$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142795.roa File: AS142795.roa (raw, json) Hash identifier: zOLUnSKMJE1Er4/O1uK2LVz3NhVJQ2UjGTwXZALOvZM= Subject key identifier: B6:1F:EF:93:06:6E:02:F1:0C:C6:7C:4D:CE:72:97:4A:71:85:DB:81 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1AE9E76059819221F8F9A69483340B5964D69C57 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142795.roa Signing time: Wed 04 Mar 2026 06:06:59 +0000 ROA not before: Wed 04 Mar 2026 06:01:59 +0000 ROA not after: Wed 03 Mar 2027 06:06:59 +0000 asID: 142795 IP address blocks: 240a:a091::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e9:e7:60:59:81:92:21:f8:f9:a6:94:83:34:0b:59:64:d6:9c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:59 2026 GMT Not After : Mar 3 06:06:59 2027 GMT Subject: CN=B61FEF93066E02F10CC67C4DCE72974A7185DB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:6d:c2:7b:15:78:44:e5:56:8e:88:55:41: 47:55:f0:24:db:0a:75:09:82:6e:01:b2:77:5f:87: 5a:a9:ba:f8:e8:13:27:b0:56:7c:7f:c7:00:cb:11: 68:c5:2f:1f:f0:1e:a1:5a:98:e0:6f:e9:34:56:99: 1f:89:7c:33:bc:2b:81:4f:30:67:74:e7:cd:05:0d: 4f:f9:59:9c:8c:19:6f:30:fc:68:53:73:fb:90:4c: 47:7e:44:8c:ec:b3:df:d2:8e:06:aa:eb:df:e0:cf: 90:c6:82:72:2f:de:d8:0a:f0:d1:e4:29:ae:f0:2e: 95:82:04:55:59:b2:f1:99:e5:e3:80:da:56:4f:f9: 58:2f:ac:ff:69:c0:08:09:c8:ca:81:10:e8:b8:6f: 02:29:31:8c:1b:00:50:a2:87:1e:f5:87:09:52:04: 6c:b1:ce:05:fa:8a:8e:7e:4b:c5:e6:04:0f:62:26: b9:7e:84:cf:4f:8e:9d:fa:f2:22:be:89:ff:be:8e: 90:b2:e6:04:5d:57:1c:2d:aa:be:51:68:38:44:af: 11:a2:7c:80:af:44:a3:49:ce:8e:01:f4:51:71:bb: 24:b8:5a:8c:99:3d:70:90:2c:cc:2d:2b:42:0d:01: f6:7f:6f:50:2a:9e:f2:2e:10:e5:d8:3a:6e:d6:d3: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1F:EF:93:06:6E:02:F1:0C:C6:7C:4D:CE:72:97:4A:71:85:DB:81 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142795.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a091::/32 Signature Algorithm: sha256WithRSAEncryption 03:6e:35:2b:36:69:e5:77:61:7f:9b:1d:bf:09:b4:83:4d:bb: 17:5e:c2:17:71:c7:98:f3:86:3d:90:8e:25:53:73:06:8e:72: 38:c0:74:86:6e:34:61:1a:82:58:e4:db:f1:48:54:06:a7:d5: c3:18:13:28:d1:b3:bd:ad:99:39:aa:84:cf:c8:84:07:75:11: ad:08:34:02:52:1c:67:28:d5:bc:c0:cb:13:39:42:dc:0c:0d: d1:4c:07:89:6e:b2:86:3f:22:63:fd:ff:57:66:53:1c:fa:68: c9:42:2f:e9:e8:1a:8c:28:33:69:72:c8:ac:38:de:1b:ba:df: 40:2e:0d:42:5b:2b:5f:15:f0:9f:f1:67:48:8e:9a:e9:df:37: bf:fc:fc:3b:be:ba:01:f0:bf:c4:3b:d7:d4:9d:81:e6:31:24: 8e:a3:19:d3:06:00:11:de:e9:a3:10:58:44:66:15:33:74:e4: e8:0a:34:d2:82:57:91:77:c4:ec:76:9b:e1:e7:a7:44:9f:1f: 6a:64:3c:10:85:35:b0:a3:e2:26:9c:b7:1e:34:ad:a7:48:4d: 9b:18:8b:ec:08:35:36:a6:27:6c:97:b2:eb:a7:5e:27:08:3c: 19:ae:77:de:d2:df:a9:34:c4:75:d9:2f:4b:13:e7:3a:d4:6c: 80:66:cf:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGunnYFmBkiH4+aaUgzQLWWTWnFcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1OVoX DTI3MDMwMzA2MDY1OVowMzExMC8GA1UEAxMoQjYxRkVGOTMwNjZFMDJGMTBDQzY3 QzREQ0U3Mjk3NEE3MTg1REI4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0fbcJ7FXhE5VaOiFVBR1XwJNsKdQmCbgGyd1+HWqm6+OgTJ7BWfH/HAMsR aMUvH/AeoVqY4G/pNFaZH4l8M7wrgU8wZ3TnzQUNT/lZnIwZbzD8aFNz+5BMR35E jOyz39KOBqrr3+DPkMaCci/e2Arw0eQprvAulYIEVVmy8Znl44DaVk/5WC+s/2nA CAnIyoEQ6LhvAikxjBsAUKKHHvWHCVIEbLHOBfqKjn5LxeYED2ImuX6Ez0+Onfry Ir6J/76OkLLmBF1XHC2qvlFoOESvEaJ8gK9Eo0nOjgH0UXG7JLhajJk9cJAszC0r Qg0B9n9vUCqe8i4Q5dg6btbTK/8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS2H++T Bm4C8QzGfE3OcpdKcYXbgTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oJEwDQYJKoZIhvcNAQELBQADggEBAANuNSs2aeV3YX+bHb8JtINNuxdewhdxx5jz hj2QjiVTcwaOcjjAdIZuNGEagljk2/FIVAan1cMYEyjRs72tmTmqhM/IhAd1Ea0I NAJSHGco1bzAyxM5QtwMDdFMB4lusoY/ImP9/1dmUxz6aMlCL+noGowoM2lyyKw4 3hu630AuDUJbK18V8J/xZ0iOmunfN7/8/Du+ugHwv8Q719SdgeYxJI6jGdMGABHe 6aMQWERmFTN05OgKNNKCV5F3xOx2m+Hnp0SfH2pkPBCFNbCj4iactx40radITZsY i+wINTamJ2yXsuunXicIPBmud97S36k0xHXZL0sT5zrUbIBmz5M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:08 2026 by rpki-client