$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142846.roa File: AS142846.roa (raw, json) Hash identifier: bHq11wcfoLvuujUH1c3oZVtnXbLTT4quBqI+8wyAG58= Subject key identifier: 69:2C:1A:F8:22:3A:1C:99:29:DC:30:92:1D:B9:E0:91:69:55:99:98 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7002BA602B59E4649A429002CF57B02E65B44695 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142846.roa Signing time: Wed 04 Mar 2026 06:07:22 +0000 ROA not before: Wed 04 Mar 2026 06:02:22 +0000 ROA not after: Wed 03 Mar 2027 06:07:22 +0000 asID: 142846 IP address blocks: 240a:a0c4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:02:ba:60:2b:59:e4:64:9a:42:90:02:cf:57:b0:2e:65:b4:46:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:22 2026 GMT Not After : Mar 3 06:07:22 2027 GMT Subject: CN=692C1AF8223A1C9929DC30921DB9E09169559998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:fa:84:5b:e3:ff:8a:87:54:d8:2f:ca:de: ad:e2:dd:de:07:0d:5c:bd:84:0d:62:04:00:03:8b: dd:5f:b5:a1:d3:61:d1:2e:92:f8:1a:58:9b:7a:34: e6:00:65:5b:02:a9:49:2c:74:14:49:cf:d0:4d:a5: 3b:08:aa:a2:fc:22:fb:f2:94:c9:b6:ae:70:21:0c: ef:03:b6:78:74:3f:d2:44:53:37:9f:12:28:3c:37: 7a:5b:50:24:38:0f:b7:95:a2:af:15:d7:2d:bf:a2: 9f:95:2d:34:ce:07:75:ac:b4:11:fb:55:91:8e:7e: 50:f4:19:ad:e5:eb:c2:10:fd:ca:40:1d:97:ad:6a: 4c:4b:6d:f0:63:6d:33:e9:a8:f3:95:c4:ea:b2:09: d6:1a:d5:c2:e3:be:60:52:10:64:1e:ad:8d:7f:df: f5:23:52:c3:90:0e:6b:84:4c:25:6b:b5:5a:0a:7f: 72:d1:87:6d:04:3f:e5:e4:59:95:01:57:5d:9e:b5: fe:63:d8:61:0c:8a:c9:85:f5:40:59:24:74:7b:d2: 1e:15:8a:86:39:64:f6:f4:83:d1:83:ab:69:c3:7c: 79:19:ed:a4:f1:ac:ab:4b:4d:71:a7:ae:58:66:66: e1:23:65:9e:f4:4a:b8:71:c0:09:61:df:b9:08:ed: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2C:1A:F8:22:3A:1C:99:29:DC:30:92:1D:B9:E0:91:69:55:99:98 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142846.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0c4::/32 Signature Algorithm: sha256WithRSAEncryption 5e:a7:4b:47:23:62:89:11:d7:14:e7:1c:97:8e:12:ef:b7:93: 54:c1:4d:a7:fd:10:7d:37:a4:0d:9b:3c:e1:6a:dd:f0:9c:87: 0e:bc:54:fa:29:78:a1:55:e2:ba:90:d3:20:bb:e5:ee:f2:39: 14:06:c8:33:a5:7b:88:1b:7b:d5:94:f3:fb:1c:a9:63:0d:f1: 40:08:6f:6b:48:ca:cd:8a:e7:75:ce:a7:32:47:27:26:11:82: 3b:e3:ba:55:b3:ab:23:32:2b:57:fa:a8:5f:51:de:bd:1d:a3: 89:ad:52:db:ac:4b:64:6a:89:1f:8e:62:7a:12:98:c9:3d:e5: 2c:d5:d0:84:ff:be:da:64:a6:b9:49:52:30:20:68:de:81:ef: 9f:62:06:c1:33:f1:cc:14:b3:ee:d0:0e:95:ab:3b:87:cc:d6: 0a:59:64:a7:a7:85:40:9b:b5:a1:b9:75:e3:bb:35:8d:3d:4d: 7d:72:67:7f:b2:bf:c6:83:a6:0e:04:c9:87:ae:f4:dc:e3:32: 64:c7:4d:86:4f:19:81:b3:e9:26:ca:06:a2:f1:15:39:76:b4: 53:90:6d:3c:e6:aa:32:aa:9a:b9:04:b2:1f:07:e6:d9:3f:6f: 76:6b:45:9c:9a:6d:e7:c9:04:75:ad:d5:58:da:16:d9:7c:8c: c7:a3:ec:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcAK6YCtZ5GSaQpACz1ewLmW0RpUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyMloX DTI3MDMwMzA2MDcyMlowMzExMC8GA1UEAxMoNjkyQzFBRjgyMjNBMUM5OTI5REMz MDkyMURCOUUwOTE2OTU1OTk5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI9Y+oRb4/+Kh1TYL8rereLd3gcNXL2EDWIEAAOL3V+1odNh0S6S+BpYm3o0 5gBlWwKpSSx0FEnP0E2lOwiqovwi+/KUybaucCEM7wO2eHQ/0kRTN58SKDw3eltQ JDgPt5WirxXXLb+in5UtNM4Hday0EftVkY5+UPQZreXrwhD9ykAdl61qTEtt8GNt M+mo85XE6rIJ1hrVwuO+YFIQZB6tjX/f9SNSw5AOa4RMJWu1Wgp/ctGHbQQ/5eRZ lQFXXZ61/mPYYQyKyYX1QFkkdHvSHhWKhjlk9vSD0YOracN8eRntpPGsq0tNcaeu WGZm4SNlnvRKuHHACWHfuQjtM0ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRpLBr4 IjocmSncMJIdueCRaVWZmDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oMQwDQYJKoZIhvcNAQELBQADggEBAF6nS0cjYokR1xTnHJeOEu+3k1TBTaf9EH03 pA2bPOFq3fCchw68VPopeKFV4rqQ0yC75e7yORQGyDOle4gbe9WU8/scqWMN8UAI b2tIys2K53XOpzJHJyYRgjvjulWzqyMyK1f6qF9R3r0do4mtUtusS2RqiR+OYnoS mMk95SzV0IT/vtpkprlJUjAgaN6B759iBsEz8cwUs+7QDpWrO4fM1gpZZKenhUCb taG5deO7NY09TX1yZ3+yv8aDpg4EyYeu9NzjMmTHTYZPGYGz6SbKBqLxFTl2tFOQ bTzmqjKqmrkEsh8H5tk/b3ZrRZyabefJBHWt1VjaFtl8jMej7Go= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:39 2026 by rpki-client