$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142830.roa File: AS142830.roa (raw, json) Hash identifier: qzrdheOowAwYEUjgh9kx1L69SyujDbjJdlbPjLDhgWA= Subject key identifier: 51:A4:2B:A2:EC:F9:B3:2A:BE:12:A9:9C:FB:F4:28:40:73:56:14:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3930503488BD3CA7BA0E40F7FCAA393DDB003398 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142830.roa Signing time: Wed 04 Mar 2026 06:07:27 +0000 ROA not before: Wed 04 Mar 2026 06:02:27 +0000 ROA not after: Wed 03 Mar 2027 06:07:27 +0000 asID: 142830 IP address blocks: 240a:a0b4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:30:50:34:88:bd:3c:a7:ba:0e:40:f7:fc:aa:39:3d:db:00:33:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:27 2026 GMT Not After : Mar 3 06:07:27 2027 GMT Subject: CN=51A42BA2ECF9B32ABE12A99CFBF42840735614D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:f8:7f:15:bb:67:3b:d6:53:05:73:b8:02: 80:9b:40:ca:23:6a:13:37:1e:fe:52:4e:a2:be:24: 21:cd:3a:a0:6f:3f:4b:31:10:1b:3c:2d:83:98:57: 12:cb:47:60:9b:e4:1d:18:23:a4:66:68:bd:bd:27: 39:1c:0e:38:1e:c3:98:cb:a4:0a:ff:6b:4a:46:ba: cc:77:14:36:d1:f6:58:ea:ff:c8:b9:5e:5c:e6:bb: 6a:88:a4:fd:00:a1:c4:47:e4:89:8f:7c:c5:0d:a0: 3d:f2:d6:6a:05:4d:00:73:34:ca:d8:23:0a:c1:ad: 5b:a3:15:f3:88:15:b4:f1:b1:65:cf:5d:b8:bf:d5: 3a:b6:c4:32:36:ec:ac:74:38:a7:52:22:51:0e:67: 6d:03:7f:1a:0f:31:86:45:c6:15:bb:5a:46:45:19: c6:a8:71:ef:c8:b7:20:73:35:51:76:fa:e5:bc:48: ae:3c:02:e6:40:4e:f2:a0:64:1d:52:67:28:85:19: 02:27:c1:15:0c:9a:36:5f:a5:f6:27:b6:c9:06:bc: a0:7d:b5:d9:6c:bb:03:fe:07:bf:1b:0a:f1:a7:eb: 8c:37:9e:63:2c:90:cd:4b:62:2f:ee:4b:62:8d:95: 74:9b:15:a6:a4:ab:8d:cc:b7:ca:b1:f7:c2:22:55: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A4:2B:A2:EC:F9:B3:2A:BE:12:A9:9C:FB:F4:28:40:73:56:14:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0b4::/32 Signature Algorithm: sha256WithRSAEncryption c1:dc:66:9f:18:5f:ec:97:fd:43:47:64:2e:f9:50:80:4e:83: 2f:6f:76:99:29:0c:75:22:2d:7d:c5:f4:c4:04:4a:86:a7:04: d6:9a:a7:2e:57:fa:16:eb:c3:22:26:5b:cb:cd:3c:bd:b8:e1: 1d:e1:df:3f:22:59:5a:85:76:74:07:01:c8:e9:ae:57:7f:b4: e3:78:a0:dc:95:3c:f4:6c:01:db:aa:70:c6:b6:d6:58:18:e0: 44:f1:ee:dc:3a:26:0e:cc:13:e2:b5:2f:2b:d8:14:ea:70:71: 31:91:84:42:3a:c8:cf:59:70:2f:b8:e5:1d:98:0e:0d:1f:93: 43:c1:4e:87:ff:d1:0f:68:6c:32:42:36:70:32:9c:ab:9a:69: eb:b5:48:a8:49:fd:89:25:34:53:0f:67:81:73:d7:36:90:74: 49:be:09:ac:2b:39:36:5e:d5:9f:8a:8d:d2:2c:4a:66:3d:08: f8:a1:79:da:b8:3f:ae:62:61:6c:47:67:b7:04:fb:5c:13:ea: 9f:aa:50:23:ea:ac:5c:3c:b6:7d:8c:46:dc:c7:3e:37:10:c0: 21:86:68:1b:d1:96:26:69:ec:31:a7:e2:e3:c2:cd:6e:8f:a0: 6c:ed:e6:a7:5a:da:48:44:55:31:ee:e4:8a:98:4e:4d:cb:a3: be:c7:5f:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOTBQNIi9PKe6DkD3/Ko5PdsAM5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyN1oX DTI3MDMwMzA2MDcyN1owMzExMC8GA1UEAxMoNTFBNDJCQTJFQ0Y5QjMyQUJFMTJB OTlDRkJGNDI4NDA3MzU2MTRENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIW+H8Vu2c71lMFc7gCgJtAyiNqEzce/lJOor4kIc06oG8/SzEQGzwtg5hX EstHYJvkHRgjpGZovb0nORwOOB7DmMukCv9rSka6zHcUNtH2WOr/yLleXOa7aoik /QChxEfkiY98xQ2gPfLWagVNAHM0ytgjCsGtW6MV84gVtPGxZc9duL/VOrbEMjbs rHQ4p1IiUQ5nbQN/Gg8xhkXGFbtaRkUZxqhx78i3IHM1UXb65bxIrjwC5kBO8qBk HVJnKIUZAifBFQyaNl+l9ie2yQa8oH212Wy7A/4HvxsK8afrjDeeYyyQzUtiL+5L Yo2VdJsVpqSrjcy3yrH3wiJV6b8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRRpCui 7PmzKr4SqZz79ChAc1YU1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oLQwDQYJKoZIhvcNAQELBQADggEBAMHcZp8YX+yX/UNHZC75UIBOgy9vdpkpDHUi LX3F9MQESoanBNaapy5X+hbrwyImW8vNPL244R3h3z8iWVqFdnQHAcjprld/tON4 oNyVPPRsAduqcMa21lgY4ETx7tw6Jg7ME+K1LyvYFOpwcTGRhEI6yM9ZcC+45R2Y Dg0fk0PBTof/0Q9obDJCNnAynKuaaeu1SKhJ/YklNFMPZ4Fz1zaQdEm+CawrOTZe 1Z+KjdIsSmY9CPihedq4P65iYWxHZ7cE+1wT6p+qUCPqrFw8tn2MRtzHPjcQwCGG aBvRliZp7DGn4uPCzW6PoGzt5qda2khEVTHu5IqYTk3Lo77HX5I= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:17 2026 by rpki-client