$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142949.roa File: AS142949.roa (raw, json) Hash identifier: iL+TeWK2WJppeYG8OhT/LucvyjOeTNyQM2nSsHM0VHQ= Subject key identifier: 02:4C:BB:DB:39:8F:21:E5:19:1D:48:8F:FB:2A:D7:B7:24:3E:8C:E3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 100FDA37CB86234800B65C600433B81A41EC901A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142949.roa Signing time: Wed 04 Mar 2026 06:07:01 +0000 ROA not before: Wed 04 Mar 2026 06:02:01 +0000 ROA not after: Wed 03 Mar 2027 06:07:01 +0000 asID: 142949 IP address blocks: 240a:a12b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0f:da:37:cb:86:23:48:00:b6:5c:60:04:33:b8:1a:41:ec:90:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:01 2026 GMT Not After : Mar 3 06:07:01 2027 GMT Subject: CN=024CBBDB398F21E5191D488FFB2AD7B7243E8CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:f7:0b:1d:c0:bf:90:d3:fb:d6:f8:d6:ff: bb:c6:f0:39:90:5c:b6:42:21:bc:2e:50:fc:3d:fc: 4b:65:52:94:2c:a4:e3:ed:f5:ab:c4:4f:a5:e1:e0: 95:cb:f9:d8:2a:8c:a4:da:63:70:00:80:42:da:40: 34:36:ed:05:7b:a8:dd:f0:3b:00:a1:19:29:b1:a9: cd:cc:7d:4f:37:cd:17:75:50:af:07:5e:01:c4:ee: e8:6d:65:fa:8e:00:a8:21:c9:62:e5:70:7a:f9:f8: ae:5c:47:d4:a1:de:8c:d2:61:b3:1b:20:c0:85:38: 6d:c6:73:18:ef:95:4f:51:4f:18:59:a7:e1:7a:b7: c2:ea:ce:48:7d:eb:c3:92:5b:c7:79:61:e0:77:37: f3:79:ed:63:b2:e9:57:a2:46:12:ae:08:e0:e9:38: 62:04:7e:37:9e:fe:38:76:3f:49:e2:57:85:a6:86: 3b:82:fb:4b:f9:c2:9c:d2:b9:c5:a1:8c:8a:f4:f3: b2:03:7b:98:a4:5f:8e:78:39:c0:4c:6c:0d:73:f1: a9:e2:f3:42:38:13:40:f6:46:41:59:e4:2d:e8:b8: 42:33:12:2b:48:17:00:6e:47:57:03:f3:6a:fb:b3: 90:01:d2:81:98:f5:2f:0b:a5:17:05:a7:02:55:72: 8e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4C:BB:DB:39:8F:21:E5:19:1D:48:8F:FB:2A:D7:B7:24:3E:8C:E3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142949.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a12b::/32 Signature Algorithm: sha256WithRSAEncryption b8:12:a6:02:94:0a:de:5b:a8:6b:3a:a6:5b:ca:4c:ac:8e:92: 01:fd:ea:a4:cb:3a:89:ee:eb:57:a2:bc:d9:a4:d7:83:b2:12: 43:a6:f6:fb:3d:1e:1e:0c:9f:94:4e:a9:1d:37:5c:b5:34:09: 33:a1:ba:bc:9c:e5:9a:23:fe:f6:9d:a6:c2:16:99:f1:40:0f: 36:93:18:c6:06:6a:ec:0a:9d:82:58:e8:3d:72:79:d6:40:5f: 44:f3:e4:ee:72:62:59:a8:ba:77:64:dd:36:bc:40:0a:a9:21: ff:c8:d0:05:dc:85:62:60:8d:84:48:75:bb:48:d2:c8:1d:ad: 86:7f:ad:ff:e5:ec:78:42:6a:44:09:5c:31:c0:7e:66:14:ce: 46:16:26:6b:94:45:b2:fc:9c:10:16:af:cc:c6:8b:1a:a0:df: bf:a5:22:d7:4e:bd:97:4f:c5:bc:76:57:92:c9:fc:25:c3:0a: d7:6a:8b:d7:f9:7a:3f:16:8b:35:d8:01:71:c8:d2:67:a9:6b: 7d:5a:92:6c:dc:ec:fd:41:0c:19:c0:e2:4d:bf:5d:0f:95:f4: 35:69:8e:47:9f:0d:82:88:d2:3f:b9:8a:0d:a0:89:ce:f5:20: 23:c8:5c:8f:d8:7a:22:23:f3:74:0c:38:1e:fc:fe:b6:6d:eb: a4:18:c3:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEA/aN8uGI0gAtlxgBDO4GkHskBowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwMVoX DTI3MDMwMzA2MDcwMVowMzExMC8GA1UEAxMoMDI0Q0JCREIzOThGMjFFNTE5MUQ0 ODhGRkIyQUQ3QjcyNDNFOENFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXu9wsdwL+Q0/vW+Nb/u8bwOZBctkIhvC5Q/D38S2VSlCyk4+31q8RPpeHg lcv52CqMpNpjcACAQtpANDbtBXuo3fA7AKEZKbGpzcx9TzfNF3VQrwdeAcTu6G1l +o4AqCHJYuVwevn4rlxH1KHejNJhsxsgwIU4bcZzGO+VT1FPGFmn4Xq3wurOSH3r w5Jbx3lh4Hc383ntY7LpV6JGEq4I4Ok4YgR+N57+OHY/SeJXhaaGO4L7S/nCnNK5 xaGMivTzsgN7mKRfjng5wExsDXPxqeLzQjgTQPZGQVnkLei4QjMSK0gXAG5HVwPz avuzkAHSgZj1LwulFwWnAlVyjvECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQCTLvb OY8h5RkdSI/7Kte3JD6M4zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oSswDQYJKoZIhvcNAQELBQADggEBALgSpgKUCt5bqGs6plvKTKyOkgH96qTLOonu 61eivNmk14OyEkOm9vs9Hh4Mn5ROqR03XLU0CTOhuryc5Zoj/vadpsIWmfFADzaT GMYGauwKnYJY6D1yedZAX0Tz5O5yYlmoundk3Ta8QAqpIf/I0AXchWJgjYRIdbtI 0sgdrYZ/rf/l7HhCakQJXDHAfmYUzkYWJmuURbL8nBAWr8zGixqg37+lItdOvZdP xbx2V5LJ/CXDCtdqi9f5ej8WizXYAXHI0mepa31akmzc7P1BDBnA4k2/XQ+V9DVp jkefDYKI0j+5ig2gic71ICPIXI/YeiIj83QMOB78/rZt66QYwy0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:44 2026 by rpki-client