$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142798.roa File: AS142798.roa (raw, json) Hash identifier: VPMCxoD+x9xqUNNbsV1Vjxd/55KccZ21Gw83aPgppW4= Subject key identifier: 62:2B:A7:99:66:CB:E8:33:3B:67:76:4D:6E:67:BE:BF:C8:10:1C:30 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 695FC9617427C58F41EB7693479248D3189CB85A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142798.roa Signing time: Wed 04 Mar 2026 06:06:11 +0000 ROA not before: Wed 04 Mar 2026 06:01:11 +0000 ROA not after: Wed 03 Mar 2027 06:06:11 +0000 asID: 142798 IP address blocks: 240a:a094::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5f:c9:61:74:27:c5:8f:41:eb:76:93:47:92:48:d3:18:9c:b8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:11 2026 GMT Not After : Mar 3 06:06:11 2027 GMT Subject: CN=622BA79966CBE8333B67764D6E67BEBFC8101C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ad:c9:44:04:b3:72:b0:95:92:11:c6:90:75: 91:35:84:97:3b:ac:53:ea:a6:be:12:13:6f:dd:9f: 71:4e:01:62:9e:1c:98:44:b1:78:7e:1a:a8:66:d5: e1:9f:38:e3:a4:c5:bc:70:36:86:a4:77:e7:d3:57: dc:61:af:24:c4:db:5d:a2:24:c0:54:18:6c:43:0e: 66:0b:e6:3d:9d:49:32:20:9a:f1:16:32:8f:8b:26: bc:b8:c3:22:1d:84:7b:f5:8e:df:3b:4d:89:ab:e0: 7d:63:e7:23:cc:e2:24:64:5b:e4:2e:a6:35:3b:04: 43:1b:db:18:31:ad:d5:92:99:3c:0f:31:49:4d:75: 15:74:a4:c5:87:6d:09:e1:41:10:37:0d:08:48:57: a2:85:d9:d1:d3:d4:9c:3b:50:3c:14:cd:dc:7e:3c: 5f:0a:ad:24:0f:d5:b3:d3:d3:43:87:4c:c4:46:59: d1:6d:ab:f4:18:08:e9:ce:64:77:6c:1a:cc:00:37: 5d:1d:96:62:c7:47:a7:61:0a:0a:32:ec:14:00:1a: f5:ab:77:de:9d:16:79:56:ed:a1:86:93:8c:9c:4d: cf:cf:9f:09:bc:32:df:9f:85:51:18:fc:16:05:04: 71:7b:f7:e4:0e:f2:4a:fb:26:22:e5:7a:11:d5:05: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2B:A7:99:66:CB:E8:33:3B:67:76:4D:6E:67:BE:BF:C8:10:1C:30 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142798.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a094::/32 Signature Algorithm: sha256WithRSAEncryption 17:ad:ce:4b:52:31:73:d1:7c:8a:5e:4d:3b:49:ab:61:06:ad: 02:98:b8:26:ae:92:55:c1:2c:17:55:fe:31:55:16:87:3b:51: 50:30:64:1a:f3:e5:2a:bc:7d:03:4d:44:89:be:3d:84:16:da: 63:19:37:3b:f7:aa:d6:97:3b:01:33:36:8c:65:0e:2b:f4:29: c2:ce:b6:b1:b4:aa:be:54:d6:ba:a3:14:6e:36:2d:65:63:26: 3c:3d:dc:13:81:f6:ef:bd:86:ef:33:36:a8:c3:bf:c0:e3:64: e9:d0:01:7c:b9:07:a1:60:bb:81:6c:70:de:85:6b:f6:2c:c5: 0b:8f:57:fd:a5:1e:79:3a:b4:2e:c2:5a:0f:05:b7:c1:4f:ed: 2e:9d:34:4f:8a:eb:f4:db:c3:00:4e:1c:c2:8a:14:22:db:73: c9:dc:7c:3f:76:41:92:31:44:07:9a:12:32:50:71:c6:be:49: 1a:40:b7:e4:34:09:d8:01:f6:9f:00:bb:8a:bf:d3:1c:3e:0b: 5a:96:2d:f9:17:12:e1:a5:33:67:22:12:b9:3c:47:1b:7f:c4: 72:ef:84:4b:ed:45:7b:a2:fc:5f:9d:3e:78:15:ab:e1:49:e0: e8:63:68:a0:8d:88:63:0a:70:50:5c:53:c0:4d:13:9a:13:1f: d2:e6:37:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaV/JYXQnxY9B63aTR5JI0xicuFowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExMVoX DTI3MDMwMzA2MDYxMVowMzExMC8GA1UEAxMoNjIyQkE3OTk2NkNCRTgzMzNCNjc3 NjRENkU2N0JFQkZDODEwMUMzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKtyUQEs3KwlZIRxpB1kTWElzusU+qmvhITb92fcU4BYp4cmESxeH4aqGbV 4Z8446TFvHA2hqR359NX3GGvJMTbXaIkwFQYbEMOZgvmPZ1JMiCa8RYyj4smvLjD Ih2Ee/WO3ztNiavgfWPnI8ziJGRb5C6mNTsEQxvbGDGt1ZKZPA8xSU11FXSkxYdt CeFBEDcNCEhXooXZ0dPUnDtQPBTN3H48XwqtJA/Vs9PTQ4dMxEZZ0W2r9BgI6c5k d2wazAA3XR2WYsdHp2EKCjLsFAAa9at33p0WeVbtoYaTjJxNz8+fCbwy35+FURj8 FgUEcXv35A7ySvsmIuV6EdUFW3sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRiK6eZ ZsvoMztndk1uZ76/yBAcMDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjc5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oJQwDQYJKoZIhvcNAQELBQADggEBABetzktSMXPRfIpeTTtJq2EGrQKYuCauklXB LBdV/jFVFoc7UVAwZBrz5Sq8fQNNRIm+PYQW2mMZNzv3qtaXOwEzNoxlDiv0KcLO trG0qr5U1rqjFG42LWVjJjw93BOB9u+9hu8zNqjDv8DjZOnQAXy5B6Fgu4FscN6F a/YsxQuPV/2lHnk6tC7CWg8Ft8FP7S6dNE+K6/TbwwBOHMKKFCLbc8ncfD92QZIx RAeaEjJQcca+SRpAt+Q0CdgB9p8Au4q/0xw+C1qWLfkXEuGlM2ciErk8Rxt/xHLv hEvtRXui/F+dPngVq+FJ4OhjaKCNiGMKcFBcU8BNE5oTH9LmN5I= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:00 2026 by rpki-client