$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142796.roa File: AS142796.roa (raw, json) Hash identifier: 6/+zj93qEHASimj4qBxGDrAFySAuc3VbXv5DhE7maWw= Subject key identifier: 34:6C:0E:F2:EB:4D:2C:D6:88:A0:C6:57:AB:76:E1:23:77:A6:7A:97 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 42BD04768287DAB2579C4E208B6522E08D78DF0F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142796.roa Signing time: Wed 04 Mar 2026 06:06:30 +0000 ROA not before: Wed 04 Mar 2026 06:01:30 +0000 ROA not after: Wed 03 Mar 2027 06:06:30 +0000 asID: 142796 IP address blocks: 240a:a092::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bd:04:76:82:87:da:b2:57:9c:4e:20:8b:65:22:e0:8d:78:df:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:30 2026 GMT Not After : Mar 3 06:06:30 2027 GMT Subject: CN=346C0EF2EB4D2CD688A0C657AB76E12377A67A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:6e:2b:04:ef:25:ff:70:a1:f3:e9:56:39: 35:7a:a0:92:60:f5:a1:10:07:93:6a:c2:45:ed:79: a4:cf:ac:fb:a7:9c:15:a3:89:ac:ed:17:47:9d:26: ef:f0:74:21:3f:1b:b1:75:a3:e4:2d:e0:1e:21:fe: c5:1b:67:c6:0b:c0:7e:e7:9f:91:44:3f:43:b3:35: f0:39:6a:75:0f:67:0c:e3:f9:cd:02:18:aa:fb:a5: 1f:87:35:6c:69:11:e6:b0:8d:09:5f:c0:08:c8:62: a0:d9:ce:2a:d0:41:4c:15:91:e8:3c:4c:8a:da:d0: 8b:5c:63:11:dc:c1:1b:21:6d:2d:f1:14:e9:58:21: 12:93:a9:5b:97:b6:00:e0:a5:7a:6c:13:60:95:be: b0:97:3c:8a:da:97:48:fd:bf:ea:f8:a6:16:11:1e: 35:d1:dc:aa:69:a4:f0:22:5b:83:90:12:2b:78:10: 17:a6:1e:57:2c:d9:1a:f3:d8:a2:3b:7e:8c:68:1f: 14:81:98:d8:51:a2:6f:1b:ff:79:60:d9:55:45:a9: 6c:ee:8e:f8:c3:f4:4d:98:83:4e:a6:b0:ac:d8:33: 6d:93:00:75:af:7d:b6:48:62:7f:61:80:bf:f0:97: 03:34:0f:81:de:96:be:eb:4b:c5:60:3c:d6:f5:7c: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6C:0E:F2:EB:4D:2C:D6:88:A0:C6:57:AB:76:E1:23:77:A6:7A:97 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142796.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a092::/32 Signature Algorithm: sha256WithRSAEncryption bc:67:09:45:cc:5e:07:dc:45:5f:7f:71:09:36:3e:1e:40:9f: 10:2d:14:f6:57:fd:3f:19:28:3d:fc:28:f0:54:10:db:ed:6f: f1:c6:8d:b4:a2:05:78:f3:4d:50:53:59:9c:17:29:0b:f3:d7: 9b:70:66:02:e9:e9:e4:fa:21:d9:85:a8:0e:3b:dc:e5:07:ef: 25:45:0d:71:bc:d5:76:27:01:43:e4:b0:38:93:f4:db:72:86: 56:d0:49:a3:c0:c2:ed:e1:10:f4:bf:66:ff:33:1e:cb:fc:70: 44:7a:a5:01:85:92:f4:7c:2f:da:bb:ba:5f:a4:91:04:fa:db: 70:be:44:4d:b2:23:ba:75:39:59:88:d3:97:a1:36:4f:66:7e: 7c:38:a2:aa:aa:65:ed:84:9d:27:30:77:b2:ad:ac:a8:83:be: 60:b6:64:9b:01:51:00:86:33:66:ac:23:8d:ea:d1:87:c2:be: d3:a9:32:5f:71:ef:65:76:93:94:1f:4a:8f:94:b1:56:a6:a8: 39:05:bb:ae:fe:5a:52:ef:2e:46:fd:19:69:ec:9b:17:d8:41: 61:fd:7f:3d:bd:bf:99:39:dd:2e:d0:a4:c4:cc:a2:ac:d5:43: 4d:14:69:9f:7e:01:ae:1e:11:0c:d8:fa:52:9a:d1:3a:6c:0b: 3f:b8:aa:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQr0EdoKH2rJXnE4gi2Ui4I143w8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzMFoX DTI3MDMwMzA2MDYzMFowMzExMC8GA1UEAxMoMzQ2QzBFRjJFQjREMkNENjg4QTBD NjU3QUI3NkUxMjM3N0E2N0E5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/dbisE7yX/cKHz6VY5NXqgkmD1oRAHk2rCRe15pM+s+6ecFaOJrO0XR50m 7/B0IT8bsXWj5C3gHiH+xRtnxgvAfuefkUQ/Q7M18DlqdQ9nDOP5zQIYqvulH4c1 bGkR5rCNCV/ACMhioNnOKtBBTBWR6DxMitrQi1xjEdzBGyFtLfEU6VghEpOpW5e2 AOClemwTYJW+sJc8itqXSP2/6vimFhEeNdHcqmmk8CJbg5ASK3gQF6YeVyzZGvPY ojt+jGgfFIGY2FGibxv/eWDZVUWpbO6O+MP0TZiDTqawrNgzbZMAda99tkhif2GA v/CXAzQPgd6WvutLxWA81vV8MScCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ0bA7y 600s1oigxlerduEjd6Z6lzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oJIwDQYJKoZIhvcNAQELBQADggEBALxnCUXMXgfcRV9/cQk2Ph5AnxAtFPZX/T8Z KD38KPBUENvtb/HGjbSiBXjzTVBTWZwXKQvz15twZgLp6eT6IdmFqA473OUH7yVF DXG81XYnAUPksDiT9NtyhlbQSaPAwu3hEPS/Zv8zHsv8cER6pQGFkvR8L9q7ul+k kQT623C+RE2yI7p1OVmI05ehNk9mfnw4oqqqZe2EnScwd7KtrKiDvmC2ZJsBUQCG M2asI43q0YfCvtOpMl9x72V2k5QfSo+UsVamqDkFu67+WlLvLkb9GWnsmxfYQWH9 fz29v5k53S7QpMTMoqzVQ00UaZ9+Aa4eEQzY+lKa0TpsCz+4qjE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:18 2026 by rpki-client