$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142776.roa File: AS142776.roa (raw, json) Hash identifier: xCP2kM3veFUAL/PTvAE1ljKdtbPPFFL/Xe4ZPWvmf5A= Subject key identifier: 1A:BF:0F:F9:81:F2:48:33:B1:4D:90:2A:83:38:62:53:E6:DA:83:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 61CE0DE06759ECF7C05F2C2F4913CEF5EF55540E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142776.roa Signing time: Wed 04 Mar 2026 06:05:50 +0000 ROA not before: Wed 04 Mar 2026 06:00:50 +0000 ROA not after: Wed 03 Mar 2027 06:05:50 +0000 asID: 142776 IP address blocks: 240a:a07e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ce:0d:e0:67:59:ec:f7:c0:5f:2c:2f:49:13:ce:f5:ef:55:54:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:50 2026 GMT Not After : Mar 3 06:05:50 2027 GMT Subject: CN=1ABF0FF981F24833B14D902A83386253E6DA8302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:e8:57:78:6c:59:d5:76:1b:53:33:92:96: f4:4e:d8:65:3b:88:07:d2:4b:9e:c3:c1:01:44:b7: 25:a7:44:d7:68:04:5e:83:9a:36:e7:45:e2:b1:f3: 44:c6:47:28:70:93:fc:53:2a:af:d8:c6:21:e8:76: 40:22:01:4a:47:47:bd:e4:7e:69:ad:40:b7:17:e5: 68:23:5b:ac:99:88:89:b7:e8:9b:96:a2:a4:e6:8c: 38:43:14:5b:a7:79:83:b9:e3:96:2c:dd:fb:08:44: 97:0c:81:b8:f6:ff:61:21:ac:57:00:7d:b0:22:be: 77:dd:5b:28:88:43:7a:f9:4b:9d:ee:b4:1f:81:c1: 43:dc:a9:68:4f:c7:06:50:66:b1:90:45:bb:38:b7: 03:e0:bf:98:3a:d3:5a:5c:c8:10:fe:a8:60:30:b1: 02:7c:cc:4d:d7:02:04:eb:f8:f3:e2:3b:66:84:85: d0:16:33:a3:cc:c5:f6:46:a3:0b:5a:29:42:ce:15: c4:6e:c5:cb:0d:8b:1a:1e:0a:2e:6b:a1:b4:b8:79: 0e:c2:f5:28:eb:3b:d3:c1:2f:b7:5a:e1:10:5a:0b: 69:47:a8:8c:48:04:c9:60:45:02:64:bb:ef:d6:5b: 24:3a:48:a7:d3:12:d5:d7:54:74:bb:9e:22:66:a8: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BF:0F:F9:81:F2:48:33:B1:4D:90:2A:83:38:62:53:E6:DA:83:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a07e::/32 Signature Algorithm: sha256WithRSAEncryption 12:d1:88:e2:9c:b3:c3:49:75:e7:6f:aa:f6:6b:e8:c4:96:ff: ce:d9:29:2e:dd:60:61:04:11:1a:0a:3a:80:81:75:db:46:f9: 30:57:81:2d:01:e9:23:dd:ff:5c:7a:52:75:36:e4:91:30:2d: 53:d1:55:cd:cf:a9:2d:68:8e:f7:44:06:72:1d:02:1b:6f:0b: f1:f7:57:3e:18:46:fe:ff:58:8e:5b:d9:2c:81:b9:d2:cc:2e: 01:6a:5c:83:3e:be:f9:de:7a:c0:d5:2a:1d:3f:db:4f:e0:99: 49:fc:15:c3:3e:9a:28:2a:50:ef:08:25:19:b8:94:eb:be:99: 00:1d:58:0f:01:59:3d:eb:18:13:0e:62:fe:c7:dc:8d:65:4d: 94:08:4b:4b:56:6a:5c:84:43:36:e3:a3:49:09:08:63:ad:5f: c3:5b:60:a6:e6:2d:fa:fd:a7:83:a2:19:41:00:d6:37:92:12: ed:5d:c0:0e:a9:ce:84:30:b7:04:56:b6:55:97:73:6c:5a:3b: 34:8f:61:34:54:f8:88:e2:ba:70:9d:b3:3e:bf:90:4e:0b:d0: 86:41:59:16:86:a2:66:72:de:39:d2:86:6f:43:1a:cd:55:e2: ba:1b:ba:0d:6e:e5:87:18:a0:6d:e7:02:81:42:34:18:c6:9c: 19:c8:e8:be -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYc4N4GdZ7PfAXywvSRPO9e9VVA4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1MFoX DTI3MDMwMzA2MDU1MFowMzExMC8GA1UEAxMoMUFCRjBGRjk4MUYyNDgzM0IxNEQ5 MDJBODMzODYyNTNFNkRBODMwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoY6Fd4bFnVdhtTM5KW9E7YZTuIB9JLnsPBAUS3JadE12gEXoOaNudF4rHz RMZHKHCT/FMqr9jGIeh2QCIBSkdHveR+aa1AtxflaCNbrJmIibfom5aipOaMOEMU W6d5g7njlizd+whElwyBuPb/YSGsVwB9sCK+d91bKIhDevlLne60H4HBQ9ypaE/H BlBmsZBFuzi3A+C/mDrTWlzIEP6oYDCxAnzMTdcCBOv48+I7ZoSF0BYzo8zF9kaj C1opQs4VxG7Fyw2LGh4KLmuhtLh5DsL1KOs708Evt1rhEFoLaUeojEgEyWBFAmS7 79ZbJDpIp9MS1ddUdLueImaoW+MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQavw/5 gfJIM7FNkCqDOGJT5tqDAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oH4wDQYJKoZIhvcNAQELBQADggEBABLRiOKcs8NJdedvqvZr6MSW/87ZKS7dYGEE ERoKOoCBddtG+TBXgS0B6SPd/1x6UnU25JEwLVPRVc3PqS1ojvdEBnIdAhtvC/H3 Vz4YRv7/WI5b2SyBudLMLgFqXIM+vvneesDVKh0/20/gmUn8FcM+migqUO8IJRm4 lOu+mQAdWA8BWT3rGBMOYv7H3I1lTZQIS0tWalyEQzbjo0kJCGOtX8NbYKbmLfr9 p4OiGUEA1jeSEu1dwA6pzoQwtwRWtlWXc2xaOzSPYTRU+IjiunCdsz6/kE4L0IZB WRaGomZy3jnShm9DGs1V4robug1u5YcYoG3nAoFCNBjGnBnI6L4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:26 2026 by rpki-client