$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142807.roa File: AS142807.roa (raw, json) Hash identifier: k1mfiMa/kxN/h1d5dEjiEqX5fl7gqDd5Mn0Q7yBcaJA= Subject key identifier: 54:9F:93:3E:ED:ED:BC:6A:6E:7A:49:00:E6:78:B5:82:0E:86:DF:CD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3822DD63DAEB1797D4F3C46B667A07E75CF0B3BB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142807.roa Signing time: Wed 04 Mar 2026 06:06:20 +0000 ROA not before: Wed 04 Mar 2026 06:01:20 +0000 ROA not after: Wed 03 Mar 2027 06:06:20 +0000 asID: 142807 IP address blocks: 240a:a09d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:22:dd:63:da:eb:17:97:d4:f3:c4:6b:66:7a:07:e7:5c:f0:b3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:20 2026 GMT Not After : Mar 3 06:06:20 2027 GMT Subject: CN=549F933EEDEDBC6A6E7A4900E678B5820E86DFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dd:f0:c9:63:df:31:73:62:7d:97:d5:f8:54: 6b:85:62:70:cf:aa:eb:0e:06:27:37:33:c3:3a:a1: 19:40:80:e5:ec:c7:c8:63:ae:bf:ec:75:ed:03:d4: 0d:ed:87:4b:60:d2:98:d0:3a:70:27:18:55:f7:18: dd:6f:9a:fc:7d:c8:47:11:08:93:f2:b1:7b:75:93: 44:18:d2:d6:9e:68:fe:7c:f0:85:53:90:15:75:d9: a6:7e:ff:ba:7b:6f:86:58:f8:44:14:61:da:aa:b7: 46:97:23:e9:7a:d6:7c:77:15:68:bd:fd:33:80:60: d9:3f:8f:24:26:c0:8d:6a:d1:31:f7:0d:b2:9a:4e: dd:82:5e:48:ac:02:88:72:8b:ba:18:e2:b0:31:af: eb:10:9c:fd:80:b9:cf:9c:2b:30:8e:a0:a9:f7:46: c9:d9:1a:e5:07:be:94:63:1f:11:3c:0d:97:f3:21: 4c:c4:4a:c6:c5:75:9b:a3:e2:f8:36:6d:8f:4a:87: f8:b3:29:13:3b:0d:41:81:bb:92:38:b0:77:90:91: 54:03:a2:f9:17:8f:26:d7:0b:54:11:f5:37:e4:05: 10:c6:87:c8:61:de:8c:1b:cf:8d:af:bd:b3:4f:90: 1e:47:50:f8:d9:47:bd:d9:8e:9c:88:48:8b:98:55: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9F:93:3E:ED:ED:BC:6A:6E:7A:49:00:E6:78:B5:82:0E:86:DF:CD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142807.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a09d::/32 Signature Algorithm: sha256WithRSAEncryption 59:ba:54:98:fc:53:60:92:72:3b:3b:7f:1a:90:02:7f:c5:88: 45:73:f7:3e:c0:cb:10:d5:bb:9f:6a:f2:80:bc:00:f0:00:cf: bc:a6:4a:85:a3:5d:8b:d9:2f:9d:a9:19:c0:3f:93:ac:92:30: 53:c7:26:c1:fe:ff:b2:4b:f8:c8:3a:0d:e1:79:64:9e:3f:b4: 4a:fa:b2:ec:37:20:f4:a5:a3:36:58:88:bb:e4:b2:1e:3e:f7: 47:17:a8:6f:48:1a:b3:c6:bf:68:49:be:40:dc:c0:5a:2c:ef: 74:29:e8:df:d6:5e:34:99:02:db:97:f4:10:d3:e0:37:84:91: 7d:52:74:64:76:c8:80:ba:2f:a1:ff:78:36:40:11:7c:e2:d7: 31:02:e5:6d:6c:cf:4b:56:02:35:44:ff:e1:cb:98:d2:08:63: c2:15:22:f0:2e:9d:bc:33:d2:4f:1b:95:fe:a0:1d:72:d7:67: af:0e:24:0e:46:eb:9c:b2:ea:f1:f0:c9:1a:81:e8:15:3d:79: b8:6f:b9:49:7c:29:48:49:ea:32:d9:d8:b5:f1:7f:b0:79:a0: bf:f3:d6:7b:86:a3:3a:4e:e2:48:45:95:fc:98:1d:25:32:9d: b1:b7:99:22:97:73:38:b0:2b:10:1e:74:63:4b:4d:a9:00:73: c7:af:f6:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOCLdY9rrF5fU88RrZnoH51zws7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyMFoX DTI3MDMwMzA2MDYyMFowMzExMC8GA1UEAxMoNTQ5RjkzM0VFREVEQkM2QTZFN0E0 OTAwRTY3OEI1ODIwRTg2REZDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnd8Mlj3zFzYn2X1fhUa4VicM+q6w4GJzczwzqhGUCA5ezHyGOuv+x17QPU De2HS2DSmNA6cCcYVfcY3W+a/H3IRxEIk/Kxe3WTRBjS1p5o/nzwhVOQFXXZpn7/ untvhlj4RBRh2qq3Rpcj6XrWfHcVaL39M4Bg2T+PJCbAjWrRMfcNsppO3YJeSKwC iHKLuhjisDGv6xCc/YC5z5wrMI6gqfdGydka5Qe+lGMfETwNl/MhTMRKxsV1m6Pi +DZtj0qH+LMpEzsNQYG7kjiwd5CRVAOi+RePJtcLVBH1N+QFEMaHyGHejBvPja+9 s0+QHkdQ+NlHvdmOnIhIi5hV1gMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRUn5M+ 7e28am56SQDmeLWCDobfzTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oJ0wDQYJKoZIhvcNAQELBQADggEBAFm6VJj8U2CScjs7fxqQAn/FiEVz9z7AyxDV u59q8oC8APAAz7ymSoWjXYvZL52pGcA/k6ySMFPHJsH+/7JL+Mg6DeF5ZJ4/tEr6 suw3IPSlozZYiLvksh4+90cXqG9IGrPGv2hJvkDcwFos73Qp6N/WXjSZAtuX9BDT 4DeEkX1SdGR2yIC6L6H/eDZAEXzi1zEC5W1sz0tWAjVE/+HLmNIIY8IVIvAunbwz 0k8blf6gHXLXZ68OJA5G65yy6vHwyRqB6BU9ebhvuUl8KUhJ6jLZ2LXxf7B5oL/z 1nuGozpO4khFlfyYHSUynbG3mSKXcziwKxAedGNLTakAc8ev9go= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:35 2026 by rpki-client