$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142837.roa File: AS142837.roa (raw, json) Hash identifier: dsxkzO9K2CDyJAsVZD9MIXcyuZ2JLjOhGbXn+OMg4gM= Subject key identifier: F9:BC:A8:29:3F:DE:C8:2A:61:73:BB:B2:8E:68:D6:97:8B:F9:6B:C3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1876842AC49CBDFCD54932F801B4A3D7DDDD9719 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142837.roa Signing time: Wed 04 Mar 2026 06:07:23 +0000 ROA not before: Wed 04 Mar 2026 06:02:23 +0000 ROA not after: Wed 03 Mar 2027 06:07:23 +0000 asID: 142837 IP address blocks: 240a:a0bb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:76:84:2a:c4:9c:bd:fc:d5:49:32:f8:01:b4:a3:d7:dd:dd:97:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:23 2026 GMT Not After : Mar 3 06:07:23 2027 GMT Subject: CN=F9BCA8293FDEC82A6173BBB28E68D6978BF96BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:b7:06:45:fa:f5:26:40:6a:07:d9:36:b2: 52:ae:d6:fb:c1:88:17:a8:c4:1c:2a:1b:7e:b4:1c: 1f:70:da:a4:71:e7:e0:f1:a7:1a:f6:ef:fb:19:5e: 83:1c:d8:8b:93:97:0c:82:72:36:0e:94:16:a0:46: ba:4b:84:23:d0:69:11:d3:08:50:a0:79:3a:be:55: b5:e5:d2:b0:b9:d0:52:a9:16:c0:0c:f9:cc:54:3b: 6e:70:c6:42:09:17:9f:df:70:ef:d7:b8:25:cf:68: 86:94:2f:f3:15:cc:f6:b6:82:11:45:8b:9f:33:ff: d7:6e:3f:da:3f:ac:db:0e:f4:94:20:43:92:ec:e3: d7:7d:55:a4:a5:c7:a7:c1:8c:54:08:a1:74:a8:5e: 12:98:2e:1b:48:9a:ab:f9:fb:76:cb:56:47:cc:20: 16:61:8b:8f:d3:6f:e4:40:90:65:0a:66:82:0d:d5: be:08:57:6a:79:c9:1d:12:ea:bd:a7:79:77:fb:73: 9e:33:71:57:34:ea:89:07:e9:13:c8:ba:b4:b6:66: b3:63:f6:ce:41:86:55:21:fb:44:56:74:23:37:81: ae:39:4d:11:8d:ff:2f:50:b2:8d:a1:9e:01:63:21: 73:3c:d8:74:91:a0:a8:a1:38:0c:a7:81:92:76:ce: ff:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BC:A8:29:3F:DE:C8:2A:61:73:BB:B2:8E:68:D6:97:8B:F9:6B:C3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0bb::/32 Signature Algorithm: sha256WithRSAEncryption c1:24:05:eb:36:86:3c:a8:e0:32:1c:3b:f8:87:24:9b:a0:37: 4e:0c:dc:4b:8d:fd:18:6c:fd:94:cf:a3:9e:a0:01:bd:45:27: 38:d2:2b:64:39:c3:e1:09:13:e3:11:f9:6d:21:29:63:d9:0b: 84:4b:66:fe:cd:18:aa:3b:5b:04:e0:47:6a:55:e1:71:a6:e3: a8:62:5a:a9:73:ca:25:c6:4c:fd:f1:20:0d:dc:67:17:03:be: 69:7e:60:70:db:58:61:2f:3c:48:fe:b0:e8:be:a8:3c:8c:b7: a9:39:b4:bf:46:31:6f:71:85:2e:00:4d:15:56:99:5f:66:99: 13:f3:65:f5:a5:f1:b9:0f:0f:47:8f:62:ad:36:23:c1:4b:ad: e4:6b:cb:3b:ae:a3:17:b7:45:93:39:05:ee:06:9c:f6:0a:e6: b5:9a:1c:2b:4b:d3:87:61:be:45:4d:ae:d6:fa:4b:fa:99:26: db:45:cc:b9:7b:f5:02:21:c5:f4:cd:72:f1:5d:39:c7:15:7e: 29:6a:4b:16:08:46:66:49:f6:fa:78:e0:fd:4b:38:91:32:03: fe:7a:92:c0:29:69:2d:87:df:ed:c8:c6:09:17:73:18:85:2e: 35:65:3b:3b:1b:54:eb:5d:47:c8:30:bd:d4:27:4d:65:83:50: e7:94:12:be -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGHaEKsScvfzVSTL4AbSj193dlxkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyM1oX DTI3MDMwMzA2MDcyM1owMzExMC8GA1UEAxMoRjlCQ0E4MjkzRkRFQzgyQTYxNzNC QkIyOEU2OEQ2OTc4QkY5NkJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL39twZF+vUmQGoH2TayUq7W+8GIF6jEHCobfrQcH3DapHHn4PGnGvbv+xle gxzYi5OXDIJyNg6UFqBGukuEI9BpEdMIUKB5Or5VteXSsLnQUqkWwAz5zFQ7bnDG QgkXn99w79e4Jc9ohpQv8xXM9raCEUWLnzP/124/2j+s2w70lCBDkuzj131VpKXH p8GMVAihdKheEpguG0iaq/n7dstWR8wgFmGLj9Nv5ECQZQpmgg3VvghXannJHRLq vad5d/tznjNxVzTqiQfpE8i6tLZms2P2zkGGVSH7RFZ0IzeBrjlNEY3/L1CyjaGe AWMhczzYdJGgqKE4DKeBknbO/7sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT5vKgp P97IKmFzu7KOaNaXi/lrwzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oLswDQYJKoZIhvcNAQELBQADggEBAMEkBes2hjyo4DIcO/iHJJugN04M3EuN/Rhs /ZTPo56gAb1FJzjSK2Q5w+EJE+MR+W0hKWPZC4RLZv7NGKo7WwTgR2pV4XGm46hi WqlzyiXGTP3xIA3cZxcDvml+YHDbWGEvPEj+sOi+qDyMt6k5tL9GMW9xhS4ATRVW mV9mmRPzZfWl8bkPD0ePYq02I8FLreRryzuuoxe3RZM5Be4GnPYK5rWaHCtL04dh vkVNrtb6S/qZJttFzLl79QIhxfTNcvFdOccVfilqSxYIRmZJ9vp44P1LOJEyA/56 ksApaS2H3+3IxgkXcxiFLjVlOzsbVOtdR8gwvdQnTWWDUOeUEr4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:04 2026 by rpki-client