$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142853.roa File: AS142853.roa (raw, json) Hash identifier: oKsKsv2kx4L65MxTAB4qYss6otM7k2XCAubUB4b+yIE= Subject key identifier: B1:58:93:56:22:33:89:5E:C3:02:6F:EA:8E:98:6B:37:AD:CF:1E:F9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 61EBF9E93E6C1D4603160438F718CC7D139A6F48 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142853.roa Signing time: Wed 04 Mar 2026 06:06:23 +0000 ROA not before: Wed 04 Mar 2026 06:01:23 +0000 ROA not after: Wed 03 Mar 2027 06:06:23 +0000 asID: 142853 IP address blocks: 240a:a0cb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:eb:f9:e9:3e:6c:1d:46:03:16:04:38:f7:18:cc:7d:13:9a:6f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:23 2026 GMT Not After : Mar 3 06:06:23 2027 GMT Subject: CN=B15893562233895EC3026FEA8E986B37ADCF1EF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:be:03:28:31:75:b7:f8:8d:6c:b3:ec:ac: a7:de:6a:c3:ff:d3:33:c4:22:c8:a4:8c:5a:e7:6d: 54:be:99:0b:95:05:f1:3c:55:d0:79:0d:ae:44:5f: 67:02:32:2b:ec:67:1e:1f:d4:35:ca:d6:23:50:e4: c1:94:2b:c1:0e:09:f5:0f:7a:31:dd:63:93:70:59: 0d:a5:d8:dc:f5:8f:d3:e9:f7:51:b9:2b:e4:c2:e2: 84:c8:ec:e7:a8:a4:38:bc:49:fc:5d:50:62:92:e7: 8e:dd:d2:3a:42:4f:b7:b7:e4:bc:17:e9:ca:bf:d9: 14:b2:ca:a9:e5:62:85:7c:8c:c8:c4:e3:ed:69:95: 06:1b:60:5f:48:eb:76:1c:62:8d:fb:39:7c:cc:31: bb:4c:f9:58:32:e0:e1:07:20:52:81:a5:89:3a:20: ba:47:2b:67:ae:e3:a4:eb:b3:20:ab:43:a9:60:c4: da:2a:74:d1:ed:18:f7:d0:75:ee:62:c0:c2:03:fd: 45:c3:d1:bc:0e:14:f3:4b:eb:03:1f:88:9f:c1:fd: 94:38:e0:8f:78:a3:26:8b:31:9e:6b:5f:25:f3:3c: 03:f7:25:a4:af:a1:ed:81:ee:ba:df:14:6f:63:6d: 27:66:90:bf:a7:65:eb:ef:87:6f:31:00:82:99:78: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:58:93:56:22:33:89:5E:C3:02:6F:EA:8E:98:6B:37:AD:CF:1E:F9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142853.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0cb::/32 Signature Algorithm: sha256WithRSAEncryption 72:20:de:e4:26:74:ff:93:9d:3f:bc:d3:c6:26:6b:8b:7c:f2: e4:da:c2:06:c9:33:cb:ce:11:82:86:b9:88:70:d1:0c:cc:56: c4:dc:66:ed:7c:b3:4b:70:dc:01:4c:20:13:d0:11:c4:0e:ea: ec:38:56:af:b7:3e:a7:bd:c8:b8:4e:79:91:16:e0:af:de:d8: 15:be:0c:ba:ad:a3:f2:59:82:a7:7b:cf:1b:6d:d6:38:93:67: 4d:04:ad:06:53:87:08:82:1a:17:16:72:ca:89:b0:3f:06:94: 03:5f:2a:c1:f4:5a:43:ce:e2:0b:a4:0d:a2:a1:85:cd:72:04: 66:e1:d9:50:06:30:57:a9:16:1a:7d:4d:36:83:c6:3b:a2:3a: 21:c6:38:72:db:31:f7:ad:16:12:fe:42:45:0a:00:7a:c9:48: 8b:7e:4b:e8:47:27:4a:fd:54:fc:3c:a4:d8:79:93:1a:47:57: 39:bd:ca:0a:fb:89:cc:92:3f:e2:94:f2:26:f4:e8:60:d1:5d: 96:71:cc:df:93:3a:30:2f:9d:6b:dd:a1:09:70:c1:2b:a3:d6: de:98:fa:f1:e1:c6:59:d9:84:84:91:01:ac:69:d8:b6:76:d4: 7e:ac:43:d7:f6:5c:dc:c9:cc:1f:3e:ce:e6:1e:72:cc:22:24: 4b:c4:d4:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYev56T5sHUYDFgQ49xjMfROab0gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyM1oX DTI3MDMwMzA2MDYyM1owMzExMC8GA1UEAxMoQjE1ODkzNTYyMjMzODk1RUMzMDI2 RkVBOEU5ODZCMzdBRENGMUVGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQ/vgMoMXW3+I1ss+ysp95qw//TM8QiyKSMWudtVL6ZC5UF8TxV0HkNrkRf ZwIyK+xnHh/UNcrWI1DkwZQrwQ4J9Q96Md1jk3BZDaXY3PWP0+n3Ubkr5MLihMjs 56ikOLxJ/F1QYpLnjt3SOkJPt7fkvBfpyr/ZFLLKqeVihXyMyMTj7WmVBhtgX0jr dhxijfs5fMwxu0z5WDLg4QcgUoGliTogukcrZ67jpOuzIKtDqWDE2ip00e0Y99B1 7mLAwgP9RcPRvA4U80vrAx+In8H9lDjgj3ijJosxnmtfJfM8A/clpK+h7YHuut8U b2NtJ2aQv6dl6++HbzEAgpl4plUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSxWJNW IjOJXsMCb+qOmGs3rc8e+TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oMswDQYJKoZIhvcNAQELBQADggEBAHIg3uQmdP+TnT+808Yma4t88uTawgbJM8vO EYKGuYhw0QzMVsTcZu18s0tw3AFMIBPQEcQO6uw4Vq+3Pqe9yLhOeZEW4K/e2BW+ DLqto/JZgqd7zxtt1jiTZ00ErQZThwiCGhcWcsqJsD8GlANfKsH0WkPO4gukDaKh hc1yBGbh2VAGMFepFhp9TTaDxjuiOiHGOHLbMfetFhL+QkUKAHrJSIt+S+hHJ0r9 VPw8pNh5kxpHVzm9ygr7icySP+KU8ib06GDRXZZxzN+TOjAvnWvdoQlwwSuj1t6Y +vHhxlnZhISRAaxp2LZ21H6sQ9f2XNzJzB8+zuYecswiJEvE1NM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:37 2026 by rpki-client