$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142861.roa File: AS142861.roa (raw, json) Hash identifier: 8Ora0ammC5UPJKj48QW4DvOHBbTP8MDiuGape1bgO/g= Subject key identifier: F2:C5:29:11:EE:21:51:B4:BF:B4:FD:5B:2C:C7:CF:B5:28:48:F5:1A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3B2A95AD5F001C9626470C79EAC64D59A3299FCB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142861.roa Signing time: Wed 04 Mar 2026 06:05:59 +0000 ROA not before: Wed 04 Mar 2026 06:00:59 +0000 ROA not after: Wed 03 Mar 2027 06:05:59 +0000 asID: 142861 IP address blocks: 240a:a0d3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:2a:95:ad:5f:00:1c:96:26:47:0c:79:ea:c6:4d:59:a3:29:9f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:59 2026 GMT Not After : Mar 3 06:05:59 2027 GMT Subject: CN=F2C52911EE2151B4BFB4FD5B2CC7CFB52848F51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4e:dd:44:38:a1:b7:98:c0:94:63:ec:c8:f2: ff:1b:00:e7:00:99:29:34:f7:e0:ca:27:50:7a:ff: 2a:a2:65:68:77:3c:af:df:9c:75:7b:be:48:ab:71: a8:50:10:50:0b:ab:8e:cb:b6:be:cc:ce:63:4b:6d: 45:01:4a:a3:45:aa:7e:02:49:27:1a:3e:a2:3a:11: 21:33:66:7a:7e:c6:cd:21:75:94:d7:3b:29:91:00: 95:7d:0a:8c:46:e9:87:89:3d:21:5e:2e:a8:dd:c1: b1:ac:a5:ec:8e:fe:12:c6:52:d7:a2:34:02:38:27: 35:aa:ec:5f:50:eb:af:cd:85:97:1a:9d:84:ad:0d: 94:0c:6c:29:18:a4:e6:3d:52:15:7f:48:87:39:90: f6:a9:38:f5:aa:94:2a:18:29:73:21:b3:ab:5b:e1: af:67:2a:48:35:0f:44:b0:1b:d2:7c:ea:7b:3d:02: a8:9c:c8:af:6d:39:36:b0:73:c4:16:57:a1:b8:23: aa:b5:74:1b:d9:d1:7b:dd:7b:1e:fe:7a:15:6c:ce: 94:b0:fc:e6:3c:eb:e8:a2:08:c0:ec:f4:38:10:3f: 93:db:41:b4:08:cd:f9:e1:26:63:bb:95:3d:32:fa: 26:e5:dd:9a:93:55:3b:42:a6:40:d5:cf:cd:a6:07: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C5:29:11:EE:21:51:B4:BF:B4:FD:5B:2C:C7:CF:B5:28:48:F5:1A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142861.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0d3::/32 Signature Algorithm: sha256WithRSAEncryption 68:53:b0:45:3e:93:19:50:ff:d8:6e:6b:d6:df:6d:82:bc:cf: fd:9e:6d:5e:aa:74:29:14:23:11:ca:d3:f1:b8:ad:e6:0b:60: 8e:2e:18:0b:ff:00:11:d6:f5:8b:07:7c:ee:80:2e:e9:1d:0c: 00:a9:31:9c:8a:3b:af:65:bb:d2:7f:6c:28:1e:50:23:48:dc: 6d:19:19:5d:8e:61:88:b8:51:02:06:fb:65:bc:fd:3c:b0:51: 64:f4:c6:59:55:db:47:91:d6:01:3c:d2:cd:2d:07:2d:a8:82: 6f:fb:87:47:54:83:4a:70:8e:fc:72:2c:fa:3f:48:b5:bf:29: d7:08:21:91:fa:05:37:bc:68:3a:ba:3a:1b:0d:b9:d6:ef:c4: 8a:48:86:ce:19:fa:ea:52:c4:a0:68:2f:66:8d:63:a9:5a:39: 1c:88:80:02:ef:19:82:78:6d:ca:dc:5a:ee:04:d9:36:44:1b: fc:4f:38:db:14:61:86:67:de:a1:c1:4f:ab:dd:5b:86:0e:54: 8a:57:86:c7:49:19:78:8a:0f:7c:f5:4d:b9:1f:68:38:be:a4: 6d:34:63:8b:5c:5d:09:c7:d2:fa:1a:e5:5a:43:5e:06:1e:a1: 0a:8b:f5:12:36:25:4b:83:52:88:75:89:32:66:f5:02:be:c5: 4c:28:b9:6e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOyqVrV8AHJYmRwx56sZNWaMpn8swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1OVoX DTI3MDMwMzA2MDU1OVowMzExMC8GA1UEAxMoRjJDNTI5MTFFRTIxNTFCNEJGQjRG RDVCMkNDN0NGQjUyODQ4RjUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIhO3UQ4obeYwJRj7Mjy/xsA5wCZKTT34MonUHr/KqJlaHc8r9+cdXu+SKtx qFAQUAurjsu2vszOY0ttRQFKo0WqfgJJJxo+ojoRITNmen7GzSF1lNc7KZEAlX0K jEbph4k9IV4uqN3Bsayl7I7+EsZS16I0AjgnNarsX1Drr82FlxqdhK0NlAxsKRik 5j1SFX9IhzmQ9qk49aqUKhgpcyGzq1vhr2cqSDUPRLAb0nzqez0CqJzIr205NrBz xBZXobgjqrV0G9nRe917Hv56FWzOlLD85jzr6KIIwOz0OBA/k9tBtAjN+eEmY7uV PTL6JuXdmpNVO0KmQNXPzaYHJZsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTyxSkR 7iFRtL+0/Vssx8+1KEj1GjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oNMwDQYJKoZIhvcNAQELBQADggEBAGhTsEU+kxlQ/9hua9bfbYK8z/2ebV6qdCkU IxHK0/G4reYLYI4uGAv/ABHW9YsHfO6ALukdDACpMZyKO69lu9J/bCgeUCNI3G0Z GV2OYYi4UQIG+2W8/TywUWT0xllV20eR1gE80s0tBy2ogm/7h0dUg0pwjvxyLPo/ SLW/KdcIIZH6BTe8aDq6OhsNudbvxIpIhs4Z+upSxKBoL2aNY6laORyIgALvGYJ4 bcrcWu4E2TZEG/xPONsUYYZn3qHBT6vdW4YOVIpXhsdJGXiKD3z1TbkfaDi+pG00 Y4tcXQnH0voa5VpDXgYeoQqL9RI2JUuDUoh1iTJm9QK+xUwouW4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:58 2026 by rpki-client