$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142857.roa File: AS142857.roa (raw, json) Hash identifier: WmmcFL7e+xGy8mEIfcpoVam7CiDlGML4ty7YUhhL74w= Subject key identifier: A7:50:12:B4:68:67:74:3F:4B:AD:43:EA:FC:48:23:EA:B3:E0:52:1B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7EB379882794269778E067EAD38B89163D07FFAC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142857.roa Signing time: Wed 04 Mar 2026 06:08:03 +0000 ROA not before: Wed 04 Mar 2026 06:03:03 +0000 ROA not after: Wed 03 Mar 2027 06:08:03 +0000 asID: 142857 IP address blocks: 240a:a0cf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b3:79:88:27:94:26:97:78:e0:67:ea:d3:8b:89:16:3d:07:ff:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:03 2026 GMT Not After : Mar 3 06:08:03 2027 GMT Subject: CN=A75012B46867743F4BAD43EAFC4823EAB3E0521B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:58:bc:c0:1c:c8:17:4d:93:9e:cc:ab:40: d1:ac:57:35:05:a8:77:f3:ac:0d:ba:a4:c1:96:1f: bf:26:60:7b:d2:6f:fa:b9:b2:fe:f0:8d:bb:60:bc: 6c:ef:c2:8c:79:e9:26:7c:1f:75:2c:e9:c0:da:ea: ab:f9:c6:78:7d:6f:ec:1b:e8:af:2f:da:47:26:81: 4b:4d:5a:71:9d:ca:75:c1:c6:55:4d:a0:4d:46:cd: da:7a:76:75:67:59:a1:c1:42:11:4b:54:00:2e:e4: 15:32:35:43:b0:26:05:49:11:b1:a7:4b:92:d3:a3: e2:fe:0d:05:49:b3:fe:d1:75:69:82:3b:32:45:85: fd:89:7f:11:18:68:c9:16:ed:7d:d5:30:9b:42:c6: 38:37:a6:f1:3b:c0:55:a1:d4:43:7c:55:1c:c5:85: 9e:ee:53:10:49:68:0d:9d:5b:0f:5e:91:61:6e:8c: e4:1b:ba:4c:7d:10:60:e7:fa:af:a2:01:0f:48:99: 5e:68:89:23:48:15:ff:9f:aa:c5:8f:bd:75:93:e0: 47:3b:e5:b3:77:f6:a8:70:6b:df:c6:0f:02:b0:59: 6b:b7:d8:c3:0b:3f:a9:1e:2a:7d:dc:5c:9e:2b:26: 75:b9:76:13:28:ba:e9:bb:23:52:3a:bc:d2:31:01: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:50:12:B4:68:67:74:3F:4B:AD:43:EA:FC:48:23:EA:B3:E0:52:1B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142857.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0cf::/32 Signature Algorithm: sha256WithRSAEncryption 80:e8:25:af:14:4d:0d:d3:2d:6e:1f:ea:15:01:44:4a:9c:f8: 75:42:74:35:c8:ab:f9:f4:3f:00:e0:be:16:29:80:61:d2:06: ef:d5:7f:dc:90:7a:03:c1:42:8a:b3:ea:7e:9e:93:8d:51:1c: 5b:b4:10:85:48:c5:bb:b5:92:35:1a:05:57:c5:82:bb:d6:cc: c4:07:a3:54:28:c7:69:38:5d:c3:6c:c8:b9:0d:c8:79:9a:9e: 4e:e7:9a:62:ec:c1:5d:ba:b6:6c:4b:20:3c:b8:e8:54:f7:78: 65:57:ed:70:67:39:a8:26:4f:04:a6:72:8d:1d:71:44:ab:2d: d6:ec:d7:0e:07:bf:fa:d2:c1:62:d0:fc:71:3b:69:d3:ff:b8: a3:5f:5a:ec:43:b9:79:62:97:60:40:d7:68:a2:39:0e:f2:2b: 99:df:b4:5c:d2:71:c2:0a:40:54:fb:90:62:8d:b6:cd:af:6f: 18:29:da:4d:ad:66:c2:2d:04:14:0c:77:6d:ca:45:2f:92:a2: 79:03:f8:ca:7f:8b:ed:29:9e:03:02:dc:98:ac:c0:0b:34:1e: 89:90:b3:8f:22:ca:79:b6:36:39:1c:b2:1a:c2:b2:6e:a3:fd: 10:21:a7:f7:ce:f3:a5:6c:ed:7e:03:e9:ab:2e:3d:8b:c5:3b: 99:2d:c1:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfrN5iCeUJpd44Gfq04uJFj0H/6wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwM1oX DTI3MDMwMzA2MDgwM1owMzExMC8GA1UEAxMoQTc1MDEyQjQ2ODY3NzQzRjRCQUQ0 M0VBRkM0ODIzRUFCM0UwNTIxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYSWLzAHMgXTZOezKtA0axXNQWod/OsDbqkwZYfvyZge9Jv+rmy/vCNu2C8 bO/CjHnpJnwfdSzpwNrqq/nGeH1v7Bvory/aRyaBS01acZ3KdcHGVU2gTUbN2np2 dWdZocFCEUtUAC7kFTI1Q7AmBUkRsadLktOj4v4NBUmz/tF1aYI7MkWF/Yl/ERho yRbtfdUwm0LGODem8TvAVaHUQ3xVHMWFnu5TEEloDZ1bD16RYW6M5Bu6TH0QYOf6 r6IBD0iZXmiJI0gV/5+qxY+9dZPgRzvls3f2qHBr38YPArBZa7fYwws/qR4qfdxc nismdbl2Eyi66bsjUjq80jEBz1kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSnUBK0 aGd0P0utQ+r8SCPqs+BSGzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oM8wDQYJKoZIhvcNAQELBQADggEBAIDoJa8UTQ3TLW4f6hUBREqc+HVCdDXIq/n0 PwDgvhYpgGHSBu/Vf9yQegPBQoqz6n6ek41RHFu0EIVIxbu1kjUaBVfFgrvWzMQH o1Qox2k4XcNsyLkNyHmank7nmmLswV26tmxLIDy46FT3eGVX7XBnOagmTwSmco0d cUSrLdbs1w4Hv/rSwWLQ/HE7adP/uKNfWuxDuXlil2BA12iiOQ7yK5nftFzSccIK QFT7kGKNts2vbxgp2k2tZsItBBQMd23KRS+SonkD+Mp/i+0pngMC3JiswAs0HomQ s48iynm2NjkcshrCsm6j/RAhp/fO86Vs7X4D6asuPYvFO5ktwd0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:53 2026 by rpki-client