$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142827.roa File: AS142827.roa (raw, json) Hash identifier: I19J4xea4MH9Ug5/QG7H76qFGXpaDzbDmMf9rkLDGAM= Subject key identifier: 34:75:B5:7D:E6:DD:9E:6D:38:66:33:2F:10:18:F7:DB:7A:3D:7C:49 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 474EF17905849CB8BB494CBDAB135D10EFB0D0E1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142827.roa Signing time: Wed 04 Mar 2026 06:07:39 +0000 ROA not before: Wed 04 Mar 2026 06:02:39 +0000 ROA not after: Wed 03 Mar 2027 06:07:39 +0000 asID: 142827 IP address blocks: 240a:a0b1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:4e:f1:79:05:84:9c:b8:bb:49:4c:bd:ab:13:5d:10:ef:b0:d0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:39 2026 GMT Not After : Mar 3 06:07:39 2027 GMT Subject: CN=3475B57DE6DD9E6D3866332F1018F7DB7A3D7C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:a4:94:41:be:c9:73:f9:be:c5:8c:81:fa: b0:14:c6:80:87:e1:cf:99:dd:ef:6a:ec:53:8d:23: cc:eb:50:7e:a5:49:16:b9:22:2d:de:7f:c3:bd:0f: b1:71:03:dc:5e:4c:77:eb:09:08:fd:d0:43:79:82: 1d:c7:2e:df:87:ac:ae:93:aa:13:43:2f:14:2f:06: 49:74:e5:fe:de:4f:5e:b6:0f:da:cc:a1:fa:a8:72: 44:b4:ca:68:8a:eb:dd:8c:ca:a0:fd:de:49:28:0b: 00:03:db:77:b7:f1:ae:a2:58:ba:a8:71:ae:b8:7d: 71:4b:f4:89:7f:82:6b:35:31:25:89:b0:f3:52:86: 38:d5:0b:6a:df:68:6b:a8:85:e7:b8:d0:61:12:9d: be:c7:9b:78:a6:8b:18:b0:bb:b6:b3:cf:2e:82:2e: 78:10:64:ee:fb:0e:08:05:b9:79:23:e9:cf:84:ce: 0a:77:7c:36:54:4b:9f:50:57:16:b4:1b:8e:83:06: 19:73:9f:f1:89:06:ed:ca:4e:8d:ba:2c:d2:b6:ec: 58:48:ef:52:18:c1:a3:74:15:49:64:87:65:99:f8: 5f:42:2a:cc:86:d2:3c:33:9b:8b:9a:39:bb:de:1e: 8d:76:8f:44:7a:ad:b7:f6:41:c6:11:9a:96:6e:43: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:75:B5:7D:E6:DD:9E:6D:38:66:33:2F:10:18:F7:DB:7A:3D:7C:49 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142827.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0b1::/32 Signature Algorithm: sha256WithRSAEncryption 9d:75:2c:fb:29:8a:e1:c3:44:79:d5:c1:e0:ab:8d:68:80:4b: 15:80:17:aa:ea:79:b8:9e:69:c2:21:c2:a0:9b:dc:5a:61:3f: 23:48:6f:d4:c5:f4:f8:7d:f0:c9:53:7f:96:2f:a4:7d:ee:3f: e8:33:dd:0d:a8:d7:7f:8a:51:f4:b1:71:37:be:54:61:c5:3e: 9f:f5:e2:7b:91:7c:ba:58:c1:b1:ce:fc:d5:41:0b:63:06:94: 01:65:ba:76:a3:f9:65:27:3e:3d:ac:a1:fc:75:04:18:8d:37: c6:03:d7:7c:1a:d6:0e:1a:2f:f2:40:0f:fe:da:43:99:f5:bd: d9:c4:11:09:39:4c:3d:bf:07:f8:eb:12:d3:86:b7:44:b4:53: f3:78:92:95:9d:8d:71:b3:71:e4:f3:da:35:f6:1a:fc:e9:54: 97:a0:58:fc:0e:e0:75:b2:61:55:27:85:00:50:5a:0f:f9:01: 24:f9:cd:29:ba:f6:6e:9f:29:cd:53:85:ef:ad:d2:41:b6:6d: 37:cc:fb:c6:e6:3b:14:e3:c4:4d:2a:4a:a4:f0:5d:4f:0a:a9: 4e:c1:f3:a1:28:3b:6e:09:54:62:b4:e0:03:10:a0:a7:55:76: 59:f4:40:3e:be:cf:d6:a2:20:bc:b6:f6:ea:bc:69:9a:db:fe: e8:ab:b3:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR07xeQWEnLi7SUy9qxNdEO+w0OEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzOVoX DTI3MDMwMzA2MDczOVowMzExMC8GA1UEAxMoMzQ3NUI1N0RFNkREOUU2RDM4NjYz MzJGMTAxOEY3REI3QTNEN0M0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIj+pJRBvslz+b7FjIH6sBTGgIfhz5nd72rsU40jzOtQfqVJFrkiLd5/w70P sXED3F5Md+sJCP3QQ3mCHccu34esrpOqE0MvFC8GSXTl/t5PXrYP2syh+qhyRLTK aIrr3YzKoP3eSSgLAAPbd7fxrqJYuqhxrrh9cUv0iX+CazUxJYmw81KGONULat9o a6iF57jQYRKdvsebeKaLGLC7trPPLoIueBBk7vsOCAW5eSPpz4TOCnd8NlRLn1BX FrQbjoMGGXOf8YkG7cpOjbos0rbsWEjvUhjBo3QVSWSHZZn4X0IqzIbSPDObi5o5 u94ejXaPRHqtt/ZBxhGalm5DPlMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ0dbV9 5t2ebThmMy8QGPfbej18STAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgyNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oLEwDQYJKoZIhvcNAQELBQADggEBAJ11LPspiuHDRHnVweCrjWiASxWAF6rqebie acIhwqCb3FphPyNIb9TF9Ph98MlTf5YvpH3uP+gz3Q2o13+KUfSxcTe+VGHFPp/1 4nuRfLpYwbHO/NVBC2MGlAFlunaj+WUnPj2sofx1BBiNN8YD13wa1g4aL/JAD/7a Q5n1vdnEEQk5TD2/B/jrEtOGt0S0U/N4kpWdjXGzceTz2jX2GvzpVJegWPwO4HWy YVUnhQBQWg/5AST5zSm69m6fKc1The+t0kG2bTfM+8bmOxTjxE0qSqTwXU8KqU7B 86EoO24JVGK04AMQoKdVdln0QD6+z9aiILy29uq8aZrb/uirs7A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:36 2026 by rpki-client