$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142892.roa File: AS142892.roa (raw, json) Hash identifier: 5DK4KfzQ+fH0RQapGNgAWE4FkIi9HAVHq8Kjkto+/L0= Subject key identifier: A7:E5:5E:4D:90:64:35:24:D6:15:22:B7:69:6D:69:35:71:FC:EE:4D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4F6069F04C4E4457A329D73EE74EA788A6B2A701 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142892.roa Signing time: Wed 04 Mar 2026 06:05:21 +0000 ROA not before: Wed 04 Mar 2026 06:00:21 +0000 ROA not after: Wed 03 Mar 2027 06:05:21 +0000 asID: 142892 IP address blocks: 240a:a0f2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:60:69:f0:4c:4e:44:57:a3:29:d7:3e:e7:4e:a7:88:a6:b2:a7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:21 2026 GMT Not After : Mar 3 06:05:21 2027 GMT Subject: CN=A7E55E4D90643524D61522B7696D693571FCEE4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:6e:3e:78:4f:76:95:21:f2:a0:18:68:8c: dc:05:e8:bd:dd:7d:20:dc:f6:c4:f1:7e:19:f5:d8: df:67:af:09:33:5e:a3:a1:55:d6:3c:52:e3:5c:7d: c0:2a:6a:be:6f:9e:3c:27:2b:91:ab:ad:86:d8:f9: 23:e8:a9:c2:09:8e:35:1f:43:7f:d9:e3:99:91:d2: 4f:45:1b:55:0d:ff:f4:47:13:5f:e8:1a:4a:98:4d: 04:90:d7:e0:7a:14:f0:a5:aa:b0:f6:02:ee:82:39: 0f:92:e7:21:37:4a:62:2a:f0:7f:96:c6:0b:8e:1b: 9d:c6:05:8e:cf:0a:a7:b2:5a:e7:71:58:d4:29:01: de:54:e1:94:ed:ff:7f:6f:e3:79:76:8d:b0:df:13: f6:a4:aa:87:d4:69:07:42:92:4d:83:13:c2:2e:61: 11:f8:aa:30:97:05:e7:40:cd:03:27:f5:41:39:de: 35:02:89:6d:0f:da:01:7a:9b:aa:69:7a:32:5d:5c: 61:f3:85:ac:fb:ed:30:63:50:67:06:b2:b8:ef:74: f7:26:82:96:65:64:d0:1b:ef:11:f3:21:b8:4e:16: a5:5b:a2:9c:af:d3:7a:b6:aa:c4:c2:bf:7f:ff:a3: a9:a6:4e:8c:28:39:e4:67:87:fd:05:b2:8c:13:6c: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E5:5E:4D:90:64:35:24:D6:15:22:B7:69:6D:69:35:71:FC:EE:4D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142892.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0f2::/32 Signature Algorithm: sha256WithRSAEncryption ad:16:00:b4:06:92:39:7d:e3:bb:03:a5:7c:de:fe:33:7c:f9: 18:09:bc:55:88:af:3b:be:09:7f:58:27:26:c8:37:90:04:24: 6f:5b:27:02:68:ca:ba:fa:17:19:9a:1b:45:59:5b:21:5b:9b: 97:2a:8b:0e:bc:d8:7c:c8:e1:d1:e1:bd:af:a2:cb:a4:b2:2b: f7:d9:fa:16:ca:5d:27:4b:7d:5b:69:fb:48:89:69:6e:1e:16: 1b:9a:47:a3:4f:be:bc:0e:c4:56:84:e1:88:d2:e6:cf:ed:e0: 4e:d4:96:63:21:83:c8:27:5a:6b:77:05:63:42:bb:91:38:c1: f0:0f:c8:f1:04:8a:62:d7:53:dd:3a:80:52:ec:48:08:1b:ac: c0:33:9a:cd:db:e6:23:21:1f:7a:1f:4a:f0:0b:85:11:99:6f: a3:90:1a:11:3f:1b:f7:3d:ed:7d:4f:9c:25:3d:44:eb:b7:df: 58:58:51:09:9f:9c:cb:6b:b4:41:47:64:c3:34:ba:0b:66:37: a2:c5:47:6b:3b:2f:77:f2:8a:6e:d5:72:b5:de:50:ee:59:38: 82:9b:16:fd:40:69:71:9b:f8:8c:a0:e0:34:60:b3:cc:a4:85: 9d:3f:de:5f:2b:21:1a:82:26:1e:13:80:e5:79:03:4e:60:89: 8c:ac:a0:2a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUT2Bp8ExORFejKdc+506niKaypwEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyMVoX DTI3MDMwMzA2MDUyMVowMzExMC8GA1UEAxMoQTdFNTVFNEQ5MDY0MzUyNEQ2MTUy MkI3Njk2RDY5MzU3MUZDRUU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMicbj54T3aVIfKgGGiM3AXovd19INz2xPF+GfXY32evCTNeo6FV1jxS41x9 wCpqvm+ePCcrkauthtj5I+ipwgmONR9Df9njmZHST0UbVQ3/9EcTX+gaSphNBJDX 4HoU8KWqsPYC7oI5D5LnITdKYirwf5bGC44bncYFjs8Kp7Ja53FY1CkB3lThlO3/ f2/jeXaNsN8T9qSqh9RpB0KSTYMTwi5hEfiqMJcF50DNAyf1QTneNQKJbQ/aAXqb qml6Ml1cYfOFrPvtMGNQZwayuO909yaClmVk0BvvEfMhuE4WpVuinK/TeraqxMK/ f/+jqaZOjCg55GeH/QWyjBNsbgcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSn5V5N kGQ1JNYVIrdpbWk1cfzuTTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oPIwDQYJKoZIhvcNAQELBQADggEBAK0WALQGkjl947sDpXze/jN8+RgJvFWIrzu+ CX9YJybIN5AEJG9bJwJoyrr6FxmaG0VZWyFbm5cqiw682HzI4dHhva+iy6SyK/fZ +hbKXSdLfVtp+0iJaW4eFhuaR6NPvrwOxFaE4YjS5s/t4E7UlmMhg8gnWmt3BWNC u5E4wfAPyPEEimLXU906gFLsSAgbrMAzms3b5iMhH3ofSvALhRGZb6OQGhE/G/c9 7X1PnCU9ROu331hYUQmfnMtrtEFHZMM0ugtmN6LFR2s7L3fyim7VcrXeUO5ZOIKb Fv1AaXGb+Iyg4DRgs8ykhZ0/3l8rIRqCJh4TgOV5A05giYysoCo= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:48 2026 by rpki-client