$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142930.roa File: AS142930.roa (raw, json) Hash identifier: cTW5NA1RRapi/1VrTEk8npbhtu0GyCkcU8pPcXpJ50E= Subject key identifier: F9:1E:CB:63:B0:C2:1B:5A:9B:6C:2E:8D:D4:F8:35:0F:06:78:B9:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6CD074E1018D0803B267434E82AB85EEB02E00B8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142930.roa Signing time: Wed 04 Mar 2026 06:05:17 +0000 ROA not before: Wed 04 Mar 2026 06:00:17 +0000 ROA not after: Wed 03 Mar 2027 06:05:17 +0000 asID: 142930 IP address blocks: 240a:a118::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d0:74:e1:01:8d:08:03:b2:67:43:4e:82:ab:85:ee:b0:2e:00:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:17 2026 GMT Not After : Mar 3 06:05:17 2027 GMT Subject: CN=F91ECB63B0C21B5A9B6C2E8DD4F8350F0678B94A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:6a:c1:f7:35:9e:e1:09:b0:95:37:cc:09: 1f:15:e3:0b:82:ae:a5:6f:bc:da:b7:b0:e5:d9:51: 93:df:5d:8e:00:5b:c7:db:67:93:67:1a:49:b8:d4: ab:e5:eb:60:68:ca:3c:c1:ad:40:a0:f8:e3:36:56: 23:72:44:bf:4f:08:16:9c:e7:05:7b:fd:44:78:f3: 0b:fc:ac:7d:c2:67:c7:b2:59:c5:f6:20:92:8a:a4: 87:b9:be:38:aa:d4:18:77:a0:a4:6c:ca:99:a8:45: d3:ba:0f:4a:d0:67:9e:38:82:36:36:ba:05:7e:2c: e8:ca:1d:3f:26:31:37:c3:a1:5d:5f:fa:08:53:92: 85:77:eb:19:03:dd:f6:da:fb:81:41:81:23:fa:af: 4e:36:35:ba:73:49:4c:be:a9:b8:41:25:31:6f:62: 78:ca:f6:23:5d:01:06:2f:9d:a1:d9:5d:f4:d9:03: 51:d0:06:3a:9d:0b:72:49:a4:fb:53:02:20:5d:20: de:99:61:73:0f:a1:1f:de:61:16:10:1e:6f:bb:1c: bf:cd:c0:5d:1f:cd:a6:6f:1c:c0:9e:08:db:62:97: 6b:55:ae:4f:72:5c:50:70:14:75:ff:93:9a:28:e4: 36:ab:1a:2a:f5:ba:f0:2b:d9:be:0c:78:48:c5:28: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1E:CB:63:B0:C2:1B:5A:9B:6C:2E:8D:D4:F8:35:0F:06:78:B9:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a118::/32 Signature Algorithm: sha256WithRSAEncryption 29:e9:d7:9b:85:2d:b1:6e:b1:09:6f:0f:6a:68:cb:5d:7d:92: 61:8a:d4:b7:29:99:a7:aa:4b:e7:8e:30:eb:75:c4:6e:a9:c8: aa:40:9b:55:2e:c8:a8:20:94:c2:24:d5:26:40:4a:2a:e3:cd: ce:43:5d:6d:e1:e7:48:1a:f8:5e:f3:bf:bc:12:1c:b1:33:00: ca:b2:b1:2d:bc:e6:58:a5:28:5d:22:8a:a8:8b:cf:79:bc:f6: 43:98:c8:06:64:13:06:82:87:46:d0:04:d4:b2:b7:a1:11:fd: bd:79:cd:d5:28:29:a8:5d:c3:66:6e:5d:9d:2b:f3:82:7b:6c: ae:5d:17:43:ad:5c:98:8b:36:30:7b:fd:4e:b3:e3:67:36:83: 66:26:42:1e:99:b6:d4:ba:fa:aa:57:96:16:c4:d2:ea:a4:f5: 88:69:0b:aa:76:9a:26:ac:2e:73:c4:8c:a7:e0:e1:d8:d0:c6: 94:5e:06:4d:7c:f5:1a:5b:9f:84:8d:d5:23:41:f4:f0:28:5e: 3d:aa:d6:7b:a1:7a:d5:3b:49:5f:2c:49:ad:98:da:9d:5e:03: 2f:d8:7a:b3:b4:80:5e:2d:7b:fc:7c:a6:92:7d:85:93:33:6b: af:f0:84:e9:ea:ea:3f:98:20:f2:39:77:87:45:f6:51:5f:37: 5d:2e:c4:f6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbNB04QGNCAOyZ0NOgquF7rAuALgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAxN1oX DTI3MDMwMzA2MDUxN1owMzExMC8GA1UEAxMoRjkxRUNCNjNCMEMyMUI1QTlCNkMy RThERDRGODM1MEYwNjc4Qjk0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK8asH3NZ7hCbCVN8wJHxXjC4KupW+82rew5dlRk99djgBbx9tnk2caSbjU q+XrYGjKPMGtQKD44zZWI3JEv08IFpznBXv9RHjzC/ysfcJnx7JZxfYgkoqkh7m+ OKrUGHegpGzKmahF07oPStBnnjiCNja6BX4s6ModPyYxN8OhXV/6CFOShXfrGQPd 9tr7gUGBI/qvTjY1unNJTL6puEElMW9ieMr2I10BBi+dodld9NkDUdAGOp0Lckmk +1MCIF0g3plhcw+hH95hFhAeb7scv83AXR/Npm8cwJ4I22KXa1WuT3JcUHAUdf+T mijkNqsaKvW68CvZvgx4SMUopeMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT5Hstj sMIbWptsLo3U+DUPBni5SjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oRgwDQYJKoZIhvcNAQELBQADggEBACnp15uFLbFusQlvD2poy119kmGK1Lcpmaeq S+eOMOt1xG6pyKpAm1UuyKgglMIk1SZASirjzc5DXW3h50ga+F7zv7wSHLEzAMqy sS285lilKF0iiqiLz3m89kOYyAZkEwaCh0bQBNSyt6ER/b15zdUoKahdw2ZuXZ0r 84J7bK5dF0OtXJiLNjB7/U6z42c2g2YmQh6ZttS6+qpXlhbE0uqk9YhpC6p2mias LnPEjKfg4djQxpReBk189Rpbn4SN1SNB9PAoXj2q1nuhetU7SV8sSa2Y2p1eAy/Y erO0gF4te/x8ppJ9hZMza6/whOnq6j+YIPI5d4dF9lFfN10uxPY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:20 2026 by rpki-client