$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142848.roa File: AS142848.roa (raw, json) Hash identifier: CX7SfzIAFwQaSmkRM9OBxFx4TydN3jqVumuDa4ggqj4= Subject key identifier: 4B:87:06:0C:A3:73:57:9B:D1:00:77:B2:88:86:04:10:7F:62:16:B1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2B2A72B1E161664FDB737635F1D556859E61C602 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142848.roa Signing time: Wed 04 Mar 2026 06:06:15 +0000 ROA not before: Wed 04 Mar 2026 06:01:15 +0000 ROA not after: Wed 03 Mar 2027 06:06:15 +0000 asID: 142848 IP address blocks: 240a:a0c6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2a:72:b1:e1:61:66:4f:db:73:76:35:f1:d5:56:85:9e:61:c6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:15 2026 GMT Not After : Mar 3 06:06:15 2027 GMT Subject: CN=4B87060CA373579BD10077B2888604107F6216B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:a3:f4:ec:64:23:96:eb:20:44:39:23:0f: d3:36:3b:ed:2f:8f:94:c5:b1:7f:6d:81:4a:9f:b5: df:be:53:a3:3f:7a:bd:c5:78:5c:db:cc:b3:c8:ec: 2e:66:44:29:95:8f:26:c6:86:fc:2a:ce:51:71:54: ff:45:13:24:03:8e:49:a5:f8:10:2b:2d:91:56:9e: 1a:e4:f9:57:0c:ee:56:58:8b:76:6e:43:cf:0c:95: c7:1b:59:bc:bf:80:e3:b9:3d:1b:cb:1e:b9:c4:1d: 78:c9:8f:b4:e3:83:b5:56:1c:94:a0:a4:48:c8:be: 1e:74:2b:90:3a:e6:cb:19:d3:fd:ec:b1:a4:29:44: f7:09:71:3a:f6:50:f4:f4:b1:ba:2b:c6:2d:47:15: 91:c8:41:56:6e:10:ed:cf:bb:0f:bc:08:c1:95:60: 6d:dd:2b:e2:a6:dd:35:08:d2:b0:d9:6c:df:b6:64: 0d:75:4c:04:be:ea:fd:c3:d8:e7:79:af:0f:fc:19: 96:4f:78:8b:82:2b:a9:cc:54:aa:d6:c2:e0:bf:bd: 13:10:f0:09:b6:68:9e:fd:1a:0e:ca:87:05:b2:5e: 59:f5:e2:2e:33:6f:0a:b1:52:f8:32:74:9c:3e:bd: b1:15:77:40:41:30:b2:2b:a6:ea:ed:c4:95:b2:34: db:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:87:06:0C:A3:73:57:9B:D1:00:77:B2:88:86:04:10:7F:62:16:B1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0c6::/32 Signature Algorithm: sha256WithRSAEncryption 8c:39:64:f5:8d:50:a9:09:09:d4:18:71:bd:27:10:cf:0e:30: 70:c7:cf:c2:e8:47:4b:20:c3:1d:c0:cf:f9:81:93:5e:3e:ad: 8b:d7:81:df:13:d4:80:6d:81:c9:4d:85:44:7d:2b:52:0f:4a: 71:ce:5c:d3:87:1b:b4:d0:5c:33:16:85:63:b9:83:91:ee:cf: 45:e0:f8:a3:46:ad:b7:7c:9b:7f:79:9d:db:5e:a6:53:ca:40: 73:40:56:7e:ea:56:39:fe:cc:c0:c0:35:d7:e7:34:e5:0c:bc: d5:11:02:6c:5e:39:fc:62:54:1a:26:36:69:e0:4e:6c:25:3b: d2:43:1e:d2:ab:73:5d:b1:d1:12:0f:a1:1b:13:b4:3e:b7:7e: aa:5c:88:c9:d7:05:4e:c2:92:e0:f9:3f:ad:b8:a9:a3:ef:08: d4:d0:b1:3b:a6:65:e0:c1:d8:54:7e:d0:2c:f5:1a:d9:74:45: 82:df:9d:83:a4:1a:88:b2:3c:1b:a5:31:2b:99:bd:1b:6b:9b: cb:9b:34:ea:96:bb:c4:44:e5:06:12:d2:7a:a9:f7:03:d4:1d: 08:fa:6e:8f:d2:50:a5:31:18:c0:b9:27:ef:ec:a9:e2:28:62: 32:b3:2d:9c:29:68:a5:f4:b5:6c:b2:22:ac:71:7c:6e:dc:9f: ac:b7:33:a2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKypyseFhZk/bc3Y18dVWhZ5hxgIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExNVoX DTI3MDMwMzA2MDYxNVowMzExMC8GA1UEAxMoNEI4NzA2MENBMzczNTc5QkQxMDA3 N0IyODg4NjA0MTA3RjYyMTZCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPOo/TsZCOW6yBEOSMP0zY77S+PlMWxf22BSp+1375Toz96vcV4XNvMs8js LmZEKZWPJsaG/CrOUXFU/0UTJAOOSaX4ECstkVaeGuT5VwzuVliLdm5DzwyVxxtZ vL+A47k9G8seucQdeMmPtOODtVYclKCkSMi+HnQrkDrmyxnT/eyxpClE9wlxOvZQ 9PSxuivGLUcVkchBVm4Q7c+7D7wIwZVgbd0r4qbdNQjSsNls37ZkDXVMBL7q/cPY 53mvD/wZlk94i4IrqcxUqtbC4L+9ExDwCbZonv0aDsqHBbJeWfXiLjNvCrFS+DJ0 nD69sRV3QEEwsium6u3ElbI02wMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRLhwYM o3NXm9EAd7KIhgQQf2IWsTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oMYwDQYJKoZIhvcNAQELBQADggEBAIw5ZPWNUKkJCdQYcb0nEM8OMHDHz8LoR0sg wx3Az/mBk14+rYvXgd8T1IBtgclNhUR9K1IPSnHOXNOHG7TQXDMWhWO5g5Huz0Xg +KNGrbd8m395ndteplPKQHNAVn7qVjn+zMDANdfnNOUMvNURAmxeOfxiVBomNmng TmwlO9JDHtKrc12x0RIPoRsTtD63fqpciMnXBU7CkuD5P624qaPvCNTQsTumZeDB 2FR+0Cz1Gtl0RYLfnYOkGoiyPBulMSuZvRtrm8ubNOqWu8RE5QYS0nqp9wPUHQj6 bo/SUKUxGMC5J+/sqeIoYjKzLZwpaKX0tWyyIqxxfG7cn6y3M6I= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:46 2026 by rpki-client