$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142810.roa File: AS142810.roa (raw, json) Hash identifier: VTeQIqeeygFAM0r/dRC9pJCuVTKFoKtvh6m6AfUdARw= Subject key identifier: 30:AB:C5:7C:C7:D7:55:23:48:F9:B1:CB:43:EC:CE:E3:D8:CB:99:D0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 631FE7F8C55C1759A5CC15ED53C441BE48515B2F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142810.roa Signing time: Wed 04 Mar 2026 06:08:05 +0000 ROA not before: Wed 04 Mar 2026 06:03:05 +0000 ROA not after: Wed 03 Mar 2027 06:08:05 +0000 asID: 142810 IP address blocks: 240a:a0a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1f:e7:f8:c5:5c:17:59:a5:cc:15:ed:53:c4:41:be:48:51:5b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:05 2026 GMT Not After : Mar 3 06:08:05 2027 GMT Subject: CN=30ABC57CC7D7552348F9B1CB43ECCEE3D8CB99D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:cd:ae:15:5b:41:30:45:2c:af:01:f7:99: 09:e5:66:f5:55:ad:2b:78:ae:ff:7c:71:90:f1:b4: aa:22:b4:cf:fb:de:2f:b9:cc:6c:96:bf:41:1e:20: 5c:fe:52:27:93:fa:51:5e:2f:d7:7c:36:23:57:e9: 78:90:cd:8f:79:d4:ff:8f:e1:35:f9:4a:65:a0:2d: 60:4f:c8:0b:ad:27:c8:83:46:06:fd:94:49:af:2f: 79:79:cf:5a:f6:e9:c4:ca:0c:2a:36:a9:cb:7a:a6: ce:f6:7e:fe:6c:79:7f:94:d1:8a:59:89:97:a8:2f: 2d:6c:96:6c:52:5f:15:b5:f0:ef:21:17:cf:e2:5f: 60:24:20:1f:5e:0e:6b:57:83:f9:e2:49:f0:0a:c2: 08:09:eb:70:d5:3d:63:ff:b2:64:4f:ca:0e:4c:b0: 5f:10:82:c0:a4:34:ac:4b:4e:98:d4:ec:76:d6:fa: b1:1e:9c:b6:f8:15:01:7d:e6:14:9c:ad:a0:fc:bd: e6:96:65:f3:76:d0:9d:f9:0a:f2:e4:e6:81:86:2b: cf:11:98:0e:a0:08:c4:3e:09:d0:f4:cc:7d:e8:57: 14:e8:f3:63:30:19:40:96:cd:d5:54:fa:24:36:8e: 19:ac:04:75:8c:6a:a8:fc:1c:05:19:a2:dd:e8:dd: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AB:C5:7C:C7:D7:55:23:48:F9:B1:CB:43:EC:CE:E3:D8:CB:99:D0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142810.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0a0::/32 Signature Algorithm: sha256WithRSAEncryption 43:ab:84:9a:58:ab:aa:40:0c:ac:ef:d3:f2:d8:25:cb:15:37: f5:1c:52:ce:1d:b9:f5:4b:9a:1d:40:39:ca:4d:36:c3:ce:84: ff:24:5e:03:b1:83:68:11:46:10:a6:82:a1:ad:b3:1a:66:2b: e8:6e:62:84:0c:9c:4b:a3:b8:e2:94:b4:08:f6:ee:df:75:a9: 7d:41:76:d4:3b:20:76:4b:28:1a:87:e9:ad:0f:1b:79:79:b3: 86:f4:3f:5a:81:73:f7:ea:4d:7c:10:28:48:30:d7:3b:19:6e: a1:cd:b6:cf:f0:29:2e:e1:c6:66:42:9b:2f:bd:af:9a:40:fb: ca:b9:cc:0b:6b:b3:6d:8b:5c:bd:48:27:8a:db:e7:a8:c4:d6: 67:de:b2:b1:4b:f4:94:2e:58:fa:00:0f:cc:e7:7f:de:24:25: 45:74:c2:10:53:e5:00:8c:eb:f8:2b:ad:8b:4f:1c:c8:bf:f5: df:39:d3:e5:a9:5c:00:00:48:d6:ba:61:2b:a8:e9:45:04:fe: 04:8b:fe:8f:20:34:f5:b5:98:e3:b8:aa:53:c5:ed:20:93:24: 41:a7:a1:9f:90:ec:01:9d:14:42:0d:dc:c6:83:aa:e6:3b:1a: ff:71:1a:72:fb:7d:ed:e2:5b:89:14:d9:bd:36:16:bf:32:c9: 72:84:79:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYx/n+MVcF1mlzBXtU8RBvkhRWy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwNVoX DTI3MDMwMzA2MDgwNVowMzExMC8GA1UEAxMoMzBBQkM1N0NDN0Q3NTUyMzQ4RjlC MUNCNDNFQ0NFRTNEOENCOTlEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIdfza4VW0EwRSyvAfeZCeVm9VWtK3iu/3xxkPG0qiK0z/veL7nMbJa/QR4g XP5SJ5P6UV4v13w2I1fpeJDNj3nU/4/hNflKZaAtYE/IC60nyINGBv2USa8veXnP WvbpxMoMKjapy3qmzvZ+/mx5f5TRilmJl6gvLWyWbFJfFbXw7yEXz+JfYCQgH14O a1eD+eJJ8ArCCAnrcNU9Y/+yZE/KDkywXxCCwKQ0rEtOmNTsdtb6sR6ctvgVAX3m FJytoPy95pZl83bQnfkK8uTmgYYrzxGYDqAIxD4J0PTMfehXFOjzYzAZQJbN1VT6 JDaOGawEdYxqqPwcBRmi3ejdH8kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQwq8V8 x9dVI0j5sctD7M7j2MuZ0DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oKAwDQYJKoZIhvcNAQELBQADggEBAEOrhJpYq6pADKzv0/LYJcsVN/UcUs4dufVL mh1AOcpNNsPOhP8kXgOxg2gRRhCmgqGtsxpmK+huYoQMnEujuOKUtAj27t91qX1B dtQ7IHZLKBqH6a0PG3l5s4b0P1qBc/fqTXwQKEgw1zsZbqHNts/wKS7hxmZCmy+9 r5pA+8q5zAtrs22LXL1IJ4rb56jE1mfesrFL9JQuWPoAD8znf94kJUV0whBT5QCM 6/grrYtPHMi/9d850+WpXAAASNa6YSuo6UUE/gSL/o8gNPW1mOO4qlPF7SCTJEGn oZ+Q7AGdFEIN3MaDquY7Gv9xGnL7fe3iW4kU2b02Fr8yyXKEeUo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:38 2026 by rpki-client