$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142953.roa File: AS142953.roa (raw, json) Hash identifier: T7PHk0yB3POYOXvIWrPqMkY+jHNl+CXEEFcyV2C1eHM= Subject key identifier: DD:89:E5:12:C1:A1:1F:42:E5:52:A7:AC:DB:EB:F9:59:53:D8:99:AE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 610313C7D016428B26CBD3669D228F10BD15FB76 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142953.roa Signing time: Wed 04 Mar 2026 06:06:56 +0000 ROA not before: Wed 04 Mar 2026 06:01:56 +0000 ROA not after: Wed 03 Mar 2027 06:06:56 +0000 asID: 142953 IP address blocks: 240a:a12f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:03:13:c7:d0:16:42:8b:26:cb:d3:66:9d:22:8f:10:bd:15:fb:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:56 2026 GMT Not After : Mar 3 06:06:56 2027 GMT Subject: CN=DD89E512C1A11F42E552A7ACDBEBF95953D899AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:72:62:2d:8e:d8:2e:30:d2:55:eb:20:62: 08:db:ff:bf:57:96:23:24:2d:67:8f:aa:68:97:c8: 34:0d:67:20:18:ec:a6:5b:35:56:db:e9:ab:59:f5: 7d:33:8b:25:21:31:fb:d9:1c:73:b8:7b:56:ee:3b: be:8c:ad:c4:63:51:3a:bf:dd:31:f4:77:b6:88:19: 14:b6:60:b1:e5:e3:5d:e4:7e:d1:b7:9c:93:2a:c7: 82:cb:08:1e:b1:09:d7:b9:be:75:76:2c:d7:a2:60: f3:64:ea:db:cf:4e:7f:71:e3:0b:3a:14:67:6d:47: bc:1e:43:17:de:42:ad:bf:7a:69:8c:25:57:bf:b1: da:67:d7:b8:31:26:05:ed:31:75:e7:a1:ae:57:49: 70:1e:6b:62:70:58:bc:27:5a:88:b1:6f:a6:f4:a5: 84:ce:e3:51:1c:ec:9d:2d:7d:a7:2d:25:3d:a7:25: 3f:e0:49:1a:70:88:22:6d:76:86:2e:4b:1e:67:27: e0:b9:33:0e:93:6f:be:88:e8:73:76:99:f1:e4:4d: 3f:e5:bd:3e:c5:73:56:d1:84:7b:79:21:8a:86:96: b0:ed:be:e2:36:db:65:bb:0e:e4:50:66:61:e6:b7: 28:87:4d:6d:a7:4c:85:e3:7d:40:20:e7:32:d4:a1: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:89:E5:12:C1:A1:1F:42:E5:52:A7:AC:DB:EB:F9:59:53:D8:99:AE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142953.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a12f::/32 Signature Algorithm: sha256WithRSAEncryption 6b:cd:a1:29:ea:bd:b7:09:27:40:dd:85:c1:f7:15:f3:38:a0: be:30:31:49:17:f9:3a:3d:a8:57:0e:ff:0c:27:f8:a6:4d:79: 1f:73:77:5b:35:9f:56:30:f7:5b:78:1d:0d:51:d8:a0:ca:07: f9:b2:d2:16:9b:70:fd:c4:ac:6c:9d:60:dd:fb:3d:68:1c:05: c5:05:90:cb:49:ec:a0:b2:c5:f1:bc:65:3d:f8:a2:94:f5:33: f3:73:1d:f6:58:45:64:a6:bc:5e:5a:31:e6:e5:7f:66:0e:16: 01:62:67:9c:d9:8d:01:f3:d1:c9:95:05:c1:b2:32:af:a8:0c: 5b:7b:be:e8:08:3a:fb:2c:46:87:c4:c0:ba:ce:1f:ed:a4:c9: 88:4b:c3:50:e4:6d:e1:c1:08:12:5b:e2:93:a6:03:e7:d6:a4: 58:ca:43:94:b0:43:a6:ee:8e:3e:6b:74:67:b8:c3:65:a0:15: 63:9a:08:8c:4e:2b:07:73:4c:c1:9e:0d:d8:1c:0f:2e:eb:18: 40:11:74:2e:e4:00:6f:39:f4:39:a6:72:96:fe:a2:d1:c6:8f: af:23:82:39:86:96:38:94:56:33:52:6e:5b:3f:e0:2c:53:ad: e6:36:c4:fc:0b:af:c0:5b:d2:c1:9d:eb:7b:c9:7a:9a:e5:74: 9e:fb:f3:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYQMTx9AWQosmy9NmnSKPEL0V+3YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDE1NloX DTI3MDMwMzA2MDY1NlowMzExMC8GA1UEAxMoREQ4OUU1MTJDMUExMUY0MkU1NTJB N0FDREJFQkY5NTk1M0Q4OTlBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYZcmItjtguMNJV6yBiCNv/v1eWIyQtZ4+qaJfINA1nIBjspls1Vtvpq1n1 fTOLJSEx+9kcc7h7Vu47voytxGNROr/dMfR3togZFLZgseXjXeR+0beckyrHgssI HrEJ17m+dXYs16Jg82Tq289Of3HjCzoUZ21HvB5DF95Crb96aYwlV7+x2mfXuDEm Be0xdeehrldJcB5rYnBYvCdaiLFvpvSlhM7jURzsnS19py0lPaclP+BJGnCIIm12 hi5LHmcn4LkzDpNvvojoc3aZ8eRNP+W9PsVzVtGEe3khioaWsO2+4jbbZbsO5FBm Yea3KIdNbadMheN9QCDnMtSh+MkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTdieUS waEfQuVSp6zb6/lZU9iZrjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oS8wDQYJKoZIhvcNAQELBQADggEBAGvNoSnqvbcJJ0DdhcH3FfM4oL4wMUkX+To9 qFcO/wwn+KZNeR9zd1s1n1Yw91t4HQ1R2KDKB/my0habcP3ErGydYN37PWgcBcUF kMtJ7KCyxfG8ZT34opT1M/NzHfZYRWSmvF5aMeblf2YOFgFiZ5zZjQHz0cmVBcGy Mq+oDFt7vugIOvssRofEwLrOH+2kyYhLw1DkbeHBCBJb4pOmA+fWpFjKQ5SwQ6bu jj5rdGe4w2WgFWOaCIxOKwdzTMGeDdgcDy7rGEARdC7kAG859Dmmcpb+otHGj68j gjmGljiUVjNSbls/4CxTreY2xPwLr8Bb0sGd63vJeprldJ778wA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:37 2026 by rpki-client