$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142864.roa File: AS142864.roa (raw, json) Hash identifier: 3zPLW73aIqs/JTRvpZgX1vhLXCC4APq4FV39oPvelTk= Subject key identifier: 30:FC:89:5B:BB:6E:C9:C5:3E:DF:74:9A:38:96:AD:45:7B:19:8C:3A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 21F680A9509DDC3F7EF9C92994D91EB60F399C58 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142864.roa Signing time: Wed 04 Mar 2026 06:07:54 +0000 ROA not before: Wed 04 Mar 2026 06:02:54 +0000 ROA not after: Wed 03 Mar 2027 06:07:54 +0000 asID: 142864 IP address blocks: 240a:a0d6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f6:80:a9:50:9d:dc:3f:7e:f9:c9:29:94:d9:1e:b6:0f:39:9c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:54 2026 GMT Not After : Mar 3 06:07:54 2027 GMT Subject: CN=30FC895BBB6EC9C53EDF749A3896AD457B198C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ba:da:fd:55:0a:42:3d:1e:71:c3:60:74:06: ea:9a:4c:09:1a:91:29:6a:cc:5b:e1:c6:51:31:44: 5d:7b:48:c9:b9:ca:bc:5c:d3:7a:4d:11:08:c0:70: 2e:88:07:aa:be:10:f0:fa:b5:a5:ae:09:82:45:74: 19:13:96:c4:4e:51:c0:65:3b:56:9e:37:0c:a2:32: c4:38:1c:75:44:f6:84:30:23:f0:08:82:25:34:dc: e9:54:61:f4:7a:10:00:cd:50:07:69:87:38:7c:11: b0:ba:7a:24:e1:13:19:9d:5a:77:f4:30:3d:8e:10: a0:fa:ca:05:e5:9d:f1:73:81:bc:92:44:76:f8:1c: 33:b4:86:27:4a:61:f3:91:8e:99:23:bf:f2:d6:df: fb:a7:fc:30:02:4c:32:55:a9:bc:c2:e1:60:a2:cb: 0c:c2:04:3e:08:67:c2:0f:ef:07:9b:c0:6f:09:c3: 6e:d7:51:34:40:35:d7:5b:05:e8:4c:1e:69:ab:cf: d0:ec:93:cb:ff:c5:87:8e:87:3b:b0:6e:f4:27:74: 65:3e:26:13:58:1f:3d:c2:0c:b0:6f:29:f1:f2:76: d0:18:49:16:c4:3f:9e:fd:e3:88:a5:00:8e:05:b8: db:54:42:0e:08:4c:ea:a3:df:f3:93:56:5a:43:b2: 5f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FC:89:5B:BB:6E:C9:C5:3E:DF:74:9A:38:96:AD:45:7B:19:8C:3A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142864.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0d6::/32 Signature Algorithm: sha256WithRSAEncryption 9b:45:a7:b3:02:cd:b8:04:d9:57:cb:d0:b3:18:79:e4:2a:e0: 1f:9b:c2:dd:1b:0d:42:15:b7:0d:dd:ea:94:d7:ab:6b:02:93: 3f:a1:58:fb:43:14:df:de:a2:b5:c4:bb:7e:cc:79:a1:62:59: f2:1c:6f:df:3b:30:66:92:ff:46:cb:80:7e:ba:28:ec:a5:36: 92:6c:cf:a9:e8:f2:bd:ae:bf:5b:31:b8:63:54:d9:03:8e:2f: c6:70:b4:27:ac:af:a5:63:eb:7d:7c:21:f8:88:da:c7:ba:d4: 49:0c:1e:49:0b:22:1e:b4:6e:fb:d0:2f:a5:22:e4:2d:7d:86: a5:99:8b:01:cc:9a:c6:37:d2:39:65:36:1c:cc:88:4c:8a:99: fb:34:8f:17:2b:ab:22:44:da:e5:90:d3:a8:2c:f7:e2:ca:4b: ef:ca:10:d3:40:45:42:95:78:95:7f:4a:a0:2f:3a:4a:2f:fc: 94:db:f2:34:ac:61:8d:fa:85:1f:17:af:f9:3c:9f:5d:c7:09: e1:93:f1:42:f0:12:38:c8:cd:c2:be:68:20:cd:8d:2d:f6:c4: 03:d1:96:d0:2b:ab:26:03:23:13:cc:f3:12:ad:97:cb:19:e7: fe:be:6b:7e:8b:ce:a2:ad:f4:5e:c1:72:2e:2d:b1:b6:e5:8f: fe:74:97:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIfaAqVCd3D9++ckplNketg85nFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1NFoX DTI3MDMwMzA2MDc1NFowMzExMC8GA1UEAxMoMzBGQzg5NUJCQjZFQzlDNTNFREY3 NDlBMzg5NkFENDU3QjE5OEMzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+62v1VCkI9HnHDYHQG6ppMCRqRKWrMW+HGUTFEXXtIybnKvFzTek0RCMBw LogHqr4Q8Pq1pa4JgkV0GROWxE5RwGU7Vp43DKIyxDgcdUT2hDAj8AiCJTTc6VRh 9HoQAM1QB2mHOHwRsLp6JOETGZ1ad/QwPY4QoPrKBeWd8XOBvJJEdvgcM7SGJ0ph 85GOmSO/8tbf+6f8MAJMMlWpvMLhYKLLDMIEPghnwg/vB5vAbwnDbtdRNEA111sF 6EweaavP0OyTy//Fh46HO7Bu9Cd0ZT4mE1gfPcIMsG8p8fJ20BhJFsQ/nv3jiKUA jgW421RCDghM6qPf85NWWkOyXy0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQw/Ilb u27JxT7fdJo4lq1FexmMOjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oNYwDQYJKoZIhvcNAQELBQADggEBAJtFp7MCzbgE2VfL0LMYeeQq4B+bwt0bDUIV tw3d6pTXq2sCkz+hWPtDFN/eorXEu37MeaFiWfIcb987MGaS/0bLgH66KOylNpJs z6no8r2uv1sxuGNU2QOOL8ZwtCesr6Vj6318IfiI2se61EkMHkkLIh60bvvQL6Ui 5C19hqWZiwHMmsY30jllNhzMiEyKmfs0jxcrqyJE2uWQ06gs9+LKS+/KENNARUKV eJV/SqAvOkov/JTb8jSsYY36hR8Xr/k8n13HCeGT8ULwEjjIzcK+aCDNjS32xAPR ltArqyYDIxPM8xKtl8sZ5/6+a36LzqKt9F7Bci4tsbblj/50l/o= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:50 2026 by rpki-client