$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142814.roa File: AS142814.roa (raw, json) Hash identifier: rrXBOKCZLpVCl8KtK/3QMfg/1zxdO5f2C8JZOM7w/sE= Subject key identifier: D0:85:93:62:D3:81:21:3A:C7:E9:3F:E0:72:0D:73:51:F6:3B:70:9E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 01A6B4DBF0D65DAC4E7DD30CF77DD8423C68FCBE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142814.roa Signing time: Wed 04 Mar 2026 06:06:23 +0000 ROA not before: Wed 04 Mar 2026 06:01:23 +0000 ROA not after: Wed 03 Mar 2027 06:06:23 +0000 asID: 142814 IP address blocks: 240a:a0a4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a6:b4:db:f0:d6:5d:ac:4e:7d:d3:0c:f7:7d:d8:42:3c:68:fc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:23 2026 GMT Not After : Mar 3 06:06:23 2027 GMT Subject: CN=D0859362D381213AC7E93FE0720D7351F63B709E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:7f:62:ac:55:d1:83:1b:01:c5:cb:e4:db: 7d:9f:a7:d9:86:5b:b0:7b:64:f2:5f:24:16:d1:42: 16:5c:74:6a:eb:9d:2d:64:3c:5c:8e:98:a5:81:1f: d3:0e:79:1e:ca:41:a5:70:2b:53:8b:80:fb:d1:ec: 6f:91:02:f1:1f:37:89:c8:da:dd:cd:bb:bb:30:9c: b4:17:19:48:29:f7:77:80:28:0e:3e:68:3f:a7:5b: af:99:fd:81:b9:56:b8:ec:25:07:3e:16:f2:b0:81: 28:0d:08:31:4f:3b:2a:42:36:bc:3f:8b:a9:5c:7a: 7c:dc:cb:47:07:e8:35:e0:37:57:fc:21:05:74:35: 6a:2c:d8:39:8b:08:b6:cd:a9:ce:c8:63:80:86:52: 5a:86:52:97:5f:72:30:df:c6:39:0f:59:e0:5d:8b: 1a:a0:64:05:2c:84:33:1b:bb:51:63:45:97:51:79: d5:23:96:1d:d7:67:bb:ec:d8:7b:93:bf:9b:7e:f9: 38:e4:a5:ad:aa:2e:93:a9:9d:67:a9:ba:71:31:44: b9:61:da:fb:cb:f7:ec:b7:f3:b4:8d:3b:98:9a:13: 61:7f:22:f7:cb:b7:61:8e:a2:a2:26:2a:9f:73:7c: 75:a9:fe:d7:82:5e:fc:77:4f:cd:14:40:e4:7b:49: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:85:93:62:D3:81:21:3A:C7:E9:3F:E0:72:0D:73:51:F6:3B:70:9E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142814.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0a4::/32 Signature Algorithm: sha256WithRSAEncryption d1:42:76:7b:49:c7:93:3a:12:08:ac:4e:c9:34:2b:a1:4f:1b: ae:84:c1:0a:7b:c1:f2:91:3f:3f:ff:d1:ef:00:e1:a3:41:78: 11:59:ad:e0:69:ba:5c:32:f7:1f:bc:68:76:51:09:42:5e:57: c4:c4:38:4d:f4:ee:ac:21:78:dc:9b:dc:e0:f6:12:e1:63:e1: 0f:78:b5:db:4c:0e:84:46:c8:68:30:c3:d7:b7:2c:fe:f0:21: b4:ac:b5:5f:76:d2:57:42:95:09:30:d1:76:ca:5c:ca:b8:91: 60:17:4f:cf:56:b4:35:5f:99:94:16:78:c7:f8:59:fd:56:7c: ac:b5:c6:f8:c7:88:37:44:99:dc:b6:5a:b7:fe:dc:b1:ea:54: da:a4:9d:4d:72:60:3b:4f:24:9c:1a:3d:5d:af:84:c1:17:3f: cc:f7:ce:f3:ce:d5:ee:01:34:2c:5e:19:2f:e4:18:62:de:59: 92:c9:66:26:b1:6b:94:8a:57:c9:3f:49:da:f6:7e:e2:c0:91: 0f:08:5e:06:b6:25:3f:8e:da:6a:f3:a5:17:3c:c0:e0:ac:84: 30:66:c9:e3:0a:be:6b:37:f1:8b:20:87:8a:26:45:b3:c0:49: aa:a4:9e:7d:01:60:dd:b6:00:19:df:66:79:f4:c3:27:7e:70: 74:0a:d2:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAaa02/DWXaxOfdMM933YQjxo/L4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyM1oX DTI3MDMwMzA2MDYyM1owMzExMC8GA1UEAxMoRDA4NTkzNjJEMzgxMjEzQUM3RTkz RkUwNzIwRDczNTFGNjNCNzA5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKKf2KsVdGDGwHFy+TbfZ+n2YZbsHtk8l8kFtFCFlx0auudLWQ8XI6YpYEf 0w55HspBpXArU4uA+9Hsb5EC8R83icja3c27uzCctBcZSCn3d4AoDj5oP6dbr5n9 gblWuOwlBz4W8rCBKA0IMU87KkI2vD+LqVx6fNzLRwfoNeA3V/whBXQ1aizYOYsI ts2pzshjgIZSWoZSl19yMN/GOQ9Z4F2LGqBkBSyEMxu7UWNFl1F51SOWHddnu+zY e5O/m375OOSlraouk6mdZ6m6cTFEuWHa+8v37LfztI07mJoTYX8i98u3YY6ioiYq n3N8dan+14Je/HdPzRRA5HtJw18CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTQhZNi 04EhOsfpP+ByDXNR9jtwnjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgxNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oKQwDQYJKoZIhvcNAQELBQADggEBANFCdntJx5M6EgisTsk0K6FPG66EwQp7wfKR Pz//0e8A4aNBeBFZreBpulwy9x+8aHZRCUJeV8TEOE307qwheNyb3OD2EuFj4Q94 tdtMDoRGyGgww9e3LP7wIbSstV920ldClQkw0XbKXMq4kWAXT89WtDVfmZQWeMf4 Wf1WfKy1xvjHiDdEmdy2Wrf+3LHqVNqknU1yYDtPJJwaPV2vhMEXP8z3zvPO1e4B NCxeGS/kGGLeWZLJZiaxa5SKV8k/Sdr2fuLAkQ8IXga2JT+O2mrzpRc8wOCshDBm yeMKvms38Ysgh4omRbPASaqknn0BYN22ABnfZnn0wyd+cHQK0oc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:42 2026 by rpki-client