$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142890.roa File: AS142890.roa (raw, json) Hash identifier: 9vt3ZOmWSuJgy/+CHaiDoe1p9YYBxFJ2Jdkz8noTp8c= Subject key identifier: 00:9B:57:C2:99:13:97:67:3A:DC:59:E0:F2:F7:FD:65:EC:51:2F:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6D618EFD0F0381ED319A68CC73F7096D85F75C3F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142890.roa Signing time: Wed 04 Mar 2026 06:07:07 +0000 ROA not before: Wed 04 Mar 2026 06:02:07 +0000 ROA not after: Wed 03 Mar 2027 06:07:07 +0000 asID: 142890 IP address blocks: 240a:a0f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:61:8e:fd:0f:03:81:ed:31:9a:68:cc:73:f7:09:6d:85:f7:5c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:07 2026 GMT Not After : Mar 3 06:07:07 2027 GMT Subject: CN=009B57C2991397673ADC59E0F2F7FD65EC512FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:2e:8f:9f:c7:49:97:21:61:bb:7d:19:a3: 02:8a:23:96:dc:77:2e:1a:29:26:92:f6:77:8b:73: 27:52:a1:0f:7d:a2:19:61:ac:6f:83:48:e7:66:0a: 1b:a8:0e:8d:8d:0e:9f:d8:3d:02:29:23:50:45:59: 23:66:da:63:13:07:80:0c:73:bc:bb:4b:9a:f1:ca: 69:96:f3:c3:ba:34:61:34:62:b6:06:55:e5:93:b9: 50:ae:b2:1a:f1:0a:59:77:e1:a3:3f:87:20:59:84: 48:f8:dc:ec:57:92:ce:7e:fc:f5:72:34:fb:37:4d: 57:93:37:0a:62:de:c8:31:2b:ca:4d:b6:bf:45:db: 68:b7:0c:c3:d2:c6:b9:7b:66:b2:0c:84:7a:b1:79: 87:1e:6a:cb:65:d5:bc:bb:32:47:d7:36:80:a6:61: ad:8a:e3:bb:de:f2:07:da:46:68:33:b4:52:75:a3: 83:a6:b7:f8:0f:a9:94:57:3a:dd:8a:f7:f0:dc:e9: ab:8b:f8:3d:59:07:cf:0e:63:f3:66:ea:99:e7:9d: a6:2f:8c:0d:e2:1e:ce:31:ad:ce:0f:39:bb:d6:28: ed:f2:5e:b0:7f:df:e9:10:ba:18:13:22:b9:e1:51: 5d:fe:9e:aa:fa:24:96:14:1f:fe:e3:48:e8:be:7e: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9B:57:C2:99:13:97:67:3A:DC:59:E0:F2:F7:FD:65:EC:51:2F:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142890.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0f0::/32 Signature Algorithm: sha256WithRSAEncryption b8:f5:dd:dd:bb:03:00:1a:ca:ee:81:a0:20:1b:8c:9e:48:f2: e2:7c:47:e9:55:e0:19:03:d7:71:9d:8c:df:5d:c4:22:14:04: 43:15:9e:a8:ee:c6:26:53:5c:59:90:71:0a:53:82:d0:5b:7a: d2:b3:2d:d6:13:87:87:59:97:5a:e5:d7:51:8f:2b:16:39:e5: 83:09:22:93:9e:04:08:c8:b7:59:43:98:e0:dd:72:30:7a:e4: 07:aa:66:18:3d:20:44:2b:f0:c6:03:6d:7c:33:c4:a4:99:c0: be:86:21:a2:5c:af:bf:b3:c1:9e:1f:c0:81:fb:33:fd:14:65: 8b:0e:ae:f6:41:6f:e6:a3:1d:3f:c0:ff:2b:28:d4:8f:18:f5: 47:82:50:a0:ff:bb:95:75:d9:54:fc:a9:88:de:7d:71:60:bb: a0:1a:f1:24:57:fb:5d:75:ea:dc:30:2a:03:d0:b0:e5:25:96: 6a:d9:4b:af:c1:d1:3e:17:1c:33:27:f2:71:da:bb:32:b4:0e: b6:aa:91:f2:24:c3:1c:24:3a:a0:8a:f0:a2:48:3f:a3:77:8e: 95:e2:98:ca:1b:ac:2f:3f:dc:28:4f:dc:8c:39:4e:d7:ea:fe: 61:d7:cf:36:57:6d:e9:7c:4d:e7:83:bb:c2:ae:11:aa:77:2e: 9d:0c:0f:b6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbWGO/Q8Dge0xmmjMc/cJbYX3XD8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwN1oX DTI3MDMwMzA2MDcwN1owMzExMC8GA1UEAxMoMDA5QjU3QzI5OTEzOTc2NzNBREM1 OUUwRjJGN0ZENjVFQzUxMkZBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6WLo+fx0mXIWG7fRmjAoojltx3LhopJpL2d4tzJ1KhD32iGWGsb4NI52YK G6gOjY0On9g9AikjUEVZI2baYxMHgAxzvLtLmvHKaZbzw7o0YTRitgZV5ZO5UK6y GvEKWXfhoz+HIFmESPjc7FeSzn789XI0+zdNV5M3CmLeyDEryk22v0XbaLcMw9LG uXtmsgyEerF5hx5qy2XVvLsyR9c2gKZhrYrju97yB9pGaDO0UnWjg6a3+A+plFc6 3Yr38Nzpq4v4PVkHzw5j82bqmeedpi+MDeIezjGtzg85u9Yo7fJesH/f6RC6GBMi ueFRXf6eqvoklhQf/uNI6L5+ijUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQAm1fC mROXZzrcWeDy9/1l7FEvozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oPAwDQYJKoZIhvcNAQELBQADggEBALj13d27AwAayu6BoCAbjJ5I8uJ8R+lV4BkD 13GdjN9dxCIUBEMVnqjuxiZTXFmQcQpTgtBbetKzLdYTh4dZl1rl11GPKxY55YMJ IpOeBAjIt1lDmODdcjB65AeqZhg9IEQr8MYDbXwzxKSZwL6GIaJcr7+zwZ4fwIH7 M/0UZYsOrvZBb+ajHT/A/yso1I8Y9UeCUKD/u5V12VT8qYjefXFgu6Aa8SRX+111 6twwKgPQsOUllmrZS6/B0T4XHDMn8nHauzK0DraqkfIkwxwkOqCK8KJIP6N3jpXi mMobrC8/3ChP3Iw5Ttfq/mHXzzZXbel8TeeDu8KuEap3Lp0MD7Y= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:48 2026 by rpki-client