$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142869.roa File: AS142869.roa (raw, json) Hash identifier: VkO0pcfY9TkMKlJbZJ1RS9oYhhRYvg1M9p/xaeTay+A= Subject key identifier: 96:42:6E:13:D7:DD:E2:E0:2A:FF:87:F7:F7:CA:28:0E:A2:D6:96:BB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 08E0024C1C8B8ED4403E83CBF90CF6BF16F84FD4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142869.roa Signing time: Wed 04 Mar 2026 06:07:43 +0000 ROA not before: Wed 04 Mar 2026 06:02:43 +0000 ROA not after: Wed 03 Mar 2027 06:07:43 +0000 asID: 142869 IP address blocks: 240a:a0db::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e0:02:4c:1c:8b:8e:d4:40:3e:83:cb:f9:0c:f6:bf:16:f8:4f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:43 2026 GMT Not After : Mar 3 06:07:43 2027 GMT Subject: CN=96426E13D7DDE2E02AFF87F7F7CA280EA2D696BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b4:89:47:d0:59:f0:0b:fb:8b:ad:ab:8b:7f: c8:1d:1a:09:2f:c5:12:ac:e8:d2:66:a5:cc:03:60: a8:c7:05:85:39:7f:4d:75:6f:0a:1a:ee:53:d6:92: 77:bf:45:a1:7e:f7:9c:7e:a8:39:b1:2c:09:17:ad: b6:ce:06:ec:0b:79:61:f8:d3:12:68:36:5e:a4:6b: 8f:32:9e:84:7b:ea:bd:2a:94:04:96:c1:e9:1e:76: d7:1b:ac:6c:9b:7a:70:61:b0:98:e7:f2:02:55:fb: ee:df:70:0d:03:56:89:cc:b1:fc:48:bf:b0:44:d4: fe:d7:25:92:dd:5e:63:89:31:9f:be:b8:4d:24:87: ab:93:a3:ef:7a:a3:81:fb:e4:01:7a:f6:ce:87:ca: 8a:35:71:0f:45:55:0e:00:93:ab:ed:0c:1e:9a:97: 7a:3c:a6:58:79:d6:83:11:81:ea:fd:bf:c8:3f:25: bb:d8:cb:a4:7d:76:57:5f:db:01:2c:1a:b9:f3:a0: 3f:7a:3b:45:b2:eb:a5:32:33:f7:61:00:34:16:4b: 7f:d3:6e:f1:20:c0:7a:35:fb:a6:00:fb:ff:30:69: 1e:be:52:2d:b3:58:6c:a1:87:37:9a:c4:2d:59:05: 56:5d:5f:07:d6:2c:a9:b6:68:79:bf:0a:92:ec:27: 35:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:42:6E:13:D7:DD:E2:E0:2A:FF:87:F7:F7:CA:28:0E:A2:D6:96:BB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142869.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0db::/32 Signature Algorithm: sha256WithRSAEncryption 23:11:5b:f6:55:96:4a:92:f2:cf:68:cd:8e:df:03:ff:ad:57: d2:df:5d:95:b9:c1:ef:e6:2a:74:27:63:b5:ce:99:9e:27:ff: a8:5a:76:42:a9:7e:21:66:6b:ee:92:85:4a:c9:3a:71:78:d7: 9d:f0:39:d4:ce:c6:d0:a2:b5:c7:9c:73:6e:8c:5e:75:4d:58: 8a:25:4c:aa:34:53:a5:dd:0d:40:db:18:43:96:27:42:20:f7: 81:ca:f3:f3:35:b0:6e:ef:8f:13:14:54:fc:99:3f:ba:04:4e: f8:b8:50:13:47:84:c2:f4:4f:34:a6:73:fb:ab:78:91:bb:a3: 3e:b4:37:8d:99:d7:d2:44:36:77:5c:57:17:cb:e3:fd:18:e4: fe:ea:6c:15:b0:2c:50:2f:3d:bb:c5:62:26:33:6e:54:93:92: 0f:3c:f6:cc:ae:eb:cb:f4:0f:42:88:2e:5e:27:be:d2:ab:8e: 3c:bf:32:e7:1c:53:1c:a1:bc:51:db:e7:b8:7b:e8:b7:c8:b0: 6f:64:2f:d6:2f:0a:80:c9:b0:43:45:cb:2c:c6:c9:25:fc:c1: 25:aa:ea:19:98:bd:ce:97:40:54:3f:3e:f1:b2:1d:5b:f4:75: 65:02:a6:d2:39:a5:86:17:63:d2:22:6a:83:23:ab:c3:b9:bc: 83:8d:7a:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCOACTByLjtRAPoPL+Qz2vxb4T9QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0M1oX DTI3MDMwMzA2MDc0M1owMzExMC8GA1UEAxMoOTY0MjZFMTNEN0RERTJFMDJBRkY4 N0Y3RjdDQTI4MEVBMkQ2OTZCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMy0iUfQWfAL+4utq4t/yB0aCS/FEqzo0malzANgqMcFhTl/TXVvChruU9aS d79FoX73nH6oObEsCRetts4G7At5YfjTEmg2XqRrjzKehHvqvSqUBJbB6R521xus bJt6cGGwmOfyAlX77t9wDQNWicyx/Ei/sETU/tclkt1eY4kxn764TSSHq5Oj73qj gfvkAXr2zofKijVxD0VVDgCTq+0MHpqXejymWHnWgxGB6v2/yD8lu9jLpH12V1/b ASwaufOgP3o7RbLrpTIz92EANBZLf9Nu8SDAejX7pgD7/zBpHr5SLbNYbKGHN5rE LVkFVl1fB9YsqbZoeb8KkuwnNcsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSWQm4T 193i4Cr/h/f3yigOotaWuzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oNswDQYJKoZIhvcNAQELBQADggEBACMRW/ZVlkqS8s9ozY7fA/+tV9LfXZW5we/m KnQnY7XOmZ4n/6hadkKpfiFma+6ShUrJOnF4153wOdTOxtCitcecc26MXnVNWIol TKo0U6XdDUDbGEOWJ0Ig94HK8/M1sG7vjxMUVPyZP7oETvi4UBNHhML0TzSmc/ur eJG7oz60N42Z19JENndcVxfL4/0Y5P7qbBWwLFAvPbvFYiYzblSTkg889syu68v0 D0KILl4nvtKrjjy/MuccUxyhvFHb57h76LfIsG9kL9YvCoDJsENFyyzGySX8wSWq 6hmYvc6XQFQ/PvGyHVv0dWUCptI5pYYXY9IiaoMjq8O5vIONenU= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:37 2026 by rpki-client