$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142942.roa File: AS142942.roa (raw, json) Hash identifier: rL/v7oR2vBJCQMlCGx09DbV3qdpV9OBdxRGEK8DVg6A= Subject key identifier: 37:58:C8:E8:BC:61:D1:8C:BB:50:B3:F6:5B:41:D0:BE:37:2F:43:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6184ACA9ABA0DA9DD1495123A951E555B9299FA3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142942.roa Signing time: Wed 04 Mar 2026 06:07:10 +0000 ROA not before: Wed 04 Mar 2026 06:02:10 +0000 ROA not after: Wed 03 Mar 2027 06:07:10 +0000 asID: 142942 IP address blocks: 240a:a124::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:84:ac:a9:ab:a0:da:9d:d1:49:51:23:a9:51:e5:55:b9:29:9f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:10 2026 GMT Not After : Mar 3 06:07:10 2027 GMT Subject: CN=3758C8E8BC61D18CBB50B3F65B41D0BE372F4348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:05:1d:f2:50:c9:fa:64:ce:e4:a0:58:5e: f0:c7:96:19:16:cd:3e:02:7c:36:c9:c5:2f:55:f2: 9b:1d:e6:10:c4:39:f3:a3:e9:8a:85:16:10:e9:c4: ed:26:b0:5a:67:8d:c2:c6:fa:05:11:59:11:f0:ed: 2c:d5:ae:64:6d:35:83:3e:52:e5:c8:62:1c:1b:7b: 0b:80:14:eb:0c:86:89:8c:bd:85:43:55:df:b8:d7: 41:71:37:7b:02:3a:3b:7e:0b:7c:35:db:f9:fd:62: 2c:2b:82:b8:ed:a9:49:2e:8b:e7:11:3d:08:11:ed: e1:fe:f7:7e:c0:77:9d:c4:82:07:2a:a3:2a:b8:c9: f4:47:67:05:83:48:ff:a1:08:cb:1b:57:4e:e3:ba: c6:7b:9a:cd:33:57:8a:f1:b2:40:a5:ce:69:f3:cc: 06:61:f0:32:2f:bf:d6:07:fd:bd:49:f1:61:10:2c: 89:b7:9f:90:86:ca:12:e2:6b:0f:e7:37:23:af:08: 72:7e:15:c7:89:b4:c6:ef:b4:72:6e:a4:58:58:30: bf:40:b0:5e:84:84:99:0e:89:36:da:e7:40:51:8b: 1d:e3:c4:c9:c9:b4:da:81:92:78:ae:de:52:e8:3f: b7:f6:a0:fd:c7:73:70:84:bd:59:02:cd:6d:1e:d3: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:58:C8:E8:BC:61:D1:8C:BB:50:B3:F6:5B:41:D0:BE:37:2F:43:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a124::/32 Signature Algorithm: sha256WithRSAEncryption 3d:b4:bc:de:38:35:28:83:0c:41:89:89:82:0b:7a:d0:0f:f2: 7b:8a:17:19:75:c0:2a:f3:90:cb:ad:b2:2a:4a:dd:3e:76:77: 58:67:0e:71:3c:cd:a4:df:5d:67:51:65:68:53:5b:82:9b:a1: 61:62:af:16:52:34:13:5e:3b:98:2e:b0:ac:fc:2a:0e:4e:c7: 7d:58:f0:93:b1:1a:7f:e1:b9:e0:1b:4e:6d:45:79:fd:ec:9a: 1c:15:a7:1d:72:92:e3:c2:63:dd:62:ba:6a:ed:e2:1d:13:ec: ec:7e:0f:d6:94:66:cf:dc:33:c1:e2:ad:bd:4b:18:b7:46:8c: ea:be:39:d6:a7:70:e8:59:01:f5:95:23:c3:c2:22:b7:46:6d: 86:7d:12:cf:ac:bb:d9:96:28:a3:d6:26:46:52:ce:fe:0e:92: f5:9b:d8:c2:d1:18:2c:ea:9e:87:d2:31:2c:48:b1:46:5a:18: 41:52:95:b0:8d:37:7a:e9:fc:35:54:ee:f0:0d:b8:b4:91:91: eb:e8:9d:61:45:f6:7b:65:19:cd:d8:c4:72:7f:ad:e5:19:ac: df:6b:cd:4a:90:16:68:57:fd:a2:44:59:82:ba:f3:66:3f:96: 3d:9d:d7:fe:48:f8:de:6f:47:a1:df:8c:ad:ac:27:6e:17:09: 2b:a5:03:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYYSsqaug2p3RSVEjqVHlVbkpn6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxMFoX DTI3MDMwMzA2MDcxMFowMzExMC8GA1UEAxMoMzc1OEM4RThCQzYxRDE4Q0JCNTBC M0Y2NUI0MUQwQkUzNzJGNDM0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJpyBR3yUMn6ZM7koFhe8MeWGRbNPgJ8NsnFL1Xymx3mEMQ586PpioUWEOnE 7SawWmeNwsb6BRFZEfDtLNWuZG01gz5S5chiHBt7C4AU6wyGiYy9hUNV37jXQXE3 ewI6O34LfDXb+f1iLCuCuO2pSS6L5xE9CBHt4f73fsB3ncSCByqjKrjJ9EdnBYNI /6EIyxtXTuO6xnuazTNXivGyQKXOafPMBmHwMi+/1gf9vUnxYRAsibefkIbKEuJr D+c3I68Icn4Vx4m0xu+0cm6kWFgwv0CwXoSEmQ6JNtrnQFGLHePEycm02oGSeK7e Uug/t/ag/cdzcIS9WQLNbR7TIt0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ3WMjo vGHRjLtQs/ZbQdC+Ny9DSDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oSQwDQYJKoZIhvcNAQELBQADggEBAD20vN44NSiDDEGJiYILetAP8nuKFxl1wCrz kMutsipK3T52d1hnDnE8zaTfXWdRZWhTW4KboWFirxZSNBNeO5gusKz8Kg5Ox31Y 8JOxGn/hueAbTm1Fef3smhwVpx1ykuPCY91iumrt4h0T7Ox+D9aUZs/cM8Hirb1L GLdGjOq+OdancOhZAfWVI8PCIrdGbYZ9Es+su9mWKKPWJkZSzv4OkvWb2MLRGCzq nofSMSxIsUZaGEFSlbCNN3rp/DVU7vANuLSRkevonWFF9ntlGc3YxHJ/reUZrN9r zUqQFmhX/aJEWYK682Y/lj2d1/5I+N5vR6HfjK2sJ24XCSulA6s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:52 2026 by rpki-client