$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142947.roa File: AS142947.roa (raw, json) Hash identifier: ueb3NjfOSItpRlGdeibsTgXiEJpA67Grt6hg8hsnspE= Subject key identifier: 07:CC:88:19:72:64:B5:9B:87:56:86:9F:F0:17:D0:E2:03:D1:9F:4C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 71CD8AFF2E553EA0F7F025467E77905DEABD8E06 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142947.roa Signing time: Wed 04 Mar 2026 06:06:33 +0000 ROA not before: Wed 04 Mar 2026 06:01:33 +0000 ROA not after: Wed 03 Mar 2027 06:06:33 +0000 asID: 142947 IP address blocks: 240a:a129::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cd:8a:ff:2e:55:3e:a0:f7:f0:25:46:7e:77:90:5d:ea:bd:8e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:33 2026 GMT Not After : Mar 3 06:06:33 2027 GMT Subject: CN=07CC88197264B59B8756869FF017D0E203D19F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:12:5d:34:1e:3f:04:14:8b:74:ff:62:cd:0e: 11:e2:72:66:6a:d1:b8:1f:76:dd:c3:71:3b:4c:41: cf:10:35:2e:43:d5:cc:76:94:67:4b:4d:68:05:91: 9f:be:16:67:f9:fe:49:be:87:11:3b:90:77:52:06: 73:bf:28:8e:8b:31:aa:34:76:96:75:f5:6e:40:1a: 7a:a7:18:b7:62:13:b4:0f:f5:77:3a:7b:93:40:6e: ab:d3:02:f0:60:b1:01:b5:79:be:5f:ce:bf:22:99: 85:1a:c7:cc:28:0a:0a:92:f1:9b:9c:df:c8:58:33: 16:8f:41:9d:21:1a:8e:ec:74:2a:83:37:3a:82:ce: 94:e4:d5:39:e6:05:44:45:8d:f8:0b:ec:f6:ad:30: 85:fc:80:5f:fa:36:af:27:47:16:66:43:01:13:8e: 86:80:31:1f:61:84:32:59:e5:64:fc:2a:5c:3d:a1: 95:d1:40:52:0f:13:c1:86:12:04:c8:d6:f8:71:b3: ea:2b:99:bb:17:01:11:82:d0:43:df:3a:76:43:8c: 7c:7b:5a:be:09:ff:88:ed:c3:90:21:53:db:33:a4: 08:d0:85:77:05:9c:51:e8:43:5a:d5:b4:6e:8e:4d: 93:b5:9d:ef:28:fe:cd:d6:70:e0:69:13:0f:cd:82: 3c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CC:88:19:72:64:B5:9B:87:56:86:9F:F0:17:D0:E2:03:D1:9F:4C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142947.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a129::/32 Signature Algorithm: sha256WithRSAEncryption a8:c8:f7:a0:10:dd:9d:c6:8b:13:eb:bc:c1:8b:73:b3:d4:2d: 30:82:ca:3c:44:47:e1:12:db:36:cf:ac:91:79:6b:5b:23:c5: e9:a8:a8:c4:ab:a3:fa:39:94:94:dd:36:c7:48:7d:21:0a:1b: 67:11:c5:20:ad:27:ba:64:1e:3e:9f:84:ef:d5:e7:59:4a:3e: 1c:77:17:01:2f:c2:c2:c8:f1:02:c9:7a:35:be:d3:86:a8:07: 1c:5a:0c:a9:77:d6:d6:c7:33:80:c5:26:43:52:e9:97:b1:6c: a7:49:7a:34:58:a9:4e:66:45:9e:a3:87:80:25:8a:3c:29:08: d8:45:98:46:d3:29:95:c2:a5:40:c1:e3:6c:f9:72:9e:6d:ef: 1d:ca:32:75:b4:64:0c:e2:6a:8e:4d:74:32:b2:79:2f:a3:d3: 28:0d:19:e3:93:11:47:db:31:a2:5c:19:59:d3:3e:e3:11:d5: 11:86:3e:71:8d:f8:fd:b6:61:4a:c0:bb:38:68:a5:a6:58:44: b0:d1:ef:16:12:a4:79:17:e7:5f:76:2e:3f:75:3e:fd:4a:e7: 45:00:89:26:3f:7a:19:84:4f:53:93:d1:ae:05:1a:f1:6e:50: 6b:c4:9b:3e:c1:74:c2:be:e5:80:55:ba:ab:d2:34:5b:60:57: 2f:60:e1:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcc2K/y5VPqD38CVGfneQXeq9jgYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEzM1oX DTI3MDMwMzA2MDYzM1owMzExMC8GA1UEAxMoMDdDQzg4MTk3MjY0QjU5Qjg3NTY4 NjlGRjAxN0QwRTIwM0QxOUY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJoSXTQePwQUi3T/Ys0OEeJyZmrRuB923cNxO0xBzxA1LkPVzHaUZ0tNaAWR n74WZ/n+Sb6HETuQd1IGc78ojosxqjR2lnX1bkAaeqcYt2ITtA/1dzp7k0Buq9MC 8GCxAbV5vl/OvyKZhRrHzCgKCpLxm5zfyFgzFo9BnSEajux0KoM3OoLOlOTVOeYF REWN+Avs9q0whfyAX/o2rydHFmZDAROOhoAxH2GEMlnlZPwqXD2hldFAUg8TwYYS BMjW+HGz6iuZuxcBEYLQQ986dkOMfHtavgn/iO3DkCFT2zOkCNCFdwWcUehDWtW0 bo5Nk7Wd7yj+zdZw4GkTD82CPOkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQHzIgZ cmS1m4dWhp/wF9DiA9GfTDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oSkwDQYJKoZIhvcNAQELBQADggEBAKjI96AQ3Z3GixPrvMGLc7PULTCCyjxER+ES 2zbPrJF5a1sjxemoqMSro/o5lJTdNsdIfSEKG2cRxSCtJ7pkHj6fhO/V51lKPhx3 FwEvwsLI8QLJejW+04aoBxxaDKl31tbHM4DFJkNS6ZexbKdJejRYqU5mRZ6jh4Al ijwpCNhFmEbTKZXCpUDB42z5cp5t7x3KMnW0ZAziao5NdDKyeS+j0ygNGeOTEUfb MaJcGVnTPuMR1RGGPnGN+P22YUrAuzhopaZYRLDR7xYSpHkX5192Lj91Pv1K50UA iSY/ehmET1OT0a4FGvFuUGvEmz7BdMK+5YBVuqvSNFtgVy9g4SI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:25 2026 by rpki-client