$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142858.roa File: AS142858.roa (raw, json) Hash identifier: dy88pKmNV2oe7wifr4vAt786x5w1JjGDhXDZRlk5TiI= Subject key identifier: D5:08:3C:7D:AF:C8:DF:47:BC:5C:7B:53:3D:31:84:D5:E8:06:2A:33 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 582F43430259CA503AF261AF31589C95042DEB50 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142858.roa Signing time: Wed 04 Mar 2026 06:06:43 +0000 ROA not before: Wed 04 Mar 2026 06:01:43 +0000 ROA not after: Wed 03 Mar 2027 06:06:43 +0000 asID: 142858 IP address blocks: 240a:a0d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2f:43:43:02:59:ca:50:3a:f2:61:af:31:58:9c:95:04:2d:eb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:43 2026 GMT Not After : Mar 3 06:06:43 2027 GMT Subject: CN=D5083C7DAFC8DF47BC5C7B533D3184D5E8062A33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:8e:20:f8:aa:84:5d:39:8c:d4:66:74:7a: 4b:37:0d:a6:ae:8f:db:47:09:9b:d4:b6:ca:9f:95: 0d:f8:45:49:2a:26:f9:e0:b0:8a:49:35:9b:46:5a: 71:29:dc:a5:c4:24:94:31:83:5e:a7:37:7a:66:d1: 62:41:1b:23:70:bf:70:11:f5:1e:a8:1c:97:e9:8f: 2a:ac:8e:a9:e9:46:72:35:f2:61:81:ae:9c:01:15: f8:c8:a8:98:82:2a:81:3d:2b:f8:fc:89:50:a4:d8: f9:8a:53:92:fd:32:ca:c3:aa:00:d7:d2:06:f2:10: ae:c1:82:39:d1:d1:b6:c5:58:c7:f6:49:bb:86:cb: 1c:23:13:ef:bb:3b:2b:94:58:c7:1c:67:a3:f1:4f: 22:58:06:0a:f4:93:b1:97:54:9b:89:f8:ea:3f:79: 05:c1:12:b5:a0:38:27:e9:d0:18:e7:dc:97:62:fd: 41:36:d0:03:0b:dd:d1:ef:a9:ed:a2:e6:84:7c:0e: df:ff:30:34:1d:00:51:4f:bf:35:8c:ef:14:36:4d: 43:ba:a9:29:13:72:a4:07:56:8d:67:d4:fc:4e:f3: 8e:0b:39:a0:6c:b0:9a:35:15:b6:12:78:57:a0:0d: 72:a2:2f:30:57:01:a0:b0:70:63:7a:df:9c:e2:3f: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:08:3C:7D:AF:C8:DF:47:BC:5C:7B:53:3D:31:84:D5:E8:06:2A:33 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142858.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0d0::/32 Signature Algorithm: sha256WithRSAEncryption 77:4c:c1:cf:d5:af:8d:f8:2e:66:c0:8c:55:c0:27:73:41:67: bc:78:ef:96:fd:2d:d6:4f:50:5b:a6:ef:d4:56:1a:32:f7:7a: 15:9a:49:c0:68:a4:27:7b:20:f9:3f:c0:63:da:be:67:32:b5: 8d:77:86:b9:9b:35:2b:9d:9f:93:15:59:38:97:b4:ff:35:98: 61:5d:83:fe:22:fd:80:57:5f:8d:b2:7d:03:ea:ce:94:36:8c: 67:fc:c2:6a:7c:5b:b3:00:be:34:35:7c:7a:52:7b:48:e0:2c: 6a:5e:08:d9:10:cf:f1:01:af:9d:5d:5b:62:e0:e1:b0:a6:ea: 4d:2e:4d:97:da:b5:e5:53:5d:e1:f3:eb:b0:1e:3d:a6:38:a8: 50:fa:b3:83:20:1e:56:9f:6c:82:a1:4b:48:9b:a2:6e:bd:71: 65:37:f7:f3:23:fe:d7:d0:8f:1f:df:28:9b:65:57:35:2d:94: 46:f0:e1:15:eb:31:15:5a:bf:40:37:b3:d7:0c:fc:f2:20:0c: 91:86:e1:a4:aa:2d:23:ed:eb:f7:d7:4e:fd:cb:eb:41:4e:de: c7:b5:4b:7f:c1:1f:0c:46:d8:ab:eb:4e:a1:be:04:8e:ec:7a: 89:ec:e5:9b:b7:c5:ae:97:d8:7b:71:2e:b6:3e:0c:e2:69:bc: d9:c3:07:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWC9DQwJZylA68mGvMViclQQt61AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0M1oX DTI3MDMwMzA2MDY0M1owMzExMC8GA1UEAxMoRDUwODNDN0RBRkM4REY0N0JDNUM3 QjUzM0QzMTg0RDVFODA2MkEzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKeEjiD4qoRdOYzUZnR6SzcNpq6P20cJm9S2yp+VDfhFSSom+eCwikk1m0Za cSncpcQklDGDXqc3embRYkEbI3C/cBH1Hqgcl+mPKqyOqelGcjXyYYGunAEV+Mio mIIqgT0r+PyJUKTY+YpTkv0yysOqANfSBvIQrsGCOdHRtsVYx/ZJu4bLHCMT77s7 K5RYxxxno/FPIlgGCvSTsZdUm4n46j95BcEStaA4J+nQGOfcl2L9QTbQAwvd0e+p 7aLmhHwO3/8wNB0AUU+/NYzvFDZNQ7qpKRNypAdWjWfU/E7zjgs5oGywmjUVthJ4 V6ANcqIvMFcBoLBwY3rfnOI/u7cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTVCDx9 r8jfR7xce1M9MYTV6AYqMzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oNAwDQYJKoZIhvcNAQELBQADggEBAHdMwc/Vr434LmbAjFXAJ3NBZ7x475b9LdZP UFum79RWGjL3ehWaScBopCd7IPk/wGPavmcytY13hrmbNSudn5MVWTiXtP81mGFd g/4i/YBXX42yfQPqzpQ2jGf8wmp8W7MAvjQ1fHpSe0jgLGpeCNkQz/EBr51dW2Lg 4bCm6k0uTZfateVTXeHz67AePaY4qFD6s4MgHlafbIKhS0ibom69cWU39/Mj/tfQ jx/fKJtlVzUtlEbw4RXrMRVav0A3s9cM/PIgDJGG4aSqLSPt6/fXTv3L60FO3se1 S3/BHwxG2KvrTqG+BI7seons5Zu3xa6X2HtxLrY+DOJpvNnDB8I= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:34 2026 by rpki-client