$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142885.roa File: AS142885.roa (raw, json) Hash identifier: E+AAQSKiSVyqu23T9wf7IL0Ui1wFM/8fIKHLrdfrhxI= Subject key identifier: BF:1D:B3:B9:8D:1B:0A:B5:3E:B8:2F:B1:BA:3A:6C:32:64:F1:55:CD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: BB932742E797847EE3CC57AA88350694278664 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142885.roa Signing time: Wed 04 Mar 2026 06:06:31 +0000 ROA not before: Wed 04 Mar 2026 06:01:31 +0000 ROA not after: Wed 03 Mar 2027 06:06:31 +0000 asID: 142885 IP address blocks: 240a:a0eb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bb:93:27:42:e7:97:84:7e:e3:cc:57:aa:88:35:06:94:27:86:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:31 2026 GMT Not After : Mar 3 06:06:31 2027 GMT Subject: CN=BF1DB3B98D1B0AB53EB82FB1BA3A6C3264F155CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:b5:90:ce:90:c6:83:f6:c0:00:49:26:1d: e3:73:1f:44:6a:ca:12:a7:ef:2b:3b:86:68:d9:da: cf:30:96:3a:76:8d:bc:3e:ff:6c:c9:c1:a7:1c:dc: dc:e2:38:b1:2f:36:23:ba:45:6a:84:e4:db:1a:e0: 91:f9:25:1d:15:ac:9c:93:05:15:e0:e8:1b:71:aa: 01:b9:8d:aa:06:18:dd:95:08:3c:ca:a4:e2:63:15: a2:b3:6a:0b:0f:dd:24:cf:a6:63:c5:33:91:b6:43: d6:9d:87:85:d9:6d:de:a1:92:c2:1c:44:cb:3b:99: ae:3e:8f:e8:ae:f2:3b:fc:78:08:31:b9:49:43:42: 6b:f2:68:f9:97:bb:f3:de:cb:64:f4:ed:72:99:0c: 49:d5:3f:a4:fa:fa:23:db:24:6a:7e:e1:b0:5f:79: e8:3b:2e:44:a8:3e:34:66:14:3c:e1:73:4f:ad:bd: d7:a9:63:60:ae:ff:09:79:94:fb:18:f0:13:b5:57: 4d:58:a2:fe:53:23:3d:87:ed:69:75:76:fd:70:7c: bd:26:ce:de:d5:8e:62:06:fb:9b:28:bb:64:47:03: 12:1e:e9:14:55:df:86:c3:24:55:03:ef:b4:66:7a: 19:18:d1:87:ff:36:51:cf:60:8e:8f:81:a1:3a:1e: 7b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1D:B3:B9:8D:1B:0A:B5:3E:B8:2F:B1:BA:3A:6C:32:64:F1:55:CD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142885.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0eb::/32 Signature Algorithm: sha256WithRSAEncryption c9:f1:9c:eb:d8:f7:f6:e8:c5:4f:a4:37:a3:fb:97:ff:66:23: ae:f2:4e:df:da:0e:89:ea:cf:28:f5:4e:13:f2:ad:ee:09:06: 72:00:5f:ec:db:8a:ee:46:00:c7:24:a2:4b:86:19:40:38:2a: 39:0c:fb:2d:5a:cd:3a:a9:6a:d7:52:4e:26:9d:6d:ac:dd:25: 70:a3:14:c8:91:2f:cd:74:55:ff:fc:a2:0a:35:93:70:2a:60: 6d:2f:d3:93:6c:2d:8d:4a:7d:e3:0f:55:b8:f9:4d:ed:7b:df: f0:18:c1:75:68:c7:54:e0:35:ee:ee:f7:ae:27:86:06:83:43: ec:6b:4a:97:76:6e:14:b8:f0:62:0c:ad:c6:8a:aa:c0:6f:8f: 09:82:58:c5:b6:66:dc:53:16:06:7b:c6:c4:8d:ed:24:ea:e1: 4b:4c:1a:8b:db:02:98:c6:b1:4b:39:86:ba:2d:c5:74:4d:28: 8b:49:b2:a8:32:cc:6f:8c:7b:e2:76:e8:1b:c5:e6:f2:4c:5c: 4c:d7:8f:7c:e4:85:b1:c2:9f:e9:a6:fa:52:5f:cd:4a:45:e0: 95:88:40:9a:e3:2a:c5:4e:43:8c:70:54:14:3a:75:da:07:95: c3:fb:05:7f:cf:b2:ed:ca:98:be:12:03:6a:51:ce:ce:50:a1: 1d:b8:98:2a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUALuTJ0Lnl4R+48xXqog1BpQnhmQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzMVoX DTI3MDMwMzA2MDYzMVowMzExMC8GA1UEAxMoQkYxREIzQjk4RDFCMEFCNTNFQjgy RkIxQkEzQTZDMzI2NEYxNTVDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5utZDOkMaD9sAASSYd43MfRGrKEqfvKzuGaNnazzCWOnaNvD7/bMnBpxzc 3OI4sS82I7pFaoTk2xrgkfklHRWsnJMFFeDoG3GqAbmNqgYY3ZUIPMqk4mMVorNq Cw/dJM+mY8UzkbZD1p2Hhdlt3qGSwhxEyzuZrj6P6K7yO/x4CDG5SUNCa/Jo+Ze7 897LZPTtcpkMSdU/pPr6I9skan7hsF956DsuRKg+NGYUPOFzT62916ljYK7/CXmU +xjwE7VXTVii/lMjPYftaXV2/XB8vSbO3tWOYgb7myi7ZEcDEh7pFFXfhsMkVQPv tGZ6GRjRh/82Uc9gjo+BoToee9sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS/HbO5 jRsKtT64L7G6OmwyZPFVzTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oOswDQYJKoZIhvcNAQELBQADggEBAMnxnOvY9/boxU+kN6P7l/9mI67yTt/aDonq zyj1ThPyre4JBnIAX+zbiu5GAMckokuGGUA4KjkM+y1azTqpatdSTiadbazdJXCj FMiRL810Vf/8ogo1k3AqYG0v05NsLY1KfeMPVbj5Te173/AYwXVox1TgNe7u964n hgaDQ+xrSpd2bhS48GIMrcaKqsBvjwmCWMW2ZtxTFgZ7xsSN7STq4UtMGovbApjG sUs5hrotxXRNKItJsqgyzG+Me+J26BvF5vJMXEzXj3zkhbHCn+mm+lJfzUpF4JWI QJrjKsVOQ4xwVBQ6ddoHlcP7BX/Psu3KmL4SA2pRzs5QoR24mCo= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:32 2026 by rpki-client