$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142946.roa File: AS142946.roa (raw, json) Hash identifier: TzTCdBORSWCqs5lVQCuyv2xtAwQnnHL2spZpSrnGY2g= Subject key identifier: 91:FD:F0:08:8E:85:11:65:20:B3:53:02:37:67:64:24:A1:0E:44:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E762982ED9FCC04D600AB001ACDB329BF5AA1CD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142946.roa Signing time: Wed 04 Mar 2026 06:05:21 +0000 ROA not before: Wed 04 Mar 2026 06:00:21 +0000 ROA not after: Wed 03 Mar 2027 06:05:21 +0000 asID: 142946 IP address blocks: 240a:a128::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:76:29:82:ed:9f:cc:04:d6:00:ab:00:1a:cd:b3:29:bf:5a:a1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:21 2026 GMT Not After : Mar 3 06:05:21 2027 GMT Subject: CN=91FDF0088E85116520B3530237676424A10E4431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:6d:49:ee:cc:64:f7:cb:4e:50:64:66:18: 22:fb:5a:4a:ec:9c:0d:15:4c:69:e1:30:75:81:55: 70:ec:ba:0f:d5:b7:65:5a:aa:9c:e6:fd:65:1a:ed: bc:9e:51:fc:7c:0f:62:a6:ec:74:70:aa:f9:1b:37: a7:f0:6b:39:fd:25:35:a3:7c:f8:08:d3:37:bb:fb: 9f:d9:3f:60:ed:41:4e:29:77:a8:75:08:4e:33:da: d2:5b:dd:f6:c5:07:d7:e6:40:ba:6e:a3:0a:66:cc: 79:c7:d1:9a:e7:71:90:3b:82:9a:81:22:aa:95:c7: ad:8a:3f:f5:24:48:4c:45:2c:13:6c:0f:8c:79:6d: ba:7a:1e:ce:c3:d7:f1:e3:b8:e5:33:5f:e7:ce:0a: 9b:9d:ba:76:5d:d8:6a:4c:8b:db:8f:61:ca:b4:bd: 7a:c1:de:83:f9:9c:82:50:a9:32:cf:20:fc:38:19: 4f:df:3c:eb:22:ad:de:59:46:3f:11:4d:0d:96:0b: 88:37:31:6d:cb:a5:71:8d:5c:49:5a:1c:e0:d4:9a: e4:3e:03:aa:36:3b:46:5e:c2:95:e2:a5:f0:18:31: 23:a9:3b:f7:f8:db:e5:4e:8a:75:8a:a7:a8:3e:0c: f8:eb:88:5f:4b:16:4f:71:e3:77:04:99:d9:a9:0b: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FD:F0:08:8E:85:11:65:20:B3:53:02:37:67:64:24:A1:0E:44:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a128::/32 Signature Algorithm: sha256WithRSAEncryption 24:dd:25:76:ea:d6:8a:b1:b2:d8:9a:f2:39:73:f3:d3:ed:34: a5:75:9e:c0:a5:60:df:b0:ca:dd:6c:6d:36:98:36:07:04:c3: d5:d5:60:aa:bd:f8:0e:a3:c2:4f:e4:37:71:9f:3b:25:c7:39: 41:99:de:5c:5e:00:a0:7c:a7:bc:6e:d7:19:42:2f:a7:bb:7b: 7a:69:85:37:dd:1e:72:79:b5:1d:70:f4:d3:f4:e4:cf:40:8a: f6:55:ec:f2:00:0f:41:46:41:8c:ec:8a:6f:dd:1f:89:a5:8e: fa:78:5a:2f:28:f9:dc:6c:9c:54:dc:ff:00:31:7f:6a:71:7a: 97:0b:75:6d:35:66:7d:e6:8a:c6:48:08:25:79:7b:50:b1:03: f8:84:af:72:5a:47:a5:0a:6f:c7:b2:dd:22:c0:b8:89:af:de: 80:40:46:13:64:27:1a:6a:e6:c9:2e:26:24:a8:e8:90:2b:a3: 4a:21:f0:00:e5:0c:27:8a:37:65:d9:52:65:2c:10:8b:9a:bf: 1a:1f:6f:c0:7f:52:9f:7f:06:21:76:13:80:7d:5c:d8:0d:2e: 8e:2d:76:1e:9a:dd:af:ad:3b:2f:72:b1:3d:c1:9d:7a:4e:63: d9:30:6b:8f:f0:a5:03:57:37:25:86:46:3d:56:d4:0e:b7:6c: cd:f2:b5:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULnYpgu2fzATWAKsAGs2zKb9aoc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyMVoX DTI3MDMwMzA2MDUyMVowMzExMC8GA1UEAxMoOTFGREYwMDg4RTg1MTE2NTIwQjM1 MzAyMzc2NzY0MjRBMTBFNDQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnabUnuzGT3y05QZGYYIvtaSuycDRVMaeEwdYFVcOy6D9W3ZVqqnOb9ZRrt vJ5R/HwPYqbsdHCq+Rs3p/BrOf0lNaN8+AjTN7v7n9k/YO1BTil3qHUITjPa0lvd 9sUH1+ZAum6jCmbMecfRmudxkDuCmoEiqpXHrYo/9SRITEUsE2wPjHltunoezsPX 8eO45TNf584Km526dl3YakyL249hyrS9esHeg/mcglCpMs8g/DgZT9886yKt3llG PxFNDZYLiDcxbculcY1cSVoc4NSa5D4DqjY7Rl7CleKl8BgxI6k79/jb5U6KdYqn qD4M+OuIX0sWT3HjdwSZ2akL0BECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSR/fAI joURZSCzUwI3Z2QkoQ5EMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oSgwDQYJKoZIhvcNAQELBQADggEBACTdJXbq1oqxstia8jlz89PtNKV1nsClYN+w yt1sbTaYNgcEw9XVYKq9+A6jwk/kN3GfOyXHOUGZ3lxeAKB8p7xu1xlCL6e7e3pp hTfdHnJ5tR1w9NP05M9AivZV7PIAD0FGQYzsim/dH4mljvp4Wi8o+dxsnFTc/wAx f2pxepcLdW01Zn3misZICCV5e1CxA/iEr3JaR6UKb8ey3SLAuImv3oBARhNkJxpq 5skuJiSo6JAro0oh8ADlDCeKN2XZUmUsEIuavxofb8B/Up9/BiF2E4B9XNgNLo4t dh6a3a+tOy9ysT3BnXpOY9kwa4/wpQNXNyWGRj1W1A63bM3ytQQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:48 2026 by rpki-client