$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142843.roa File: AS142843.roa (raw, json) Hash identifier: 7wSC8Qc/YYUtGLY0p+yfllI2zfmDqjZwxnOP2U9G/L0= Subject key identifier: 8F:08:44:14:24:A4:EC:D2:6B:50:71:7F:9F:52:7A:20:5C:B3:09:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 270CBAA061153A2ADF8A8D9EB5554C3E94D88ECF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142843.roa Signing time: Wed 04 Mar 2026 06:05:47 +0000 ROA not before: Wed 04 Mar 2026 06:00:47 +0000 ROA not after: Wed 03 Mar 2027 06:05:47 +0000 asID: 142843 IP address blocks: 240a:a0c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0c:ba:a0:61:15:3a:2a:df:8a:8d:9e:b5:55:4c:3e:94:d8:8e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:47 2026 GMT Not After : Mar 3 06:05:47 2027 GMT Subject: CN=8F08441424A4ECD26B50717F9F527A205CB30901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:a0:7a:0e:22:cb:bd:67:1f:06:2e:53:80: 8a:6c:72:ae:bc:38:90:87:3a:dd:08:fd:e3:22:e8: e7:a3:49:18:ce:64:4a:58:79:1f:cf:43:05:06:ee: ee:14:52:72:83:4f:80:fc:5a:30:7c:22:64:45:8b: 12:a2:f7:92:47:fc:a0:e1:0a:e0:da:b5:68:8d:c3: 5f:fb:d1:71:ca:e8:0b:e6:36:37:72:04:09:ac:db: fd:27:fc:1e:87:08:1f:f9:2c:0a:df:b4:b6:11:66: 35:f2:47:98:42:46:08:27:60:3d:55:f3:64:37:5a: fc:f2:6d:75:5f:ca:92:d1:e4:7a:c7:b9:60:bf:93: f5:3e:81:2e:34:75:a1:2a:0c:14:54:f0:02:25:ec: 8a:a3:4d:f2:8b:b4:c3:cf:7e:60:96:ff:80:71:fe: d4:93:41:43:0f:a3:55:20:01:df:a8:4e:b2:eb:40: 3f:eb:a8:1a:ce:7f:b4:1b:5b:62:f2:ea:5c:c1:81: a9:5e:23:66:7a:19:c4:20:3b:a7:54:b2:e0:67:9f: 7d:0f:8a:9d:4d:25:af:8a:fb:85:83:30:73:32:87: 14:e7:02:20:ee:a8:70:48:98:31:b0:8a:1b:38:35: f5:77:b8:5c:a3:7f:7c:b7:1e:3e:7a:ec:65:29:de: 5e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:08:44:14:24:A4:EC:D2:6B:50:71:7F:9F:52:7A:20:5C:B3:09:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0c1::/32 Signature Algorithm: sha256WithRSAEncryption 16:0f:bc:f6:ee:73:5c:fb:17:f0:65:12:35:8b:7b:1a:60:e1: 7e:d6:bb:4c:6f:81:6d:62:65:37:6d:19:4c:0e:c5:8e:05:23: d3:bf:bf:a9:f7:70:2d:34:db:32:93:c3:16:16:c7:af:ff:82: 3d:5b:4e:7a:c4:f9:6f:9a:fb:d6:16:56:10:37:85:6d:5d:cd: 88:22:d9:7f:3b:12:14:1e:c2:03:0a:45:84:8a:ed:8b:45:1a: 84:eb:4d:82:6d:74:88:63:db:2c:f4:0e:2b:30:78:3f:51:a3: be:f7:38:e8:9b:27:25:8d:96:69:59:da:c3:f4:e3:72:3b:b5: 3a:f3:b4:9e:16:07:7d:01:00:eb:c7:63:dc:1d:bd:92:d3:2d: 01:a8:7c:d6:66:5e:8d:2d:d6:8d:20:81:f4:d2:af:05:86:32: ff:26:52:8f:55:7f:56:9a:34:92:e9:56:0c:ac:7e:6b:19:c3: e5:c9:eb:01:65:b1:3c:67:73:12:48:6e:7a:e3:e7:07:22:2c: 4e:1a:59:d5:d5:42:58:58:13:c3:83:8e:71:d9:f5:b6:7d:0d: 07:d2:66:6a:94:cd:62:7e:18:7f:d9:52:45:d9:b5:c2:df:8e: 6c:8e:68:22:86:da:b0:65:e3:48:10:b8:8f:15:dc:3e:8a:1d: 03:fe:51:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJwy6oGEVOirfio2etVVMPpTYjs8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0N1oX DTI3MDMwMzA2MDU0N1owMzExMC8GA1UEAxMoOEYwODQ0MTQyNEE0RUNEMjZCNTA3 MTdGOUY1MjdBMjA1Q0IzMDkwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALH7oHoOIsu9Zx8GLlOAimxyrrw4kIc63Qj94yLo56NJGM5kSlh5H89DBQbu 7hRScoNPgPxaMHwiZEWLEqL3kkf8oOEK4Nq1aI3DX/vRccroC+Y2N3IECazb/Sf8 HocIH/ksCt+0thFmNfJHmEJGCCdgPVXzZDda/PJtdV/KktHkese5YL+T9T6BLjR1 oSoMFFTwAiXsiqNN8ou0w89+YJb/gHH+1JNBQw+jVSAB36hOsutAP+uoGs5/tBtb YvLqXMGBqV4jZnoZxCA7p1Sy4GeffQ+KnU0lr4r7hYMwczKHFOcCIO6ocEiYMbCK Gzg19Xe4XKN/fLcePnrsZSneXnsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSPCEQU JKTs0mtQcX+fUnogXLMJATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oMEwDQYJKoZIhvcNAQELBQADggEBABYPvPbuc1z7F/BlEjWLexpg4X7Wu0xvgW1i ZTdtGUwOxY4FI9O/v6n3cC002zKTwxYWx6//gj1bTnrE+W+a+9YWVhA3hW1dzYgi 2X87EhQewgMKRYSK7YtFGoTrTYJtdIhj2yz0DisweD9Ro773OOibJyWNlmlZ2sP0 43I7tTrztJ4WB30BAOvHY9wdvZLTLQGofNZmXo0t1o0ggfTSrwWGMv8mUo9Vf1aa NJLpVgysfmsZw+XJ6wFlsTxncxJIbnrj5wciLE4aWdXVQlhYE8ODjnHZ9bZ9DQfS ZmqUzWJ+GH/ZUkXZtcLfjmyOaCKG2rBl40gQuI8V3D6KHQP+UXg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:10 2026 by rpki-client