$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142888.roa File: AS142888.roa (raw, json) Hash identifier: HoIRPUagdYpYSpf+jX8JrFUZtCldDbetacxc1zbg9ic= Subject key identifier: 11:4E:59:CA:8B:75:D2:98:89:B2:6B:A8:F5:3C:E5:6B:D9:CE:C0:3C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5FF292B28418A026C5A37E0CEBD85C6F275577F8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142888.roa Signing time: Wed 04 Mar 2026 06:06:22 +0000 ROA not before: Wed 04 Mar 2026 06:01:22 +0000 ROA not after: Wed 03 Mar 2027 06:06:22 +0000 asID: 142888 IP address blocks: 240a:a0ee::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f2:92:b2:84:18:a0:26:c5:a3:7e:0c:eb:d8:5c:6f:27:55:77:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:22 2026 GMT Not After : Mar 3 06:06:22 2027 GMT Subject: CN=114E59CA8B75D29889B26BA8F53CE56BD9CEC03C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:2a:49:bb:63:e6:c6:99:eb:0e:50:e5:a6: ed:2e:b4:93:76:55:a2:8b:3e:c9:7b:fd:47:af:9f: 54:a8:45:da:c8:45:9e:30:f8:ba:c4:23:18:2b:eb: a7:4a:48:0f:8d:4f:f9:01:5b:bf:4c:95:74:5d:a6: 63:f3:8b:b1:06:ff:a8:99:f3:26:d2:04:27:0a:8d: f2:45:c2:07:c5:f1:6b:cc:9c:f4:ba:97:c9:00:75: 83:d2:ef:9c:2e:61:9d:f7:88:a3:74:0c:6b:22:b4: a9:ec:fc:96:11:2c:77:d7:32:24:49:0d:51:13:8b: 25:82:18:d4:33:93:26:9f:25:f4:1e:85:05:30:1a: ec:3c:a6:17:63:c1:82:e0:c7:5f:ac:78:1d:32:a9: 0e:95:d0:eb:b9:2a:26:d4:91:3d:67:a4:7d:3c:03: fb:e1:47:bd:18:d4:bc:4f:ed:c1:32:22:8b:8a:4d: f2:16:9e:88:1e:c2:e9:9a:e0:aa:da:d1:f6:f5:d9: 1a:b3:f5:4f:93:64:96:f1:0b:0f:fb:e4:01:6a:81: fb:8f:cb:5b:57:81:5c:e6:17:86:cb:cc:2c:cd:de: a2:a0:48:8f:ca:79:97:33:15:8e:2d:42:bc:a6:26: f9:ad:9c:d5:e1:61:68:cf:06:27:00:9d:df:bf:17: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4E:59:CA:8B:75:D2:98:89:B2:6B:A8:F5:3C:E5:6B:D9:CE:C0:3C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0ee::/32 Signature Algorithm: sha256WithRSAEncryption ae:40:32:5e:fc:79:54:d2:ee:ca:3f:03:4d:13:7c:93:ba:dd: 51:96:91:4b:5c:e0:ea:88:06:f3:93:11:d5:9f:65:f4:fb:ff: 9b:a5:79:6e:00:6d:5a:22:62:92:9d:02:f4:61:d1:9f:7f:9a: b5:d4:b2:09:62:15:14:25:cb:86:cb:0a:f9:21:37:f5:f4:d6: 28:05:8b:2c:81:32:49:e6:99:7f:22:d6:e7:5b:46:8b:f7:ee: 0a:aa:8b:59:fe:45:0f:af:3e:71:85:97:06:c6:88:a2:00:23: 12:90:70:e3:23:0b:44:98:6f:a9:eb:31:3a:3a:aa:b2:b7:94: f2:7e:86:1a:01:cb:ea:e4:34:26:6e:97:52:81:bc:01:95:00: 1e:52:23:a1:a1:ec:e1:fb:ba:83:c2:5c:e5:03:14:c5:c3:ae: 86:a6:c0:ad:37:ed:17:97:78:26:4c:a8:36:ea:4d:1d:49:ed: 4d:48:3e:31:d0:b2:a0:2d:32:b2:39:ca:61:ed:76:a4:67:23: bf:b8:e1:89:d2:ff:64:90:f2:eb:98:5a:b8:20:7a:2f:3b:55: dd:00:10:bc:87:11:f5:40:7a:0b:d3:71:86:5e:6e:67:57:39: f7:cf:ea:93:92:e4:91:cc:b9:42:de:cc:73:9b:5c:a7:31:f1: c4:7c:e8:9b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX/KSsoQYoCbFo34M69hcbydVd/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEyMloX DTI3MDMwMzA2MDYyMlowMzExMC8GA1UEAxMoMTE0RTU5Q0E4Qjc1RDI5ODg5QjI2 QkE4RjUzQ0U1NkJEOUNFQzAzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJnKkm7Y+bGmesOUOWm7S60k3ZVoos+yXv9R6+fVKhF2shFnjD4usQjGCvr p0pID41P+QFbv0yVdF2mY/OLsQb/qJnzJtIEJwqN8kXCB8Xxa8yc9LqXyQB1g9Lv nC5hnfeIo3QMayK0qez8lhEsd9cyJEkNUROLJYIY1DOTJp8l9B6FBTAa7DymF2PB guDHX6x4HTKpDpXQ67kqJtSRPWekfTwD++FHvRjUvE/twTIii4pN8haeiB7C6Zrg qtrR9vXZGrP1T5NklvELD/vkAWqB+4/LW1eBXOYXhsvMLM3eoqBIj8p5lzMVji1C vKYm+a2c1eFhaM8GJwCd378XPtcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQRTlnK i3XSmImya6j1POVr2c7APDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oO4wDQYJKoZIhvcNAQELBQADggEBAK5AMl78eVTS7so/A00TfJO63VGWkUtc4OqI BvOTEdWfZfT7/5uleW4AbVoiYpKdAvRh0Z9/mrXUsgliFRQly4bLCvkhN/X01igF iyyBMknmmX8i1udbRov37gqqi1n+RQ+vPnGFlwbGiKIAIxKQcOMjC0SYb6nrMTo6 qrK3lPJ+hhoBy+rkNCZul1KBvAGVAB5SI6Gh7OH7uoPCXOUDFMXDroamwK037ReX eCZMqDbqTR1J7U1IPjHQsqAtMrI5ymHtdqRnI7+44YnS/2SQ8uuYWrggei87Vd0A ELyHEfVAegvTcYZebmdXOffP6pOS5JHMuULezHObXKcx8cR86Js= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:55 2026 by rpki-client