$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142925.roa File: AS142925.roa (raw, json) Hash identifier: qmzxpxW7cH6c2Tc4uMZlhBMRcwLISd1rLJh3tCU+agY= Subject key identifier: 24:C0:AD:20:81:03:69:A0:70:5D:B4:15:1E:AA:F8:3E:F2:B2:49:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2BB978D164A1842718AFCFF9FB9BDED993FCFDFF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142925.roa Signing time: Wed 04 Mar 2026 06:06:08 +0000 ROA not before: Wed 04 Mar 2026 06:01:08 +0000 ROA not after: Wed 03 Mar 2027 06:06:08 +0000 asID: 142925 IP address blocks: 240a:a113::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b9:78:d1:64:a1:84:27:18:af:cf:f9:fb:9b:de:d9:93:fc:fd:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:08 2026 GMT Not After : Mar 3 06:06:08 2027 GMT Subject: CN=24C0AD20810369A0705DB4151EAAF83EF2B2496D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a0:9b:b4:0c:7d:93:03:bd:ac:6a:86:fb:3b: de:ad:9e:de:68:28:05:99:1e:41:8c:1e:7f:af:28: 3d:4c:8c:6c:ed:28:ea:36:e3:90:0b:5b:20:ea:49: 79:40:4c:ec:fb:cd:d6:e0:ca:2e:ac:c5:0c:9c:50: e7:b6:0d:a0:54:e8:2d:ad:bc:3a:ba:01:66:52:5f: 9b:ec:13:33:c9:80:b7:eb:06:a0:b8:ef:49:db:18: 7e:c7:b3:ab:0a:e6:79:38:cc:9d:2b:f1:47:01:59: c0:c7:82:3c:52:0c:80:c4:be:11:f0:bb:08:8a:24: 4c:e6:25:cb:52:a3:a5:64:c1:5f:ab:09:4c:11:8b: c3:84:06:7b:58:70:17:ab:c5:b0:e6:6d:23:06:f4: 0b:4d:90:b9:cb:34:be:15:29:48:cb:14:e7:4d:4f: 1d:98:00:20:1f:da:13:e9:02:98:18:61:72:b2:7a: 3c:65:b5:38:fe:b6:63:51:30:fa:31:12:0a:4d:15: 74:d5:95:ed:01:ff:1a:8b:e4:d1:00:a5:dc:c7:b5: fc:c8:2f:23:aa:44:9f:e8:37:8f:1b:44:32:e5:16: eb:47:62:ea:33:a8:c7:3f:fb:59:15:a2:bb:5b:ef: 06:18:dd:f4:6a:fe:99:65:9e:22:4d:82:9b:24:ce: bb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:AD:20:81:03:69:A0:70:5D:B4:15:1E:AA:F8:3E:F2:B2:49:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142925.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a113::/32 Signature Algorithm: sha256WithRSAEncryption 98:ce:b4:d7:a7:f9:23:3a:23:3a:91:fe:93:f3:91:ba:89:a6: 9d:45:ab:a7:2e:41:4c:72:81:ee:2c:8f:53:d4:2b:e9:11:37: 56:85:04:fa:6c:ac:51:a5:65:f3:ae:e1:8c:be:5c:ac:19:71: 43:47:dc:c7:2f:65:4b:7f:04:c8:5a:f0:62:e2:fe:b2:fc:40: 37:71:5e:b4:d5:f8:61:32:c1:e3:45:06:65:0c:21:33:da:38: 9b:9d:f5:ad:c1:ad:c1:a0:5a:8f:76:62:6c:26:5e:65:1d:65: ba:bb:b8:b1:79:57:3c:47:ca:79:31:42:a1:7c:c2:11:97:7c: c2:b3:80:f9:1b:22:b2:66:a4:4f:32:b4:e2:f9:cd:ff:4f:4d: c5:50:75:b0:97:f7:9f:bf:8e:9b:c1:88:41:ed:77:37:91:09: 16:c0:9a:97:c4:e1:ca:79:b8:43:da:53:d0:9b:64:c4:8c:1b: d9:7c:9a:d2:43:68:ad:5a:2f:aa:44:9f:4e:44:ba:fb:21:08: ac:cd:71:a0:f7:d5:d6:0c:7a:c8:af:c1:e2:69:3d:4f:12:2e: 42:50:90:50:b3:07:79:b3:59:73:cd:77:cd:c0:2a:6f:ae:73: cd:9b:57:5a:a4:9e:6f:22:91:cc:37:cd:0f:f4:e7:d8:9c:75: bc:b7:ee:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUK7l40WShhCcYr8/5+5ve2ZP8/f8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwOFoX DTI3MDMwMzA2MDYwOFowMzExMC8GA1UEAxMoMjRDMEFEMjA4MTAzNjlBMDcwNURC NDE1MUVBQUY4M0VGMkIyNDk2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO+gm7QMfZMDvaxqhvs73q2e3mgoBZkeQYwef68oPUyMbO0o6jbjkAtbIOpJ eUBM7PvN1uDKLqzFDJxQ57YNoFToLa28OroBZlJfm+wTM8mAt+sGoLjvSdsYfsez qwrmeTjMnSvxRwFZwMeCPFIMgMS+EfC7CIokTOYly1KjpWTBX6sJTBGLw4QGe1hw F6vFsOZtIwb0C02Qucs0vhUpSMsU501PHZgAIB/aE+kCmBhhcrJ6PGW1OP62Y1Ew +jESCk0VdNWV7QH/Govk0QCl3Me1/MgvI6pEn+g3jxtEMuUW60di6jOoxz/7WRWi u1vvBhjd9Gr+mWWeIk2CmyTOu6cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQkwK0g gQNpoHBdtBUeqvg+8rJJbTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oRMwDQYJKoZIhvcNAQELBQADggEBAJjOtNen+SM6IzqR/pPzkbqJpp1Fq6cuQUxy ge4sj1PUK+kRN1aFBPpsrFGlZfOu4Yy+XKwZcUNH3McvZUt/BMha8GLi/rL8QDdx XrTV+GEyweNFBmUMITPaOJud9a3BrcGgWo92YmwmXmUdZbq7uLF5VzxHynkxQqF8 whGXfMKzgPkbIrJmpE8ytOL5zf9PTcVQdbCX95+/jpvBiEHtdzeRCRbAmpfE4cp5 uEPaU9CbZMSMG9l8mtJDaK1aL6pEn05EuvshCKzNcaD31dYMesivweJpPU8SLkJQ kFCzB3mzWXPNd83AKm+uc82bV1qknm8ikcw3zQ/059icdby37sU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:08 2026 by rpki-client