$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142935.roa File: AS142935.roa (raw, json) Hash identifier: pM4ifghzF+7EATKlqcRWzY52+GgSqN9c9ZHUbdcUM6Q= Subject key identifier: BD:D9:E9:DE:12:35:C4:FD:EA:E0:0B:3E:65:BF:EE:1B:D8:DC:EC:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 75999C3E257F479660DF107FC0C8055E8B432D63 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142935.roa Signing time: Wed 04 Mar 2026 06:06:40 +0000 ROA not before: Wed 04 Mar 2026 06:01:40 +0000 ROA not after: Wed 03 Mar 2027 06:06:40 +0000 asID: 142935 IP address blocks: 240a:a11d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:99:9c:3e:25:7f:47:96:60:df:10:7f:c0:c8:05:5e:8b:43:2d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:40 2026 GMT Not After : Mar 3 06:06:40 2027 GMT Subject: CN=BDD9E9DE1235C4FDEAE00B3E65BFEE1BD8DCECB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:40:87:49:df:7d:aa:20:8a:46:26:c7:0f: e5:74:c8:43:75:3b:42:2e:68:c4:e1:67:43:f6:6e: 5e:24:77:2d:c9:9e:1f:04:11:15:ce:ae:e3:c6:5c: 19:88:0e:ee:3b:45:cc:0d:98:ab:6e:5a:bc:bf:28: 1d:39:74:15:2d:36:48:b6:cd:c9:71:8e:f5:e7:c1: 38:05:cd:22:6b:cf:60:ca:f0:57:c5:a0:33:f7:d0: 8e:c9:68:a8:02:83:9f:85:eb:62:59:ac:c2:ef:aa: 5b:ba:cb:74:42:68:1d:0a:10:ec:ea:85:14:b8:f9: 37:9b:a9:e1:e7:ea:e4:7b:c8:cb:dc:03:b0:c1:1a: 6d:ff:0b:41:fe:2d:da:f2:61:03:da:78:de:cf:df: 48:1b:cf:1b:5a:d2:9a:c3:f3:86:2a:91:68:76:7c: be:a5:d6:89:06:47:d0:39:67:c5:aa:09:15:f6:c0: 8c:d0:4f:49:fc:09:8c:06:32:98:cb:d3:8b:e3:ae: e2:b4:c2:98:ab:72:d6:41:86:6e:f5:b5:e5:7c:04: da:41:05:3f:c7:61:61:d7:d4:9f:27:14:1e:6c:1c: b7:e6:6d:ac:b7:a2:7f:1c:29:e7:1b:f4:8b:e6:0d: 8c:ba:8a:bd:ea:ce:fc:2c:09:93:29:c8:d7:1b:e1: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D9:E9:DE:12:35:C4:FD:EA:E0:0B:3E:65:BF:EE:1B:D8:DC:EC:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a11d::/32 Signature Algorithm: sha256WithRSAEncryption 0f:6c:a4:7e:4b:05:26:82:3a:4e:0d:6d:7b:bf:db:42:5e:6e: 44:13:21:c8:37:ab:b2:4d:b5:c6:f8:b3:63:5e:f6:e7:be:7c: fd:be:96:b4:13:a9:42:05:30:75:c2:b4:9b:5d:9e:f2:33:fa: b1:a7:8d:3b:5f:99:73:05:cf:33:da:0e:9f:d1:83:7c:24:80: c7:5a:8c:e0:79:a6:2b:0b:75:2b:60:15:3f:24:7a:dd:47:af: 8a:d9:b9:a4:0e:23:ab:47:7e:99:19:2e:6e:af:4f:61:c8:54: fc:02:57:97:a4:74:2f:c7:0b:47:67:25:28:8d:6a:12:2b:df: 34:a9:25:73:9f:ca:51:34:e4:05:34:0a:9a:91:f4:20:91:cb: 4d:74:57:3e:8c:06:e7:10:e4:14:e3:e8:ae:d4:dd:97:2a:c4: 21:8e:fd:7a:01:5e:f4:3a:d5:c5:a3:dc:3a:be:1b:fe:8c:cb: 25:13:9b:65:11:6c:c9:f9:9e:8a:4b:5b:a4:c1:c3:29:9a:ed: a0:34:c4:fc:84:5e:0f:82:2d:23:75:60:97:89:44:dc:e5:f1: 1f:f1:ba:32:7d:8e:94:8b:0a:3f:03:a0:a7:70:f8:89:4b:42: a1:2a:ea:ff:df:b7:64:01:4f:58:b5:53:b4:06:f4:44:08:34: c0:61:9f:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdZmcPiV/R5Zg3xB/wMgFXotDLWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0MFoX DTI3MDMwMzA2MDY0MFowMzExMC8GA1UEAxMoQkREOUU5REUxMjM1QzRGREVBRTAw QjNFNjVCRkVFMUJEOERDRUNCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAYQIdJ332qIIpGJscP5XTIQ3U7Qi5oxOFnQ/ZuXiR3LcmeHwQRFc6u48Zc GYgO7jtFzA2Yq25avL8oHTl0FS02SLbNyXGO9efBOAXNImvPYMrwV8WgM/fQjslo qAKDn4XrYlmswu+qW7rLdEJoHQoQ7OqFFLj5N5up4efq5HvIy9wDsMEabf8LQf4t 2vJhA9p43s/fSBvPG1rSmsPzhiqRaHZ8vqXWiQZH0DlnxaoJFfbAjNBPSfwJjAYy mMvTi+Ou4rTCmKty1kGGbvW15XwE2kEFP8dhYdfUnycUHmwct+ZtrLeifxwp5xv0 i+YNjLqKverO/CwJkynI1xvhnrcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS92ene EjXE/ergCz5lv+4b2NzsuDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MjkzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oR0wDQYJKoZIhvcNAQELBQADggEBAA9spH5LBSaCOk4NbXu/20JebkQTIcg3q7JN tcb4s2Ne9ue+fP2+lrQTqUIFMHXCtJtdnvIz+rGnjTtfmXMFzzPaDp/Rg3wkgMda jOB5pisLdStgFT8ket1Hr4rZuaQOI6tHfpkZLm6vT2HIVPwCV5ekdC/HC0dnJSiN ahIr3zSpJXOfylE05AU0CpqR9CCRy010Vz6MBucQ5BTj6K7U3ZcqxCGO/XoBXvQ6 1cWj3Dq+G/6MyyUTm2URbMn5nopLW6TBwyma7aA0xPyEXg+CLSN1YJeJRNzl8R/x ujJ9jpSLCj8DoKdw+IlLQqEq6v/ft2QBT1i1U7QG9EQINMBhn8g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:39 2026 by rpki-client