$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142833.roa File: AS142833.roa (raw, json) Hash identifier: /F7kycs4sEUkKcjk7aaMq21HZzeYsAQ3ga6oRTUT9Gk= Subject key identifier: C6:C1:9A:86:9C:AE:29:59:CD:2E:88:80:5D:A4:20:36:9C:0B:2F:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6164D88D4E7C1B863AA80268170AE5E8928B4032 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142833.roa Signing time: Wed 04 Mar 2026 06:06:26 +0000 ROA not before: Wed 04 Mar 2026 06:01:26 +0000 ROA not after: Wed 03 Mar 2027 06:06:26 +0000 asID: 142833 IP address blocks: 240a:a0b7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:64:d8:8d:4e:7c:1b:86:3a:a8:02:68:17:0a:e5:e8:92:8b:40:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:26 2026 GMT Not After : Mar 3 06:06:26 2027 GMT Subject: CN=C6C19A869CAE2959CD2E88805DA420369C0B2F1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:be:71:3e:1c:7a:8c:fe:b1:c8:aa:0e:b0: dc:48:0f:4e:45:4c:4e:6b:28:0f:64:e3:4a:10:6f: 1b:73:93:72:17:ec:eb:55:13:f6:ca:bd:0d:a4:a7: 39:73:36:7c:84:32:a2:30:7f:36:51:a7:1a:bd:af: 66:d3:ac:b2:8f:98:bb:db:88:da:22:25:f4:b9:02: 40:fb:b1:e3:cf:95:6a:75:d9:00:07:8b:75:66:0f: f3:43:80:d6:79:70:7f:24:e3:53:2d:9c:f6:15:fa: 8b:dc:82:2a:ef:92:23:c8:40:2d:40:5e:03:7d:eb: 6a:c8:01:ae:6b:d6:f8:1d:cc:68:0b:78:f5:5b:b5: 3c:a6:65:43:de:d3:da:80:35:77:8a:fa:bf:75:26: a4:8c:19:08:c0:db:d2:54:58:50:e7:1b:34:7b:c3: 7a:78:67:bc:6c:3c:cd:41:0a:03:78:4b:3e:74:b6: 5c:60:c1:b4:0a:bd:bc:90:66:39:49:49:89:83:fe: 85:36:3d:c1:b6:03:1f:be:9b:20:a6:ca:c7:26:79: 9e:3a:dd:8c:02:6f:19:10:38:ba:01:53:17:43:cd: 04:3d:90:ff:2d:23:16:c6:22:16:eb:c8:86:c3:39: ad:7a:4c:8c:d5:23:7e:c6:34:14:91:21:d4:43:e5: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C1:9A:86:9C:AE:29:59:CD:2E:88:80:5D:A4:20:36:9C:0B:2F:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0b7::/32 Signature Algorithm: sha256WithRSAEncryption 2b:0a:82:3f:8d:13:ce:1f:83:85:42:31:d6:bf:bc:d6:dd:03: d7:1c:1b:bd:37:ae:4b:99:e0:a1:e8:04:ed:38:6a:72:1d:71: d8:68:8b:39:0e:82:24:90:a6:eb:eb:64:5b:f5:b4:9a:f3:a4: d4:74:38:06:0e:cb:24:1a:92:c3:ea:b0:32:d5:24:a9:7c:c6: 8d:2f:25:2a:b0:17:84:94:b2:23:5c:13:0d:8e:52:59:c3:88: dc:a7:83:52:76:bb:32:02:44:02:70:02:3b:b7:72:0c:a3:7d: cf:e7:e4:3e:59:a7:3f:46:4c:39:c9:d3:91:d7:9f:a4:26:6e: 55:8d:dd:86:72:16:c5:2d:62:05:1b:a6:97:01:b4:76:c4:be: 91:70:75:39:fb:65:c9:9a:fb:57:71:59:63:7b:8e:58:33:f5: 96:26:d8:85:01:df:fe:a5:20:e1:9a:38:00:10:dd:8b:8b:ff: 71:fd:cf:b4:4b:dd:6d:2a:fa:29:3f:07:8a:77:48:04:de:be: 4f:b8:39:d5:f0:5f:29:2d:e6:25:79:59:50:7c:1e:21:75:a9: 01:fc:ed:74:f7:a5:ff:54:f7:53:3c:e5:57:32:01:9c:e3:16: a5:bf:02:f3:41:27:44:86:06:4f:13:b1:0c:2b:2e:3d:a1:d1: 19:02:84:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYWTYjU58G4Y6qAJoFwrl6JKLQDIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyNloX DTI3MDMwMzA2MDYyNlowMzExMC8GA1UEAxMoQzZDMTlBODY5Q0FFMjk1OUNEMkU4 ODgwNURBNDIwMzY5QzBCMkYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIyjvnE+HHqM/rHIqg6w3EgPTkVMTmsoD2TjShBvG3OTchfs61UT9sq9DaSn OXM2fIQyojB/NlGnGr2vZtOsso+Yu9uI2iIl9LkCQPux48+VanXZAAeLdWYP80OA 1nlwfyTjUy2c9hX6i9yCKu+SI8hALUBeA33rasgBrmvW+B3MaAt49Vu1PKZlQ97T 2oA1d4r6v3UmpIwZCMDb0lRYUOcbNHvDenhnvGw8zUEKA3hLPnS2XGDBtAq9vJBm OUlJiYP+hTY9wbYDH76bIKbKxyZ5njrdjAJvGRA4ugFTF0PNBD2Q/y0jFsYiFuvI hsM5rXpMjNUjfsY0FJEh1EPljCkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTGwZqG nK4pWc0uiIBdpCA2nAsvHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oLcwDQYJKoZIhvcNAQELBQADggEBACsKgj+NE84fg4VCMda/vNbdA9ccG703rkuZ 4KHoBO04anIdcdhoizkOgiSQpuvrZFv1tJrzpNR0OAYOyyQaksPqsDLVJKl8xo0v JSqwF4SUsiNcEw2OUlnDiNyng1J2uzICRAJwAju3cgyjfc/n5D5Zpz9GTDnJ05HX n6QmblWN3YZyFsUtYgUbppcBtHbEvpFwdTn7Zcma+1dxWWN7jlgz9ZYm2IUB3/6l IOGaOAAQ3YuL/3H9z7RL3W0q+ik/B4p3SATevk+4OdXwXykt5iV5WVB8HiF1qQH8 7XT3pf9U91M85VcyAZzjFqW/AvNBJ0SGBk8TsQwrLj2h0RkChPs= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:37 2026 by rpki-client