$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142841.roa File: AS142841.roa (raw, json) Hash identifier: BL27GGzZELCVqSoIYLRYvOnuxx579pVZu+A8LHMoENc= Subject key identifier: C3:13:A5:B6:08:CE:C8:E5:21:5D:F7:87:43:78:95:FE:34:A0:D0:E1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3274DF8247815429009B7E0429EE162F3DA8B36B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142841.roa Signing time: Wed 04 Mar 2026 06:07:32 +0000 ROA not before: Wed 04 Mar 2026 06:02:32 +0000 ROA not after: Wed 03 Mar 2027 06:07:32 +0000 asID: 142841 IP address blocks: 240a:a0bf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:74:df:82:47:81:54:29:00:9b:7e:04:29:ee:16:2f:3d:a8:b3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:32 2026 GMT Not After : Mar 3 06:07:32 2027 GMT Subject: CN=C313A5B608CEC8E5215DF787437895FE34A0D0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:2c:d3:97:78:8f:05:46:d6:8e:20:8c:18: 01:73:d5:9b:14:48:28:7d:d1:86:93:e6:ca:f3:5f: 4c:22:23:b4:71:97:0f:9b:33:61:45:5c:76:1b:27: f5:39:e7:88:a6:fc:52:67:61:3f:1f:8a:e7:8f:ee: 26:32:86:b3:4d:35:47:48:24:66:63:78:05:22:ab: dc:23:c3:1a:22:e2:79:69:58:a7:91:5d:00:b3:b7: 99:fd:1d:55:15:62:c9:bf:01:09:62:1b:73:81:a4: 0e:93:6c:d1:20:cc:6d:89:8e:80:72:c4:bb:2b:a5: 4a:c6:ba:76:3b:04:bd:d8:32:e8:0e:fd:6a:8c:56: 6b:b4:1a:d3:9c:66:e5:fc:4e:8a:a8:3e:87:4f:67: 36:31:2e:4a:4d:d5:dd:1f:14:66:0f:37:d9:c3:b1: 82:e8:9f:c2:62:fc:69:34:d6:6e:fb:c2:78:62:e6: 65:24:6a:4f:5d:70:56:26:a6:a4:4c:8f:ec:b9:31: 5e:52:28:d6:5d:4f:ed:d7:d1:0d:68:d7:ea:93:cf: 07:f2:2d:54:ee:33:a9:12:84:8d:5e:9e:a1:a9:1c: 0a:55:ea:ff:17:40:42:8c:d4:5c:d8:c8:42:1b:2f: 3e:8b:6e:4d:8d:4f:a7:6d:fa:e9:77:61:ac:da:86: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:13:A5:B6:08:CE:C8:E5:21:5D:F7:87:43:78:95:FE:34:A0:D0:E1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0bf::/32 Signature Algorithm: sha256WithRSAEncryption a6:dc:22:75:d5:cc:a9:da:cf:51:cb:20:81:2d:e0:bc:7f:5d: 4f:87:30:7e:05:04:a4:b0:ad:2e:72:59:c2:2b:18:ef:f7:ab: 48:56:63:0c:64:52:5c:11:40:fd:38:88:95:69:a0:27:72:a7: fd:78:02:8a:6e:e6:42:90:dd:a5:73:de:8e:a6:1e:fd:9f:83: 76:c6:53:48:b3:1a:49:17:c3:03:43:84:65:13:e5:e9:77:9f: d5:64:8a:b1:8d:25:5b:da:bd:56:73:23:8d:88:fb:7e:cc:a6: 60:58:52:74:f4:2d:c2:13:92:c7:ca:a9:27:40:c3:3d:54:b8: dd:da:d5:9f:a1:24:99:85:d9:62:06:0c:4b:1d:67:0c:f4:23: 60:5f:fe:f7:f9:99:76:c6:ef:50:08:a5:ea:7f:c3:55:a9:11: f9:6d:99:dc:8d:99:26:d2:02:45:06:0e:63:ef:50:84:82:17: 1a:1a:0e:44:07:0d:bb:92:60:aa:da:d6:bb:65:48:74:ff:c4: 8c:e6:70:1c:b4:22:7c:76:30:e7:d1:b0:12:03:9e:93:f6:c2: 89:9a:f1:0c:12:56:46:98:80:4e:67:83:ca:ae:b6:49:ed:89: c4:6a:09:c6:79:4a:93:7d:9f:ad:7d:62:26:90:46:fb:27:b7: 27:ca:71:9b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMnTfgkeBVCkAm34EKe4WLz2os2swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzMloX DTI3MDMwMzA2MDczMlowMzExMC8GA1UEAxMoQzMxM0E1QjYwOENFQzhFNTIxNURG Nzg3NDM3ODk1RkUzNEEwRDBFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOCYLNOXeI8FRtaOIIwYAXPVmxRIKH3RhpPmyvNfTCIjtHGXD5szYUVcdhsn 9TnniKb8UmdhPx+K54/uJjKGs001R0gkZmN4BSKr3CPDGiLieWlYp5FdALO3mf0d VRViyb8BCWIbc4GkDpNs0SDMbYmOgHLEuyulSsa6djsEvdgy6A79aoxWa7Qa05xm 5fxOiqg+h09nNjEuSk3V3R8UZg832cOxguifwmL8aTTWbvvCeGLmZSRqT11wViam pEyP7LkxXlIo1l1P7dfRDWjX6pPPB/ItVO4zqRKEjV6eoakcClXq/xdAQozUXNjI QhsvPotuTY1Pp2366XdhrNqGY10CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTDE6W2 CM7I5SFd94dDeJX+NKDQ4TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oL8wDQYJKoZIhvcNAQELBQADggEBAKbcInXVzKnaz1HLIIEt4Lx/XU+HMH4FBKSw rS5yWcIrGO/3q0hWYwxkUlwRQP04iJVpoCdyp/14Aopu5kKQ3aVz3o6mHv2fg3bG U0izGkkXwwNDhGUT5el3n9VkirGNJVvavVZzI42I+37MpmBYUnT0LcITksfKqSdA wz1UuN3a1Z+hJJmF2WIGDEsdZwz0I2Bf/vf5mXbG71AIpep/w1WpEfltmdyNmSbS AkUGDmPvUISCFxoaDkQHDbuSYKra1rtlSHT/xIzmcBy0Inx2MOfRsBIDnpP2woma 8QwSVkaYgE5ng8qutknticRqCcZ5SpN9n619YiaQRvsntyfKcZs= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:47 2026 by rpki-client