$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142826.roa File: AS142826.roa (raw, json) Hash identifier: ndDqmUu1aTk0iRYVIEi4rvJg9955G7I5//q7NA/2G/w= Subject key identifier: B7:38:00:FE:85:EB:38:42:E3:23:C2:67:3E:8E:E6:BF:AF:B4:75:DB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 19869E3FEA883D920FEC26E6A142F8D94AD099B8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142826.roa Signing time: Wed 04 Mar 2026 06:08:01 +0000 ROA not before: Wed 04 Mar 2026 06:03:01 +0000 ROA not after: Wed 03 Mar 2027 06:08:01 +0000 asID: 142826 IP address blocks: 240a:a0b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:86:9e:3f:ea:88:3d:92:0f:ec:26:e6:a1:42:f8:d9:4a:d0:99:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:01 2026 GMT Not After : Mar 3 06:08:01 2027 GMT Subject: CN=B73800FE85EB3842E323C2673E8EE6BFAFB475DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:94:30:99:4a:3d:bf:c6:e5:3e:42:b4:7d: 8f:e8:43:22:2a:db:f2:bb:c2:95:8f:30:6c:65:84: 14:20:b5:26:9b:ca:76:32:9a:40:79:47:36:6d:ee: 4b:20:a3:2f:71:41:a7:66:c3:6b:68:d3:40:fb:df: 74:7a:5f:36:dd:a0:29:5e:4c:13:da:3a:40:d3:d8: 2c:32:7a:03:da:0a:0b:d6:6d:89:b9:50:94:46:c4: 10:f7:4f:b9:8b:4e:36:cf:fc:bb:a3:13:68:7f:91: 22:23:83:51:5c:15:c9:6e:84:64:15:76:25:3f:b6: 5b:de:27:be:54:68:45:29:e3:e1:1f:24:80:16:5c: af:90:4f:c8:f0:59:a0:b9:77:9a:ee:26:1e:1e:f0: 49:67:06:84:a2:09:94:e1:8b:5f:41:5b:e4:12:7e: 8e:3e:bb:5f:a0:56:7f:e8:32:ed:d8:14:ee:db:10: dc:31:53:d8:83:64:32:a2:04:07:0f:86:c6:01:84: d2:3e:a4:f1:15:78:6c:86:7d:cc:ad:73:f8:60:9a: 22:1b:15:0a:56:88:e8:62:ae:a8:f6:a7:44:43:50: 41:a1:7e:98:74:f4:db:38:02:fa:bb:d4:d9:be:af: 7a:b7:08:ba:dd:ca:6c:0e:3f:65:ce:ee:7b:b0:ca: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:38:00:FE:85:EB:38:42:E3:23:C2:67:3E:8E:E6:BF:AF:B4:75:DB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142826.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0b0::/32 Signature Algorithm: sha256WithRSAEncryption 15:25:09:59:3f:a8:ae:9f:92:77:6f:7a:0f:18:36:97:65:88: 33:39:96:ca:7e:fb:12:69:16:d5:f5:68:d2:28:9f:0e:70:f6: 24:c1:55:30:7a:b7:c2:c3:1f:80:b7:2f:ac:95:5c:3a:74:34: 5c:ec:8f:5b:eb:37:13:4e:c3:af:1f:5a:06:f3:5d:fe:eb:02: 4c:ef:41:31:47:a9:c9:63:a9:7d:e5:f2:66:22:d4:4c:8c:ea: ac:c1:d0:22:b4:c8:1b:6b:e6:d7:9c:b4:c4:dd:00:97:17:e0: bc:62:b3:d6:4f:7e:b2:c1:0b:e1:b8:0a:65:82:e7:ac:fb:23: 06:87:02:b0:bc:b2:70:3a:11:0e:96:5f:c5:89:56:e5:8a:1a: f9:81:2e:42:7c:38:cf:00:e0:51:1a:85:98:90:d3:d9:3c:a9: a2:9b:a5:b0:41:71:14:be:cb:6b:fc:89:59:e8:78:f5:06:b2: c7:52:97:98:8f:ef:ff:e2:b3:06:13:81:cd:2a:3e:85:dc:60: 4e:d5:61:29:16:b1:56:87:2f:e6:ca:76:6c:32:eb:ab:6d:d6: af:7b:67:35:c1:4e:77:a0:d2:60:12:11:e2:eb:19:20:ab:e1: b7:9b:67:0a:90:da:f3:ad:92:71:20:58:8a:ad:5d:43:b4:6c: ce:d5:cf:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGYaeP+qIPZIP7CbmoUL42UrQmbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwMVoX DTI3MDMwMzA2MDgwMVowMzExMC8GA1UEAxMoQjczODAwRkU4NUVCMzg0MkUzMjND MjY3M0U4RUU2QkZBRkI0NzVEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALy1lDCZSj2/xuU+QrR9j+hDIirb8rvClY8wbGWEFCC1JpvKdjKaQHlHNm3u SyCjL3FBp2bDa2jTQPvfdHpfNt2gKV5ME9o6QNPYLDJ6A9oKC9ZtiblQlEbEEPdP uYtONs/8u6MTaH+RIiODUVwVyW6EZBV2JT+2W94nvlRoRSnj4R8kgBZcr5BPyPBZ oLl3mu4mHh7wSWcGhKIJlOGLX0Fb5BJ+jj67X6BWf+gy7dgU7tsQ3DFT2INkMqIE Bw+GxgGE0j6k8RV4bIZ9zK1z+GCaIhsVClaI6GKuqPanRENQQaF+mHT02zgC+rvU 2b6vercIut3KbA4/Zc7ue7DKzAcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS3OAD+ hes4QuMjwmc+jua/r7R12zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oLAwDQYJKoZIhvcNAQELBQADggEBABUlCVk/qK6fkndveg8YNpdliDM5lsp++xJp FtX1aNIonw5w9iTBVTB6t8LDH4C3L6yVXDp0NFzsj1vrNxNOw68fWgbzXf7rAkzv QTFHqcljqX3l8mYi1EyM6qzB0CK0yBtr5tectMTdAJcX4Lxis9ZPfrLBC+G4CmWC 56z7IwaHArC8snA6EQ6WX8WJVuWKGvmBLkJ8OM8A4FEahZiQ09k8qaKbpbBBcRS+ y2v8iVnoePUGssdSl5iP7//iswYTgc0qPoXcYE7VYSkWsVaHL+bKdmwy66tt1q97 ZzXBTneg0mASEeLrGSCr4bebZwqQ2vOtknEgWIqtXUO0bM7Vz4M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:56 2026 by rpki-client