$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142955.roa File: AS142955.roa (raw, json) Hash identifier: +Vbbj9BztWjsnJP/Ed2dZBdElx857Onnk3LqIx9n+4k= Subject key identifier: 19:93:51:11:6C:A9:BC:6F:92:13:9D:57:5B:79:E5:1F:ED:73:2C:81 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 11F552A615DAC591EE3A4ADE4890FCA75734963F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142955.roa Signing time: Wed 04 Mar 2026 06:05:21 +0000 ROA not before: Wed 04 Mar 2026 06:00:21 +0000 ROA not after: Wed 03 Mar 2027 06:05:21 +0000 asID: 142955 IP address blocks: 240a:a131::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f5:52:a6:15:da:c5:91:ee:3a:4a:de:48:90:fc:a7:57:34:96:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:21 2026 GMT Not After : Mar 3 06:05:21 2027 GMT Subject: CN=199351116CA9BC6F92139D575B79E51FED732C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9f:cc:a7:f6:eb:bf:61:de:f2:e9:fb:3b:f6: 3e:d2:eb:3c:57:89:44:13:3d:2d:4d:f3:8a:a6:98: 10:e3:66:bc:cd:5b:df:67:a7:45:b7:ff:e9:ad:af: 8d:fa:83:ee:24:d6:66:83:a6:75:89:ac:e9:4f:bb: 3e:4c:0c:bd:37:31:3f:9a:6b:a5:bc:67:06:d8:c7: a7:d3:8f:48:6e:78:96:a0:32:74:71:da:23:50:a7: 70:c2:59:9d:8a:a1:7b:1a:b3:6e:85:40:19:cb:c3: 79:b9:b6:c4:33:10:94:1e:64:6a:ab:1e:d5:dc:0c: 20:f1:c9:29:6c:7d:b2:30:23:ec:9f:ab:6a:af:74: c2:12:5c:b1:5a:a5:a2:05:8e:52:77:f7:70:fd:bd: 0f:68:44:76:b5:1b:67:3a:50:d7:d4:c5:c3:a6:dd: 8f:9c:78:bd:e3:d7:57:41:c0:94:70:ee:6e:c2:dc: cd:8e:0e:8e:6a:b0:36:8d:b3:c5:25:5f:7b:a2:66: 3f:d4:5d:25:b0:b3:3d:77:8a:f3:c8:d1:0d:f4:c6: 0f:1b:50:02:ac:f8:72:7b:25:4c:f4:bf:5b:15:99: b7:65:09:10:0d:60:b3:6c:70:e5:82:2a:0a:7a:e9: 93:c4:9e:44:72:8d:01:5d:70:0b:af:28:98:5e:fb: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:93:51:11:6C:A9:BC:6F:92:13:9D:57:5B:79:E5:1F:ED:73:2C:81 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142955.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a131::/32 Signature Algorithm: sha256WithRSAEncryption bd:3c:5c:10:92:29:69:8e:5e:c3:cb:6c:99:be:02:42:7f:41: d5:a6:ef:60:28:5d:d2:2e:62:35:a4:9f:93:16:8b:c6:fb:1d: fa:2d:de:e2:62:5c:84:7f:ea:41:98:ae:54:e8:40:88:03:31: 74:6a:2c:e8:5f:69:75:69:1b:48:b9:4b:f2:33:b0:1e:17:a5: f7:80:2b:a5:84:e5:4d:dc:c0:c3:47:97:7c:5a:e1:18:c6:2f: 43:69:41:2c:6e:12:29:68:e6:b9:5b:af:47:77:cb:2c:05:fa: 26:fa:23:5d:15:99:30:be:25:35:c7:22:e7:14:47:22:51:a7: 20:94:47:7c:07:dc:75:8d:d4:6f:0d:36:ed:7d:f2:37:ae:11: bc:85:d1:a2:ee:87:be:23:db:0f:9f:dd:95:10:46:b8:dc:40: 42:6c:40:d4:7d:43:14:13:d5:d1:0d:57:c4:b0:74:c2:04:06: ef:45:6d:ad:01:24:d6:d0:44:82:17:ab:5e:66:78:c6:9e:6f: c0:6f:e9:7f:fd:97:1e:63:32:b3:a4:c4:08:dd:1c:d5:e4:6e: 60:18:c1:4e:0f:8f:3d:aa:a4:79:53:c5:1b:62:78:44:a5:6c: b1:00:3b:b2:53:2a:7c:b2:00:24:84:fc:7e:0c:82:d1:95:f7: 81:a3:ba:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEfVSphXaxZHuOkreSJD8p1c0lj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyMVoX DTI3MDMwMzA2MDUyMVowMzExMC8GA1UEAxMoMTk5MzUxMTE2Q0E5QkM2RjkyMTM5 RDU3NUI3OUU1MUZFRDczMkM4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGfzKf2679h3vLp+zv2PtLrPFeJRBM9LU3ziqaYEONmvM1b32enRbf/6a2v jfqD7iTWZoOmdYms6U+7PkwMvTcxP5prpbxnBtjHp9OPSG54lqAydHHaI1CncMJZ nYqhexqzboVAGcvDebm2xDMQlB5kaqse1dwMIPHJKWx9sjAj7J+raq90whJcsVql ogWOUnf3cP29D2hEdrUbZzpQ19TFw6bdj5x4vePXV0HAlHDubsLczY4OjmqwNo2z xSVfe6JmP9RdJbCzPXeK88jRDfTGDxtQAqz4cnslTPS/WxWZt2UJEA1gs2xw5YIq Cnrpk8SeRHKNAV1wC68omF77V10CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQZk1ER bKm8b5ITnVdbeeUf7XMsgTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oTEwDQYJKoZIhvcNAQELBQADggEBAL08XBCSKWmOXsPLbJm+AkJ/QdWm72AoXdIu YjWkn5MWi8b7Hfot3uJiXIR/6kGYrlToQIgDMXRqLOhfaXVpG0i5S/IzsB4XpfeA K6WE5U3cwMNHl3xa4RjGL0NpQSxuEilo5rlbr0d3yywF+ib6I10VmTC+JTXHIucU RyJRpyCUR3wH3HWN1G8NNu198jeuEbyF0aLuh74j2w+f3ZUQRrjcQEJsQNR9QxQT 1dENV8SwdMIEBu9Fba0BJNbQRIIXq15meMaeb8Bv6X/9lx5jMrOkxAjdHNXkbmAY wU4Pjz2qpHlTxRtieESlbLEAO7JTKnyyACSE/H4MgtGV94Gjus0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:54 2026 by rpki-client