$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142911.roa File: AS142911.roa (raw, json) Hash identifier: UYtY/7iZnfRXXs0xWHmRiEjg8gA4LN0hCUS9GF+db8k= Subject key identifier: 63:97:57:3F:76:82:03:2A:8E:73:5E:01:46:C1:32:6F:7D:90:A5:9A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1F5144E77284419E06026069F08FF0418D85D0C3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142911.roa Signing time: Wed 04 Mar 2026 06:07:32 +0000 ROA not before: Wed 04 Mar 2026 06:02:32 +0000 ROA not after: Wed 03 Mar 2027 06:07:32 +0000 asID: 142911 IP address blocks: 240a:a105::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:51:44:e7:72:84:41:9e:06:02:60:69:f0:8f:f0:41:8d:85:d0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:32 2026 GMT Not After : Mar 3 06:07:32 2027 GMT Subject: CN=6397573F7682032A8E735E0146C1326F7D90A59A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:01:c3:ea:ac:47:d6:cb:fc:8e:3f:68:24:72: d7:28:26:9e:13:f4:ac:49:4f:0e:fb:8f:5d:b0:93: be:46:82:eb:fa:69:ee:e4:f9:aa:d1:13:46:ae:95: 16:92:2c:e0:ab:c7:4c:e3:43:8d:b0:a6:a6:30:37: 5e:28:d7:87:30:af:e3:54:c7:03:d5:56:bc:83:46: de:1d:cb:1c:02:21:7d:07:c5:a2:d7:cb:c3:f7:27: 7b:74:04:10:10:da:12:d8:31:ef:90:33:3b:49:65: a4:6c:c0:8f:01:fd:d4:e2:a5:a9:1c:0d:25:6b:7e: e0:fb:96:e2:33:d7:a0:0a:1b:3e:39:16:b4:b0:d8: ee:29:20:cd:f7:31:f8:c0:2e:c7:24:97:b4:37:e4: 59:74:dd:0b:b4:82:df:94:50:19:98:f3:97:a4:e6: 22:bd:3f:1c:69:5b:7b:2d:98:cf:6a:f6:8c:77:c0: 6c:f1:09:49:e4:52:77:9a:32:91:33:07:4a:8e:cb: 5c:4a:35:6e:d4:49:23:a8:70:69:d6:ac:6b:73:c7: c2:0a:a8:b0:1e:67:51:31:40:00:a0:96:67:62:c7: c7:2a:9f:f3:c2:1c:48:51:cc:2f:51:c9:79:5f:59: 12:45:27:cf:bb:30:fe:e6:cb:21:5e:07:a6:e4:1d: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:97:57:3F:76:82:03:2A:8E:73:5E:01:46:C1:32:6F:7D:90:A5:9A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142911.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a105::/32 Signature Algorithm: sha256WithRSAEncryption 3d:3d:31:b0:56:83:8d:8c:72:fa:e9:50:d8:11:f5:e6:d4:b8: 53:db:7d:17:8f:79:14:0e:3b:7c:5f:f3:e6:c2:7d:ee:9c:95: 78:7f:8a:83:c8:90:a3:0b:d9:fe:ef:7c:8f:d8:90:ea:5b:21: 76:77:bb:b7:9a:82:5c:f1:0a:85:2f:48:63:66:6b:5e:aa:2d: 49:c5:d9:2c:05:d9:1c:a4:5c:f7:84:a0:9a:79:48:f0:c6:59: 66:db:a5:a8:8c:91:b1:93:2a:2f:f9:04:50:9f:7c:33:94:07: c1:6f:be:94:65:21:b5:96:14:a5:4e:93:63:15:54:ad:02:10: dc:0e:dd:af:d6:3b:c5:46:1d:0f:5c:e0:28:79:88:1b:65:dd: a3:09:78:3d:f2:16:71:2a:46:61:fc:2e:a5:47:28:ef:1a:bc: 14:fa:00:a6:0e:1a:b5:a9:b0:e6:50:14:c2:eb:ea:6b:48:2b: 6a:e4:33:fa:23:76:43:e8:9a:2d:77:7d:52:96:59:3d:d1:cf: 3f:80:a4:23:85:7f:26:4a:db:7e:de:31:e1:f7:38:1a:20:af: 6d:e7:02:ca:06:1b:d2:5a:0e:c4:39:29:98:dd:e3:52:3a:d3: d5:90:1b:5c:f5:a0:6d:86:7a:e4:00:83:e2:d8:f4:0e:d0:26: fb:38:e1:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUH1FE53KEQZ4GAmBp8I/wQY2F0MMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzMloX DTI3MDMwMzA2MDczMlowMzExMC8GA1UEAxMoNjM5NzU3M0Y3NjgyMDMyQThFNzM1 RTAxNDZDMTMyNkY3RDkwQTU5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOoBw+qsR9bL/I4/aCRy1ygmnhP0rElPDvuPXbCTvkaC6/pp7uT5qtETRq6V FpIs4KvHTONDjbCmpjA3XijXhzCv41THA9VWvING3h3LHAIhfQfFotfLw/cne3QE EBDaEtgx75AzO0llpGzAjwH91OKlqRwNJWt+4PuW4jPXoAobPjkWtLDY7ikgzfcx +MAuxySXtDfkWXTdC7SC35RQGZjzl6TmIr0/HGlbey2Yz2r2jHfAbPEJSeRSd5oy kTMHSo7LXEo1btRJI6hwadasa3PHwgqosB5nUTFAAKCWZ2LHxyqf88IcSFHML1HJ eV9ZEkUnz7sw/ubLIV4HpuQdgUkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRjl1c/ doIDKo5zXgFGwTJvfZClmjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oQUwDQYJKoZIhvcNAQELBQADggEBAD09MbBWg42McvrpUNgR9ebUuFPbfRePeRQO O3xf8+bCfe6clXh/ioPIkKML2f7vfI/YkOpbIXZ3u7eaglzxCoUvSGNma16qLUnF 2SwF2RykXPeEoJp5SPDGWWbbpaiMkbGTKi/5BFCffDOUB8FvvpRlIbWWFKVOk2MV VK0CENwO3a/WO8VGHQ9c4Ch5iBtl3aMJeD3yFnEqRmH8LqVHKO8avBT6AKYOGrWp sOZQFMLr6mtIK2rkM/ojdkPomi13fVKWWT3Rzz+ApCOFfyZK237eMeH3OBogr23n AsoGG9JaDsQ5KZjd41I609WQG1z1oG2GeuQAg+LY9A7QJvs44ec= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:56 2026 by rpki-client