$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142791.roa File: AS142791.roa (raw, json) Hash identifier: 7j9IfbS/rsMP4rZDbdUwkOYd9lp3/IWVHamO14w7HaI= Subject key identifier: FB:D7:86:FC:A4:11:8D:48:86:58:0B:06:7E:35:A5:FA:14:A7:34:98 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 268001EB22FA1FD02DA1E5643481E0B926E82FCE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142791.roa Signing time: Wed 04 Mar 2026 06:07:35 +0000 ROA not before: Wed 04 Mar 2026 06:02:35 +0000 ROA not after: Wed 03 Mar 2027 06:07:35 +0000 asID: 142791 IP address blocks: 240a:a08d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:80:01:eb:22:fa:1f:d0:2d:a1:e5:64:34:81:e0:b9:26:e8:2f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:35 2026 GMT Not After : Mar 3 06:07:35 2027 GMT Subject: CN=FBD786FCA4118D4886580B067E35A5FA14A73498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:33:7c:69:f8:40:7b:70:d4:e3:06:33:0a: b5:4b:a5:d4:99:b2:8f:45:91:4d:5b:05:7b:24:bf: ce:89:1d:97:ab:93:14:3a:d7:94:97:cc:52:d9:e6: 19:e7:01:c1:ae:9e:48:d2:22:bb:45:de:19:c2:bd: d6:48:66:d2:db:51:c8:ee:2f:37:7f:7e:94:84:02: d0:a3:2f:90:ef:51:3e:db:17:d6:b8:19:ed:fc:32: 8d:2e:e2:55:14:67:70:e0:c9:ac:e5:66:76:7f:95: a6:c5:48:ac:b7:61:69:45:36:4b:30:63:56:6f:e5: 34:4e:b1:ff:68:ed:7d:a1:9b:75:59:af:69:a1:25: 69:5c:e3:d3:32:89:56:e6:20:63:64:6d:c9:d2:55: 17:f9:2d:90:1d:6c:9d:ce:f0:5e:88:eb:5b:fa:ee: f3:73:92:3e:66:ce:b9:98:d2:05:36:58:23:53:82: 70:df:80:29:be:25:f0:0f:88:df:88:b6:3a:f6:57: 8c:e0:b1:e0:3e:b8:a8:8c:87:4f:a4:3c:dd:ac:79: d7:02:d5:04:1d:da:3a:be:f3:d7:2b:bb:4f:9a:b3: 0f:7c:81:40:98:23:8d:9a:d3:18:85:4a:43:d7:56: 6f:ce:2e:60:da:e7:9c:8c:24:d4:4a:7b:2a:96:cc: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D7:86:FC:A4:11:8D:48:86:58:0B:06:7E:35:A5:FA:14:A7:34:98 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142791.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a08d::/32 Signature Algorithm: sha256WithRSAEncryption 0a:91:c3:6b:95:3f:39:dd:95:16:36:59:3e:d1:e1:97:33:91: f6:d5:9b:87:9f:e3:f1:a6:26:76:42:f4:02:d2:17:e0:cd:15: a0:9d:ac:04:7d:c8:23:44:dc:2d:5f:7b:ac:eb:91:1b:1e:57: 0f:c1:d6:ac:0e:1c:2b:95:82:7c:57:dd:00:36:ea:1b:51:75: a4:f0:9b:28:cd:13:b9:01:e6:1d:38:c3:d0:ea:e5:94:dc:a7: ac:34:c8:d8:8f:02:e4:97:f6:72:a6:61:34:2d:33:90:2d:c5: e8:52:3a:e9:38:cd:ec:c9:fa:ab:ea:c5:23:fd:ed:fa:b1:e6: 9e:4a:05:d3:27:04:1a:02:e6:a7:2e:88:52:34:93:3d:30:2c: 76:e6:f2:67:35:6f:58:9c:60:a8:39:46:b7:73:f7:3c:2d:79: 9b:c5:e8:b7:8c:8b:97:6b:64:f8:e9:d4:b0:a9:0c:c1:cd:42: 19:7d:7a:79:a6:b8:78:3c:eb:11:a6:2f:b2:90:39:b6:11:c5: d8:78:d9:d8:c2:87:5f:a3:79:37:a1:34:27:ca:67:d9:5d:0f: d5:b4:2d:72:08:92:2e:71:6f:0f:da:b2:ae:fa:69:a9:e5:51: 76:ee:82:f5:64:38:9a:83:39:cd:d9:4e:e3:38:71:2b:24:27: d9:86:b0:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJoAB6yL6H9AtoeVkNIHguSboL84wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzNVoX DTI3MDMwMzA2MDczNVowMzExMC8GA1UEAxMoRkJENzg2RkNBNDExOEQ0ODg2NTgw QjA2N0UzNUE1RkExNEE3MzQ5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgrM3xp+EB7cNTjBjMKtUul1Jmyj0WRTVsFeyS/zokdl6uTFDrXlJfMUtnm GecBwa6eSNIiu0XeGcK91khm0ttRyO4vN39+lIQC0KMvkO9RPtsX1rgZ7fwyjS7i VRRncODJrOVmdn+VpsVIrLdhaUU2SzBjVm/lNE6x/2jtfaGbdVmvaaElaVzj0zKJ VuYgY2RtydJVF/ktkB1snc7wXojrW/ru83OSPmbOuZjSBTZYI1OCcN+AKb4l8A+I 34i2OvZXjOCx4D64qIyHT6Q83ax51wLVBB3aOr7z1yu7T5qzD3yBQJgjjZrTGIVK Q9dWb84uYNrnnIwk1Ep7KpbMff8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT714b8 pBGNSIZYCwZ+NaX6FKc0mDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oI0wDQYJKoZIhvcNAQELBQADggEBAAqRw2uVPzndlRY2WT7R4ZczkfbVm4ef4/Gm JnZC9ALSF+DNFaCdrAR9yCNE3C1fe6zrkRseVw/B1qwOHCuVgnxX3QA26htRdaTw myjNE7kB5h04w9Dq5ZTcp6w0yNiPAuSX9nKmYTQtM5AtxehSOuk4zezJ+qvqxSP9 7fqx5p5KBdMnBBoC5qcuiFI0kz0wLHbm8mc1b1icYKg5Rrdz9zwteZvF6LeMi5dr ZPjp1LCpDMHNQhl9enmmuHg86xGmL7KQObYRxdh42djCh1+jeTehNCfKZ9ldD9W0 LXIIki5xbw/asq76aanlUXbugvVkOJqDOc3ZTuM4cSskJ9mGsHk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:59 2026 by rpki-client