$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142941.roa File: AS142941.roa (raw, json) Hash identifier: /AeVwV/iHe37++aR1s5jKGAGFonEsSr9FvEvFjGKENI= Subject key identifier: 00:2D:C9:A2:D8:2C:F7:9D:E3:37:64:FC:7B:DE:9F:41:78:69:FB:E7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0963E4B86A0A3C7610012A56BB2104300A2A73DA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142941.roa Signing time: Wed 04 Mar 2026 06:06:12 +0000 ROA not before: Wed 04 Mar 2026 06:01:12 +0000 ROA not after: Wed 03 Mar 2027 06:06:12 +0000 asID: 142941 IP address blocks: 240a:a123::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:63:e4:b8:6a:0a:3c:76:10:01:2a:56:bb:21:04:30:0a:2a:73:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:12 2026 GMT Not After : Mar 3 06:06:12 2027 GMT Subject: CN=002DC9A2D82CF79DE33764FC7BDE9F417869FBE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:5e:a0:b3:e7:40:22:70:66:e7:01:c8:cc: a4:a2:55:b7:24:7a:05:94:bc:bc:72:61:e4:34:33: 58:47:56:69:10:22:36:d0:35:b0:ef:80:c1:52:46: 3d:1f:2d:ae:3c:a5:96:e4:71:6a:be:b4:32:f4:f0: b5:2f:bd:f7:fb:d3:3c:af:94:10:84:9e:6d:a8:92: 8d:bd:65:74:12:60:6d:d7:55:af:63:f4:14:36:7d: 1a:7c:42:f1:03:4a:38:97:fc:97:7c:76:9b:37:3c: 6a:59:6c:b6:bf:49:0b:ed:5c:17:9b:fd:39:02:e2: 30:a0:bb:d7:b6:18:9e:b3:9b:6d:4a:2e:c4:2e:34: bf:bb:f8:47:57:d5:58:71:e9:3a:5c:49:c6:db:64: 9d:06:92:eb:2b:a7:1b:ca:85:b0:4c:93:44:a6:75: d8:7b:8d:b2:ce:ec:93:5a:77:c8:4c:9f:05:fb:bd: 53:cc:4e:3e:f7:4d:c7:5e:8b:d9:0f:fd:ac:0c:6d: e9:c3:fc:1a:b4:e7:28:33:03:da:27:53:a2:14:ea: e2:06:46:7d:aa:fa:4b:63:ee:7d:43:d0:51:a3:b4: 06:62:34:f0:ee:3c:e1:31:2c:a1:64:1d:bf:0b:96: 0f:16:f2:c1:5f:90:fa:d7:d1:c4:0f:1f:73:1c:89: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2D:C9:A2:D8:2C:F7:9D:E3:37:64:FC:7B:DE:9F:41:78:69:FB:E7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142941.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a123::/32 Signature Algorithm: sha256WithRSAEncryption ca:a4:75:58:9b:6e:d5:14:0a:e9:e1:51:11:f5:c8:c4:90:f8: 35:35:9c:37:5b:8e:eb:31:6a:68:18:6b:d0:6a:6d:89:e3:92: 69:71:cd:fe:ae:02:99:f0:02:2e:28:09:cf:c1:6f:92:b9:ca: 39:01:33:5d:43:b0:34:f3:1c:2d:fe:b0:a2:66:f2:67:73:62: 16:17:18:e3:8f:cf:f0:1d:56:8d:81:76:4a:11:51:78:b2:00: 9a:51:44:09:68:85:d2:07:72:36:48:0b:78:dd:15:46:a7:e7: b4:cd:d9:4e:3f:7a:46:60:e8:c1:44:1c:36:be:34:62:9e:5e: 3b:16:ef:52:0d:46:11:3a:28:37:a3:63:9e:18:a0:c2:cd:dc: a0:39:a7:d8:5d:b0:17:70:30:55:61:07:48:b3:5c:9e:04:8a: 7e:0a:a4:a7:7e:5a:98:93:22:3e:43:d7:5f:5a:a0:ac:d2:02: 7c:b7:7b:a0:cd:34:eb:ec:d2:6f:b1:65:4c:b7:91:be:9f:f1: de:69:2f:c5:85:19:21:91:05:2e:aa:16:d2:f7:e6:aa:49:49: 3e:0e:64:a2:8d:40:8d:2c:7c:ae:94:3c:c4:7a:dd:90:6a:11: fb:e7:cd:01:24:f3:0e:7f:b0:71:00:52:0e:33:37:46:f4:73: 84:2f:05:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCWPkuGoKPHYQASpWuyEEMAoqc9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExMloX DTI3MDMwMzA2MDYxMlowMzExMC8GA1UEAxMoMDAyREM5QTJEODJDRjc5REUzMzc2 NEZDN0JERTlGNDE3ODY5RkJFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhzXqCz50AicGbnAcjMpKJVtyR6BZS8vHJh5DQzWEdWaRAiNtA1sO+AwVJG PR8trjylluRxar60MvTwtS+99/vTPK+UEISebaiSjb1ldBJgbddVr2P0FDZ9GnxC 8QNKOJf8l3x2mzc8allstr9JC+1cF5v9OQLiMKC717YYnrObbUouxC40v7v4R1fV WHHpOlxJxttknQaS6yunG8qFsEyTRKZ12HuNss7sk1p3yEyfBfu9U8xOPvdNx16L 2Q/9rAxt6cP8GrTnKDMD2idTohTq4gZGfar6S2PufUPQUaO0BmI08O484TEsoWQd vwuWDxbywV+Q+tfRxA8fcxyJXmcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQALcmi 2Cz3neM3ZPx73p9BeGn75zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oSMwDQYJKoZIhvcNAQELBQADggEBAMqkdVibbtUUCunhURH1yMSQ+DU1nDdbjusx amgYa9BqbYnjkmlxzf6uApnwAi4oCc/Bb5K5yjkBM11DsDTzHC3+sKJm8mdzYhYX GOOPz/AdVo2BdkoRUXiyAJpRRAlohdIHcjZIC3jdFUan57TN2U4/ekZg6MFEHDa+ NGKeXjsW71INRhE6KDejY54YoMLN3KA5p9hdsBdwMFVhB0izXJ4Ein4KpKd+WpiT Ij5D119aoKzSAny3e6DNNOvs0m+xZUy3kb6f8d5pL8WFGSGRBS6qFtL35qpJST4O ZKKNQI0sfK6UPMR63ZBqEfvnzQEk8w5/sHEAUg4zN0b0c4QvBSg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:01 2026 by rpki-client