$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142840.roa File: AS142840.roa (raw, json) Hash identifier: gWQfnDIP8gzoAONUflQDZnvCWp6GHGYCTIyjmoS8TwQ= Subject key identifier: 55:9B:79:61:A4:2E:31:9B:C8:6F:9F:7A:FD:FA:D0:D9:33:19:58:9A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2622E949AC9C99BB94ACD24A0EFB23784B5ABB10 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142840.roa Signing time: Wed 04 Mar 2026 06:05:43 +0000 ROA not before: Wed 04 Mar 2026 06:00:43 +0000 ROA not after: Wed 03 Mar 2027 06:05:43 +0000 asID: 142840 IP address blocks: 240a:a0be::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:22:e9:49:ac:9c:99:bb:94:ac:d2:4a:0e:fb:23:78:4b:5a:bb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:43 2026 GMT Not After : Mar 3 06:05:43 2027 GMT Subject: CN=559B7961A42E319BC86F9F7AFDFAD0D93319589A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:3c:b4:c9:df:45:e0:7b:75:96:95:72:90: f0:a3:66:dc:f4:b9:fe:f3:c4:de:ab:81:0a:4d:6a: 44:6c:e2:93:e7:07:b9:00:74:1c:10:04:48:bd:57: 1b:28:8f:38:3c:e5:82:18:a7:30:69:94:f8:af:84: 60:de:c9:f9:7d:57:bd:30:cb:cd:e0:d5:2d:40:d9: 85:ca:cf:d8:f4:e4:a4:d8:0f:dd:60:8c:59:7a:47: 13:64:f4:c7:57:4c:00:9d:4a:8e:07:f2:ee:69:6d: fb:be:1f:86:3e:99:7d:78:d4:2e:f3:c5:9a:ce:6d: d4:0f:5c:51:14:e8:c5:30:ac:d3:75:2a:64:75:ac: 6c:cf:d8:bf:81:8e:e3:7d:65:68:7b:e7:f7:5d:4b: 78:98:cf:5d:f6:56:3b:e3:d6:9a:3f:2f:02:18:b6: 1a:9a:3f:41:d6:4f:7f:ef:41:46:ec:fb:97:bd:76: bc:e0:9f:95:c6:64:cb:8c:db:19:37:5b:6a:40:02: 72:43:1a:c6:6e:25:95:f5:6a:04:1d:a6:68:ff:a4: fd:27:7a:02:93:8b:7f:5a:3e:d7:24:63:c8:03:ab: c5:81:0d:94:c7:49:fb:d2:1d:30:fd:e7:f6:e3:d5: 32:50:43:47:06:0d:69:e5:9d:07:b4:70:71:0e:3a: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9B:79:61:A4:2E:31:9B:C8:6F:9F:7A:FD:FA:D0:D9:33:19:58:9A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142840.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0be::/32 Signature Algorithm: sha256WithRSAEncryption 9b:88:dc:62:04:b7:de:95:32:a3:6a:e5:47:fe:e6:8b:75:61: a2:e0:b1:a2:c6:56:65:c4:10:66:d7:f4:b1:b4:b1:87:f9:3b: 4d:4e:cc:46:9d:83:61:40:82:b0:5c:7c:96:37:8d:35:9f:0d: ed:25:45:b8:bf:79:b8:d9:a5:11:6b:d6:b0:79:69:d8:4f:4b: d6:73:d7:e2:de:a3:db:a7:a2:fe:49:0a:45:76:b4:22:d8:cd: 61:93:2d:29:07:ea:19:f3:b9:8b:df:6a:86:fe:39:54:9c:4e: 5c:ef:dc:d8:2c:bd:f3:45:43:c3:a1:dd:8f:aa:a2:4e:5f:23: 65:b0:29:cd:b3:6f:bf:c2:ce:dd:47:22:94:de:86:86:f5:cb: ce:02:d1:63:27:41:bc:40:c8:b6:20:a8:99:83:87:0a:b8:88: 78:4c:d1:29:85:88:35:a5:df:83:57:e1:18:48:0c:5f:e6:8c: 30:7f:66:7c:0d:cc:89:e2:32:b1:95:3e:af:aa:1f:db:9c:12: 6d:45:2d:1c:ec:2b:0f:62:ca:6c:51:4b:2b:22:4c:27:b8:23: e0:c2:bd:e3:ee:f2:6c:3d:9b:ad:74:d3:b0:b4:5d:5b:9b:27: 2a:1e:b1:5f:1f:49:21:50:09:f8:9d:76:72:5e:5d:de:29:2d: 71:07:08:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJiLpSaycmbuUrNJKDvsjeEtauxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0M1oX DTI3MDMwMzA2MDU0M1owMzExMC8GA1UEAxMoNTU5Qjc5NjFBNDJFMzE5QkM4NkY5 RjdBRkRGQUQwRDkzMzE5NTg5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMobPLTJ30Xge3WWlXKQ8KNm3PS5/vPE3quBCk1qRGzik+cHuQB0HBAESL1X GyiPODzlghinMGmU+K+EYN7J+X1XvTDLzeDVLUDZhcrP2PTkpNgP3WCMWXpHE2T0 x1dMAJ1Kjgfy7mlt+74fhj6ZfXjULvPFms5t1A9cURToxTCs03UqZHWsbM/Yv4GO 431laHvn911LeJjPXfZWO+PWmj8vAhi2Gpo/QdZPf+9BRuz7l712vOCflcZky4zb GTdbakACckMaxm4llfVqBB2maP+k/Sd6ApOLf1o+1yRjyAOrxYENlMdJ+9IdMP3n 9uPVMlBDRwYNaeWdB7RwcQ46Vw8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRVm3lh pC4xm8hvn3r9+tDZMxlYmjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oL4wDQYJKoZIhvcNAQELBQADggEBAJuI3GIEt96VMqNq5Uf+5ot1YaLgsaLGVmXE EGbX9LG0sYf5O01OzEadg2FAgrBcfJY3jTWfDe0lRbi/ebjZpRFr1rB5adhPS9Zz 1+Leo9unov5JCkV2tCLYzWGTLSkH6hnzuYvfaob+OVScTlzv3NgsvfNFQ8Oh3Y+q ok5fI2WwKc2zb7/Czt1HIpTehob1y84C0WMnQbxAyLYgqJmDhwq4iHhM0SmFiDWl 34NX4RhIDF/mjDB/ZnwNzIniMrGVPq+qH9ucEm1FLRzsKw9iymxRSysiTCe4I+DC vePu8mw9m61007C0XVubJyoesV8fSSFQCfiddnJeXd4pLXEHCOQ= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:38 2026 by rpki-client