$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142929.roa File: AS142929.roa (raw, json) Hash identifier: vJUGbtX4748WXFg5RNBNpSOMxPmY5DlhsZ+5YRvi70U= Subject key identifier: D8:79:C7:1C:35:C3:57:7E:AF:D4:E1:E4:91:4B:BE:9D:22:23:50:64 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F17FE7B7046EED5B16006554C08E5BF692250B2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142929.roa Signing time: Wed 04 Mar 2026 06:06:13 +0000 ROA not before: Wed 04 Mar 2026 06:01:13 +0000 ROA not after: Wed 03 Mar 2027 06:06:13 +0000 asID: 142929 IP address blocks: 240a:a117::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:17:fe:7b:70:46:ee:d5:b1:60:06:55:4c:08:e5:bf:69:22:50:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:13 2026 GMT Not After : Mar 3 06:06:13 2027 GMT Subject: CN=D879C71C35C3577EAFD4E1E4914BBE9D22235064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:86:87:65:78:67:b2:10:ac:46:77:4d:4a: 47:f6:c3:53:9a:bf:2b:eb:02:75:d5:06:81:bc:1f: ce:fc:99:03:b3:20:82:96:d0:92:10:1c:3f:81:77: 5f:32:53:51:8e:cf:42:c5:fc:c0:ef:c7:14:93:3f: 7c:0f:c7:bf:ec:70:43:07:01:ad:a9:9d:20:8b:46: 8f:c7:36:a2:16:40:13:83:b4:44:89:7c:9b:20:91: e2:94:bd:93:d8:53:76:ad:40:ce:cf:76:f8:86:f4: 88:49:0e:fd:9d:f2:13:97:a7:d1:0f:8d:87:62:8a: 16:ed:8a:83:e7:28:5b:47:68:5f:58:51:26:c2:39: 17:52:ae:34:f4:a0:5b:32:ce:bc:9d:61:40:d6:65: 36:f0:26:8d:41:3c:50:dd:66:19:8e:a7:19:7f:0b: 0a:44:46:d0:25:b0:73:44:f3:e0:54:41:6a:17:ea: d3:fa:f7:ef:c2:cd:72:e6:6f:6a:39:df:60:9e:a8: c5:7a:48:01:3e:a5:6d:d5:11:87:68:6d:cc:e8:74: 9f:da:99:6e:6f:d4:0c:47:dc:3e:72:52:da:cb:d0: db:41:af:49:4d:eb:f1:fb:74:3b:ac:bd:5c:c5:ba: 46:52:a6:0c:18:7f:5c:51:de:f0:9a:cb:bd:64:61: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:79:C7:1C:35:C3:57:7E:AF:D4:E1:E4:91:4B:BE:9D:22:23:50:64 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142929.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a117::/32 Signature Algorithm: sha256WithRSAEncryption 8c:59:b2:cf:24:f7:dd:49:cd:38:de:f4:97:4e:f1:f6:ed:33: ae:e4:97:d2:04:d0:38:7c:9b:50:ee:f9:da:d0:7a:c1:6f:3c: 7d:a6:57:ed:2e:e7:5e:ea:0a:38:a9:5d:61:51:e3:79:cf:65: b6:bf:72:90:a0:a4:24:3e:e9:f4:bc:f1:0c:4c:69:6a:85:57: b4:5a:c3:ab:6a:d4:8b:d7:35:52:24:78:1f:23:cc:ff:f6:11: 0a:47:b0:3b:af:9f:8e:cc:1f:1f:42:c7:85:13:63:14:dc:dc: 57:a6:cd:7b:a8:21:5e:4c:4a:14:73:c7:2a:3f:ba:6f:d4:04: 9d:27:86:90:fe:de:03:42:20:3d:1a:fe:5f:9a:49:34:72:20: 17:ba:20:d4:42:11:7e:d7:a6:ed:d7:c3:cc:75:21:a3:80:5a: 05:50:d5:ae:be:aa:d7:4f:14:7e:a7:89:d4:42:78:f7:e7:57: d0:6d:1f:6e:93:78:71:a3:6a:ce:57:bc:4f:ee:ab:7a:c9:ad: a6:86:30:ef:d2:5a:75:2b:9f:da:44:06:a6:82:42:cb:96:c8: 1f:87:64:c7:19:28:bd:16:23:28:48:53:de:ef:e5:ae:b2:ef: 45:32:77:78:26:b3:8d:59:b7:82:4a:e8:37:e4:1c:cc:79:82: 2d:ec:12:f9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPxf+e3BG7tWxYAZVTAjlv2kiULIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExM1oX DTI3MDMwMzA2MDYxM1owMzExMC8GA1UEAxMoRDg3OUM3MUMzNUMzNTc3RUFGRDRF MUU0OTE0QkJFOUQyMjIzNTA2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaYhodleGeyEKxGd01KR/bDU5q/K+sCddUGgbwfzvyZA7MggpbQkhAcP4F3 XzJTUY7PQsX8wO/HFJM/fA/Hv+xwQwcBramdIItGj8c2ohZAE4O0RIl8myCR4pS9 k9hTdq1Azs92+Ib0iEkO/Z3yE5en0Q+Nh2KKFu2Kg+coW0doX1hRJsI5F1KuNPSg WzLOvJ1hQNZlNvAmjUE8UN1mGY6nGX8LCkRG0CWwc0Tz4FRBahfq0/r378LNcuZv ajnfYJ6oxXpIAT6lbdURh2htzOh0n9qZbm/UDEfcPnJS2svQ20GvSU3r8ft0O6y9 XMW6RlKmDBh/XFHe8JrLvWRhK/0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTYeccc NcNXfq/U4eSRS76dIiNQZDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oRcwDQYJKoZIhvcNAQELBQADggEBAIxZss8k991JzTje9JdO8fbtM67kl9IE0Dh8 m1Du+drQesFvPH2mV+0u517qCjipXWFR43nPZba/cpCgpCQ+6fS88QxMaWqFV7Ra w6tq1IvXNVIkeB8jzP/2EQpHsDuvn47MHx9Cx4UTYxTc3FemzXuoIV5MShRzxyo/ um/UBJ0nhpD+3gNCID0a/l+aSTRyIBe6INRCEX7Xpu3Xw8x1IaOAWgVQ1a6+qtdP FH6nidRCePfnV9BtH26TeHGjas5XvE/uq3rJraaGMO/SWnUrn9pEBqaCQsuWyB+H ZMcZKL0WIyhIU97v5a6y70Uyd3gms41Zt4JK6DfkHMx5gi3sEvk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:25 2026 by rpki-client