$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142866.roa File: AS142866.roa (raw, json) Hash identifier: Z4LSGpos9rjvdqr4+NUS0OTde9+BCJ39tIHKHryTNtA= Subject key identifier: 2D:E5:94:D9:B1:44:DD:3E:23:7F:CA:44:0E:E4:EF:47:9B:87:58:2F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 07ABF9458894C93CC2862C9EB285A9D6FF52AE38 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142866.roa Signing time: Wed 04 Mar 2026 06:07:13 +0000 ROA not before: Wed 04 Mar 2026 06:02:13 +0000 ROA not after: Wed 03 Mar 2027 06:07:13 +0000 asID: 142866 IP address blocks: 240a:a0d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ab:f9:45:88:94:c9:3c:c2:86:2c:9e:b2:85:a9:d6:ff:52:ae:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:13 2026 GMT Not After : Mar 3 06:07:13 2027 GMT Subject: CN=2DE594D9B144DD3E237FCA440EE4EF479B87582F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:b0:95:e8:cc:50:79:63:b8:4b:53:ed:66: 1e:80:a3:2f:e9:d9:84:97:fb:8c:9e:4b:43:90:71: da:f6:d4:df:23:46:aa:07:1a:ce:b5:d0:dc:56:97: 69:fa:de:df:08:31:ac:5f:05:97:93:5d:cc:dc:d8: 51:f3:fd:f7:a7:89:33:67:a0:4f:3d:bf:7c:87:4d: c8:93:d1:93:74:2f:71:d5:f7:5d:24:c0:44:30:8f: 33:48:61:1b:88:f2:5d:df:11:40:56:81:98:9a:61: dd:73:27:8c:4c:af:bb:4a:18:d4:11:0f:a7:2c:21: 2d:42:3e:7c:4b:12:20:fb:2a:05:49:e8:c9:56:5b: 4b:95:1d:b9:cc:4f:72:d9:e5:bb:98:9b:9e:e3:96: 22:08:0c:7e:3c:a9:2e:52:9e:f4:d8:7b:c9:9d:9e: 12:42:a5:f5:4c:53:dc:2b:ce:f3:ed:84:ab:99:7f: 5f:a1:8c:79:a8:a3:60:b5:c2:98:d9:7c:82:ba:30: a2:66:09:96:7d:32:61:f1:bc:56:7d:05:4b:0d:55: 8b:a8:bc:0a:da:3b:79:56:86:92:4b:8c:fd:39:80: d1:d8:18:b7:23:cd:fd:62:c0:a4:f2:64:1b:db:42: 7d:b1:5a:a1:9b:77:3c:fc:f7:78:21:90:d9:c7:8f: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E5:94:D9:B1:44:DD:3E:23:7F:CA:44:0E:E4:EF:47:9B:87:58:2F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0d8::/32 Signature Algorithm: sha256WithRSAEncryption 6b:f1:b3:fa:a0:ea:85:a2:20:27:b0:2c:65:69:6f:97:93:a5: 27:9b:7e:f6:42:d9:2a:98:b3:55:a6:7f:fc:23:85:34:26:e3: 01:ef:3b:3e:d7:57:fd:ed:95:37:ca:82:63:69:13:a4:2b:61: f3:35:e4:12:32:91:d9:7e:80:f7:30:0f:ea:88:a2:97:60:1e: f8:e4:57:2c:fe:f2:a8:17:8d:ea:11:a8:88:b0:04:3b:31:13: af:76:75:fd:b6:78:35:b5:f6:bd:2a:c5:bf:07:59:38:93:e0: 10:eb:dc:16:13:26:82:91:2d:93:3f:2e:3c:24:d7:df:e0:d0: 93:67:16:d9:88:17:00:59:c7:94:a4:9e:cb:50:89:21:41:23: 1e:de:64:c3:d9:1e:d4:85:ef:58:f8:61:c6:b8:ac:49:79:e9: 08:77:07:cb:04:85:8f:75:18:04:f4:6b:22:2b:53:f3:99:68: 9e:a4:23:db:4b:73:a4:84:3c:cb:48:93:e7:ad:6b:23:f2:61: 87:c9:cf:fa:70:3f:92:20:64:ba:29:f6:d5:11:6d:19:a1:7f: 6a:4a:bd:84:13:7c:cf:0f:f6:b2:3e:b3:bf:08:26:53:6b:ff: 7a:f9:e5:47:61:b4:c6:33:96:a4:e0:a1:25:45:a9:22:d1:83: ea:bd:ce:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB6v5RYiUyTzChiyesoWp1v9SrjgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxM1oX DTI3MDMwMzA2MDcxM1owMzExMC8GA1UEAxMoMkRFNTk0RDlCMTQ0REQzRTIzN0ZD QTQ0MEVFNEVGNDc5Qjg3NTgyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHRsJXozFB5Y7hLU+1mHoCjL+nZhJf7jJ5LQ5Bx2vbU3yNGqgcazrXQ3FaX afre3wgxrF8Fl5NdzNzYUfP996eJM2egTz2/fIdNyJPRk3QvcdX3XSTARDCPM0hh G4jyXd8RQFaBmJph3XMnjEyvu0oY1BEPpywhLUI+fEsSIPsqBUnoyVZbS5UducxP ctnlu5ibnuOWIggMfjypLlKe9Nh7yZ2eEkKl9UxT3CvO8+2Eq5l/X6GMeaijYLXC mNl8growomYJln0yYfG8Vn0FSw1Vi6i8Cto7eVaGkkuM/TmA0dgYtyPN/WLApPJk G9tCfbFaoZt3PPz3eCGQ2cePMRkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQt5ZTZ sUTdPiN/ykQO5O9Hm4dYLzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oNgwDQYJKoZIhvcNAQELBQADggEBAGvxs/qg6oWiICewLGVpb5eTpSebfvZC2SqY s1Wmf/wjhTQm4wHvOz7XV/3tlTfKgmNpE6QrYfM15BIykdl+gPcwD+qIopdgHvjk Vyz+8qgXjeoRqIiwBDsxE692df22eDW19r0qxb8HWTiT4BDr3BYTJoKRLZM/Ljwk 19/g0JNnFtmIFwBZx5SknstQiSFBIx7eZMPZHtSF71j4Yca4rEl56Qh3B8sEhY91 GAT0ayIrU/OZaJ6kI9tLc6SEPMtIk+etayPyYYfJz/pwP5IgZLop9tURbRmhf2pK vYQTfM8P9rI+s78IJlNr/3r55UdhtMYzlqTgoSVFqSLRg+q9znk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:26 2026 by rpki-client