$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142948.roa File: AS142948.roa (raw, json) Hash identifier: hZ3ZyYGZuwVXAB9Ajq8VMBFHjlvGOuXNhWQVFfjecq8= Subject key identifier: BC:92:EA:31:80:22:E0:A4:BA:5D:BB:D7:26:2C:93:66:53:43:45:D0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 069768441EECB160CE51B3F291D6DD68A7548DFB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142948.roa Signing time: Wed 04 Mar 2026 06:06:40 +0000 ROA not before: Wed 04 Mar 2026 06:01:40 +0000 ROA not after: Wed 03 Mar 2027 06:06:40 +0000 asID: 142948 IP address blocks: 240a:a12a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:97:68:44:1e:ec:b1:60:ce:51:b3:f2:91:d6:dd:68:a7:54:8d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:40 2026 GMT Not After : Mar 3 06:06:40 2027 GMT Subject: CN=BC92EA318022E0A4BA5DBBD7262C9366534345D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:02:ce:27:98:9b:ed:a7:3e:cc:aa:d0:b6:b1: 99:df:46:7b:82:c0:82:c5:c6:74:2b:6e:6a:f6:66: 12:82:4f:f5:69:ad:2b:1d:bb:19:40:d8:28:43:8f: 99:49:67:cb:1a:72:10:28:e7:4a:a2:03:e2:be:b5: bc:34:5c:05:33:ce:9a:f8:11:21:72:9e:1e:31:81: 7a:84:77:9b:8d:1f:b7:92:4b:11:c5:97:fc:0c:ee: 83:da:29:64:86:87:ae:c5:4d:21:31:e9:21:5d:25: 88:8a:24:c7:15:ce:b6:37:9c:f7:d0:1e:0c:c2:8d: 3b:8e:0a:1b:b1:ef:dd:1e:2b:29:ab:34:f6:29:c3: 28:05:2c:ea:a6:df:48:93:fe:af:f9:08:0e:76:7b: 41:91:d1:24:fd:af:04:76:8b:6f:67:4f:e8:54:5f: 26:09:6a:06:9b:2f:61:7b:b3:53:76:f4:fe:4c:67: bf:f5:5c:e2:29:20:65:0c:d0:2c:78:08:83:cf:c2: 82:23:e5:31:c4:a5:21:c1:3a:a9:44:8e:05:92:99: 03:be:bb:60:b0:65:57:6d:65:22:30:b6:b7:ca:a6: 39:00:9c:7e:8a:e5:ef:78:cf:c8:ac:b0:6a:8f:b1: 6f:34:f0:d6:c1:7a:05:1b:71:c3:25:af:78:f8:ed: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:EA:31:80:22:E0:A4:BA:5D:BB:D7:26:2C:93:66:53:43:45:D0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142948.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a12a::/32 Signature Algorithm: sha256WithRSAEncryption 8e:81:21:a5:4d:39:69:d5:12:61:1e:7c:1a:01:03:b7:4d:cd: c0:e3:a7:18:75:f3:ac:87:ba:3c:9d:79:e8:17:c2:82:ad:64: 25:bd:d2:8d:8e:74:ff:c2:1d:69:cc:c7:8d:7a:07:35:37:b6: 01:bc:06:6d:a0:b8:f3:79:04:b2:04:98:91:51:ba:d4:cb:e6: 19:9b:33:ed:ff:e7:cf:6c:1e:dd:92:9a:b0:99:26:fd:c9:38: 72:66:60:22:5b:2d:99:7a:20:c6:86:4d:2a:83:37:c9:7d:6f: d4:05:a0:51:51:cb:03:3d:41:4b:71:95:f4:e3:81:db:a2:8e: ab:ab:4b:33:cc:30:de:4d:fa:58:be:5d:08:71:5a:39:f0:19: 3b:32:04:4c:eb:5e:64:c1:93:f7:9a:85:58:70:40:d9:68:4f: e8:b4:5e:6a:78:59:cc:42:cc:f3:4f:a3:74:d6:e1:48:af:c3: 1f:42:88:23:f9:a9:f5:85:b5:da:53:fb:4b:2a:34:57:df:3e: d3:05:54:db:23:7a:3d:92:1e:7c:56:c3:ce:87:f3:ab:24:9b: b6:90:c7:0c:72:b0:05:2a:4a:23:16:aa:b8:81:0d:c7:f2:88: f5:46:89:7b:38:08:e2:88:d0:eb:12:01:1f:67:d2:05:c3:2b: dc:85:e2:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBpdoRB7ssWDOUbPykdbdaKdUjfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE0MFoX DTI3MDMwMzA2MDY0MFowMzExMC8GA1UEAxMoQkM5MkVBMzE4MDIyRTBBNEJBNURC QkQ3MjYyQzkzNjY1MzQzNDVEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMCzieYm+2nPsyq0Laxmd9Ge4LAgsXGdCtuavZmEoJP9WmtKx27GUDYKEOP mUlnyxpyECjnSqID4r61vDRcBTPOmvgRIXKeHjGBeoR3m40ft5JLEcWX/Azug9op ZIaHrsVNITHpIV0liIokxxXOtjec99AeDMKNO44KG7Hv3R4rKas09inDKAUs6qbf SJP+r/kIDnZ7QZHRJP2vBHaLb2dP6FRfJglqBpsvYXuzU3b0/kxnv/Vc4ikgZQzQ LHgIg8/CgiPlMcSlIcE6qUSOBZKZA767YLBlV21lIjC2t8qmOQCcforl73jPyKyw ao+xbzTw1sF6BRtxwyWvePjtfHkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS8kuox gCLgpLpdu9cmLJNmU0NF0DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oSowDQYJKoZIhvcNAQELBQADggEBAI6BIaVNOWnVEmEefBoBA7dNzcDjpxh186yH ujydeegXwoKtZCW90o2OdP/CHWnMx416BzU3tgG8Bm2guPN5BLIEmJFRutTL5hmb M+3/589sHt2SmrCZJv3JOHJmYCJbLZl6IMaGTSqDN8l9b9QFoFFRywM9QUtxlfTj gduijqurSzPMMN5N+li+XQhxWjnwGTsyBEzrXmTBk/eahVhwQNloT+i0Xmp4WcxC zPNPo3TW4Uivwx9CiCP5qfWFtdpT+0sqNFffPtMFVNsjej2SHnxWw86H86skm7aQ xwxysAUqSiMWqriBDcfyiPVGiXs4COKI0OsSAR9n0gXDK9yF4s8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:29 2026 by rpki-client