$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142834.roa File: AS142834.roa (raw, json) Hash identifier: 9/p+cu95YCwLmUkY4KvWwMwxvIQybCaszelW/eh07gU= Subject key identifier: 6D:29:90:3C:51:26:3D:63:13:63:41:8A:34:EF:30:7F:9D:F2:31:1D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1EAD54E6AB99ED81FF1F0341496C93E28F7D6E9F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142834.roa Signing time: Wed 04 Mar 2026 06:06:35 +0000 ROA not before: Wed 04 Mar 2026 06:01:35 +0000 ROA not after: Wed 03 Mar 2027 06:06:35 +0000 asID: 142834 IP address blocks: 240a:a0b8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ad:54:e6:ab:99:ed:81:ff:1f:03:41:49:6c:93:e2:8f:7d:6e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:35 2026 GMT Not After : Mar 3 06:06:35 2027 GMT Subject: CN=6D29903C51263D631363418A34EF307F9DF2311D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:8a:1f:fd:f8:3c:dc:4a:a6:b7:83:68:d3: d9:17:2c:e7:a1:4e:a3:1f:a3:85:6c:d8:0e:9b:8a: b8:47:74:31:c4:fd:31:4f:dd:f1:37:6b:dd:ba:a9: ba:09:5c:25:bc:2e:4e:65:18:cd:64:0c:a9:4a:64: b4:10:e4:53:02:b2:15:c9:81:d1:e6:3c:52:a1:41: e4:4c:61:d1:36:66:71:cc:3d:96:a4:0e:98:b5:6c: 9e:8d:a8:a1:53:d4:7b:a3:d4:7d:d8:89:9b:8e:98: d3:c0:cc:fb:91:6c:dc:1c:15:85:d5:59:ec:4f:4f: af:94:cc:ad:38:fb:19:b1:8f:8e:53:1a:98:20:5d: e8:f5:a0:66:d6:62:33:24:91:d7:c4:ad:06:a6:a7: fb:ec:a9:40:33:17:f4:5f:e2:47:1d:ab:a6:05:21: da:11:8e:84:5c:0b:ba:be:77:6c:be:ac:cb:c8:77: be:e4:ec:17:19:1b:0c:67:08:07:a0:7b:10:b2:17: c7:a9:92:45:33:73:d4:57:9f:42:3b:59:9e:40:da: 06:61:b6:48:8e:02:78:7c:35:fb:14:69:40:a2:64: f6:b3:29:b5:4d:3d:13:18:dd:cc:66:85:1a:28:ec: 04:ac:75:16:75:4a:69:be:fb:06:65:4f:a8:d9:1a: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:29:90:3C:51:26:3D:63:13:63:41:8A:34:EF:30:7F:9D:F2:31:1D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0b8::/32 Signature Algorithm: sha256WithRSAEncryption 41:20:86:c8:27:53:1b:5a:8c:00:1d:a8:e3:9d:1b:d1:f7:eb: 94:be:66:0f:9a:d3:63:05:86:1b:78:4d:4a:46:f3:98:f6:0b: 17:70:1b:40:da:34:80:16:6e:3b:75:2e:f0:22:84:17:a7:a5: 2c:8e:27:50:7d:45:6d:6c:f4:30:5c:70:2f:2b:50:47:80:2a: 83:91:38:20:81:d7:f3:15:1b:b8:7d:96:cf:49:dd:ae:84:89: c1:ab:6f:fc:16:e7:03:bd:52:63:be:18:4c:8b:6a:26:a8:7b: 16:65:16:74:68:48:36:e7:74:73:6d:6b:27:63:01:7e:b0:d5: 28:a1:ba:e2:fa:7a:53:5c:b2:8f:56:38:bb:41:39:d2:64:74: a1:55:3a:70:26:33:0b:34:22:24:d6:4b:fa:dc:98:20:64:e4: 5e:5f:1b:c2:21:d1:50:d0:68:bf:1e:ca:f8:97:b7:c7:93:56: 7e:b6:a4:d3:3f:29:fb:90:10:88:21:d1:3d:dc:dc:d4:68:2d: 0a:20:a2:4f:c8:4a:6f:76:a8:5a:2e:6b:e2:48:d9:9f:90:de: 0c:5e:51:87:e4:76:38:4a:5e:ed:53:58:5b:26:3e:13:4e:52: 06:34:e9:f0:09:75:39:4b:89:ee:bf:9d:01:07:95:26:f2:56: 0d:bf:ef:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHq1U5quZ7YH/HwNBSWyT4o99bp8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzNVoX DTI3MDMwMzA2MDYzNVowMzExMC8GA1UEAxMoNkQyOTkwM0M1MTI2M0Q2MzEzNjM0 MThBMzRFRjMwN0Y5REYyMzExRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDVih/9+DzcSqa3g2jT2Rcs56FOox+jhWzYDpuKuEd0McT9MU/d8Tdr3bqp uglcJbwuTmUYzWQMqUpktBDkUwKyFcmB0eY8UqFB5Exh0TZmccw9lqQOmLVsno2o oVPUe6PUfdiJm46Y08DM+5Fs3BwVhdVZ7E9Pr5TMrTj7GbGPjlMamCBd6PWgZtZi MySR18StBqan++ypQDMX9F/iRx2rpgUh2hGOhFwLur53bL6sy8h3vuTsFxkbDGcI B6B7ELIXx6mSRTNz1FefQjtZnkDaBmG2SI4CeHw1+xRpQKJk9rMptU09ExjdzGaF GijsBKx1FnVKab77BmVPqNkacO0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRtKZA8 USY9YxNjQYo07zB/nfIxHTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oLgwDQYJKoZIhvcNAQELBQADggEBAEEghsgnUxtajAAdqOOdG9H365S+Zg+a02MF hht4TUpG85j2CxdwG0DaNIAWbjt1LvAihBenpSyOJ1B9RW1s9DBccC8rUEeAKoOR OCCB1/MVG7h9ls9J3a6EicGrb/wW5wO9UmO+GEyLaiaoexZlFnRoSDbndHNtaydj AX6w1SihuuL6elNcso9WOLtBOdJkdKFVOnAmMws0IiTWS/rcmCBk5F5fG8Ih0VDQ aL8eyviXt8eTVn62pNM/KfuQEIgh0T3c3NRoLQogok/ISm92qFoua+JI2Z+Q3gxe UYfkdjhKXu1TWFsmPhNOUgY06fAJdTlLie6/nQEHlSbyVg2/75Y= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:16 2026 by rpki-client