$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142954.roa File: AS142954.roa (raw, json) Hash identifier: 7kkw0PcBQ2ogw6DyI9LQdXWo3VvnNOMcwovnHMk1ruw= Subject key identifier: 80:6A:EE:1D:42:5C:8A:F2:C4:F5:68:2C:26:20:B3:E6:18:DA:95:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2AADE94303D147C0183F1E7A6308C2D3A52D7867 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142954.roa Signing time: Wed 04 Mar 2026 06:05:51 +0000 ROA not before: Wed 04 Mar 2026 06:00:51 +0000 ROA not after: Wed 03 Mar 2027 06:05:51 +0000 asID: 142954 IP address blocks: 240a:a130::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ad:e9:43:03:d1:47:c0:18:3f:1e:7a:63:08:c2:d3:a5:2d:78:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:51 2026 GMT Not After : Mar 3 06:05:51 2027 GMT Subject: CN=806AEE1D425C8AF2C4F5682C2620B3E618DA959D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:05:df:3c:06:e4:8a:fc:8d:2e:ae:be:be:15: 9f:ea:d7:ee:43:24:8e:b8:3b:bf:a9:a1:a3:54:2d: a3:14:24:4f:f5:de:b7:bb:95:63:83:28:f6:68:a2: 87:61:a9:f9:fc:1e:84:e2:98:67:77:89:13:81:3c: af:4e:c4:39:dd:b3:af:34:5e:17:e9:e8:79:80:59: 9c:36:04:f7:a7:45:2e:0e:2e:e9:2c:60:49:48:89: 2a:3d:a4:6a:50:19:9e:21:13:fe:61:a6:73:30:20: dd:ae:2b:01:bc:ca:9d:5c:ca:d5:c1:bb:d6:6b:aa: ea:6b:a0:96:bd:c2:0b:87:4a:58:72:8d:c5:34:8f: 7f:25:e3:74:ed:67:78:69:91:0a:24:61:75:40:c5: 8c:ed:12:03:fa:0a:28:c4:59:34:9d:be:1e:14:42: 0c:c0:65:a0:6e:cf:1b:58:17:5b:2c:a1:9a:72:d7: 68:32:0e:63:17:27:aa:4c:2f:51:30:8b:ff:f3:62: a6:d2:ab:c3:a5:48:c7:14:f0:6b:e1:40:a7:d6:14: 27:0b:cf:9c:c5:89:50:b7:a2:3c:01:b3:6b:98:3a: 5b:03:11:e0:33:7d:15:cd:6c:cf:89:f4:65:e2:94: 0e:97:52:1a:8e:9e:a4:62:33:37:47:15:04:d0:bb: a5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6A:EE:1D:42:5C:8A:F2:C4:F5:68:2C:26:20:B3:E6:18:DA:95:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142954.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a130::/32 Signature Algorithm: sha256WithRSAEncryption dc:ec:86:10:78:a3:93:50:da:96:21:13:92:62:a1:c9:53:d8: 74:1c:ee:e9:86:5c:b2:12:8f:65:3b:88:6a:aa:f4:f7:1b:d4: 0f:d1:ae:2f:0d:db:d9:d6:11:12:68:a4:02:23:5d:de:a6:a2: 58:55:34:3d:c7:66:90:4d:79:85:5e:0a:35:ec:39:1b:96:73: 0d:a0:f8:2c:9c:82:88:21:64:5d:d7:a1:9b:c5:fd:8a:e6:b5: 6a:0e:d5:2c:82:8a:01:dc:c0:f9:80:59:db:44:e7:67:3d:2e: 4f:d2:20:ca:79:ce:a9:d2:4a:49:c1:f2:e2:d9:6e:c8:b3:7c: 34:71:8d:d4:23:a2:ee:81:60:86:ba:43:eb:87:a3:62:de:09: c9:26:73:d9:27:e0:65:ff:17:98:86:bf:e6:99:89:4d:94:00: 90:17:bc:83:00:a9:62:90:21:9c:df:5c:10:d3:ca:8d:5b:f3: e7:a6:92:bc:fa:a6:70:56:a5:39:0a:7a:64:78:10:5f:0e:16: b3:b8:2b:37:d1:2e:b5:3f:ba:68:46:92:cf:f7:e6:a2:48:65: 61:f2:ee:50:ef:af:23:50:53:c7:72:ea:39:f4:fd:87:8a:c6: 29:3e:3c:05:bf:16:47:d0:c6:a3:f1:ed:24:f6:6a:49:80:04: 73:12:49:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKq3pQwPRR8AYPx56YwjC06UteGcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1MVoX DTI3MDMwMzA2MDU1MVowMzExMC8GA1UEAxMoODA2QUVFMUQ0MjVDOEFGMkM0RjU2 ODJDMjYyMEIzRTYxOERBOTU5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAF3zwG5Ir8jS6uvr4Vn+rX7kMkjrg7v6mho1QtoxQkT/Xet7uVY4Mo9mii h2Gp+fwehOKYZ3eJE4E8r07EOd2zrzReF+noeYBZnDYE96dFLg4u6SxgSUiJKj2k alAZniET/mGmczAg3a4rAbzKnVzK1cG71muq6muglr3CC4dKWHKNxTSPfyXjdO1n eGmRCiRhdUDFjO0SA/oKKMRZNJ2+HhRCDMBloG7PG1gXWyyhmnLXaDIOYxcnqkwv UTCL//NiptKrw6VIxxTwa+FAp9YUJwvPnMWJULeiPAGza5g6WwMR4DN9Fc1sz4n0 ZeKUDpdSGo6epGIzN0cVBNC7pfUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSAau4d QlyK8sT1aCwmILPmGNqVnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oTAwDQYJKoZIhvcNAQELBQADggEBANzshhB4o5NQ2pYhE5JioclT2HQc7umGXLIS j2U7iGqq9Pcb1A/Rri8N29nWERJopAIjXd6molhVND3HZpBNeYVeCjXsORuWcw2g +CycgoghZF3XoZvF/YrmtWoO1SyCigHcwPmAWdtE52c9Lk/SIMp5zqnSSknB8uLZ bsizfDRxjdQjou6BYIa6Q+uHo2LeCckmc9kn4GX/F5iGv+aZiU2UAJAXvIMAqWKQ IZzfXBDTyo1b8+emkrz6pnBWpTkKemR4EF8OFrO4KzfRLrU/umhGks/35qJIZWHy 7lDvryNQU8dy6jn0/YeKxik+PAW/FkfQxqPx7ST2akmABHMSSW0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:35 2026 by rpki-client