$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142882.roa File: AS142882.roa (raw, json) Hash identifier: AYTSZL6tEyiuOLdlIYHEz6ruVVlxiOHn1RNks/gqfQI= Subject key identifier: C1:4B:80:F6:62:E6:2C:03:6F:6A:B8:C6:CD:F1:9D:95:0E:6E:9D:FE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30D780E1BB04953693F7A12E5213F2ED8658B542 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142882.roa Signing time: Wed 04 Mar 2026 06:05:49 +0000 ROA not before: Wed 04 Mar 2026 06:00:49 +0000 ROA not after: Wed 03 Mar 2027 06:05:49 +0000 asID: 142882 IP address blocks: 240a:a0e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d7:80:e1:bb:04:95:36:93:f7:a1:2e:52:13:f2:ed:86:58:b5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:49 2026 GMT Not After : Mar 3 06:05:49 2027 GMT Subject: CN=C14B80F662E62C036F6AB8C6CDF19D950E6E9DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:43:74:ae:e0:50:68:01:14:2b:b3:42:96: 5e:50:dd:45:06:2b:ac:06:4b:eb:d9:b0:5b:62:81: ac:9e:e7:dc:36:11:02:52:62:05:8f:9c:53:db:df: 25:4c:e0:7d:bd:78:01:22:7e:bb:38:c2:70:ed:9b: e3:2e:6c:98:aa:f7:d2:14:8d:57:cd:95:29:7e:0b: 08:75:ba:39:83:95:0b:1a:29:6a:dd:47:99:86:6c: 0d:f5:82:a8:49:d2:a8:2d:e1:a5:ba:05:80:e2:fc: 33:40:3b:98:7f:b2:46:6c:fb:c8:e2:1a:42:18:69: 91:6c:11:35:11:e3:c5:58:ba:fb:1a:f3:b5:8e:b0: 30:a5:58:df:d8:91:6e:1c:f6:ed:f8:03:9d:ba:fa: 61:2a:8c:30:b1:d8:3e:a0:1c:ab:92:c2:71:9d:82: 43:8e:39:1d:5c:78:a9:6d:75:67:89:55:db:7f:10: 13:2b:37:c0:35:3f:0f:a2:b1:54:21:51:37:1e:fa: cc:fc:d1:d7:54:e3:42:84:8d:29:9b:38:0a:c1:de: 52:d4:63:e8:a7:3d:a9:09:e9:a5:44:20:f3:a4:e0: e6:ef:06:71:34:df:9f:ab:32:e5:58:71:c5:c0:26: 00:0b:38:4d:06:e9:21:de:86:ee:a7:93:f8:10:17: fd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4B:80:F6:62:E6:2C:03:6F:6A:B8:C6:CD:F1:9D:95:0E:6E:9D:FE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142882.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0e8::/32 Signature Algorithm: sha256WithRSAEncryption d7:4d:43:2c:8f:1c:b7:47:6b:6b:10:ed:c4:8b:e2:25:9f:c2: e3:c1:51:90:5f:6a:90:2c:bf:30:9a:3b:79:83:65:b1:e4:6d: eb:5c:27:b2:5f:80:9c:52:23:58:81:7d:b5:0a:46:0c:01:a5: ef:c2:ff:c7:92:ab:22:8a:34:7d:1d:eb:09:cf:1d:fa:b2:de: bd:fe:af:a2:c4:41:a4:b6:4f:2c:12:7b:c2:68:40:f3:f0:5b: 75:40:d3:01:b7:cd:66:66:ab:49:6a:ed:59:53:f8:5c:f9:05: 36:da:8c:5a:5a:e5:85:a4:22:97:85:bc:c5:2e:d0:b1:ac:bb: 66:1c:6b:77:2c:25:c7:78:8d:f0:91:a8:b6:c2:2d:f9:5a:b1: d3:e1:8c:c1:85:7b:9e:6f:34:11:9a:a3:38:c0:9f:1a:f5:d5: b7:cd:70:46:02:d8:1d:a9:a5:f6:b0:85:b7:32:bf:be:00:02: 48:fd:13:db:82:6e:28:23:40:9e:ec:e3:ff:3f:72:c8:98:8f: 04:44:51:01:0f:e9:ff:2b:5e:47:f6:a4:f2:29:89:af:9a:1a: 85:dc:7c:bc:0a:df:79:52:78:bd:f8:ed:b3:1f:42:65:a4:83: 6b:83:08:1e:c8:76:05:30:03:a2:9a:41:df:aa:2c:39:a1:a0: ca:f9:78:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMNeA4bsElTaT96EuUhPy7YZYtUIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0OVoX DTI3MDMwMzA2MDU0OVowMzExMC8GA1UEAxMoQzE0QjgwRjY2MkU2MkMwMzZGNkFC OEM2Q0RGMTlEOTUwRTZFOURGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxcQ3Su4FBoARQrs0KWXlDdRQYrrAZL69mwW2KBrJ7n3DYRAlJiBY+cU9vf JUzgfb14ASJ+uzjCcO2b4y5smKr30hSNV82VKX4LCHW6OYOVCxopat1HmYZsDfWC qEnSqC3hpboFgOL8M0A7mH+yRmz7yOIaQhhpkWwRNRHjxVi6+xrztY6wMKVY39iR bhz27fgDnbr6YSqMMLHYPqAcq5LCcZ2CQ445HVx4qW11Z4lV238QEys3wDU/D6Kx VCFRNx76zPzR11TjQoSNKZs4CsHeUtRj6Kc9qQnppUQg86Tg5u8GcTTfn6sy5Vhx xcAmAAs4TQbpId6G7qeT+BAX/Y8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTBS4D2 YuYsA29quMbN8Z2VDm6d/jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oOgwDQYJKoZIhvcNAQELBQADggEBANdNQyyPHLdHa2sQ7cSL4iWfwuPBUZBfapAs vzCaO3mDZbHkbetcJ7JfgJxSI1iBfbUKRgwBpe/C/8eSqyKKNH0d6wnPHfqy3r3+ r6LEQaS2TywSe8JoQPPwW3VA0wG3zWZmq0lq7VlT+Fz5BTbajFpa5YWkIpeFvMUu 0LGsu2Yca3csJcd4jfCRqLbCLflasdPhjMGFe55vNBGaozjAnxr11bfNcEYC2B2p pfawhbcyv74AAkj9E9uCbigjQJ7s4/8/csiYjwREUQEP6f8rXkf2pPIpia+aGoXc fLwK33lSeL347bMfQmWkg2uDCB7IdgUwA6KaQd+qLDmhoMr5eEo= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:19 2026 by rpki-client