$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142922.roa File: AS142922.roa (raw, json) Hash identifier: TxMFTNuFwWxwW0Zd+csVUM4VFNAtMFhULLJfjmPceC4= Subject key identifier: 7A:2A:A6:52:64:B7:AE:1D:B8:30:35:99:AB:73:8B:3D:9E:ED:3C:15 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F258E07BAB3D3E535E34DC4AB017CF58EB56096 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142922.roa Signing time: Wed 04 Mar 2026 06:06:01 +0000 ROA not before: Wed 04 Mar 2026 06:01:01 +0000 ROA not after: Wed 03 Mar 2027 06:06:01 +0000 asID: 142922 IP address blocks: 240a:a110::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:25:8e:07:ba:b3:d3:e5:35:e3:4d:c4:ab:01:7c:f5:8e:b5:60:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:01 2026 GMT Not After : Mar 3 06:06:01 2027 GMT Subject: CN=7A2AA65264B7AE1DB8303599AB738B3D9EED3C15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:e0:5f:96:08:0e:53:4d:1c:56:f4:fa:ea: 3c:05:a1:c5:66:c7:4e:f5:3f:47:4d:44:c8:c3:9f: 0c:4f:19:bc:9d:c1:f3:d5:79:a5:b7:1c:a8:b7:14: af:9d:7b:9d:c9:2f:de:8a:00:2d:15:72:2c:cc:a4: 2c:4e:62:c1:3c:d0:d3:32:f0:33:8e:75:2c:0d:5b: 2e:0e:68:d2:4c:7a:64:53:f5:f2:48:25:4d:d1:7e: a6:b3:9d:5d:db:e6:ba:92:a6:f0:00:f5:36:ee:37: de:df:b3:95:62:46:cc:16:e0:89:cb:c5:56:3c:b9: 64:81:49:7d:75:26:03:bc:6b:cc:13:9b:3c:5a:16: 7e:8f:19:31:69:08:bc:ef:6b:6a:0f:10:32:18:f6: 61:51:2b:88:82:a4:0b:f0:cd:06:eb:ac:a2:ea:b9: 18:ae:b7:2e:a4:7a:06:9a:0b:5d:5a:c4:a0:75:9b: 46:6f:88:2a:91:77:88:8b:74:0a:e4:46:a5:9e:c7: 7a:9c:f1:af:a7:39:5b:a4:4a:e5:56:52:15:c2:9e: 0e:ca:d8:0e:ae:3b:60:6a:58:c5:11:4b:af:d0:32: 3e:40:9d:f7:89:f2:30:2a:f5:81:5f:dd:bd:60:db: ff:39:97:62:49:61:a4:2d:1b:33:29:a2:07:53:08: 74:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2A:A6:52:64:B7:AE:1D:B8:30:35:99:AB:73:8B:3D:9E:ED:3C:15 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a110::/32 Signature Algorithm: sha256WithRSAEncryption 8c:7b:b4:d1:67:06:e5:64:f3:37:f9:ba:8d:c2:3b:d6:a7:bf: be:f1:29:33:1a:ab:fc:48:ad:00:e0:c8:9d:0e:01:e3:46:e5: 14:cd:17:b5:c9:06:88:9d:a4:71:16:37:dd:ce:a1:09:b3:24: 3e:c6:06:cc:8a:c4:9c:67:de:0f:a0:17:e1:9a:ef:d9:f7:f7: d3:8e:d7:04:6e:af:67:53:71:f7:4e:47:ac:1b:ed:c6:0f:98: 24:80:18:60:9e:1c:78:3e:4a:5b:1d:ea:2a:3e:ce:99:5e:08: 49:4d:bd:39:aa:a7:60:38:72:4a:c3:39:fd:c5:84:64:97:2f: 4d:3a:12:7f:32:66:d1:c4:34:34:9e:3b:8b:25:ec:c4:17:99: b3:df:57:37:37:4e:83:d4:49:91:27:e0:23:91:d1:a9:3f:60: 3c:db:cc:0f:ec:c1:9d:88:ba:14:e1:9c:41:b8:ea:b9:07:4f: 32:04:2d:c3:f0:41:66:0f:f8:63:7b:87:f5:44:06:eb:73:67: a9:c4:ba:f2:5f:2d:0a:31:25:87:cd:56:2f:e9:aa:67:83:09: 50:35:b7:1f:0a:8d:54:7f:2e:a6:c5:15:57:3b:c1:de:81:99: 46:9e:3d:e5:d6:40:5a:71:c9:ec:ba:89:75:a6:05:ef:26:84: 46:fe:95:08 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPyWOB7qz0+U1403EqwF89Y61YJYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwMVoX DTI3MDMwMzA2MDYwMVowMzExMC8GA1UEAxMoN0EyQUE2NTI2NEI3QUUxREI4MzAz NTk5QUI3MzhCM0Q5RUVEM0MxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI+84F+WCA5TTRxW9PrqPAWhxWbHTvU/R01EyMOfDE8ZvJ3B89V5pbccqLcU r517nckv3ooALRVyLMykLE5iwTzQ0zLwM451LA1bLg5o0kx6ZFP18kglTdF+prOd XdvmupKm8AD1Nu433t+zlWJGzBbgicvFVjy5ZIFJfXUmA7xrzBObPFoWfo8ZMWkI vO9rag8QMhj2YVEriIKkC/DNBuusouq5GK63LqR6BpoLXVrEoHWbRm+IKpF3iIt0 CuRGpZ7Hepzxr6c5W6RK5VZSFcKeDsrYDq47YGpYxRFLr9AyPkCd94nyMCr1gV/d vWDb/zmXYklhpC0bMymiB1MIdFsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR6KqZS ZLeuHbgwNZmrc4s9nu08FTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oRAwDQYJKoZIhvcNAQELBQADggEBAIx7tNFnBuVk8zf5uo3CO9anv77xKTMaq/xI rQDgyJ0OAeNG5RTNF7XJBoidpHEWN93OoQmzJD7GBsyKxJxn3g+gF+Ga79n399OO 1wRur2dTcfdOR6wb7cYPmCSAGGCeHHg+Slsd6io+zpleCElNvTmqp2A4ckrDOf3F hGSXL006En8yZtHENDSeO4sl7MQXmbPfVzc3ToPUSZEn4COR0ak/YDzbzA/swZ2I uhThnEG46rkHTzIELcPwQWYP+GN7h/VEButzZ6nEuvJfLQoxJYfNVi/pqmeDCVA1 tx8KjVR/LqbFFVc7wd6BmUaePeXWQFpxyey6iXWmBe8mhEb+lQg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:44 2026 by rpki-client