$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142806.roa File: AS142806.roa (raw, json) Hash identifier: JvWj3AbqUPH0rwvS/rkrgDq4+cP5klYUhQ4o+XG+B3c= Subject key identifier: AB:CD:38:8C:C6:8C:28:91:EA:3C:6A:E3:1D:72:7E:F8:A7:AA:E4:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5527F0C9DC1749662E8E46BA7CE8A067687701D2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142806.roa Signing time: Wed 04 Mar 2026 06:06:33 +0000 ROA not before: Wed 04 Mar 2026 06:01:33 +0000 ROA not after: Wed 03 Mar 2027 06:06:33 +0000 asID: 142806 IP address blocks: 240a:a09c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:27:f0:c9:dc:17:49:66:2e:8e:46:ba:7c:e8:a0:67:68:77:01:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:33 2026 GMT Not After : Mar 3 06:06:33 2027 GMT Subject: CN=ABCD388CC68C2891EA3C6AE31D727EF8A7AAE427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:e7:36:24:8a:45:44:f2:d4:e6:91:a7:82: 66:0c:06:70:ce:63:c8:bb:28:0e:6d:1c:aa:2c:eb: ac:7b:97:d4:86:0d:aa:9d:fd:e4:0d:7b:5d:30:5b: dc:82:70:5a:fb:a1:b3:66:34:a2:09:28:6e:f4:07: bd:a3:f5:32:b8:59:10:4a:a4:cf:6c:2c:da:e7:11: d8:49:d2:69:14:98:c5:22:47:14:8c:29:e0:14:19: 91:ba:ae:46:27:80:23:0d:0d:f2:11:37:71:36:b7: 55:c5:7c:42:c7:d9:b1:ba:d5:9a:aa:bc:bd:be:8d: 25:63:26:e6:93:fd:b1:3a:0b:50:76:f3:cc:f8:2a: ed:73:70:4d:c1:6b:71:2c:ee:b7:b9:26:ba:52:4e: b9:c1:81:e4:92:34:a5:f7:60:55:b2:71:45:e5:2c: 2e:cc:11:90:d6:f0:0f:f5:9d:a3:6f:15:a4:36:ec: 04:2f:e7:4f:33:72:37:c7:c5:4b:0d:26:21:ff:62: e4:28:89:c2:63:14:ed:df:69:dd:1f:b9:e7:c2:29: d9:8a:e7:72:aa:c6:5e:11:92:c0:e2:3d:2c:e1:4c: 48:cf:f0:ea:22:53:46:72:8b:ed:5f:60:a3:9e:a8: be:40:ad:90:d1:a8:4d:3e:55:d5:f0:4c:f2:d2:8c: c5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CD:38:8C:C6:8C:28:91:EA:3C:6A:E3:1D:72:7E:F8:A7:AA:E4:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142806.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a09c::/32 Signature Algorithm: sha256WithRSAEncryption ba:da:af:aa:22:d0:45:f8:14:a4:28:8e:77:c2:63:07:e9:95: 1f:a0:35:d8:61:c6:87:9b:f2:7c:c0:ad:37:42:5a:1c:78:d7: 87:02:c9:cb:83:ce:d0:94:ea:ab:59:a6:d8:cc:7e:46:cb:24: 01:d9:06:1b:da:ab:d0:45:68:4d:e4:0c:f4:a9:43:08:30:4b: 10:86:80:f7:8c:dc:1a:6a:1e:f0:b1:be:58:73:9b:3a:0f:1b: 4c:53:b5:f0:fa:c9:01:a6:5a:d5:65:6c:18:8e:44:59:7b:4f: 84:5f:a7:d6:89:c4:29:f1:86:26:68:7e:63:4d:c1:70:7d:5a: 04:00:9e:24:84:75:5c:f9:d3:f0:ac:18:e3:a5:0f:47:4d:34: c7:de:57:00:7a:3c:44:54:80:e6:f1:60:4f:87:58:44:02:20: e6:43:0f:a5:58:fa:ed:1a:c2:ea:74:3e:a7:94:84:af:b4:70: 66:9b:e0:55:11:6d:17:52:d0:5f:33:b2:a0:25:a7:8e:f7:63: 51:02:cc:62:30:c5:c7:75:d1:a5:ef:ce:f2:5d:05:1d:dc:a9: d6:2f:6f:0a:f4:2b:05:dc:cc:d9:3c:0e:cb:89:4f:49:e4:ac: 9e:91:77:3b:d3:ba:10:7a:19:a9:a2:e9:a0:dd:2e:79:95:27: 12:dc:3e:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVSfwydwXSWYujka6fOigZ2h3AdIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzM1oX DTI3MDMwMzA2MDYzM1owMzExMC8GA1UEAxMoQUJDRDM4OENDNjhDMjg5MUVBM0M2 QUUzMUQ3MjdFRjhBN0FBRTQyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtl5zYkikVE8tTmkaeCZgwGcM5jyLsoDm0cqizrrHuX1IYNqp395A17XTBb 3IJwWvuhs2Y0ogkobvQHvaP1MrhZEEqkz2ws2ucR2EnSaRSYxSJHFIwp4BQZkbqu RieAIw0N8hE3cTa3VcV8QsfZsbrVmqq8vb6NJWMm5pP9sToLUHbzzPgq7XNwTcFr cSzut7kmulJOucGB5JI0pfdgVbJxReUsLswRkNbwD/Wdo28VpDbsBC/nTzNyN8fF Sw0mIf9i5CiJwmMU7d9p3R+558Ip2YrncqrGXhGSwOI9LOFMSM/w6iJTRnKL7V9g o56ovkCtkNGoTT5V1fBM8tKMxUMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSrzTiM xowokeo8auMdcn74p6rkJzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oJwwDQYJKoZIhvcNAQELBQADggEBALrar6oi0EX4FKQojnfCYwfplR+gNdhhxoeb 8nzArTdCWhx414cCycuDztCU6qtZptjMfkbLJAHZBhvaq9BFaE3kDPSpQwgwSxCG gPeM3BpqHvCxvlhzmzoPG0xTtfD6yQGmWtVlbBiORFl7T4Rfp9aJxCnxhiZofmNN wXB9WgQAniSEdVz50/CsGOOlD0dNNMfeVwB6PERUgObxYE+HWEQCIOZDD6VY+u0a wup0PqeUhK+0cGab4FURbRdS0F8zsqAlp473Y1ECzGIwxcd10aXvzvJdBR3cqdYv bwr0KwXczNk8DsuJT0nkrJ6RdzvTuhB6Gami6aDdLnmVJxLcPu0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:44 2026 by rpki-client