$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142779.roa File: AS142779.roa (raw, json) Hash identifier: OjVxCKPjcTQze3YphIv4iG4dDa1YnnyB713A4D2FkIM= Subject key identifier: 0D:C9:33:FF:31:18:3A:3C:08:1C:2F:C7:A0:5D:E7:99:1D:3B:C8:50 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 778135CAF9FCBA1BCEBB0E5B682ADDEC43CD549B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142779.roa Signing time: Wed 04 Mar 2026 06:07:22 +0000 ROA not before: Wed 04 Mar 2026 06:02:22 +0000 ROA not after: Wed 03 Mar 2027 06:07:22 +0000 asID: 142779 IP address blocks: 240a:a081::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:81:35:ca:f9:fc:ba:1b:ce:bb:0e:5b:68:2a:dd:ec:43:cd:54:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:22 2026 GMT Not After : Mar 3 06:07:22 2027 GMT Subject: CN=0DC933FF31183A3C081C2FC7A05DE7991D3BC850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:50:74:ad:1d:b7:72:86:86:89:d1:dc:62:4c: 8d:b5:23:00:58:e6:d3:32:a9:c4:07:81:a3:4d:b1: 18:b5:ba:f2:a5:91:44:c9:4a:be:04:e4:c6:fb:c6: 7f:b6:0f:8b:c0:e6:51:24:ef:94:1e:cc:23:f1:b3: 34:76:ff:dc:43:eb:b2:90:5b:e4:05:38:72:13:25: f0:19:47:84:27:aa:bc:bd:52:6c:5d:37:dc:13:c3: e8:31:eb:56:03:6a:f2:85:33:d5:9f:a9:68:39:66: 49:c4:61:22:c8:8e:c1:b9:4e:5a:cc:13:5c:ef:f8: fe:e9:ba:b3:26:b8:2c:9c:e1:0b:ed:b9:e3:8b:98: f1:e7:8a:10:34:43:41:5d:db:7e:24:83:0b:22:fa: be:c9:84:e8:02:53:54:a9:84:cb:e1:ee:d5:25:83: f4:4d:92:48:c2:fa:7b:ac:44:5c:aa:e7:37:ab:a3: 1f:26:5b:43:d2:24:88:18:c3:e5:90:42:a9:6a:9c: f3:17:68:b0:fa:21:2a:73:59:71:35:8b:c8:b4:6b: 23:05:44:41:a9:46:56:34:14:63:60:61:6b:8f:64: f8:b0:9d:21:a9:1c:34:6c:fc:0f:60:99:ba:af:90: 60:d8:47:d7:20:3a:5a:a4:ba:2c:b4:68:d2:d7:00: 49:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C9:33:FF:31:18:3A:3C:08:1C:2F:C7:A0:5D:E7:99:1D:3B:C8:50 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142779.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a081::/32 Signature Algorithm: sha256WithRSAEncryption b5:b1:ba:e1:94:47:18:8d:0f:1f:0d:0a:5a:42:b4:17:b1:e1: 9d:05:93:e9:fa:2b:28:f2:fc:bb:3f:f8:a4:71:cf:cb:db:fa: 8e:16:6e:40:0d:61:c8:df:dc:db:6b:ff:07:07:df:a4:1e:ba: a1:57:89:14:89:da:6a:2c:ae:d7:ba:d2:4c:ed:c8:25:5c:30: 2b:04:5c:63:96:52:b8:5a:20:7c:a6:f3:3a:1b:c9:2c:b1:04: 32:22:42:38:26:1a:4a:52:11:fe:2f:69:98:a8:e0:e3:4d:67: be:68:ef:28:23:d3:20:d6:43:7c:5e:eb:8f:b7:a6:d8:e8:20: bd:35:df:23:76:b6:09:7b:31:93:48:15:31:01:9d:38:1a:ff: f3:46:00:78:db:10:d6:a8:80:fc:e9:48:b0:fe:37:81:3e:eb: b2:63:e8:0a:4a:fb:f2:00:cb:c8:50:96:d9:74:70:81:40:eb: dc:bb:67:9a:0d:e4:b8:40:25:7a:a9:01:88:1c:76:ef:c2:62: 00:a2:4a:90:40:ca:f8:f6:b7:71:fc:3b:60:80:89:a1:99:8c: 6e:96:7c:7a:99:07:12:2a:23:89:7c:55:62:ed:19:5f:be:04: c0:36:bb:ec:2b:ca:13:d0:4a:bf:86:7e:7f:8d:e3:a2:93:12: 8b:72:0b:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUd4E1yvn8uhvOuw5baCrd7EPNVJswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyMloX DTI3MDMwMzA2MDcyMlowMzExMC8GA1UEAxMoMERDOTMzRkYzMTE4M0EzQzA4MUMy RkM3QTA1REU3OTkxRDNCQzg1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOpQdK0dt3KGhonR3GJMjbUjAFjm0zKpxAeBo02xGLW68qWRRMlKvgTkxvvG f7YPi8DmUSTvlB7MI/GzNHb/3EPrspBb5AU4chMl8BlHhCeqvL1SbF033BPD6DHr VgNq8oUz1Z+paDlmScRhIsiOwblOWswTXO/4/um6sya4LJzhC+2544uY8eeKEDRD QV3bfiSDCyL6vsmE6AJTVKmEy+Hu1SWD9E2SSML6e6xEXKrnN6ujHyZbQ9IkiBjD 5ZBCqWqc8xdosPohKnNZcTWLyLRrIwVEQalGVjQUY2Bha49k+LCdIakcNGz8D2CZ uq+QYNhH1yA6WqS6LLRo0tcASckCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQNyTP/ MRg6PAgcL8egXeeZHTvIUDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oIEwDQYJKoZIhvcNAQELBQADggEBALWxuuGURxiNDx8NClpCtBex4Z0Fk+n6Kyjy /Ls/+KRxz8vb+o4WbkANYcjf3Ntr/wcH36QeuqFXiRSJ2mosrte60kztyCVcMCsE XGOWUrhaIHym8zobySyxBDIiQjgmGkpSEf4vaZio4ONNZ75o7ygj0yDWQ3xe64+3 ptjoIL013yN2tgl7MZNIFTEBnTga//NGAHjbENaogPzpSLD+N4E+67Jj6ApK+/IA y8hQltl0cIFA69y7Z5oN5LhAJXqpAYgcdu/CYgCiSpBAyvj2t3H8O2CAiaGZjG6W fHqZBxIqI4l8VWLtGV++BMA2u+wryhPQSr+Gfn+N46KTEotyC3s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:57 2026 by rpki-client