$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142859.roa File: AS142859.roa (raw, json) Hash identifier: poDHzUpvyzU+v5kf+m728bOYIUJBpIG//p69OQFBngg= Subject key identifier: 07:2E:15:0E:21:34:4F:F6:6C:2F:F7:E7:78:D5:42:A6:BC:28:C6:7B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6307F7C84E8DFE8981A1930D4F597F58AB4E96F2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142859.roa Signing time: Wed 04 Mar 2026 06:05:57 +0000 ROA not before: Wed 04 Mar 2026 06:00:57 +0000 ROA not after: Wed 03 Mar 2027 06:05:57 +0000 asID: 142859 IP address blocks: 240a:a0d1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:07:f7:c8:4e:8d:fe:89:81:a1:93:0d:4f:59:7f:58:ab:4e:96:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:57 2026 GMT Not After : Mar 3 06:05:57 2027 GMT Subject: CN=072E150E21344FF66C2FF7E778D542A6BC28C67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:19:be:f4:66:2e:75:f3:79:b1:0b:92:21: ad:2f:b7:0e:8d:75:4a:e7:24:6f:eb:56:ac:35:e5: 29:d9:7f:1e:2b:81:87:4e:31:71:13:f9:51:3d:7e: 85:75:9d:c7:c7:eb:66:95:b6:73:2a:7b:91:93:d4: 69:1e:0a:3e:65:af:1c:0b:51:5e:ce:4f:c4:02:37: 10:95:08:ea:96:37:a8:46:ef:bd:e0:50:7b:d1:28: 4e:04:be:a2:60:7a:18:2b:9e:7f:5c:62:e6:a9:e0: 8e:fb:fc:f6:4e:69:41:bf:43:76:7e:c6:d0:d4:7f: a1:dd:af:70:fc:78:11:3d:de:6b:fc:25:3c:0d:77: 26:f7:7f:db:64:12:bc:1d:8d:11:1d:17:5b:53:bc: ef:ec:af:c3:06:2c:ee:2b:b4:a2:82:e3:1b:d9:07: b0:54:c8:cb:33:a6:72:f0:ee:3d:32:f9:35:24:13: 90:e9:95:63:0c:89:da:61:1a:af:1c:44:e9:23:38: 9e:77:89:a1:f5:60:2f:3f:05:e4:3f:40:2d:57:b3: ae:ba:0a:fa:f0:12:c8:49:77:8a:f9:95:42:d7:69: cd:da:69:d6:fd:9d:28:a3:20:96:6f:e4:97:7f:84: dc:eb:5e:e9:de:eb:6d:58:06:a4:fd:59:94:9d:d0: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2E:15:0E:21:34:4F:F6:6C:2F:F7:E7:78:D5:42:A6:BC:28:C6:7B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0d1::/32 Signature Algorithm: sha256WithRSAEncryption 1f:89:60:d4:74:6f:09:40:6a:eb:75:31:37:c4:6d:4f:70:6d: be:51:74:e4:19:c2:eb:4d:0d:9d:f7:53:60:73:88:d1:48:8c: 05:51:11:ae:f7:db:f0:e5:92:36:1d:96:57:16:56:21:0f:a4: e1:3c:0b:fb:ff:40:8f:47:f4:12:35:95:4e:12:28:e6:fd:83: ef:bc:c8:48:14:ef:52:31:e5:a6:8e:6f:ba:67:23:a8:94:e5: 13:55:00:85:0d:a6:53:24:05:02:76:23:a0:3d:fc:17:31:b6: 45:5a:a3:a5:cc:93:34:32:71:0d:ca:d4:88:0b:28:12:b2:2d: 5c:5f:45:5c:23:2e:e0:89:a8:cd:dd:b2:ad:79:e8:1e:3c:76: b6:a2:ce:ea:e8:64:4d:12:05:21:f3:ae:80:d6:11:7f:c0:ff: 85:cd:47:b7:d2:a7:b0:36:6c:1f:b3:fe:fb:8f:03:2c:20:db: a2:39:29:79:ca:c7:0e:96:12:0d:44:9c:c0:13:4d:08:70:61: 8d:5a:1e:a0:08:f4:9e:30:30:d3:63:63:74:84:f1:a7:38:c3: e2:d0:6d:4e:c4:50:d6:fd:94:04:48:d1:93:12:7d:a4:fc:c9: c0:81:1c:de:7d:5d:3e:38:84:d8:b2:53:27:0c:de:20:5f:b0: 0d:0c:e6:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYwf3yE6N/omBoZMNT1l/WKtOlvIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1N1oX DTI3MDMwMzA2MDU1N1owMzExMC8GA1UEAxMoMDcyRTE1MEUyMTM0NEZGNjZDMkZG N0U3NzhENTQyQTZCQzI4QzY3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDlGb70Zi5183mxC5IhrS+3Do11Suckb+tWrDXlKdl/HiuBh04xcRP5UT1+ hXWdx8frZpW2cyp7kZPUaR4KPmWvHAtRXs5PxAI3EJUI6pY3qEbvveBQe9EoTgS+ omB6GCuef1xi5qngjvv89k5pQb9Ddn7G0NR/od2vcPx4ET3ea/wlPA13Jvd/22QS vB2NER0XW1O87+yvwwYs7iu0ooLjG9kHsFTIyzOmcvDuPTL5NSQTkOmVYwyJ2mEa rxxE6SM4nneJofVgLz8F5D9ALVezrroK+vASyEl3ivmVQtdpzdpp1v2dKKMglm/k l3+E3Ote6d7rbVgGpP1ZlJ3QFwMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQHLhUO ITRP9mwv9+d41UKmvCjGezAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oNEwDQYJKoZIhvcNAQELBQADggEBAB+JYNR0bwlAaut1MTfEbU9wbb5RdOQZwutN DZ33U2BziNFIjAVREa732/DlkjYdllcWViEPpOE8C/v/QI9H9BI1lU4SKOb9g++8 yEgU71Ix5aaOb7pnI6iU5RNVAIUNplMkBQJ2I6A9/BcxtkVao6XMkzQycQ3K1IgL KBKyLVxfRVwjLuCJqM3dsq156B48draizuroZE0SBSHzroDWEX/A/4XNR7fSp7A2 bB+z/vuPAywg26I5KXnKxw6WEg1EnMATTQhwYY1aHqAI9J4wMNNjY3SE8ac4w+LQ bU7EUNb9lARI0ZMSfaT8ycCBHN59XT44hNiyUycM3iBfsA0M5t0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:59 2026 by rpki-client