$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142926.roa File: AS142926.roa (raw, json) Hash identifier: GDmFi0jMUDIZrGvMqgsBKKY1SBuj1OkRGwDWJbBJehM= Subject key identifier: 5C:B1:7B:91:1D:7B:D7:CE:16:0A:BA:A0:B9:D1:A4:F9:73:09:7D:0E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4F0EC9437CF1A364BE4107004818A42FB9667E24 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142926.roa Signing time: Wed 04 Mar 2026 06:06:30 +0000 ROA not before: Wed 04 Mar 2026 06:01:30 +0000 ROA not after: Wed 03 Mar 2027 06:06:30 +0000 asID: 142926 IP address blocks: 240a:a114::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0e:c9:43:7c:f1:a3:64:be:41:07:00:48:18:a4:2f:b9:66:7e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:30 2026 GMT Not After : Mar 3 06:06:30 2027 GMT Subject: CN=5CB17B911D7BD7CE160ABAA0B9D1A4F973097D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:52:40:2e:6e:5e:54:9f:d8:3c:a2:20:4a: fc:48:ec:57:a1:13:09:51:de:98:21:9e:3f:ba:98: ae:d8:0d:42:23:bf:28:15:60:2b:37:3a:20:22:5b: bf:ba:63:10:2b:e7:38:c6:67:ce:44:4f:0e:23:0d: 12:a8:ab:3a:6a:43:74:c3:ed:63:e8:66:d7:2b:91: 78:66:4e:cf:f1:62:3f:c0:22:08:b5:9c:30:eb:ae: ba:0f:b8:d9:bd:45:5e:9e:69:e4:81:75:72:89:e0: b2:e1:a8:a7:59:d5:80:e0:ed:87:b4:7d:2d:aa:b5: d0:c3:77:1e:90:b9:db:69:00:a8:9a:c1:ee:aa:a2: 43:4c:02:a9:2f:54:f0:88:e0:b1:97:07:6f:e4:a4: 1e:de:dd:81:02:88:13:59:2b:8b:41:8b:1e:80:f6: 3b:82:1e:56:54:e5:0e:2e:ab:a5:ab:24:5b:d8:5b: 07:02:3d:78:b8:92:25:b0:cb:36:94:da:61:f6:c1: 84:a3:43:db:5a:9e:14:cf:04:d6:c9:ad:59:a9:df: 66:5b:81:5e:2b:42:74:ec:f3:51:a8:29:81:55:74: d6:cf:d2:52:ea:c9:cf:80:e0:a4:b2:5a:4e:3d:3e: 6a:d9:ec:6f:8d:e6:77:a0:b7:5d:5b:a9:d7:69:f0: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B1:7B:91:1D:7B:D7:CE:16:0A:BA:A0:B9:D1:A4:F9:73:09:7D:0E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142926.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a114::/32 Signature Algorithm: sha256WithRSAEncryption 63:76:3f:8a:20:5c:c4:ed:1c:2a:1e:9b:5d:ae:5c:dd:58:ab: 35:0c:52:53:04:f2:17:84:77:51:fe:16:45:4e:17:a7:68:57: 21:48:2c:2c:40:b7:9c:9c:fe:58:68:f2:32:7a:7d:cd:59:dd: 38:55:fa:01:7a:f5:a3:75:0f:73:2a:aa:a5:8f:ca:00:b6:46: 54:68:f8:33:d0:5b:bb:2b:ac:8d:8e:3f:2c:0c:49:8a:92:fa: f5:aa:1a:0b:15:9b:76:51:25:3e:ed:43:8f:7f:2d:13:6d:18: a5:33:3b:bb:9c:e1:21:ee:64:a4:10:4a:e1:4b:9e:82:7a:ec: ae:b6:5c:1a:b2:21:86:25:1b:9c:2d:20:e3:8d:a9:2a:b3:5a: b4:a6:5b:6a:fb:59:38:d4:b3:53:e8:cd:f4:18:df:15:18:90: 65:cc:6b:07:78:07:7e:f3:c2:f1:be:ed:f0:30:31:71:2b:82: 47:90:3b:90:2b:7b:fe:55:79:6b:37:f7:24:e5:60:80:2c:1c: e5:7b:68:c3:80:ff:38:56:06:65:a5:22:b6:a9:b3:4c:1a:21: 9c:b5:33:fe:21:e7:09:78:8b:12:68:65:93:d3:37:a4:51:f9: bf:94:04:89:93:4b:b3:49:62:d3:ce:70:4d:1e:13:68:cd:57: 71:bf:99:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTw7JQ3zxo2S+QQcASBikL7lmfiQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzMFoX DTI3MDMwMzA2MDYzMFowMzExMC8GA1UEAxMoNUNCMTdCOTExRDdCRDdDRTE2MEFC QUEwQjlEMUE0Rjk3MzA5N0QwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJerUkAubl5Un9g8oiBK/EjsV6ETCVHemCGeP7qYrtgNQiO/KBVgKzc6ICJb v7pjECvnOMZnzkRPDiMNEqirOmpDdMPtY+hm1yuReGZOz/FiP8AiCLWcMOuuug+4 2b1FXp5p5IF1congsuGop1nVgODth7R9Laq10MN3HpC522kAqJrB7qqiQ0wCqS9U 8IjgsZcHb+SkHt7dgQKIE1kri0GLHoD2O4IeVlTlDi6rpaskW9hbBwI9eLiSJbDL NpTaYfbBhKND21qeFM8E1smtWanfZluBXitCdOzzUagpgVV01s/SUurJz4DgpLJa Tj0+atnsb43md6C3XVup12nw/UECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRcsXuR HXvXzhYKuqC50aT5cwl9DjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oRQwDQYJKoZIhvcNAQELBQADggEBAGN2P4ogXMTtHCoem12uXN1YqzUMUlME8heE d1H+FkVOF6doVyFILCxAt5yc/lho8jJ6fc1Z3ThV+gF69aN1D3MqqqWPygC2RlRo +DPQW7srrI2OPywMSYqS+vWqGgsVm3ZRJT7tQ49/LRNtGKUzO7uc4SHuZKQQSuFL noJ67K62XBqyIYYlG5wtIOONqSqzWrSmW2r7WTjUs1PozfQY3xUYkGXMawd4B37z wvG+7fAwMXErgkeQO5Are/5VeWs39yTlYIAsHOV7aMOA/zhWBmWlIraps0waIZy1 M/4h5wl4ixJoZZPTN6RR+b+UBImTS7NJYtPOcE0eE2jNV3G/mdY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:22 2026 by rpki-client