$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142884.roa File: AS142884.roa (raw, json) Hash identifier: iu45CLlJi4C8rGChvOT4+Y8vFNab2e+ZDz/Oyh4NyGk= Subject key identifier: E1:FB:58:F8:02:D0:27:D0:F5:D7:1C:3C:33:7F:01:89:37:C1:C0:22 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0EA098CDADD9E7C623FE0F97B80B84DBEC318DC7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142884.roa Signing time: Wed 04 Mar 2026 06:06:20 +0000 ROA not before: Wed 04 Mar 2026 06:01:20 +0000 ROA not after: Wed 03 Mar 2027 06:06:20 +0000 asID: 142884 IP address blocks: 240a:a0ea::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a0:98:cd:ad:d9:e7:c6:23:fe:0f:97:b8:0b:84:db:ec:31:8d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:20 2026 GMT Not After : Mar 3 06:06:20 2027 GMT Subject: CN=E1FB58F802D027D0F5D71C3C337F018937C1C022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:fb:c2:53:26:e8:df:df:fb:9a:a3:b0:22: 41:44:c9:32:1e:ad:1f:5d:da:86:d3:e5:ae:e4:24: 83:b2:87:ff:8f:14:4c:b2:67:9f:48:a2:38:62:fe: fb:94:da:c5:1a:6d:d1:4a:aa:cf:d3:82:7c:9a:6c: 17:48:ed:39:cc:2a:05:f1:39:82:ac:38:8a:7f:a7: 1f:73:ed:63:62:d9:7d:f8:ec:38:a9:6c:e4:34:26: 88:34:87:83:e9:15:22:30:82:45:30:52:52:f3:de: af:c9:38:4b:b1:39:af:39:7d:17:1c:1b:45:ef:20: 56:14:c7:13:f8:ce:dc:60:e2:91:96:6f:35:d0:47: 9e:05:93:68:fe:d5:a2:54:b8:64:aa:90:be:77:14: 06:68:65:a5:ce:5f:d6:ed:38:ca:53:8d:ae:62:c2: 86:18:0b:22:24:74:b4:39:d5:cc:69:1e:1b:e1:b6: 9a:92:bf:21:df:b9:07:95:9c:53:62:c2:09:02:cb: 17:a5:46:6d:a8:ba:35:80:2c:e4:1a:e2:d1:ad:41: 2b:94:82:ea:ba:a0:81:60:4b:8b:54:0f:06:73:0e: 99:89:76:c3:dd:29:84:57:b1:3e:f7:66:f6:52:f2: 44:75:9c:45:39:e1:be:e4:2c:00:78:21:fa:47:60: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FB:58:F8:02:D0:27:D0:F5:D7:1C:3C:33:7F:01:89:37:C1:C0:22 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142884.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0ea::/32 Signature Algorithm: sha256WithRSAEncryption 35:67:5b:7f:87:e7:4c:1a:69:37:75:32:ae:98:3d:03:32:85: 59:a6:67:b4:e1:77:fa:f2:b7:31:26:c0:af:2d:ba:bd:3c:a4: d3:a1:3f:d9:32:f0:6d:fe:d6:32:ed:55:ba:62:c4:42:66:be: cc:c8:29:c7:e8:7f:27:a3:34:26:c5:75:fe:9a:2c:69:2f:9c: 0f:c7:ed:ae:72:b3:e7:00:b1:15:25:da:5b:49:be:5d:59:54: c1:5b:0d:50:6e:27:a8:db:09:68:a8:23:cf:7d:96:7a:4d:07: 3d:f8:26:25:5f:1f:3d:e9:30:ec:b9:3d:e3:48:ce:41:92:9c: 66:ff:12:5d:5d:71:b1:81:e5:13:6b:31:09:ae:07:58:bb:9a: f8:87:90:94:d7:1d:c7:ca:f8:74:f9:2e:18:97:36:af:4f:4b: 63:eb:54:80:12:d4:8e:49:04:3c:4c:93:95:72:a6:a4:c5:a2: 0c:cf:b7:5d:0f:27:32:3c:be:91:70:36:88:c2:6f:f9:8d:74: d9:5f:77:57:29:c9:32:3e:03:70:71:d9:97:8a:0b:25:04:70: 33:60:6c:6a:03:c0:ea:12:63:ce:cf:6f:6a:fd:d4:23:e5:45: 8b:05:8e:6d:ca:12:01:f9:af:63:7d:aa:27:b4:3c:1a:d1:c6: a0:38:bb:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDqCYza3Z58Yj/g+XuAuE2+wxjccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyMFoX DTI3MDMwMzA2MDYyMFowMzExMC8GA1UEAxMoRTFGQjU4RjgwMkQwMjdEMEY1RDcx QzNDMzM3RjAxODkzN0MxQzAyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlP+8JTJujf3/uao7AiQUTJMh6tH13ahtPlruQkg7KH/48UTLJnn0iiOGL+ +5TaxRpt0Uqqz9OCfJpsF0jtOcwqBfE5gqw4in+nH3PtY2LZffjsOKls5DQmiDSH g+kVIjCCRTBSUvPer8k4S7E5rzl9FxwbRe8gVhTHE/jO3GDikZZvNdBHngWTaP7V olS4ZKqQvncUBmhlpc5f1u04ylONrmLChhgLIiR0tDnVzGkeG+G2mpK/Id+5B5Wc U2LCCQLLF6VGbai6NYAs5Bri0a1BK5SC6rqggWBLi1QPBnMOmYl2w90phFexPvdm 9lLyRHWcRTnhvuQsAHgh+kdgfvUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTh+1j4 AtAn0PXXHDwzfwGJN8HAIjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oOowDQYJKoZIhvcNAQELBQADggEBADVnW3+H50waaTd1Mq6YPQMyhVmmZ7Thd/ry tzEmwK8tur08pNOhP9ky8G3+1jLtVbpixEJmvszIKcfofyejNCbFdf6aLGkvnA/H 7a5ys+cAsRUl2ltJvl1ZVMFbDVBuJ6jbCWioI899lnpNBz34JiVfHz3pMOy5PeNI zkGSnGb/El1dcbGB5RNrMQmuB1i7mviHkJTXHcfK+HT5LhiXNq9PS2PrVIAS1I5J BDxMk5VypqTFogzPt10PJzI8vpFwNojCb/mNdNlfd1cpyTI+A3Bx2ZeKCyUEcDNg bGoDwOoSY87Pb2r91CPlRYsFjm3KEgH5r2N9qie0PBrRxqA4u2Y= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:17 2026 by rpki-client