$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142904.roa File: AS142904.roa (raw, json) Hash identifier: wevxmfqLsI3g3Yh9km9emICyd/Bj8BbYS+3mYWjgfNE= Subject key identifier: 10:63:C0:11:62:BB:5A:41:0F:7E:0C:19:0B:4D:97:7D:BD:C8:38:C1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7313EAA23E8A3481321E4D92D310EFCB781E05E8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142904.roa Signing time: Wed 04 Mar 2026 06:07:56 +0000 ROA not before: Wed 04 Mar 2026 06:02:56 +0000 ROA not after: Wed 03 Mar 2027 06:07:56 +0000 asID: 142904 IP address blocks: 240a:a0fe::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:13:ea:a2:3e:8a:34:81:32:1e:4d:92:d3:10:ef:cb:78:1e:05:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:56 2026 GMT Not After : Mar 3 06:07:56 2027 GMT Subject: CN=1063C01162BB5A410F7E0C190B4D977DBDC838C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:63:3a:b6:5b:0a:27:95:ca:b6:19:b1:30: ea:79:57:29:be:ef:f2:2d:49:52:ad:ab:77:30:e9: 4c:56:cd:83:a1:8a:10:d9:59:ba:5b:2a:5f:a2:bf: 73:38:9e:a4:5d:92:b8:c3:16:d7:ff:03:aa:8b:fb: 61:e1:9f:83:f2:cb:19:34:4a:33:e9:1c:16:4e:db: 2c:35:51:1b:60:6a:3a:53:0c:6c:02:52:c6:11:c5: 83:ae:99:95:13:3e:11:6c:a2:44:e7:32:07:6e:7e: 9e:fa:37:54:0c:62:f7:d0:fe:18:d2:e2:d9:83:f7: fe:9b:c8:ae:88:bb:d5:e0:47:d4:6e:20:e5:a3:9c: ad:f7:04:da:10:37:1e:8c:6d:f4:a7:2b:b7:c2:07: 9e:99:c9:cb:95:ce:44:c3:a0:36:3a:4e:38:fc:40: ac:85:c5:ad:44:b5:ee:8f:d4:07:74:fc:da:eb:e1: 21:50:16:fc:e9:25:d2:11:e6:7c:78:d4:52:34:5e: bf:45:94:e1:54:e9:35:b3:d8:bc:d0:75:df:56:66: 70:ed:90:7a:e4:df:50:ea:34:14:61:e0:79:57:5f: 2c:ca:82:ad:35:20:26:a5:86:87:e3:b5:75:1a:b3: 4c:47:df:98:a8:8a:88:9f:01:10:3d:3d:79:2a:7e: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:63:C0:11:62:BB:5A:41:0F:7E:0C:19:0B:4D:97:7D:BD:C8:38:C1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142904.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0fe::/32 Signature Algorithm: sha256WithRSAEncryption d7:b3:97:96:92:f9:37:6b:61:e5:cf:a5:10:2c:a9:42:07:cd: 5b:2a:c5:cd:b4:8b:17:fd:ad:4d:8b:34:8d:e6:11:cc:cf:5b: 28:9f:6b:b5:0f:bf:0c:b3:37:7c:31:e1:53:2f:79:09:50:2d: 6d:c8:e4:39:d0:7e:10:cb:79:bc:ef:3d:7b:ed:9d:a1:23:8f: 02:8e:7f:b7:02:73:c3:2e:3c:cd:fe:31:e8:fd:b3:cc:2c:d3: 96:ff:ac:a5:ef:e5:9d:cb:60:0c:a7:a1:72:87:5d:54:15:c9: b5:21:21:f6:93:eb:7d:9f:42:81:6a:71:4d:f5:f2:ab:33:4f: fe:14:04:eb:9d:b3:5d:0b:87:9a:6e:a6:7a:45:af:83:fb:57: 6c:80:80:b8:c4:9e:c9:9a:b7:08:3c:e9:fc:08:e7:de:8f:ea: 33:fe:ee:b8:ee:8a:96:1b:33:bf:07:7c:00:5d:cc:17:05:1a: ab:16:10:4e:fe:94:16:bb:91:a1:53:3d:04:dd:41:15:5d:c8: d3:cf:85:83:47:00:75:c3:0a:da:3f:53:9e:66:ab:e0:07:53: 84:31:dd:0b:be:3f:80:c7:38:b3:7c:23:9a:18:75:89:0d:e9: 1a:de:c7:ef:44:5d:26:44:e9:6b:bf:88:1d:16:9a:63:e7:99: 32:20:6e:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcxPqoj6KNIEyHk2S0xDvy3geBegwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1NloX DTI3MDMwMzA2MDc1NlowMzExMC8GA1UEAxMoMTA2M0MwMTE2MkJCNUE0MTBGN0Uw QzE5MEI0RDk3N0RCREM4MzhDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/cYzq2Wwonlcq2GbEw6nlXKb7v8i1JUq2rdzDpTFbNg6GKENlZulsqX6K/ cziepF2SuMMW1/8Dqov7YeGfg/LLGTRKM+kcFk7bLDVRG2BqOlMMbAJSxhHFg66Z lRM+EWyiROcyB25+nvo3VAxi99D+GNLi2YP3/pvIroi71eBH1G4g5aOcrfcE2hA3 Hoxt9Kcrt8IHnpnJy5XORMOgNjpOOPxArIXFrUS17o/UB3T82uvhIVAW/Okl0hHm fHjUUjRev0WU4VTpNbPYvNB131ZmcO2QeuTfUOo0FGHgeVdfLMqCrTUgJqWGh+O1 dRqzTEffmKiKiJ8BED09eSp++YUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQQY8AR YrtaQQ9+DBkLTZd9vcg4wTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oP4wDQYJKoZIhvcNAQELBQADggEBANezl5aS+TdrYeXPpRAsqUIHzVsqxc20ixf9 rU2LNI3mEczPWyifa7UPvwyzN3wx4VMveQlQLW3I5DnQfhDLebzvPXvtnaEjjwKO f7cCc8MuPM3+Mej9s8ws05b/rKXv5Z3LYAynoXKHXVQVybUhIfaT632fQoFqcU31 8qszT/4UBOuds10Lh5pupnpFr4P7V2yAgLjEnsmatwg86fwI596P6jP+7rjuipYb M78HfABdzBcFGqsWEE7+lBa7kaFTPQTdQRVdyNPPhYNHAHXDCto/U55mq+AHU4Qx 3Qu+P4DHOLN8I5oYdYkN6Rrex+9EXSZE6Wu/iB0WmmPnmTIgbsQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:49 2026 by rpki-client