$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142863.roa File: AS142863.roa (raw, json) Hash identifier: WwzvuxSQhw4cx5STmYMMi0yyYkyqTmQqcMYF5g4jptk= Subject key identifier: BD:3F:F0:5D:28:9E:61:88:A9:89:55:4B:29:16:0D:E2:76:B5:6B:3B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6D0413ECFF178C0EDFDA50FB42933AAD30E97956 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142863.roa Signing time: Wed 04 Mar 2026 06:06:08 +0000 ROA not before: Wed 04 Mar 2026 06:01:08 +0000 ROA not after: Wed 03 Mar 2027 06:06:08 +0000 asID: 142863 IP address blocks: 240a:a0d5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:04:13:ec:ff:17:8c:0e:df:da:50:fb:42:93:3a:ad:30:e9:79:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:08 2026 GMT Not After : Mar 3 06:06:08 2027 GMT Subject: CN=BD3FF05D289E6188A989554B29160DE276B56B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:88:e8:f2:b7:00:7e:05:60:9f:3b:1a:d6: 71:40:3c:8a:18:e4:71:2f:d9:51:84:6a:4b:e8:0f: 1b:97:c8:55:ca:6d:a7:a5:34:31:3f:50:88:3a:2d: 71:29:2e:36:8a:9d:03:e2:4d:69:7f:83:47:1e:98: 3c:c9:05:c5:e0:72:ea:fe:ec:e0:d7:69:65:bc:fc: e5:d0:1c:63:84:26:79:87:62:41:d8:fa:2d:e7:74: 1b:dd:41:25:a2:fb:de:a2:c0:15:c0:5c:80:d3:17: 89:7a:b1:eb:0f:36:60:ac:c3:ed:d2:6d:b2:e0:89: 87:1c:da:24:cb:86:34:03:e4:d2:80:ac:63:af:ce: c7:ba:44:8e:dc:ad:cb:70:28:cd:a4:59:fb:8f:ba: 0d:08:ad:e4:05:66:c9:40:c1:2d:bf:c0:bb:28:ac: 74:91:e0:20:84:e9:c9:03:df:0a:b4:5c:fe:a0:2e: fc:ee:c6:b3:5e:08:42:86:d8:ce:d3:5c:43:61:7b: 77:61:b0:f1:d4:97:50:8f:4f:ef:bb:90:94:c9:e8: b9:4e:7d:23:ad:40:62:ea:fc:69:be:2e:fd:49:5d: 6e:de:03:3e:01:60:93:f7:31:d0:5d:2e:c4:06:62: 4a:f7:c7:ca:a0:e6:85:8a:83:92:3f:50:f7:52:01: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3F:F0:5D:28:9E:61:88:A9:89:55:4B:29:16:0D:E2:76:B5:6B:3B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142863.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0d5::/32 Signature Algorithm: sha256WithRSAEncryption 7b:fe:75:40:2c:cf:fd:07:8a:69:96:be:a4:f7:7f:cb:80:86: a4:ed:c5:50:ea:34:e6:b9:1a:52:d9:21:b8:f6:f2:f7:2e:b0: 4f:82:37:4f:8c:83:0a:65:c6:59:e3:92:ad:3b:79:d1:99:65: c3:48:7c:ee:1f:a2:28:62:48:db:e6:c2:fe:d1:60:39:2f:c2: 7b:20:1c:1d:f4:95:c4:8e:40:03:9c:08:16:a0:a0:25:c5:c7: f3:00:e6:06:6c:36:42:c3:05:92:22:90:e6:09:50:09:49:0f: d5:36:c4:05:e7:cb:df:2a:a3:d2:94:0b:e2:96:75:3d:fc:80: f4:8f:82:d8:10:fc:fd:19:d5:8e:11:23:fe:c8:25:44:9f:61: 59:9f:37:38:3f:ce:76:fd:89:12:95:9d:65:ad:4c:5a:14:2a: 6a:bb:48:b6:81:db:cb:83:52:1c:72:75:56:27:4c:61:3f:f6: 65:0b:40:b3:de:6e:b6:a2:68:87:76:41:29:db:3d:4c:e4:cc: 82:98:4e:18:bb:42:be:d2:d2:60:62:f5:ef:d4:4b:ab:4e:81: 5e:45:28:d2:0d:1e:bf:64:6c:cc:a8:99:59:37:67:f4:82:ee: 24:7f:10:3c:49:fd:03:7f:b5:63:90:58:f5:58:76:32:6a:f5: a4:10:94:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbQQT7P8XjA7f2lD7QpM6rTDpeVYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwOFoX DTI3MDMwMzA2MDYwOFowMzExMC8GA1UEAxMoQkQzRkYwNUQyODlFNjE4OEE5ODk1 NTRCMjkxNjBERTI3NkI1NkIzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsRiOjytwB+BWCfOxrWcUA8ihjkcS/ZUYRqS+gPG5fIVcptp6U0MT9QiDot cSkuNoqdA+JNaX+DRx6YPMkFxeBy6v7s4NdpZbz85dAcY4QmeYdiQdj6Led0G91B JaL73qLAFcBcgNMXiXqx6w82YKzD7dJtsuCJhxzaJMuGNAPk0oCsY6/Ox7pEjtyt y3AozaRZ+4+6DQit5AVmyUDBLb/AuyisdJHgIITpyQPfCrRc/qAu/O7Gs14IQobY ztNcQ2F7d2Gw8dSXUI9P77uQlMnouU59I61AYur8ab4u/Uldbt4DPgFgk/cx0F0u xAZiSvfHyqDmhYqDkj9Q91IBcD0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS9P/Bd KJ5hiKmJVUspFg3idrVrOzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oNUwDQYJKoZIhvcNAQELBQADggEBAHv+dUAsz/0HimmWvqT3f8uAhqTtxVDqNOa5 GlLZIbj28vcusE+CN0+Mgwplxlnjkq07edGZZcNIfO4foihiSNvmwv7RYDkvwnsg HB30lcSOQAOcCBagoCXFx/MA5gZsNkLDBZIikOYJUAlJD9U2xAXny98qo9KUC+KW dT38gPSPgtgQ/P0Z1Y4RI/7IJUSfYVmfNzg/znb9iRKVnWWtTFoUKmq7SLaB28uD UhxydVYnTGE/9mULQLPebraiaId2QSnbPUzkzIKYThi7Qr7S0mBi9e/US6tOgV5F KNINHr9kbMyomVk3Z/SC7iR/EDxJ/QN/tWOQWPVYdjJq9aQQlJI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:27 2026 by rpki-client