$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142899.roa File: AS142899.roa (raw, json) Hash identifier: sHvr9+2yVj9n45ASoxxNky/U4ot2ZjWt0ioOGxq4gIA= Subject key identifier: 42:39:B7:2E:BB:C8:08:2F:60:E5:A3:6E:11:7A:F9:B7:F4:B0:3A:52 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 32130BC520821806881AB3D84B4A8EE60A497FDA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142899.roa Signing time: Wed 04 Mar 2026 06:06:56 +0000 ROA not before: Wed 04 Mar 2026 06:01:56 +0000 ROA not after: Wed 03 Mar 2027 06:06:56 +0000 asID: 142899 IP address blocks: 240a:a0f9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:13:0b:c5:20:82:18:06:88:1a:b3:d8:4b:4a:8e:e6:0a:49:7f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:56 2026 GMT Not After : Mar 3 06:06:56 2027 GMT Subject: CN=4239B72EBBC8082F60E5A36E117AF9B7F4B03A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9b:42:f5:a5:d8:8c:de:99:c4:38:41:05:d8: f6:37:eb:77:84:ee:bc:5f:e2:1d:a3:3b:c3:17:af: 43:ad:ff:e1:63:14:9c:18:de:c1:a1:cc:ce:30:98: dd:e6:d1:9e:d0:ea:8a:e3:f7:01:ce:b4:37:01:7c: 8b:9c:3c:82:fc:f0:ba:46:c9:c7:24:47:e8:be:8d: 0e:3f:d4:07:b2:61:c8:bd:f5:5a:80:09:6a:29:0d: 52:27:83:d3:78:8d:a0:e8:8f:df:b4:51:6f:7e:c5: 91:e4:27:b4:d7:66:18:02:80:f2:6b:3b:06:75:15: fe:ce:19:b6:8e:af:c9:54:68:7b:e0:e1:fa:bc:d5: 2c:26:4d:0a:b7:18:ac:ad:fb:e1:2a:3d:46:1b:20: 8c:8e:c4:b2:2e:93:04:7b:dd:d2:b5:5a:c4:23:6f: fb:e9:37:bf:bd:3b:45:15:25:22:ec:d8:2f:37:1f: ea:be:7b:51:4c:c5:9f:ec:ef:74:6e:5d:ad:64:20: 5f:b1:14:ed:c4:86:58:e2:10:e4:7d:20:e0:04:dc: 12:30:1b:54:cb:ab:cc:26:2b:db:3a:ea:ba:5f:28: 8f:e3:3e:8e:17:ca:d9:10:ff:2d:79:e0:93:bc:8c: 17:f9:60:4a:5b:1e:b6:e0:8d:fd:50:9b:42:65:c8: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:39:B7:2E:BB:C8:08:2F:60:E5:A3:6E:11:7A:F9:B7:F4:B0:3A:52 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142899.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0f9::/32 Signature Algorithm: sha256WithRSAEncryption 72:52:54:32:0d:07:8c:91:1e:f6:a5:8e:91:6e:54:0e:2c:7d: b7:7b:6d:7a:b6:84:81:2c:6f:47:4a:97:cd:f0:53:7b:a8:b0: f1:ff:54:df:6b:e1:65:b9:f7:1a:98:86:b7:c6:5e:e2:47:a9: 5d:b9:7f:49:46:2c:f0:d1:62:16:cf:95:34:f6:6c:ee:7f:4f: ac:2e:2b:d7:2c:49:bf:a3:56:79:d9:26:68:29:93:37:81:34: 75:51:9f:e4:93:8d:c6:b4:12:14:d4:b6:e8:7d:a9:e7:a3:05: af:de:ef:59:cf:41:30:28:5c:e7:63:84:2f:06:22:bb:9a:ac: 5b:0b:95:83:76:43:89:f1:d8:17:e6:64:48:79:7c:2d:65:5a: 41:02:f4:16:bd:dc:bc:42:98:2c:ad:92:05:63:0e:89:6b:48: fe:17:cd:b2:c1:40:c8:6d:26:d0:a2:cb:2d:db:77:f1:1f:07: 4b:9e:29:01:4a:8c:47:a9:5c:1d:0e:d4:37:7a:65:10:57:23: 9e:29:44:d0:93:5d:3f:8e:fd:5e:46:05:d4:b6:c3:d3:62:76: 20:08:a3:ab:52:0f:74:10:fc:ee:54:c6:43:81:df:d8:cf:c9: 1c:cf:4f:8e:08:5a:5e:d9:35:20:ea:2a:74:59:d3:73:19:74: 4e:81:72:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMhMLxSCCGAaIGrPYS0qO5gpJf9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1NloX DTI3MDMwMzA2MDY1NlowMzExMC8GA1UEAxMoNDIzOUI3MkVCQkM4MDgyRjYwRTVB MzZFMTE3QUY5QjdGNEIwM0E1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJObQvWl2IzemcQ4QQXY9jfrd4TuvF/iHaM7wxevQ63/4WMUnBjewaHMzjCY 3ebRntDqiuP3Ac60NwF8i5w8gvzwukbJxyRH6L6NDj/UB7JhyL31WoAJaikNUieD 03iNoOiP37RRb37FkeQntNdmGAKA8ms7BnUV/s4Zto6vyVRoe+Dh+rzVLCZNCrcY rK374So9RhsgjI7Esi6TBHvd0rVaxCNv++k3v707RRUlIuzYLzcf6r57UUzFn+zv dG5drWQgX7EU7cSGWOIQ5H0g4ATcEjAbVMurzCYr2zrqul8oj+M+jhfK2RD/LXng k7yMF/lgSlsetuCN/VCbQmXIYNMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRCObcu u8gIL2Dlo24Revm39LA6UjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjg5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oPkwDQYJKoZIhvcNAQELBQADggEBAHJSVDINB4yRHvaljpFuVA4sfbd7bXq2hIEs b0dKl83wU3uosPH/VN9r4WW59xqYhrfGXuJHqV25f0lGLPDRYhbPlTT2bO5/T6wu K9csSb+jVnnZJmgpkzeBNHVRn+STjca0EhTUtuh9qeejBa/e71nPQTAoXOdjhC8G IruarFsLlYN2Q4nx2BfmZEh5fC1lWkEC9Ba93LxCmCytkgVjDolrSP4XzbLBQMht JtCiyy3bd/EfB0ueKQFKjEepXB0O1Dd6ZRBXI54pRNCTXT+O/V5GBdS2w9NidiAI o6tSD3QQ/O5UxkOB39jPyRzPT44IWl7ZNSDqKnRZ03MZdE6Bch0= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:04 2026 by rpki-client