$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142839.roa File: AS142839.roa (raw, json) Hash identifier: enEhh9DM0AAUK5RVnGyx9fp+fC7Ac+m+LhpLVaMNRU4= Subject key identifier: 25:4F:65:9F:48:22:80:62:21:DA:6B:83:DD:55:4C:17:10:97:F2:33 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3038F3B01CDD1183B17E74A904883E679BD48548 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142839.roa Signing time: Wed 04 Mar 2026 06:05:21 +0000 ROA not before: Wed 04 Mar 2026 06:00:21 +0000 ROA not after: Wed 03 Mar 2027 06:05:21 +0000 asID: 142839 IP address blocks: 240a:a0bd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:38:f3:b0:1c:dd:11:83:b1:7e:74:a9:04:88:3e:67:9b:d4:85:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:21 2026 GMT Not After : Mar 3 06:05:21 2027 GMT Subject: CN=254F659F4822806221DA6B83DD554C171097F233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:f6:ca:ac:81:90:f2:31:f7:4b:01:56:ff: 92:84:c0:7c:c2:f9:43:34:00:11:b2:1b:a3:72:55: 7b:8b:f5:21:f4:7a:ef:be:b0:ea:aa:0f:73:64:4d: d6:90:5f:71:50:e9:4d:24:ed:c3:e2:d3:74:91:f9: d2:dc:b1:a0:2a:7d:fd:12:2f:54:ea:2e:34:96:b3: 4c:d8:d9:9b:45:a6:f8:9a:53:8c:8b:bf:7c:dd:df: 23:48:13:ef:74:3e:f2:f1:67:f8:cc:76:82:ed:f4: 74:ec:f0:b8:6e:26:e6:f0:0a:ef:a9:45:d7:b1:97: 9e:db:81:de:28:bc:6a:75:60:49:1e:31:4e:fb:ea: 14:33:b0:44:ee:94:4b:b6:6e:53:08:21:83:b0:5c: f2:89:13:aa:d6:8e:5d:1c:f8:55:7c:9b:7b:21:b4: 4d:5f:48:b0:c4:bf:56:88:b9:0a:14:2e:74:2d:88: 19:37:bc:75:c9:b7:20:71:98:10:b8:02:1c:28:c5: ce:35:f0:a0:dc:68:a5:fd:7b:b2:1c:ed:03:7c:62: d2:42:48:dc:44:9b:62:30:93:80:ef:84:93:21:ce: e9:c3:34:eb:32:16:64:d3:62:4c:46:0b:25:be:0c: e9:f3:2c:21:a7:ca:cb:ee:fc:4e:5a:a4:90:8c:2e: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4F:65:9F:48:22:80:62:21:DA:6B:83:DD:55:4C:17:10:97:F2:33 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0bd::/32 Signature Algorithm: sha256WithRSAEncryption bb:0e:0f:b2:17:02:c3:74:6d:ec:53:c0:d0:2e:14:64:1f:b0: 87:5e:4f:a2:8a:a9:ea:41:66:d7:e7:c2:0a:ca:f9:b7:1d:32: 39:f0:b3:f2:e6:40:f5:20:83:b2:41:a7:55:d8:b1:88:4b:e2: 78:6c:f7:a5:b6:77:89:9a:3b:e9:01:96:81:59:ea:0d:93:c2: 7f:3b:c6:20:59:01:91:0b:84:3c:df:82:51:83:35:73:64:28: 6e:a4:0c:c3:92:4a:55:8f:7b:7f:51:c7:c9:d5:b6:18:26:3d: 0b:27:dd:e0:7b:2d:63:7b:7f:66:b0:0d:3b:9a:34:50:06:7d: 5b:ca:68:6f:88:d1:ed:ca:12:04:f9:a4:e3:63:76:10:40:5d: 73:fc:a3:45:c7:b4:f5:06:a6:38:f4:26:11:2f:04:2f:5e:95: 36:ae:eb:32:84:9d:c7:d2:22:04:82:aa:9d:10:fb:14:1d:92: de:66:58:55:8a:a3:56:66:56:87:f5:20:35:fc:4b:38:06:31: 35:ab:50:93:05:27:59:f7:9f:b8:9f:e3:cb:73:40:d4:1e:2e: 7a:67:9d:33:c0:fc:5d:a4:9c:b9:72:05:d8:dd:fc:67:de:e8: 52:f4:6b:c4:42:7e:c7:09:2c:e3:a4:25:28:e9:ab:8e:1c:d3: c6:67:a5:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMDjzsBzdEYOxfnSpBIg+Z5vUhUgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyMVoX DTI3MDMwMzA2MDUyMVowMzExMC8GA1UEAxMoMjU0RjY1OUY0ODIyODA2MjIxREE2 QjgzREQ1NTRDMTcxMDk3RjIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJZ9sqsgZDyMfdLAVb/koTAfML5QzQAEbIbo3JVe4v1IfR6776w6qoPc2RN 1pBfcVDpTSTtw+LTdJH50tyxoCp9/RIvVOouNJazTNjZm0Wm+JpTjIu/fN3fI0gT 73Q+8vFn+Mx2gu30dOzwuG4m5vAK76lF17GXntuB3ii8anVgSR4xTvvqFDOwRO6U S7ZuUwghg7Bc8okTqtaOXRz4VXybeyG0TV9IsMS/Voi5ChQudC2IGTe8dcm3IHGY ELgCHCjFzjXwoNxopf17shztA3xi0kJI3ESbYjCTgO+EkyHO6cM06zIWZNNiTEYL Jb4M6fMsIafKy+78TlqkkIwukeMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQlT2Wf SCKAYiHaa4PdVUwXEJfyMzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjgzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oL0wDQYJKoZIhvcNAQELBQADggEBALsOD7IXAsN0bexTwNAuFGQfsIdeT6KKqepB ZtfnwgrK+bcdMjnws/LmQPUgg7JBp1XYsYhL4nhs96W2d4maO+kBloFZ6g2Twn87 xiBZAZELhDzfglGDNXNkKG6kDMOSSlWPe39Rx8nVthgmPQsn3eB7LWN7f2awDTua NFAGfVvKaG+I0e3KEgT5pONjdhBAXXP8o0XHtPUGpjj0JhEvBC9elTau6zKEncfS IgSCqp0Q+xQdkt5mWFWKo1ZmVof1IDX8SzgGMTWrUJMFJ1n3n7if48tzQNQeLnpn nTPA/F2knLlyBdjd/Gfe6FL0a8RCfscJLOOkJSjpq44c08ZnpbQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:31 2026 by rpki-client