$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142800.roa File: AS142800.roa (raw, json) Hash identifier: KLiq/Bejd5GG8FfBpO7Fj4uWT4hbAelXWA2hqxKQUCM= Subject key identifier: 90:7E:86:BE:3D:6D:A7:9C:B4:0A:98:01:B4:98:19:43:4C:38:D0:8F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51545854691F524D76C5C63AE1D79E827C913289 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142800.roa Signing time: Wed 04 Mar 2026 06:06:17 +0000 ROA not before: Wed 04 Mar 2026 06:01:17 +0000 ROA not after: Wed 03 Mar 2027 06:06:17 +0000 asID: 142800 IP address blocks: 240a:a096::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:54:58:54:69:1f:52:4d:76:c5:c6:3a:e1:d7:9e:82:7c:91:32:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:17 2026 GMT Not After : Mar 3 06:06:17 2027 GMT Subject: CN=907E86BE3D6DA79CB40A9801B49819434C38D08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:02:4c:8c:f7:85:4d:18:7a:a7:66:31:19: a3:05:58:cc:f2:c0:eb:df:40:6f:ba:4f:5b:f1:1a: d9:e9:54:48:56:11:71:db:e8:b8:8b:e7:38:af:af: 57:e6:68:93:fe:91:9d:54:df:bc:4b:21:17:65:98: 25:6d:81:9d:f4:72:f5:02:8e:02:f4:eb:3b:ee:81: d1:ca:c1:88:cd:49:3c:54:cf:e3:85:82:d3:20:c2: 4e:29:30:af:1a:d2:a2:6b:da:b5:e5:8d:2c:3f:d0: f9:bf:7f:92:b0:0a:ef:be:dc:64:d0:e1:f5:d3:20: b6:77:95:dc:27:24:4f:4d:dc:70:0e:51:54:bf:9d: b8:34:8d:69:90:07:14:c4:9c:f7:0c:ec:5e:7b:f3: 53:f7:a0:db:5b:e2:60:73:33:7c:c1:c4:a0:3c:37: 1e:a4:e2:3f:90:27:33:27:58:81:09:95:54:00:69: 39:63:23:08:bd:57:24:f9:0f:ad:6e:86:cb:9d:24: 04:04:07:28:8b:2f:2f:8d:cb:a7:18:4b:78:20:33: f1:44:fd:ac:2f:06:94:fe:41:2d:2a:6b:be:57:b0: dc:82:eb:41:a8:c4:cc:f9:ba:6a:9c:49:0e:33:5b: 1d:1c:2b:88:18:e5:f0:76:52:e1:71:0e:11:b5:36: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7E:86:BE:3D:6D:A7:9C:B4:0A:98:01:B4:98:19:43:4C:38:D0:8F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142800.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a096::/32 Signature Algorithm: sha256WithRSAEncryption 6a:ee:95:d1:09:76:97:b3:5f:3e:43:63:0f:30:6b:a6:fe:1a: ca:a3:14:78:70:21:f6:ac:2d:5e:1b:e8:32:80:e4:61:cc:7c: 5a:9e:08:b9:44:ab:de:38:21:d4:08:55:87:4c:ce:82:62:25: 62:8c:a2:33:ec:86:9d:06:d0:0a:53:95:7c:66:12:95:77:01: 2d:2f:dd:60:4b:7b:85:fa:65:12:17:f3:f9:e6:5d:4a:ab:1b: da:b6:c9:19:dc:f9:f7:c1:57:d8:f8:c9:43:e2:63:79:81:5a: d6:91:dd:56:06:71:cf:fd:d4:7e:98:a3:83:91:60:e0:21:07: de:47:49:4f:50:a9:17:1e:76:49:37:90:d3:80:e5:d6:d4:5e: bc:35:03:07:19:a7:17:6d:21:3d:9a:82:47:b8:5c:f1:4b:12: ad:27:8e:9b:a8:aa:97:b2:2e:6a:a2:55:bd:ab:67:ce:a1:08: 93:fd:5a:b2:3e:09:5d:97:96:4b:a3:ea:f9:72:4d:5b:f5:71: 3a:5f:af:35:28:59:59:25:32:50:45:85:2e:7e:d1:6c:ee:d7: a9:82:6b:ba:5d:e5:9e:87:ea:8f:2d:6e:f4:e5:94:69:89:9e: 31:cb:5f:99:2e:9c:d0:a2:23:ce:fb:01:93:1c:10:15:4b:b6: 06:b7:1f:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUVRYVGkfUk12xcY64deegnyRMokwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExN1oX DTI3MDMwMzA2MDYxN1owMzExMC8GA1UEAxMoOTA3RTg2QkUzRDZEQTc5Q0I0MEE5 ODAxQjQ5ODE5NDM0QzM4RDA4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeaAkyM94VNGHqnZjEZowVYzPLA699Ab7pPW/Ea2elUSFYRcdvouIvnOK+v V+Zok/6RnVTfvEshF2WYJW2BnfRy9QKOAvTrO+6B0crBiM1JPFTP44WC0yDCTikw rxrSomvateWNLD/Q+b9/krAK777cZNDh9dMgtneV3CckT03ccA5RVL+duDSNaZAH FMSc9wzsXnvzU/eg21viYHMzfMHEoDw3HqTiP5AnMydYgQmVVABpOWMjCL1XJPkP rW6Gy50kBAQHKIsvL43LpxhLeCAz8UT9rC8GlP5BLSprvlew3ILrQajEzPm6apxJ DjNbHRwriBjl8HZS4XEOEbU2sD0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSQfoa+ PW2nnLQKmAG0mBlDTDjQjzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oJYwDQYJKoZIhvcNAQELBQADggEBAGruldEJdpezXz5DYw8wa6b+GsqjFHhwIfas LV4b6DKA5GHMfFqeCLlEq944IdQIVYdMzoJiJWKMojPshp0G0ApTlXxmEpV3AS0v 3WBLe4X6ZRIX8/nmXUqrG9q2yRnc+ffBV9j4yUPiY3mBWtaR3VYGcc/91H6Yo4OR YOAhB95HSU9QqRcedkk3kNOA5dbUXrw1AwcZpxdtIT2agke4XPFLEq0njpuoqpey LmqiVb2rZ86hCJP9WrI+CV2Xlkuj6vlyTVv1cTpfrzUoWVklMlBFhS5+0Wzu16mC a7pd5Z6H6o8tbvTllGmJnjHLX5kunNCiI877AZMcEBVLtga3H1E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:37 2026 by rpki-client