$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142797.roa File: AS142797.roa (raw, json) Hash identifier: HrI5EhKm3ygHwwXnfkN4DkLqewXrGNY6IBQNaN39cyw= Subject key identifier: 92:A7:A3:FB:BD:10:9F:8E:67:EB:DC:6E:DA:4A:C1:4D:AB:D4:1D:C2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 52A119229A21E76D31942B37D935AE35CAF7E9D2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142797.roa Signing time: Wed 04 Mar 2026 06:05:45 +0000 ROA not before: Wed 04 Mar 2026 06:00:45 +0000 ROA not after: Wed 03 Mar 2027 06:05:45 +0000 asID: 142797 IP address blocks: 240a:a093::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a1:19:22:9a:21:e7:6d:31:94:2b:37:d9:35:ae:35:ca:f7:e9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:45 2026 GMT Not After : Mar 3 06:05:45 2027 GMT Subject: CN=92A7A3FBBD109F8E67EBDC6EDA4AC14DABD41DC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:da:fe:5d:14:32:86:ab:d4:0c:60:34:b7: 6b:20:e9:86:9e:60:3a:c3:8a:1b:94:be:6a:94:ab: 15:eb:d4:95:7e:0e:04:57:81:e6:13:45:37:a0:88: e6:fb:2b:a1:9a:a6:af:de:03:01:7e:36:15:b5:a6: 3c:30:46:e4:29:5d:c1:16:8f:27:44:cf:ba:bf:50: 51:f6:50:fb:e9:36:97:d2:44:71:16:fc:70:2f:ea: 24:c0:91:8a:3b:34:c4:44:7f:be:86:65:9b:40:d0: 98:b6:18:e8:f0:0b:c9:fa:87:c9:29:5a:dd:a1:08: 88:50:d7:46:c2:91:33:f2:3b:13:2c:9b:2e:68:bf: c8:b3:22:66:7f:55:9f:a8:dc:ca:57:25:2f:c3:1b: f9:43:28:1f:7d:5d:2e:5e:d4:96:37:92:02:39:4f: de:3a:b8:57:92:bf:cf:be:d9:fa:cb:3e:07:82:d2: 25:36:66:b1:73:f6:8c:b0:ab:17:a5:91:e9:f6:bf: f4:37:dd:e4:7f:b3:6d:75:77:5c:9b:bb:0d:1f:97: 33:14:31:33:1d:ed:8f:c6:4c:f1:5c:70:e1:9e:99: 09:86:52:1a:e5:79:40:48:e2:e4:b3:7f:69:ad:be: b4:54:af:75:e0:8a:10:fc:39:0e:a9:ad:7b:c6:1f: c5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A7:A3:FB:BD:10:9F:8E:67:EB:DC:6E:DA:4A:C1:4D:AB:D4:1D:C2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142797.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a093::/32 Signature Algorithm: sha256WithRSAEncryption 93:ad:c2:77:dd:30:ee:e6:a7:3b:2f:f5:b9:1c:0d:b6:c9:9d: a6:d1:c8:8e:00:65:01:62:e7:30:7b:91:85:0a:2c:54:69:dd: 98:ef:a3:9b:60:40:87:af:6e:78:8e:2d:91:b4:95:3d:ef:37: 95:8e:f6:c3:9b:21:77:32:a3:2d:c0:9f:df:ba:34:55:81:53: f6:a1:a8:04:95:ff:c0:45:6c:0e:20:29:68:69:7e:f5:52:f4: 53:96:62:9c:38:ff:1c:4a:ee:d1:64:71:02:fe:cc:2c:ea:62: 8d:e5:a7:6d:99:2c:9a:5b:69:61:6c:56:73:22:df:43:c3:d7: 3f:14:0a:69:d3:7b:4b:0f:91:b5:14:34:61:32:eb:ce:f7:82: 00:7f:4d:f4:3a:c4:78:74:ad:f3:2d:92:63:93:2b:5d:46:a5: 7f:b6:9e:5b:7d:24:52:36:ea:ce:28:61:9f:fc:92:3b:19:e9: 19:11:7c:cf:3f:91:ea:60:30:20:53:7c:97:8f:f5:34:70:bc: c2:dc:ed:f6:24:d1:e9:dc:44:40:a3:50:d7:f6:e2:b0:f4:6b: d8:e0:6a:bd:5f:5b:c0:fd:bc:e7:89:1f:0f:2f:ba:f9:e2:a6: 7b:7a:aa:26:be:8a:c1:8d:5f:b3:84:b3:27:11:23:e1:c1:a2: 91:25:13:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUqEZIpoh520xlCs32TWuNcr36dIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0NVoX DTI3MDMwMzA2MDU0NVowMzExMC8GA1UEAxMoOTJBN0EzRkJCRDEwOUY4RTY3RUJE QzZFREE0QUMxNERBQkQ0MURDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkl2v5dFDKGq9QMYDS3ayDphp5gOsOKG5S+apSrFevUlX4OBFeB5hNFN6CI 5vsroZqmr94DAX42FbWmPDBG5CldwRaPJ0TPur9QUfZQ++k2l9JEcRb8cC/qJMCR ijs0xER/voZlm0DQmLYY6PALyfqHySla3aEIiFDXRsKRM/I7EyybLmi/yLMiZn9V n6jcylclL8Mb+UMoH31dLl7UljeSAjlP3jq4V5K/z77Z+ss+B4LSJTZmsXP2jLCr F6WR6fa/9Dfd5H+zbXV3XJu7DR+XMxQxMx3tj8ZM8Vxw4Z6ZCYZSGuV5QEji5LN/ aa2+tFSvdeCKEPw5Dqmte8YfxcMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSp6P7 vRCfjmfr3G7aSsFNq9QdwjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oJMwDQYJKoZIhvcNAQELBQADggEBAJOtwnfdMO7mpzsv9bkcDbbJnabRyI4AZQFi 5zB7kYUKLFRp3Zjvo5tgQIevbniOLZG0lT3vN5WO9sObIXcyoy3An9+6NFWBU/ah qASV/8BFbA4gKWhpfvVS9FOWYpw4/xxK7tFkcQL+zCzqYo3lp22ZLJpbaWFsVnMi 30PD1z8UCmnTe0sPkbUUNGEy6873ggB/TfQ6xHh0rfMtkmOTK11GpX+2nlt9JFI2 6s4oYZ/8kjsZ6RkRfM8/kepgMCBTfJeP9TRwvMLc7fYk0encRECjUNf24rD0a9jg ar1fW8D9vOeJHw8vuvnipnt6qia+isGNX7OEsycRI+HBopElE6c= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:17 2026 by rpki-client