$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142835.roa File: AS142835.roa (raw, json) Hash identifier: yzKeUgnAY8qwmMpQOx4ig/FVfrTjoJwfOF+PUHCaLHM= Subject key identifier: 68:29:75:2F:19:D2:50:CE:22:31:56:89:55:26:12:29:72:11:BB:E6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2CDE7E107A39AE16D01F0BC66E3F6F1B687FD034 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142835.roa Signing time: Wed 04 Mar 2026 06:05:18 +0000 ROA not before: Wed 04 Mar 2026 06:00:18 +0000 ROA not after: Wed 03 Mar 2027 06:05:18 +0000 asID: 142835 IP address blocks: 240a:a0b9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:de:7e:10:7a:39:ae:16:d0:1f:0b:c6:6e:3f:6f:1b:68:7f:d0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:18 2026 GMT Not After : Mar 3 06:05:18 2027 GMT Subject: CN=6829752F19D250CE22315689552612297211BBE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:2f:d0:95:ff:ad:4b:94:de:06:20:69:a4: 31:79:2f:f4:4f:b0:f8:21:cd:3e:fb:cc:ed:d9:4b: 1d:a4:20:c4:b4:61:6f:58:b4:3e:b3:2a:fe:8a:cc: 29:3e:4f:64:96:9c:89:60:67:1a:be:44:06:06:09: 0b:12:dc:ba:fe:dd:16:16:02:2d:25:b6:48:e6:53: f1:35:a8:c6:33:ca:b5:5f:78:25:ed:e4:af:1c:21: 76:b9:fa:9a:1d:c0:52:5e:b6:13:07:6a:00:21:5e: d9:3b:d9:07:c2:55:14:fd:bc:ce:a4:28:93:4d:c7: b8:2a:5e:ba:95:24:a3:f5:aa:e3:6b:34:20:9e:9c: be:7a:a7:88:5d:f6:0e:a9:b6:01:26:9b:cc:a6:5d: 73:2d:a0:e4:fc:b6:8e:27:96:80:d7:02:47:28:45: db:5f:58:d7:33:fc:dc:db:64:4d:5a:15:52:5b:8e: 49:66:34:35:fc:4e:0a:11:ca:ca:72:da:f0:8a:8f: c7:67:09:ea:33:c4:cd:73:f6:55:e3:2d:c7:79:0f: 16:39:a4:85:f3:2f:19:3e:24:6b:70:4e:6b:a5:5b: a3:1a:06:4a:e3:e4:84:65:dd:0b:19:86:4a:1a:8a: cf:bd:93:a5:6a:c3:62:af:94:20:bc:83:ee:d9:51: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:29:75:2F:19:D2:50:CE:22:31:56:89:55:26:12:29:72:11:BB:E6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0b9::/32 Signature Algorithm: sha256WithRSAEncryption 6d:3f:1f:d5:e1:3a:6e:b6:ad:c7:77:51:8d:02:3b:ed:52:aa: d5:c8:ad:93:44:97:1a:c1:8c:0c:f7:c5:36:3f:58:cc:79:13: 36:53:27:d2:86:1d:10:2c:06:2a:6b:b5:68:26:8f:d0:e6:fc: 6b:94:68:9d:cb:e3:b6:41:f6:e0:5b:03:80:73:02:ce:55:02: 28:3a:8d:7e:5f:a8:01:1a:ea:6b:3a:47:49:bf:a0:1c:24:fd: c6:25:b9:d8:b9:c6:fe:41:8f:15:e3:19:f8:ee:96:83:82:f1: 0e:76:51:ff:d6:af:7f:10:ce:1f:87:e3:aa:b8:fd:5d:aa:01: 9c:e0:61:b4:e1:b4:13:87:27:7f:24:83:17:1e:b0:f1:77:74: 2a:e0:10:4d:c3:c3:b4:99:e0:ae:c5:8e:44:9f:b0:d3:f3:64: ef:8b:e3:ab:23:56:2d:99:4f:ca:a7:7d:36:55:b4:fc:79:37: ae:c7:3f:ae:9d:d0:26:d1:ce:bf:23:4d:49:5b:47:84:df:85: 45:e1:aa:19:14:05:2e:db:34:4e:f9:63:44:b5:b5:26:5b:c6: 3a:ae:1d:54:eb:76:80:aa:e0:ef:0e:d3:ba:66:da:d1:cc:14: de:c8:93:79:b8:5d:84:98:d5:e2:39:75:aa:f2:3b:9d:a7:56: 5a:89:b7:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULN5+EHo5rhbQHwvGbj9vG2h/0DQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxOFoX DTI3MDMwMzA2MDUxOFowMzExMC8GA1UEAxMoNjgyOTc1MkYxOUQyNTBDRTIyMzE1 Njg5NTUyNjEyMjk3MjExQkJFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKG5L9CV/61LlN4GIGmkMXkv9E+w+CHNPvvM7dlLHaQgxLRhb1i0PrMq/orM KT5PZJaciWBnGr5EBgYJCxLcuv7dFhYCLSW2SOZT8TWoxjPKtV94Je3krxwhdrn6 mh3AUl62EwdqACFe2TvZB8JVFP28zqQok03HuCpeupUko/Wq42s0IJ6cvnqniF32 Dqm2ASabzKZdcy2g5Py2jieWgNcCRyhF219Y1zP83NtkTVoVUluOSWY0NfxOChHK ynLa8IqPx2cJ6jPEzXP2VeMtx3kPFjmkhfMvGT4ka3BOa6VboxoGSuPkhGXdCxmG ShqKz72TpWrDYq+UILyD7tlRWVsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRoKXUv GdJQziIxVolVJhIpchG75jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oLkwDQYJKoZIhvcNAQELBQADggEBAG0/H9XhOm62rcd3UY0CO+1SqtXIrZNElxrB jAz3xTY/WMx5EzZTJ9KGHRAsBiprtWgmj9Dm/GuUaJ3L47ZB9uBbA4BzAs5VAig6 jX5fqAEa6ms6R0m/oBwk/cYludi5xv5BjxXjGfjuloOC8Q52Uf/Wr38Qzh+H46q4 /V2qAZzgYbThtBOHJ38kgxcesPF3dCrgEE3Dw7SZ4K7FjkSfsNPzZO+L46sjVi2Z T8qnfTZVtPx5N67HP66d0CbRzr8jTUlbR4TfhUXhqhkUBS7bNE75Y0S1tSZbxjqu HVTrdoCq4O8O07pm2tHMFN7Ik3m4XYSY1eI5daryO52nVlqJty4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:58 2026 by rpki-client