$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142794.roa File: AS142794.roa (raw, json) Hash identifier: oLU2+52JL+r8Zjv3MJsMjtgRxPf4YyItrQ9Jf1ACgZU= Subject key identifier: FE:77:BD:38:31:6E:65:3E:EB:19:3B:67:CE:68:46:C8:BC:8B:90:EF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1763E56B82DDBB871791B446AB2A2CED3FB5B810 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142794.roa Signing time: Wed 04 Mar 2026 06:07:37 +0000 ROA not before: Wed 04 Mar 2026 06:02:37 +0000 ROA not after: Wed 03 Mar 2027 06:07:37 +0000 asID: 142794 IP address blocks: 240a:a090::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:63:e5:6b:82:dd:bb:87:17:91:b4:46:ab:2a:2c:ed:3f:b5:b8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:37 2026 GMT Not After : Mar 3 06:07:37 2027 GMT Subject: CN=FE77BD38316E653EEB193B67CE6846C8BC8B90EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:64:c2:16:59:a1:26:31:72:a9:9b:b3:3f: 5b:3e:dd:c6:8f:7c:ce:40:fe:9e:ad:75:03:ec:f6: 8c:b0:e6:25:7c:2d:51:66:73:da:08:de:03:1f:24: ee:85:9f:d8:0a:68:bc:ee:9d:7d:82:a9:2a:bc:47: f6:b3:91:61:36:b3:81:07:0b:df:6a:2b:e0:f3:60: 46:45:b7:de:e4:eb:93:19:24:2f:1a:d6:15:bb:f6: 97:da:24:cc:69:3e:1c:2e:c2:6b:ea:eb:fa:72:6f: f4:0b:ca:27:a2:bc:30:d4:eb:10:92:18:00:40:79: 7b:1c:3c:e3:a1:26:a9:12:d8:9b:78:8c:13:1c:c4: 8c:22:ed:34:05:32:eb:d7:43:31:de:ea:03:65:eb: 79:82:30:7f:ed:ba:c8:46:84:78:38:65:45:ec:f2: 58:3e:3e:61:3a:36:ac:15:ed:b1:4f:dd:26:d1:54: fc:11:9f:81:cc:3e:68:b3:4c:62:b2:cf:40:fc:19: 9a:65:15:79:71:6d:de:01:16:5f:4c:85:e3:6b:7e: de:ee:a4:49:60:7b:ae:9b:91:1f:3d:c8:42:ab:62: 21:66:7a:39:b3:f9:08:5a:d1:cf:ce:44:ce:73:ac: 4b:ae:f1:c5:e5:0c:49:cb:f7:d2:32:a7:7e:9b:f9: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:BD:38:31:6E:65:3E:EB:19:3B:67:CE:68:46:C8:BC:8B:90:EF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142794.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a090::/32 Signature Algorithm: sha256WithRSAEncryption db:4c:7b:c2:e8:1f:94:f8:f4:dc:28:21:51:09:d1:83:e6:41: 16:dd:0a:cd:b2:f0:6d:73:24:c7:67:f5:de:1f:9c:9e:f1:7b: b1:af:00:34:7e:46:d5:ff:0c:f9:bb:c4:ba:b9:3b:ec:30:f5: f8:df:3d:c6:9b:62:c1:9c:be:4b:2b:f4:61:69:0a:e2:b7:07: ee:2c:bd:50:10:a7:b3:90:cb:02:ef:f9:20:5b:5a:ec:31:ed: f5:7a:c7:0e:1d:73:da:8e:d9:11:cb:02:03:1b:ef:f0:ae:e3: 15:a9:1e:2e:72:f5:a0:9d:91:fd:b0:3d:48:a1:3d:e1:bb:4b: 65:63:c5:cf:c3:bb:cb:6c:4e:d8:36:3e:08:44:8f:9c:91:71: c9:7b:4e:84:4e:5d:0c:cc:ed:fb:03:e3:09:25:af:6d:49:42: f3:70:a2:8d:0d:19:88:a6:39:96:4b:e2:f7:c8:af:ce:b3:8d: 51:d4:7c:b5:73:55:8d:8a:5f:4e:a0:5f:6a:ba:f0:04:55:60: 34:0c:95:33:51:4a:21:5f:77:49:bf:7f:8c:60:31:45:e3:cf: ac:9e:87:62:a8:64:ff:bc:da:e9:75:50:fa:59:33:d3:9d:2c: 49:4c:e0:89:ef:dd:32:f3:f0:50:cf:3f:23:ce:eb:1e:45:4a: 0d:3c:bd:23 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUF2Pla4Ldu4cXkbRGqyos7T+1uBAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzN1oX DTI3MDMwMzA2MDczN1owMzExMC8GA1UEAxMoRkU3N0JEMzgzMTZFNjUzRUVCMTkz QjY3Q0U2ODQ2QzhCQzhCOTBFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKm5ZMIWWaEmMXKpm7M/Wz7dxo98zkD+nq11A+z2jLDmJXwtUWZz2gjeAx8k 7oWf2ApovO6dfYKpKrxH9rORYTazgQcL32or4PNgRkW33uTrkxkkLxrWFbv2l9ok zGk+HC7Ca+rr+nJv9AvKJ6K8MNTrEJIYAEB5exw846EmqRLYm3iMExzEjCLtNAUy 69dDMd7qA2XreYIwf+26yEaEeDhlRezyWD4+YTo2rBXtsU/dJtFU/BGfgcw+aLNM YrLPQPwZmmUVeXFt3gEWX0yF42t+3u6kSWB7rpuRHz3IQqtiIWZ6ObP5CFrRz85E znOsS67xxeUMScv30jKnfpv5HM8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT+d704 MW5lPusZO2fOaEbIvIuQ7zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oJAwDQYJKoZIhvcNAQELBQADggEBANtMe8LoH5T49NwoIVEJ0YPmQRbdCs2y8G1z JMdn9d4fnJ7xe7GvADR+RtX/DPm7xLq5O+ww9fjfPcabYsGcvksr9GFpCuK3B+4s vVAQp7OQywLv+SBbWuwx7fV6xw4dc9qO2RHLAgMb7/Cu4xWpHi5y9aCdkf2wPUih PeG7S2Vjxc/Du8tsTtg2PghEj5yRccl7ToROXQzM7fsD4wklr21JQvNwoo0NGYim OZZL4vfIr86zjVHUfLVzVY2KX06gX2q68ARVYDQMlTNRSiFfd0m/f4xgMUXjz6ye h2KoZP+82ul1UPpZM9OdLElM4Inv3TLz8FDPPyPO6x5FSg08vSM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:38 2026 by rpki-client