$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142832.roa File: AS142832.roa (raw, json) Hash identifier: Po/n29CMBZNGnTJ3FERXmfvlAnQQl51mfI0ZKPZsX4w= Subject key identifier: E2:F8:33:0C:38:2B:FB:99:71:9F:BC:46:6E:50:E6:76:31:C3:2F:91 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 19342F413050EB630B3110557CDD0EF98C47118A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142832.roa Signing time: Wed 04 Mar 2026 06:06:28 +0000 ROA not before: Wed 04 Mar 2026 06:01:28 +0000 ROA not after: Wed 03 Mar 2027 06:06:28 +0000 asID: 142832 IP address blocks: 240a:a0b6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:34:2f:41:30:50:eb:63:0b:31:10:55:7c:dd:0e:f9:8c:47:11:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:28 2026 GMT Not After : Mar 3 06:06:28 2027 GMT Subject: CN=E2F8330C382BFB99719FBC466E50E67631C32F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:46:e6:97:3c:c9:bb:48:7e:59:19:14:43:f1: 9a:c9:f5:e2:22:a1:7c:5b:ce:ef:08:76:99:df:be: 59:7b:51:a0:e4:40:e0:13:d2:5b:fe:9b:d8:9f:9d: 2f:64:eb:bb:d8:f8:fe:94:49:5b:f4:60:5e:0c:98: f2:d4:58:0e:a9:99:e4:43:0f:a9:87:07:84:33:96: f0:1d:78:69:ff:57:6b:6f:1b:df:91:af:e3:51:20: 22:2c:15:02:fe:3b:6c:06:87:3a:39:57:15:d5:b3: 66:c6:fa:72:d8:33:e4:0e:7e:23:ec:69:01:33:85: 3f:04:e5:33:7b:6d:81:f3:0d:4b:8c:7f:dc:e8:24: 54:b4:68:0a:00:d5:c5:4f:53:ff:6d:5c:f3:8c:f8: 8f:35:1a:80:25:91:8e:ec:27:7d:db:65:dd:63:33: 86:6a:3d:69:18:51:c0:02:18:f0:c4:d5:c4:df:a9: 1c:53:5d:a9:df:ec:34:ee:d0:8c:4b:c0:cd:86:61: eb:84:44:93:f4:19:cd:87:85:02:ad:33:12:45:da: e8:44:88:30:01:f8:2f:ce:ef:fa:b7:3b:d3:14:5f: 03:82:a9:af:91:61:cd:c1:c4:8c:12:59:43:86:8f: 30:84:01:a3:20:aa:05:41:3d:f3:b6:b7:c4:08:0d: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F8:33:0C:38:2B:FB:99:71:9F:BC:46:6E:50:E6:76:31:C3:2F:91 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0b6::/32 Signature Algorithm: sha256WithRSAEncryption 5d:74:c4:ec:c8:8a:cf:85:5a:aa:f6:ce:3a:0a:82:a1:06:e0: bd:ec:25:b7:6b:de:7a:35:27:8b:df:19:1b:58:b5:60:2e:7d: df:48:b7:19:84:73:cc:ee:27:6f:4b:9c:d3:1e:73:c9:90:64: dc:ec:64:f1:2f:e4:c2:53:0d:53:e7:91:32:47:77:44:66:28: 60:73:92:51:d7:96:4a:6d:33:f2:15:43:80:f7:26:95:17:2b: f2:53:f8:fa:a4:02:f0:a3:93:6f:f2:b0:7e:2f:1e:4b:50:85: 39:2f:a0:2c:90:87:89:b1:ee:06:5a:3f:79:ba:73:67:41:8b: d3:53:53:90:b1:ab:c8:6a:cc:5a:c5:df:8f:6e:6c:9c:fc:b5: 06:d0:a1:8f:fe:6f:88:50:6c:bd:06:97:21:4b:ee:b7:b4:5e: db:dd:0e:23:ac:de:8f:2b:d8:d8:3d:c0:9e:bc:4f:21:7c:68: 87:9c:49:5a:85:b1:94:b5:64:9a:1a:83:5c:12:c0:7b:64:d2: b9:b1:c9:cd:ad:fe:61:0e:5b:7a:de:5a:e3:a5:21:47:2c:f9: 35:97:9e:ec:5a:04:1b:87:19:7d:27:62:f9:ff:d3:c2:23:38: c0:9e:3f:6a:c3:30:99:cb:22:3f:f2:de:4f:a4:74:f5:0c:ee: 3e:e2:53:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGTQvQTBQ62MLMRBVfN0O+YxHEYowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyOFoX DTI3MDMwMzA2MDYyOFowMzExMC8GA1UEAxMoRTJGODMzMEMzODJCRkI5OTcxOUZC QzQ2NkU1MEU2NzYzMUMzMkY5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxG5pc8ybtIflkZFEPxmsn14iKhfFvO7wh2md++WXtRoORA4BPSW/6b2J+d L2Tru9j4/pRJW/RgXgyY8tRYDqmZ5EMPqYcHhDOW8B14af9Xa28b35Gv41EgIiwV Av47bAaHOjlXFdWzZsb6ctgz5A5+I+xpATOFPwTlM3ttgfMNS4x/3OgkVLRoCgDV xU9T/21c84z4jzUagCWRjuwnfdtl3WMzhmo9aRhRwAIY8MTVxN+pHFNdqd/sNO7Q jEvAzYZh64REk/QZzYeFAq0zEkXa6ESIMAH4L87v+rc70xRfA4Kpr5FhzcHEjBJZ Q4aPMIQBoyCqBUE987a3xAgN4pMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTi+DMM OCv7mXGfvEZuUOZ2McMvkTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oLYwDQYJKoZIhvcNAQELBQADggEBAF10xOzIis+FWqr2zjoKgqEG4L3sJbdr3no1 J4vfGRtYtWAufd9ItxmEc8zuJ29LnNMec8mQZNzsZPEv5MJTDVPnkTJHd0RmKGBz klHXlkptM/IVQ4D3JpUXK/JT+PqkAvCjk2/ysH4vHktQhTkvoCyQh4mx7gZaP3m6 c2dBi9NTU5Cxq8hqzFrF349ubJz8tQbQoY/+b4hQbL0GlyFL7re0XtvdDiOs3o8r 2Ng9wJ68TyF8aIecSVqFsZS1ZJoag1wSwHtk0rmxyc2t/mEOW3reWuOlIUcs+TWX nuxaBBuHGX0nYvn/08IjOMCeP2rDMJnLIj/y3k+kdPUM7j7iU+Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:39 2026 by rpki-client