$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142933.roa File: AS142933.roa (raw, json) Hash identifier: UvO7zpKs+qsbsKmZBZGaURqE9OgyWfO7Dd2sIvVlx7U= Subject key identifier: F8:B4:D8:E9:0E:4A:5B:E0:4C:D3:0A:2F:08:FC:B0:C5:FA:31:10:2D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4BD12A7690D86D116CE238347F9D46021AE35225 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142933.roa Signing time: Wed 04 Mar 2026 06:05:35 +0000 ROA not before: Wed 04 Mar 2026 06:00:35 +0000 ROA not after: Wed 03 Mar 2027 06:05:35 +0000 asID: 142933 IP address blocks: 240a:a11b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d1:2a:76:90:d8:6d:11:6c:e2:38:34:7f:9d:46:02:1a:e3:52:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:35 2026 GMT Not After : Mar 3 06:05:35 2027 GMT Subject: CN=F8B4D8E90E4A5BE04CD30A2F08FCB0C5FA31102D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:53:55:dc:17:e9:30:8b:e9:50:1b:42:60: 74:5a:16:25:03:15:43:71:c2:ba:ae:d5:85:e8:0b: 3f:11:a5:19:36:1e:d8:99:42:cf:5b:fa:05:f3:76: 2c:06:c1:c8:ce:e7:7c:56:5b:39:ac:59:80:8a:ad: f4:41:e5:ee:84:25:91:45:4b:1d:15:60:49:f6:37: cf:75:a8:7c:35:d9:63:2b:c0:a4:3b:05:4b:5b:91: 00:6e:9e:20:8a:d1:9b:7d:56:1c:85:1d:a9:96:6c: 42:34:aa:72:91:7f:5a:01:a0:af:f0:87:7b:6c:77: 77:2e:70:74:e4:bd:57:cb:e8:58:63:6a:13:3b:52: 40:5b:8a:10:2f:f4:7d:3a:1c:12:bb:b5:73:44:81: 97:59:be:18:f6:3c:06:e4:bc:bc:d4:04:76:cc:45: 60:d7:9b:7b:f5:37:fc:58:14:cf:db:ab:a1:53:b1: 26:73:8b:6f:99:17:5b:e3:94:c0:4a:bb:55:ad:2b: 55:07:3d:14:1d:dd:2e:2b:11:aa:2d:40:54:94:84: 56:11:5f:01:10:13:20:01:c8:37:b5:35:68:82:6b: 9d:ef:8f:29:c4:cb:33:f3:95:de:57:0b:55:fa:5c: c9:80:ea:7f:7c:d9:11:8e:9a:ef:a7:4e:57:3e:86: e7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B4:D8:E9:0E:4A:5B:E0:4C:D3:0A:2F:08:FC:B0:C5:FA:31:10:2D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a11b::/32 Signature Algorithm: sha256WithRSAEncryption b2:79:79:ec:57:35:19:1d:3e:41:63:64:9d:80:4c:f7:c5:59: 99:9f:64:0b:d9:00:03:b1:5b:87:ad:b6:f6:43:17:ac:79:3e: e6:44:42:6b:42:59:d5:58:42:2b:05:6d:37:ce:6b:fc:13:bf: db:57:0d:9d:e4:08:56:d1:cf:58:08:de:73:41:0f:06:51:c6: 7c:a2:a2:de:4b:40:ce:1d:61:f0:02:fc:b0:57:11:10:19:22: 28:32:83:da:d4:e8:00:f9:66:b0:71:85:76:8f:9a:ab:28:19: f4:27:69:ca:ce:4f:4a:e0:99:7d:4b:6d:ae:4c:59:90:d7:7b: c3:37:d1:ff:ab:ec:24:6d:a7:69:81:4b:8b:58:bb:16:ab:af: 37:4c:94:d3:c8:91:e1:29:2e:22:bc:86:bb:ab:4a:a2:7f:80: 05:bb:93:74:8b:35:07:27:63:69:d4:67:e6:12:9a:9b:e7:36: 64:68:45:0a:cb:e0:aa:a3:02:b8:68:35:00:74:10:2a:5f:0a: ed:ed:aa:cc:35:1c:80:9f:c5:60:9f:4b:98:98:6e:08:56:f5: a3:4b:06:c1:28:fa:fb:79:c3:73:71:fc:da:17:e3:cd:08:22: 89:50:7c:d9:98:d1:a7:2a:83:02:6d:c9:73:af:cd:cf:a7:ca: f0:58:af:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS9EqdpDYbRFs4jg0f51GAhrjUiUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzNVoX DTI3MDMwMzA2MDUzNVowMzExMC8GA1UEAxMoRjhCNEQ4RTkwRTRBNUJFMDRDRDMw QTJGMDhGQ0IwQzVGQTMxMTAyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIy7U1XcF+kwi+lQG0JgdFoWJQMVQ3HCuq7VhegLPxGlGTYe2JlCz1v6BfN2 LAbByM7nfFZbOaxZgIqt9EHl7oQlkUVLHRVgSfY3z3WofDXZYyvApDsFS1uRAG6e IIrRm31WHIUdqZZsQjSqcpF/WgGgr/CHe2x3dy5wdOS9V8voWGNqEztSQFuKEC/0 fTocEru1c0SBl1m+GPY8BuS8vNQEdsxFYNebe/U3/FgUz9uroVOxJnOLb5kXW+OU wEq7Va0rVQc9FB3dLisRqi1AVJSEVhFfARATIAHIN7U1aIJrne+PKcTLM/OV3lcL VfpcyYDqf3zZEY6a76dOVz6G54cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT4tNjp Dkpb4EzTCi8I/LDF+jEQLTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oRswDQYJKoZIhvcNAQELBQADggEBALJ5eexXNRkdPkFjZJ2ATPfFWZmfZAvZAAOx W4ettvZDF6x5PuZEQmtCWdVYQisFbTfOa/wTv9tXDZ3kCFbRz1gI3nNBDwZRxnyi ot5LQM4dYfAC/LBXERAZIigyg9rU6AD5ZrBxhXaPmqsoGfQnacrOT0rgmX1Lba5M WZDXe8M30f+r7CRtp2mBS4tYuxarrzdMlNPIkeEpLiK8hrurSqJ/gAW7k3SLNQcn Y2nUZ+YSmpvnNmRoRQrL4KqjArhoNQB0ECpfCu3tqsw1HICfxWCfS5iYbghW9aNL BsEo+vt5w3Nx/NoX480IIolQfNmY0acqgwJtyXOvzc+nyvBYr5k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:51 2026 by rpki-client