$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142875.roa File: AS142875.roa (raw, json) Hash identifier: HojY0UIh5E1ZJ9OmN2FVTLMrQ7knST+XpV8NHd/+jbY= Subject key identifier: 4A:D5:A9:FD:8E:89:46:7D:4A:3D:5F:A9:F6:64:F8:F6:07:E8:34:55 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 56AE05010B5DCE92C8536FEA608B994986B5D41F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142875.roa Signing time: Wed 04 Mar 2026 06:07:39 +0000 ROA not before: Wed 04 Mar 2026 06:02:39 +0000 ROA not after: Wed 03 Mar 2027 06:07:39 +0000 asID: 142875 IP address blocks: 240a:a0e1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ae:05:01:0b:5d:ce:92:c8:53:6f:ea:60:8b:99:49:86:b5:d4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:39 2026 GMT Not After : Mar 3 06:07:39 2027 GMT Subject: CN=4AD5A9FD8E89467D4A3D5FA9F664F8F607E83455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e9:ef:56:9f:07:a1:12:ef:90:fa:df:f7:47: bd:c6:95:48:61:f8:74:c3:38:03:4a:81:30:09:0c: d7:f7:e3:b0:20:8c:14:4b:35:3e:77:d4:29:d7:a5: 38:21:d7:f3:e9:0e:a8:9b:19:f2:6d:a8:05:6e:31: 17:63:8b:3e:55:98:a9:ed:eb:b8:ad:78:99:2e:17: be:ae:ce:61:de:11:99:f7:22:04:41:1b:1f:78:20: 93:ad:c1:9b:db:90:0f:22:3a:1e:e8:1a:5d:39:6b: b5:67:a7:75:ae:e4:c6:69:a2:a9:56:bc:3f:e7:87: 1c:ee:d5:05:a3:af:cd:cb:38:a8:1c:61:52:7c:48: 88:6d:ea:97:52:f1:ac:86:c8:81:b7:54:7a:e0:58: 88:8d:db:b6:91:30:25:a8:15:5b:f0:c6:5d:35:eb: 3e:a2:97:03:ed:2d:f1:3b:b8:42:ab:23:7a:88:79: f3:da:54:2a:fa:f4:2a:c3:e5:ae:6a:67:f0:20:1b: 08:d8:37:ee:c5:23:41:9c:39:f0:0a:d4:cd:53:b1: 4c:96:86:81:ec:13:f6:35:d4:bb:18:18:b4:84:ac: 05:af:5e:25:f3:30:6d:41:97:50:65:f0:b0:04:e7: 92:f2:7a:b7:29:49:63:bf:38:38:14:ab:bb:1f:98: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D5:A9:FD:8E:89:46:7D:4A:3D:5F:A9:F6:64:F8:F6:07:E8:34:55 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142875.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0e1::/32 Signature Algorithm: sha256WithRSAEncryption c0:1d:91:1d:32:be:d6:f6:00:39:29:e8:8b:aa:32:12:ea:50: 94:a9:fa:7b:d9:4b:bc:e1:99:f4:0f:6f:8a:e1:11:e8:d1:d3: eb:7e:4e:66:92:54:5f:fd:85:4c:09:09:dd:46:5f:e9:b1:b8: cb:78:8a:7d:94:7a:af:96:14:e5:e2:89:eb:3c:3f:41:9f:94: f5:55:c8:37:df:6d:04:5d:24:be:15:da:59:3e:c0:cc:d1:4c: cb:14:13:8e:7a:c8:a7:99:89:4f:c0:45:ad:51:60:eb:c7:4c: ce:36:2d:7b:67:c0:24:bb:bf:23:6c:75:0e:f2:32:d2:17:bb: 3c:4c:13:24:44:86:e1:eb:b7:b8:6c:27:f2:55:ec:25:19:a5: f1:37:88:75:30:9f:67:16:9e:71:4e:d3:92:c1:01:4b:d7:1d: ca:e9:7b:03:f3:a3:e9:72:13:3e:19:de:50:65:56:f7:5d:b2: 6c:c5:14:0c:68:b7:65:55:0e:08:ed:df:e0:21:9a:1f:08:66: 74:d5:cc:85:d0:38:b1:20:f6:3c:56:15:78:cd:af:02:40:8f: 7a:5f:9b:ea:02:ed:58:00:65:11:1e:5a:83:77:a6:2f:3f:0f: 7c:2a:a5:94:70:9c:e8:2c:14:83:cd:61:dc:3f:92:cb:46:8d: f0:50:c9:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVq4FAQtdzpLIU2/qYIuZSYa11B8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzOVoX DTI3MDMwMzA2MDczOVowMzExMC8GA1UEAxMoNEFENUE5RkQ4RTg5NDY3RDRBM0Q1 RkE5RjY2NEY4RjYwN0U4MzQ1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIXp71afB6ES75D63/dHvcaVSGH4dMM4A0qBMAkM1/fjsCCMFEs1PnfUKdel OCHX8+kOqJsZ8m2oBW4xF2OLPlWYqe3ruK14mS4Xvq7OYd4RmfciBEEbH3ggk63B m9uQDyI6HugaXTlrtWenda7kxmmiqVa8P+eHHO7VBaOvzcs4qBxhUnxIiG3ql1Lx rIbIgbdUeuBYiI3btpEwJagVW/DGXTXrPqKXA+0t8Tu4Qqsjeoh589pUKvr0KsPl rmpn8CAbCNg37sUjQZw58ArUzVOxTJaGgewT9jXUuxgYtISsBa9eJfMwbUGXUGXw sATnkvJ6tylJY784OBSrux+Y89ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRK1an9 jolGfUo9X6n2ZPj2B+g0VTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oOEwDQYJKoZIhvcNAQELBQADggEBAMAdkR0yvtb2ADkp6IuqMhLqUJSp+nvZS7zh mfQPb4rhEejR0+t+TmaSVF/9hUwJCd1GX+mxuMt4in2Ueq+WFOXiies8P0GflPVV yDffbQRdJL4V2lk+wMzRTMsUE456yKeZiU/ARa1RYOvHTM42LXtnwCS7vyNsdQ7y MtIXuzxMEyREhuHrt7hsJ/JV7CUZpfE3iHUwn2cWnnFO05LBAUvXHcrpewPzo+ly Ez4Z3lBlVvddsmzFFAxot2VVDgjt3+Ahmh8IZnTVzIXQOLEg9jxWFXjNrwJAj3pf m+oC7VgAZREeWoN3pi8/D3wqpZRwnOgsFIPNYdw/kstGjfBQye4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:48 2026 by rpki-client