$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142905.roa File: AS142905.roa (raw, json) Hash identifier: W5EdObhmDpI5GPekSaGttmf4amok0wtLzpJcFw9fGi0= Subject key identifier: 68:D0:CC:09:35:75:56:71:8B:08:14:B1:BF:D7:86:C3:C3:B0:1F:A2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2089934130F469136E7119B513D99D1F952E36FD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142905.roa Signing time: Wed 04 Mar 2026 06:07:13 +0000 ROA not before: Wed 04 Mar 2026 06:02:13 +0000 ROA not after: Wed 03 Mar 2027 06:07:13 +0000 asID: 142905 IP address blocks: 240a:a0ff::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:89:93:41:30:f4:69:13:6e:71:19:b5:13:d9:9d:1f:95:2e:36:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:13 2026 GMT Not After : Mar 3 06:07:13 2027 GMT Subject: CN=68D0CC09357556718B0814B1BFD786C3C3B01FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:48:ec:55:02:af:dc:cb:c5:a7:e9:18:b8: c5:2c:fe:86:8d:63:68:a9:c0:5d:4d:4f:68:23:0f: a2:2f:dc:9f:d1:de:18:4b:2e:38:46:17:69:20:f2: 5b:79:ce:ef:65:fd:c1:42:51:47:24:97:5e:76:18: 24:c4:e7:55:46:ff:3b:0c:f4:55:3b:c7:69:c3:de: c4:02:f9:8a:55:42:24:74:fd:e1:62:6f:f9:26:46: f8:cd:ae:0d:3a:92:0a:4a:92:f1:e3:1e:db:db:c3: d2:ba:11:f3:c8:7d:14:dd:9b:25:f2:fc:e3:12:f0: 6f:f4:9a:bd:59:29:c9:39:66:12:88:31:f9:38:87: ea:9b:ac:37:f2:c0:c1:1f:29:91:fb:73:64:38:6c: e3:8c:ac:3e:34:34:67:55:21:21:02:6d:86:95:ef: 47:2f:5f:5f:0a:88:dc:e0:54:b8:c9:9c:03:0e:5b: d3:59:fa:1b:92:ee:7f:80:17:1b:b4:99:8b:ae:38: 78:53:2a:94:fc:68:d8:7d:6e:5a:ef:4c:6d:c2:10: 28:eb:40:63:91:8e:2d:e4:4c:b5:2b:12:18:53:86: ed:fa:92:1c:6b:28:64:93:67:07:3d:2e:88:2b:26: bc:e0:b8:86:4b:87:e9:bb:b3:87:e5:08:2a:53:34: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D0:CC:09:35:75:56:71:8B:08:14:B1:BF:D7:86:C3:C3:B0:1F:A2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142905.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a0ff::/32 Signature Algorithm: sha256WithRSAEncryption cf:26:7e:94:1c:40:8d:2c:97:96:1a:77:07:28:42:bc:17:81: 3e:29:74:8f:dd:2d:2b:5d:37:9d:84:aa:e3:1c:1f:7a:b6:b7: f6:e4:02:32:11:24:27:83:a0:1a:c8:01:08:8f:33:1b:f4:69: cc:7c:ab:c1:4c:5d:2a:20:70:51:48:18:b4:7f:50:e9:55:1f: 38:6a:94:ea:11:e1:26:c6:ea:ad:18:5b:64:c3:83:40:35:67: 99:5f:2b:4e:a5:05:aa:45:ce:1a:39:d5:d5:d5:9b:e2:e2:8b: 79:8a:7a:82:e7:b1:4f:91:a0:89:e8:29:2b:09:5e:c2:35:9d: 4f:96:9c:a5:5e:79:bb:2f:52:0f:ca:56:47:97:54:a4:b9:05: 4a:a2:42:72:05:88:d2:3c:85:b1:bc:6a:06:2c:43:be:99:47: be:ca:74:a3:22:bf:22:2a:e4:53:8b:d1:4a:94:8a:40:4d:cf: bf:1d:9a:4e:6c:7b:7d:72:be:e4:f5:52:8e:3c:9d:c6:c6:2c: b0:d9:ca:40:5e:c2:fd:d6:0f:0e:b4:fb:2a:42:0f:67:a6:76: 05:c1:9e:94:d5:63:c8:36:06:01:ea:35:35:50:52:a2:8a:f2: 6f:94:bc:ae:c2:45:a9:7e:0c:cb:1f:24:31:f2:c9:e4:e2:0f: 8a:be:66:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIImTQTD0aRNucRm1E9mdH5UuNv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxM1oX DTI3MDMwMzA2MDcxM1owMzExMC8GA1UEAxMoNjhEMENDMDkzNTc1NTY3MThCMDgx NEIxQkZENzg2QzNDM0IwMUZBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3NSOxVAq/cy8Wn6Ri4xSz+ho1jaKnAXU1PaCMPoi/cn9HeGEsuOEYXaSDy W3nO72X9wUJRRySXXnYYJMTnVUb/Owz0VTvHacPexAL5ilVCJHT94WJv+SZG+M2u DTqSCkqS8eMe29vD0roR88h9FN2bJfL84xLwb/SavVkpyTlmEogx+TiH6pusN/LA wR8pkftzZDhs44ysPjQ0Z1UhIQJthpXvRy9fXwqI3OBUuMmcAw5b01n6G5Luf4AX G7SZi644eFMqlPxo2H1uWu9MbcIQKOtAY5GOLeRMtSsSGFOG7fqSHGsoZJNnBz0u iCsmvOC4hkuH6buzh+UIKlM0b1MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRo0MwJ NXVWcYsIFLG/14bDw7AfojAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oP8wDQYJKoZIhvcNAQELBQADggEBAM8mfpQcQI0sl5YadwcoQrwXgT4pdI/dLStd N52EquMcH3q2t/bkAjIRJCeDoBrIAQiPMxv0acx8q8FMXSogcFFIGLR/UOlVHzhq lOoR4SbG6q0YW2TDg0A1Z5lfK06lBapFzho51dXVm+Lii3mKeoLnsU+RoInoKSsJ XsI1nU+WnKVeebsvUg/KVkeXVKS5BUqiQnIFiNI8hbG8agYsQ76ZR77KdKMivyIq 5FOL0UqUikBNz78dmk5se31yvuT1Uo48ncbGLLDZykBewv3WDw60+ypCD2emdgXB npTVY8g2BgHqNTVQUqKK8m+UvK7CRal+DMsfJDHyyeTiD4q+ZpE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:03 2026 by rpki-client