$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142793.roa File: AS142793.roa (raw, json) Hash identifier: LoLm7BXzMn5dHOJJwTIRcyPmbOps4mEa7BX/WOR8cqo= Subject key identifier: 61:BC:33:C5:18:80:BB:AE:0A:C2:62:80:5E:02:79:D3:3D:66:A8:2D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 27083C3291FACB0C939A4E4868ED031688969F3A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142793.roa Signing time: Wed 04 Mar 2026 06:05:16 +0000 ROA not before: Wed 04 Mar 2026 06:00:16 +0000 ROA not after: Wed 03 Mar 2027 06:05:16 +0000 asID: 142793 IP address blocks: 240a:a08f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:08:3c:32:91:fa:cb:0c:93:9a:4e:48:68:ed:03:16:88:96:9f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:16 2026 GMT Not After : Mar 3 06:05:16 2027 GMT Subject: CN=61BC33C51880BBAE0AC262805E0279D33D66A82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:50:2c:c8:05:fa:d6:e3:2c:f3:30:13:0a: 30:46:c9:43:c8:32:04:c3:2e:c6:92:7e:74:7f:7d: f2:ad:5f:93:62:80:74:a4:03:af:e8:fb:d2:fc:04: 5a:d0:d5:61:16:50:c1:b4:62:0f:4d:36:07:6c:aa: 34:65:8a:37:49:60:07:df:9a:75:3b:e3:de:4e:48: f3:d2:19:fa:ec:c5:a3:35:b9:0b:14:b1:1f:89:01: 8c:22:a7:68:40:05:61:95:9f:ed:3a:55:c6:a4:ac: cd:2c:8e:aa:a8:2c:3b:2a:dd:0f:02:fa:a3:4a:ed: 4d:1f:9e:12:e6:87:b0:cb:39:11:63:ac:43:07:4a: 4a:0f:36:6a:87:27:99:51:c3:8b:a1:ac:c4:7e:fa: 1e:d7:30:5f:87:68:96:6b:3a:61:22:c9:b7:3d:0c: 7b:1f:27:03:2c:aa:09:87:92:dc:4a:7e:9c:ac:5f: 90:07:77:ab:66:2a:d8:c7:81:e6:37:2a:61:25:65: 76:b6:b5:17:16:61:89:0f:82:5b:92:6b:3f:72:45: c3:10:d3:15:d3:2f:51:a4:65:7b:0a:a9:1e:b3:c5: f9:5c:10:6f:2f:5d:89:56:17:a4:f3:bb:d8:46:4d: 0b:95:83:e5:12:d8:78:a3:c7:c9:c0:9c:51:db:8e: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BC:33:C5:18:80:BB:AE:0A:C2:62:80:5E:02:79:D3:3D:66:A8:2D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142793.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a08f::/32 Signature Algorithm: sha256WithRSAEncryption 74:91:ad:fe:21:89:10:87:f0:61:a7:c6:4d:07:fa:a4:32:f9: aa:e0:65:eb:54:fc:03:f9:91:3d:fd:db:db:2b:5d:02:c1:82: 1a:6d:c8:fb:5f:1a:f0:f6:d3:e9:7f:d8:ac:01:7c:a1:e8:b1: 34:43:41:97:d1:72:fc:0b:1e:27:05:bc:21:97:ee:37:1e:e6: e2:ce:d9:7f:9b:14:fc:e1:d4:5b:4c:9d:6f:25:dc:2f:e3:e2: 7e:cd:60:3f:b4:f3:ae:e8:d3:fb:5b:95:dc:84:a9:20:fa:23: c7:b2:a6:f7:cf:88:06:7c:cc:47:02:c5:af:ad:c3:4d:9c:fd: 45:57:ac:45:11:29:a6:0d:f3:7c:13:d8:30:4d:fe:18:ba:df: bb:fc:4d:3e:7b:c6:c9:c3:61:c1:be:d2:a4:b1:62:f9:1a:dc: 07:01:a5:d4:9f:d7:57:22:9d:37:87:41:43:e3:db:65:92:5c: 78:4a:8f:87:02:85:78:cb:38:5e:53:10:83:24:22:df:0e:5f: c6:fe:51:fd:46:a6:34:89:9e:fe:f5:3c:12:80:f1:96:af:1d: c0:d2:5e:69:a8:87:d1:6a:3b:82:dc:97:f0:bb:2e:5d:38:b8: c7:ae:cb:e5:7f:72:d9:7a:28:28:b1:4a:bc:80:49:c9:54:93: 7a:8e:73:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJwg8MpH6ywyTmk5IaO0DFoiWnzowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxNloX DTI3MDMwMzA2MDUxNlowMzExMC8GA1UEAxMoNjFCQzMzQzUxODgwQkJBRTBBQzI2 MjgwNUUwMjc5RDMzRDY2QTgyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKx3UCzIBfrW4yzzMBMKMEbJQ8gyBMMuxpJ+dH998q1fk2KAdKQDr+j70vwE WtDVYRZQwbRiD002B2yqNGWKN0lgB9+adTvj3k5I89IZ+uzFozW5CxSxH4kBjCKn aEAFYZWf7TpVxqSszSyOqqgsOyrdDwL6o0rtTR+eEuaHsMs5EWOsQwdKSg82aocn mVHDi6GsxH76HtcwX4dolms6YSLJtz0Mex8nAyyqCYeS3Ep+nKxfkAd3q2Yq2MeB 5jcqYSVldra1FxZhiQ+CW5JrP3JFwxDTFdMvUaRlewqpHrPF+VwQby9diVYXpPO7 2EZNC5WD5RLYeKPHycCcUduOBJ0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRhvDPF GIC7rgrCYoBeAnnTPWaoLTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oI8wDQYJKoZIhvcNAQELBQADggEBAHSRrf4hiRCH8GGnxk0H+qQy+argZetU/AP5 kT3929srXQLBghptyPtfGvD20+l/2KwBfKHosTRDQZfRcvwLHicFvCGX7jce5uLO 2X+bFPzh1FtMnW8l3C/j4n7NYD+0867o0/tbldyEqSD6I8eypvfPiAZ8zEcCxa+t w02c/UVXrEURKaYN83wT2DBN/hi637v8TT57xsnDYcG+0qSxYvka3AcBpdSf11ci nTeHQUPj22WSXHhKj4cChXjLOF5TEIMkIt8OX8b+Uf1GpjSJnv71PBKA8ZavHcDS Xmmoh9FqO4Lcl/C7Ll04uMeuy+V/ctl6KCixSryASclUk3qOc8E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:56 2026 by rpki-client