:a8:af:ab: 42:90:b4:70:52:d4:60:3f:b7:b0:95:8d:71:56:56:81:27:bf: 16:34:67:8d:51:7d:83:42:9b:9f:5d:56:69:b1:24:0f:24:cf: 59:19:8d:28:f6:03:e6:a4:32:56:5c:d2:d8:fb:c4:4a:41:42: 09:66:ee:6e:33:66:06:6f:c5:63:e5:76:99:e8:d5:45:4c:19: f7:5a:df:fd:48:98:cf:ae:04:5d:7a:c6:b1:f3:b4:be:69:9a: 52:e0:c8:04:9a:37:7f:50:54:f4:f9:7f:82:b2:cb:0e:38:94: 8f:0b:d7:f8:21:6d:1c:cc:4f:58:61:61:83:bf:ff:7b:e7:92: 3e:b0:dc:1e:f1:09:b7:db:8b:a5:98:d8:cc:2c:65:f4:03:f8: d7:df:36:0f:cd:42:5d:c3:e3:a7:ca:b9:dd:ed:04:c3:a6:a7: 6c:eb:7c:66:15:c0:98:61:2a:8d:b2:df:10:0c:3b:8a:34:9b: ce:17:cc:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNNkBDR+o6ewBHXK5rGByDp1dud8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzMVoX DTI3MDMwMzA2MDYzMVowMzExMC8GA1UEAxMoMTYzRThFMUNDQzEzREIwNUI3NDJB NUMzRkU1QTNFODM3QzlEQkU1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYtChJyDXHHfoZt5jVMX98pl4nqw/UDIDimn8mhWP8XJ5FQlR4ng52/dt+N Kb2XaHM1hrg6BgE/BXSIPEHM/f80XpJW9IFbV846QemiKGPTwdT8ENAbeVYY0GJT S9CNf6inK7AANkX+gaSYYj0IFCLQSDl9Xne2of5NNQ+p8s645xr4W37gY3+dJFDE 8jQk8WtXraEU8Fq23ff9GjPSzqrA38KnILvq9fg5SGxfCY8VRA3EAXQ++Q2FXPnq nJsxy2DQTHvmNfEBE9nor0NL//ITda29vgvMDw7WWodOPrL3pp8H4rBrCVihepA7 9HpH2SxJA4s9YdlFzido4jg1bdcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQWPo4c zBPbBbdCpcP+Wj6DfJ2+XjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oH0wDQYJKoZIhvcNAQELBQADggEBAC9jyLWzu52eFXgUARM5j3qn6KjRVE4olCbv wsYDfQdZScfrHOQCvSXuPtQYsDjL5qZseexJBSnnKI6QqMAaxudloctt2qivq0KQ tHBS1GA/t7CVjXFWVoEnvxY0Z41RfYNCm59dVmmxJA8kz1kZjSj2A+akMlZc0tj7 xEpBQglm7m4zZgZvxWPldpno1UVMGfda3/1ImM+uBF16xrHztL5pmlLgyASaN39Q VPT5f4Kyyw44lI8L1/ghbRzMT1hhYYO//3vnkj6w3B7xCbfbi6WY2MwsZfQD+Nff Ng/NQl3D46fKud3tBMOmp2zrfGYVwJhhKo2y3xAMO4o0m84XzIQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:14 2026 by rpki-client