$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142956.roa File: AS142956.roa (raw, json) Hash identifier: /KC6NR2a4uQ81l4v06NJSybmj2WSJJ/wUyE1mfolhMQ= Subject key identifier: A4:73:D8:E8:A9:8C:91:49:22:7E:A8:5A:93:8C:40:2A:A7:1C:DA:CD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4AB052B7CBBEE8C8CF4593D2918DF7A42F300C70 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142956.roa Signing time: Wed 04 Mar 2026 06:08:00 +0000 ROA not before: Wed 04 Mar 2026 06:03:00 +0000 ROA not after: Wed 03 Mar 2027 06:08:00 +0000 asID: 142956 IP address blocks: 240a:a132::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b0:52:b7:cb:be:e8:c8:cf:45:93:d2:91:8d:f7:a4:2f:30:0c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:03:00 2026 GMT Not After : Mar 3 06:08:00 2027 GMT Subject: CN=A473D8E8A98C9149227EA85A938C402AA71CDACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:fb:67:ae:e0:cb:a1:cf:68:a5:17:ce:61: 75:7a:ac:8f:cd:d7:8c:dc:09:b4:05:6f:07:cc:c4: ba:ad:9c:87:8d:be:0a:15:78:a0:fd:98:bb:1e:46: 9b:f5:41:8d:aa:65:d8:d8:e3:76:04:84:bd:c3:c5: df:e7:08:c2:f7:96:67:2c:2c:3a:a4:fd:f1:03:ec: 8a:ad:69:5c:fe:57:36:57:03:04:2c:66:0f:2a:72: 21:0e:5d:61:7d:6e:a2:71:0b:92:17:46:d5:66:64: 4e:48:8f:af:f9:79:85:cb:84:ed:e4:fb:a5:52:4c: 9b:f8:31:12:f7:b4:90:8c:e6:95:69:2b:23:ea:24: 63:4e:54:eb:69:ca:e0:c0:b4:f3:a2:9a:95:e2:1c: 9f:f8:79:fa:9e:7f:7b:99:d5:82:30:e4:ae:b9:cd: 4a:db:92:d5:6b:c6:d7:16:c8:33:47:fe:ba:38:71: 88:e6:b8:5a:55:13:ef:81:d3:cf:c5:96:60:63:b9: 28:70:27:63:99:da:10:2e:13:cb:12:ec:21:8d:29: 43:12:3f:af:57:0a:df:fc:18:3d:77:11:91:33:46: 45:57:49:4f:b4:5e:1e:51:89:f5:68:db:0d:ad:3a: 86:49:6e:94:fe:20:14:a0:fe:99:cb:1a:db:c6:5f: 50:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:73:D8:E8:A9:8C:91:49:22:7E:A8:5A:93:8C:40:2A:A7:1C:DA:CD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142956.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a132::/32 Signature Algorithm: sha256WithRSAEncryption 55:76:d3:6b:de:7d:1b:93:bd:56:ea:12:e1:60:21:12:b9:4b: 4e:ec:9b:82:44:d7:64:bf:d6:18:2d:d2:f8:2a:bd:ba:89:c9: d0:49:bf:19:b3:34:00:af:fa:e3:c7:83:fd:e1:9d:8b:69:82: b9:2e:5c:7e:4d:fa:94:bc:16:17:65:88:5f:8f:c8:59:12:44: b2:0b:86:16:41:6c:23:cf:b4:be:d6:37:35:9c:62:41:be:09: 0d:fb:58:63:5f:58:51:fd:ba:c1:e4:51:10:2c:b8:96:c6:c9: d0:19:f0:81:e8:b0:65:ed:fb:db:32:1d:fc:68:4e:83:af:52: ac:11:a8:7a:58:8c:c1:1c:69:d6:22:a9:f0:da:b1:e1:50:3e: 83:df:20:a2:c6:a9:c8:26:21:a9:70:ac:11:ca:d4:57:4a:6c: 19:99:ad:85:40:23:dc:ea:83:da:82:88:6f:ac:42:b4:ef:dc: f6:e6:c5:96:19:dc:5c:87:48:be:ac:23:5e:09:46:f6:d4:29: 7b:17:b7:dc:8e:ab:fb:cf:85:74:1f:55:c7:83:4c:a7:19:9d: 99:7a:f9:c6:fb:fb:41:dc:38:19:95:3c:b0:74:f9:ca:38:85: 75:8b:0b:58:c1:96:c1:4c:6a:2f:e8:ae:dd:44:cb:7b:9e:3f: 90:47:bb:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSrBSt8u+6MjPRZPSkY33pC8wDHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDMwMFoX DTI3MDMwMzA2MDgwMFowMzExMC8GA1UEAxMoQTQ3M0Q4RThBOThDOTE0OTIyN0VB ODVBOTM4QzQwMkFBNzFDREFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5I+2eu4Muhz2ilF85hdXqsj83XjNwJtAVvB8zEuq2ch42+ChV4oP2Yux5G m/VBjapl2NjjdgSEvcPF3+cIwveWZywsOqT98QPsiq1pXP5XNlcDBCxmDypyIQ5d YX1uonELkhdG1WZkTkiPr/l5hcuE7eT7pVJMm/gxEve0kIzmlWkrI+okY05U62nK 4MC086KaleIcn/h5+p5/e5nVgjDkrrnNStuS1WvG1xbIM0f+ujhxiOa4WlUT74HT z8WWYGO5KHAnY5naEC4TyxLsIY0pQxI/r1cK3/wYPXcRkTNGRVdJT7ReHlGJ9Wjb Da06hklulP4gFKD+mcsa28ZfUAkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSkc9jo qYyRSSJ+qFqTjEAqpxzazTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oTIwDQYJKoZIhvcNAQELBQADggEBAFV202vefRuTvVbqEuFgIRK5S07sm4JE12S/ 1hgt0vgqvbqJydBJvxmzNACv+uPHg/3hnYtpgrkuXH5N+pS8FhdliF+PyFkSRLIL hhZBbCPPtL7WNzWcYkG+CQ37WGNfWFH9usHkURAsuJbGydAZ8IHosGXt+9syHfxo ToOvUqwRqHpYjMEcadYiqfDaseFQPoPfIKLGqcgmIalwrBHK1FdKbBmZrYVAI9zq g9qCiG+sQrTv3PbmxZYZ3FyHSL6sI14JRvbUKXsXt9yOq/vPhXQfVceDTKcZnZl6 +cb7+0HcOBmVPLB0+co4hXWLC1jBlsFMai/ort1Ey3ueP5BHuzc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:21 2026 by rpki-client