$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142943.roa File: AS142943.roa (raw, json) Hash identifier: 6ZI1wSxhyZ7Mx249FNQkci39CyLQ4f08h/YhKuMBzdc= Subject key identifier: 36:EF:23:88:3B:A5:B2:55:6D:17:57:DD:C8:99:FE:CA:6C:F1:8D:89 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 56CF121ECAC204F86C7C24F890BCBB01B4AAA3CC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142943.roa Signing time: Wed 04 Mar 2026 06:06:15 +0000 ROA not before: Wed 04 Mar 2026 06:01:15 +0000 ROA not after: Wed 03 Mar 2027 06:06:15 +0000 asID: 142943 IP address blocks: 240a:a125::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cf:12:1e:ca:c2:04:f8:6c:7c:24:f8:90:bc:bb:01:b4:aa:a3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:15 2026 GMT Not After : Mar 3 06:06:15 2027 GMT Subject: CN=36EF23883BA5B2556D1757DDC899FECA6CF18D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:80:c5:3d:03:c3:b9:6c:b4:f2:1e:4c:6d: 99:39:32:ce:61:5d:f2:1d:28:3d:65:9f:47:cf:1a: 21:2c:22:f6:47:c6:82:a0:93:a2:29:c3:ac:3a:dc: fc:fb:35:46:af:a6:74:83:f1:d6:39:34:14:01:9c: aa:58:5f:2b:ed:8f:7f:34:3d:f4:78:29:21:9a:5b: d6:86:6d:29:10:7a:72:de:dd:d6:bc:a0:f3:f4:df: f6:fa:3b:70:6e:cf:fe:12:32:20:85:91:9b:0f:07: c3:1c:23:aa:8f:d7:a1:5a:de:d7:a9:98:69:73:62: 58:42:4f:4e:ec:71:3e:82:f0:4c:26:16:f2:2c:7b: 2a:9c:11:8e:fb:38:c8:b0:5f:16:c4:42:33:c2:ac: d8:52:ac:b2:d7:95:8b:55:d3:ef:90:18:12:61:c1: 27:54:b0:7f:78:b0:b3:9d:84:c0:4b:d1:12:7f:ba: 7a:e0:96:d3:0b:44:19:13:38:5e:57:2e:97:79:85: e8:14:07:b5:72:57:6d:dd:08:bd:99:08:3a:bc:07: 39:73:b5:8c:98:90:9f:89:b0:72:d1:1e:72:07:77: ee:23:6d:fd:2a:92:e3:f0:96:f7:f1:1e:ff:09:75: 5e:11:a9:42:46:e7:db:ca:3b:43:e8:a6:eb:c9:91: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EF:23:88:3B:A5:B2:55:6D:17:57:DD:C8:99:FE:CA:6C:F1:8D:89 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a125::/32 Signature Algorithm: sha256WithRSAEncryption ab:25:8e:84:61:3c:c3:ef:18:17:d7:ad:60:b3:28:3f:43:f4: d9:75:1d:fd:da:1c:ee:85:bb:12:5f:37:ea:5d:71:e2:ce:db: bf:16:1a:cc:c7:d4:34:2e:b5:b7:94:de:f9:d9:70:ac:0c:ad: 77:a7:92:0e:42:25:b1:ac:74:51:71:24:e0:19:bf:3c:90:49: 49:9f:ed:39:86:2a:75:c0:c4:42:9c:96:e0:a5:fd:eb:82:eb: a2:45:3a:48:a3:ef:db:c3:dd:85:e7:ee:7d:fa:e8:63:d4:8d: 3a:c5:8d:a7:ea:4e:f3:33:01:2c:1b:db:28:22:e2:b2:2a:1f: ff:60:ab:59:c4:31:18:88:ef:af:e4:dd:6a:7d:06:e9:03:de: 34:86:4d:33:92:b5:51:c3:2b:de:96:84:08:d3:0c:d2:cd:77: 90:52:6f:0f:2b:26:2f:d2:01:8c:96:01:ae:d9:21:5a:83:2d: 66:b6:ef:6c:c3:a3:2d:1d:f8:c6:9e:a0:50:23:22:13:25:3c: cf:8b:3f:f6:6f:b6:75:98:9a:40:87:eb:23:55:1a:6d:a3:bb: 0d:34:91:7b:ac:e7:ff:39:6d:4b:8d:ac:07:42:23:cd:9e:ac: 9f:b2:da:c3:81:13:66:22:a0:9d:4d:8d:36:6a:86:dc:9d:08: 77:2e:46:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVs8SHsrCBPhsfCT4kLy7AbSqo8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDExNVoX DTI3MDMwMzA2MDYxNVowMzExMC8GA1UEAxMoMzZFRjIzODgzQkE1QjI1NTZEMTc1 N0REQzg5OUZFQ0E2Q0YxOEQ4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5RgMU9A8O5bLTyHkxtmTkyzmFd8h0oPWWfR88aISwi9kfGgqCToinDrDrc /Ps1Rq+mdIPx1jk0FAGcqlhfK+2PfzQ99HgpIZpb1oZtKRB6ct7d1ryg8/Tf9vo7 cG7P/hIyIIWRmw8Hwxwjqo/XoVre16mYaXNiWEJPTuxxPoLwTCYW8ix7KpwRjvs4 yLBfFsRCM8Ks2FKssteVi1XT75AYEmHBJ1Swf3iws52EwEvREn+6euCW0wtEGRM4 Xlcul3mF6BQHtXJXbd0IvZkIOrwHOXO1jJiQn4mwctEecgd37iNt/SqS4/CW9/Ee /wl1XhGpQkbn28o7Q+im68mRHJsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ27yOI O6WyVW0XV93Imf7KbPGNiTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oSUwDQYJKoZIhvcNAQELBQADggEBAKsljoRhPMPvGBfXrWCzKD9D9Nl1Hf3aHO6F uxJfN+pdceLO278WGszH1DQutbeU3vnZcKwMrXenkg5CJbGsdFFxJOAZvzyQSUmf 7TmGKnXAxEKcluCl/euC66JFOkij79vD3YXn7n366GPUjTrFjafqTvMzASwb2ygi 4rIqH/9gq1nEMRiI76/k3Wp9BukD3jSGTTOStVHDK96WhAjTDNLNd5BSbw8rJi/S AYyWAa7ZIVqDLWa272zDoy0d+MaeoFAjIhMlPM+LP/ZvtnWYmkCH6yNVGm2juw00 kXus5/85bUuNrAdCI82erJ+y2sOBE2YioJ1NjTZqhtydCHcuRh0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:02 2026 by rpki-client