$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142895.roa File: AS142895.roa (raw, json) Hash identifier: XZUsRO8oZ8te/k+DdMOmHnlZvUWXJC2/ZpnXSkWb6G4= Subject key identifier: E0:6A:72:C4:FA:F6:BD:EB:40:11:5B:13:22:0B:B0:64:FD:57:39:5F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 26FCC19001EEB82D32F888B3FA7946C4A19F9D2D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142895.roa Signing time: Wed 04 Mar 2026 06:07:25 +0000 ROA not before: Wed 04 Mar 2026 06:02:25 +0000 ROA not after: Wed 03 Mar 2027 06:07:25 +0000 asID: 142895 IP address blocks: 240a:a0f5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fc:c1:90:01:ee:b8:2d:32:f8:88:b3:fa:79:46:c4:a1:9f:9d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:25 2026 GMT Not After : Mar 3 06:07:25 2027 GMT Subject: CN=E06A72C4FAF6BDEB40115B13220BB064FD57395F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:c4:a5:74:bc:c7:ab:61:a3:e4:8c:ab:e6: a9:9a:53:a4:1d:a9:3a:8c:ac:38:87:fc:29:02:fe: 5a:17:4b:3a:47:ee:23:5f:51:87:fa:16:eb:0d:c6: 38:a4:c5:5a:70:bb:af:c9:98:03:15:07:41:bb:a2: 6c:22:43:39:b4:45:98:b6:e0:10:06:4c:9a:b2:45: 48:f8:89:ea:50:de:f4:91:14:96:98:2a:00:c7:99: 91:7e:4d:a6:de:90:fc:5c:5e:20:65:60:4e:6c:ab: c3:02:78:01:da:2f:37:00:4f:4d:1a:df:e0:06:5b: 14:c3:1b:d7:d3:a1:30:d9:e6:b2:8f:71:90:c6:29: 36:be:a3:0a:d4:cc:69:9b:7d:ef:fb:b6:1c:57:c8: c8:6b:df:9e:92:1f:cf:1b:17:4f:8a:7c:30:8d:b8: db:72:21:2d:94:69:e1:a0:f4:04:42:bd:16:03:5c: 8b:51:05:9d:1a:2d:95:6f:e4:fd:54:48:96:bb:4b: 6b:d3:f1:45:8a:f0:97:a7:c3:73:65:44:70:e8:b6: fa:fa:9b:f2:b8:26:af:7d:d5:ee:15:fa:17:c1:7b: 4c:e0:c8:6b:d9:88:7e:5e:db:d7:08:f0:db:27:32: 02:d7:82:4f:23:83:ce:bc:df:98:df:40:9f:b4:b3: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6A:72:C4:FA:F6:BD:EB:40:11:5B:13:22:0B:B0:64:FD:57:39:5F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0f5::/32 Signature Algorithm: sha256WithRSAEncryption cd:33:1b:c5:58:df:4e:67:d3:72:23:d5:04:37:59:7e:63:07: eb:b1:4b:a9:2a:b1:51:1c:bd:ff:42:08:ff:61:75:3d:a6:1b: a8:13:24:91:7e:2e:ce:4a:57:7e:03:fa:0d:81:e2:4e:6c:95: b6:e9:76:4c:a2:64:04:cb:f1:2e:34:26:34:fb:98:f4:38:32: ed:7a:84:c8:84:17:b2:be:1f:26:b2:49:c1:7b:51:d3:5f:12: 97:25:90:50:7e:9c:e6:1f:13:26:d4:04:c2:1e:1d:20:84:c6: 6b:fb:83:6c:8c:0a:8a:df:80:ed:63:08:98:97:8d:54:ff:45: d0:fd:f1:6c:e0:01:40:48:6d:6b:6e:e3:84:b5:5e:38:8b:3b: 5e:22:95:1e:45:48:9b:92:6e:b4:b3:56:70:2a:d3:19:50:72: 46:2d:9a:a8:f0:3c:b1:dd:5d:61:ad:af:06:ed:86:f5:43:03: c1:18:75:f7:f9:05:e5:16:9e:23:e4:9b:31:93:a6:98:dd:9f: 40:1c:f2:46:fa:8c:ee:47:45:71:18:c2:b7:93:10:02:d9:da: c7:86:6b:3b:ad:31:66:d9:22:d9:b8:1f:6d:08:a1:ac:d2:09: a5:ab:e3:f6:32:c8:29:b2:fd:00:b5:79:72:e3:2d:f3:2a:2c: 29:01:71:46 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJvzBkAHuuC0y+Iiz+nlGxKGfnS0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyNVoX DTI3MDMwMzA2MDcyNVowMzExMC8GA1UEAxMoRTA2QTcyQzRGQUY2QkRFQjQwMTE1 QjEzMjIwQkIwNjRGRDU3Mzk1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9uxKV0vMerYaPkjKvmqZpTpB2pOoysOIf8KQL+WhdLOkfuI19Rh/oW6w3G OKTFWnC7r8mYAxUHQbuibCJDObRFmLbgEAZMmrJFSPiJ6lDe9JEUlpgqAMeZkX5N pt6Q/FxeIGVgTmyrwwJ4AdovNwBPTRrf4AZbFMMb19OhMNnmso9xkMYpNr6jCtTM aZt97/u2HFfIyGvfnpIfzxsXT4p8MI2423IhLZRp4aD0BEK9FgNci1EFnRotlW/k /VRIlrtLa9PxRYrwl6fDc2VEcOi2+vqb8rgmr33V7hX6F8F7TODIa9mIfl7b1wjw 2ycyAteCTyODzrzfmN9An7Szqn0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTganLE +va960ARWxMiC7Bk/Vc5XzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oPUwDQYJKoZIhvcNAQELBQADggEBAM0zG8VY305n03Ij1QQ3WX5jB+uxS6kqsVEc vf9CCP9hdT2mG6gTJJF+Ls5KV34D+g2B4k5slbbpdkyiZATL8S40JjT7mPQ4Mu16 hMiEF7K+HyayScF7UdNfEpclkFB+nOYfEybUBMIeHSCExmv7g2yMCorfgO1jCJiX jVT/RdD98WzgAUBIbWtu44S1XjiLO14ilR5FSJuSbrSzVnAq0xlQckYtmqjwPLHd XWGtrwbthvVDA8EYdff5BeUWniPkmzGTppjdn0Ac8kb6jO5HRXEYwreTEALZ2seG azutMWbZItm4H20IoazSCaWr4/YyyCmy/QC1eXLjLfMqLCkBcUY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:00 2026 by rpki-client