$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142819.roa File: AS142819.roa (raw, json) Hash identifier: 2F5sTWflKG8TIZ2fhTskp7FZ+T9Iz5p4ncz+9yyAZ7Q= Subject key identifier: 2C:BB:1A:64:82:14:0B:43:5D:3D:F8:46:76:11:B3:C6:D5:38:3B:49 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 34EEE8CB93B100FD4E39F380AEF3D7070A034C91 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142819.roa Signing time: Wed 04 Mar 2026 06:06:29 +0000 ROA not before: Wed 04 Mar 2026 06:01:29 +0000 ROA not after: Wed 03 Mar 2027 06:06:29 +0000 asID: 142819 IP address blocks: 240a:a0a9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ee:e8:cb:93:b1:00:fd:4e:39:f3:80:ae:f3:d7:07:0a:03:4c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:29 2026 GMT Not After : Mar 3 06:06:29 2027 GMT Subject: CN=2CBB1A6482140B435D3DF8467611B3C6D5383B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:bf:98:f8:12:47:5c:64:b8:bf:9a:56:77: 3a:ca:22:74:a1:4e:f5:ea:b8:98:61:58:80:e1:d8: 6b:4b:d8:85:53:3a:64:a1:07:27:54:ca:16:ed:4d: a2:db:08:c7:42:fd:95:32:b9:15:14:be:bf:2a:c2: 94:e7:59:53:b9:c1:0e:31:9c:98:d2:23:7b:de:16: 94:a6:1d:40:84:60:97:03:ff:a1:68:3d:03:d4:f1: 7c:1e:2a:2c:e1:ce:a9:ef:89:c6:0f:50:eb:bf:14: fb:79:33:c5:c4:cd:0a:3b:75:fc:5e:67:63:e6:44: f7:1b:4d:2c:7d:0e:31:37:82:d5:6e:98:02:dc:59: 53:03:24:f9:e4:37:f9:72:23:60:53:db:e9:2e:23: e5:0b:ca:a7:9e:e1:f6:30:4e:87:d5:cd:b2:46:16: 09:67:ea:bd:ef:70:de:dc:9c:3a:48:f8:02:2c:1f: 67:25:ad:d3:22:d0:63:1c:93:98:7e:40:ee:68:54: 1a:61:a5:04:72:24:37:17:60:09:ca:fd:7e:08:4d: a6:5b:75:c7:62:57:2b:30:9b:7b:ec:b5:ad:c9:ce: 7d:a0:37:f4:f5:05:77:22:d1:0f:4b:45:85:d0:0c: f6:8d:3e:a9:5e:8b:26:9b:e8:8f:54:ec:7f:79:3c: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BB:1A:64:82:14:0B:43:5D:3D:F8:46:76:11:B3:C6:D5:38:3B:49 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142819.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0a9::/32 Signature Algorithm: sha256WithRSAEncryption 43:5f:0f:ad:cf:c1:1e:c6:26:d3:20:56:eb:98:f6:6c:f7:a2: 5d:e2:d7:da:b5:47:4f:33:ef:1f:f7:e6:fa:f4:06:06:d4:b3: a3:d5:06:22:8a:f1:2a:b0:9b:20:db:e3:72:be:fc:73:c5:66: 09:06:73:b4:4e:8e:9d:41:71:12:1a:ad:38:1b:76:76:a1:72: 43:76:db:6f:8c:7e:fe:1c:4e:bd:07:0a:00:4d:53:1f:5d:22: c2:22:7f:77:91:d5:94:c4:b7:e8:cc:08:35:d1:86:56:66:8d: c6:a8:53:f9:4f:ee:be:fa:ac:86:94:0d:c6:37:7a:00:14:d1: 50:19:69:fe:f3:04:c5:3e:ef:93:22:a2:f5:20:9b:14:02:40: 4d:80:44:53:e7:28:03:83:11:75:fc:86:3f:de:24:7b:ca:06: 49:e9:58:00:0a:bd:bb:61:a8:8b:bf:cd:66:bd:92:3b:bf:1e: 38:b3:b5:5c:c2:57:86:a9:91:f8:4f:0b:28:40:3b:21:66:29: 31:c8:bd:09:8a:cd:a3:02:9f:ee:a7:21:75:64:42:f2:e7:32: 2e:dd:3f:87:81:0a:4f:82:bb:e6:17:29:e2:62:fe:94:83:44: 32:e2:dc:bd:3c:a6:24:13:05:c6:16:4e:ea:b8:ea:34:ca:cb: 09:9a:54:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNO7oy5OxAP1OOfOArvPXBwoDTJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyOVoX DTI3MDMwMzA2MDYyOVowMzExMC8GA1UEAxMoMkNCQjFBNjQ4MjE0MEI0MzVEM0RG ODQ2NzYxMUIzQzZENTM4M0I0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTGv5j4EkdcZLi/mlZ3OsoidKFO9eq4mGFYgOHYa0vYhVM6ZKEHJ1TKFu1N otsIx0L9lTK5FRS+vyrClOdZU7nBDjGcmNIje94WlKYdQIRglwP/oWg9A9TxfB4q LOHOqe+Jxg9Q678U+3kzxcTNCjt1/F5nY+ZE9xtNLH0OMTeC1W6YAtxZUwMk+eQ3 +XIjYFPb6S4j5QvKp57h9jBOh9XNskYWCWfqve9w3tycOkj4AiwfZyWt0yLQYxyT mH5A7mhUGmGlBHIkNxdgCcr9fghNplt1x2JXKzCbe+y1rcnOfaA39PUFdyLRD0tF hdAM9o0+qV6LJpvoj1Tsf3k8hLsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQsuxpk ghQLQ109+EZ2EbPG1Tg7STAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oKkwDQYJKoZIhvcNAQELBQADggEBAENfD63PwR7GJtMgVuuY9mz3ol3i19q1R08z 7x/35vr0BgbUs6PVBiKK8SqwmyDb43K+/HPFZgkGc7ROjp1BcRIarTgbdnahckN2 22+Mfv4cTr0HCgBNUx9dIsIif3eR1ZTEt+jMCDXRhlZmjcaoU/lP7r76rIaUDcY3 egAU0VAZaf7zBMU+75MiovUgmxQCQE2ARFPnKAODEXX8hj/eJHvKBknpWAAKvbth qIu/zWa9kju/HjiztVzCV4apkfhPCyhAOyFmKTHIvQmKzaMCn+6nIXVkQvLnMi7d P4eBCk+Cu+YXKeJi/pSDRDLi3L08piQTBcYWTuq46jTKywmaVCY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:31 2026 by rpki-client