$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142928.roa File: AS142928.roa (raw, json) Hash identifier: dPFZGASCPMqq4llirUSr524g694RcEzYgXzJfRWQ7QY= Subject key identifier: 1F:9D:81:FA:AE:12:4C:98:18:B7:D5:7F:5F:E4:83:B4:46:23:99:58 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0DCE99E2AC7ADDDE312053B449D31AC1D01992D4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142928.roa Signing time: Wed 04 Mar 2026 06:06:42 +0000 ROA not before: Wed 04 Mar 2026 06:01:42 +0000 ROA not after: Wed 03 Mar 2027 06:06:42 +0000 asID: 142928 IP address blocks: 240a:a116::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ce:99:e2:ac:7a:dd:de:31:20:53:b4:49:d3:1a:c1:d0:19:92:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:42 2026 GMT Not After : Mar 3 06:06:42 2027 GMT Subject: CN=1F9D81FAAE124C9818B7D57F5FE483B446239958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:c9:48:c4:28:55:2d:0d:27:2b:11:14:07: 3d:41:54:4d:c2:96:54:83:1f:44:e3:b3:5a:63:17: b9:29:59:29:f5:40:4c:bb:65:e9:82:e8:40:c4:33: 7a:d9:ef:34:1a:cb:61:8b:f6:85:47:14:26:7c:c3: 6e:95:cb:08:bd:e6:42:ea:52:a0:1f:4f:33:b0:9d: 31:65:84:cf:99:13:74:e1:b9:97:0a:37:5f:71:14: c3:a3:5c:f3:b2:8f:1f:39:2e:1d:e5:43:c3:06:eb: 01:98:df:50:8d:01:04:b5:35:4a:b4:cf:f8:f4:c6: 30:18:30:bc:c3:64:b7:8d:77:15:8b:5a:ee:91:0b: db:c6:c8:66:5d:0c:f1:22:df:7a:f3:8b:62:ed:b5: 0f:e1:c4:ad:07:d7:cd:6b:72:8f:b7:7a:68:1a:66: f3:02:04:32:6a:3b:2c:27:f6:5b:9f:03:21:df:22: 39:b0:37:34:22:94:ba:70:fe:a3:cb:96:39:71:81: d5:7b:fb:b1:ea:b0:f7:8a:e9:38:eb:3c:f2:9c:12: a0:48:ad:b3:bd:44:ca:57:91:07:f2:7e:67:cb:ee: fc:84:78:0b:83:61:a8:69:18:32:8a:c0:f0:2d:87: ef:49:96:a7:10:b9:ab:4b:d2:43:da:42:1c:82:d1: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9D:81:FA:AE:12:4C:98:18:B7:D5:7F:5F:E4:83:B4:46:23:99:58 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142928.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a116::/32 Signature Algorithm: sha256WithRSAEncryption c2:26:42:d3:a6:7d:89:3c:9a:7c:5f:ea:7a:4e:1a:2b:ae:f6: 10:c8:2b:6a:2e:93:65:ee:40:2a:7f:7c:37:f1:a1:7a:25:1d: 6b:1b:e1:87:c4:01:39:e3:0b:43:ff:67:ab:fb:39:fa:a4:bc: 3d:f1:cf:13:7c:5b:4d:dd:b2:6a:10:f1:0c:d1:58:02:0f:61: 30:d4:24:71:6a:36:2e:8e:11:95:05:02:b4:9b:b4:91:22:b3: 4f:ad:55:5c:ec:7d:eb:22:af:71:57:2e:1a:10:4c:5f:6b:8a: bc:62:98:5c:f4:90:27:6c:be:4e:9e:07:53:e1:41:d1:48:1b: 8c:04:5a:17:e0:0d:e8:67:ff:c2:ea:0e:f8:6e:10:8c:63:e8: 57:66:ea:fd:f8:bb:5c:15:4a:22:d0:cf:09:f3:a5:21:a2:37: b9:1d:9d:98:7b:8a:e4:66:42:cc:fd:50:96:63:6f:5b:64:60: fc:ce:3d:f0:2d:f5:23:4d:d8:a4:54:e0:dd:aa:e5:7d:11:f4: d6:ba:7f:c3:d5:0e:f5:6d:62:2a:e0:0f:f0:ee:48:ec:1d:08: 96:9b:9f:63:7f:bf:52:70:03:b3:d9:1b:85:74:c2:3c:c9:97: 76:d4:2f:e4:b0:df:17:4b:b2:04:d3:50:a0:af:81:5e:8f:a1: 6f:fb:34:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDc6Z4qx63d4xIFO0SdMawdAZktQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0MloX DTI3MDMwMzA2MDY0MlowMzExMC8GA1UEAxMoMUY5RDgxRkFBRTEyNEM5ODE4QjdE NTdGNUZFNDgzQjQ0NjIzOTk1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUFyUjEKFUtDScrERQHPUFUTcKWVIMfROOzWmMXuSlZKfVATLtl6YLoQMQz etnvNBrLYYv2hUcUJnzDbpXLCL3mQupSoB9PM7CdMWWEz5kTdOG5lwo3X3EUw6Nc 87KPHzkuHeVDwwbrAZjfUI0BBLU1SrTP+PTGMBgwvMNkt413FYta7pEL28bIZl0M 8SLfevOLYu21D+HErQfXzWtyj7d6aBpm8wIEMmo7LCf2W58DId8iObA3NCKUunD+ o8uWOXGB1Xv7seqw94rpOOs88pwSoEits71EyleRB/J+Z8vu/IR4C4NhqGkYMorA 8C2H70mWpxC5q0vSQ9pCHILRBDECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQfnYH6 rhJMmBi31X9f5IO0RiOZWDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oRYwDQYJKoZIhvcNAQELBQADggEBAMImQtOmfYk8mnxf6npOGiuu9hDIK2ouk2Xu QCp/fDfxoXolHWsb4YfEATnjC0P/Z6v7OfqkvD3xzxN8W03dsmoQ8QzRWAIPYTDU JHFqNi6OEZUFArSbtJEis0+tVVzsfesir3FXLhoQTF9rirximFz0kCdsvk6eB1Ph QdFIG4wEWhfgDehn/8LqDvhuEIxj6Fdm6v34u1wVSiLQzwnzpSGiN7kdnZh7iuRm Qsz9UJZjb1tkYPzOPfAt9SNN2KRU4N2q5X0R9Na6f8PVDvVtYirgD/DuSOwdCJab n2N/v1JwA7PZG4V0wjzJl3bUL+Sw3xdLsgTTUKCvgV6PoW/7NIs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:42 2026 by rpki-client