$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142958.roa File: AS142958.roa (raw, json) Hash identifier: 6P5ED90vFm/crbi8I/zwwGp5mc1EreFUDsvive7NBoU= Subject key identifier: 1A:B9:C7:72:F0:16:C6:2C:E8:1C:54:BC:9D:5E:7C:CA:9F:1B:3C:F4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 38D060E47C214592F23399BCDE98F20F8D24BD68 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142958.roa Signing time: Wed 04 Mar 2026 06:07:35 +0000 ROA not before: Wed 04 Mar 2026 06:02:35 +0000 ROA not after: Wed 03 Mar 2027 06:07:35 +0000 asID: 142958 IP address blocks: 240a:a134::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d0:60:e4:7c:21:45:92:f2:33:99:bc:de:98:f2:0f:8d:24:bd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:35 2026 GMT Not After : Mar 3 06:07:35 2027 GMT Subject: CN=1AB9C772F016C62CE81C54BC9D5E7CCA9F1B3CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:1a:22:de:6c:4a:4c:a6:51:87:40:44:c8: fb:e7:d8:fe:68:38:9c:bd:f9:5f:79:10:a9:3c:ee: a3:3d:05:3f:48:ac:65:a7:c5:bf:2b:7c:4b:58:66: 81:23:a6:d1:c0:d1:c0:a9:49:e6:7b:97:8a:eb:36: 12:75:fb:da:5d:fd:da:7e:cc:9c:57:fc:e6:25:c6: 0d:5e:f9:44:da:19:b4:89:68:31:66:24:da:22:21: dd:a8:7d:7e:71:fe:ab:40:42:87:6f:4e:62:00:f3: 30:7b:fe:9f:2d:84:06:9f:b9:8e:71:79:68:06:69: eb:6a:0f:3c:1a:67:73:7e:cb:85:74:c1:6d:1d:28: ae:44:b1:92:af:a5:d6:ec:ee:18:8a:ee:5e:21:2d: 97:95:4e:03:a7:b3:e5:90:6a:25:20:d3:74:f7:46: 27:c3:96:35:66:b1:78:a6:84:33:1a:06:47:98:fa: ae:35:00:91:86:be:2a:29:d3:01:a4:f4:4c:44:be: 57:61:df:e2:b4:ce:41:92:f1:ee:58:56:e1:7b:49: 02:ab:24:b1:25:1e:bb:aa:8f:db:7f:35:74:c0:7d: 37:5e:8e:20:78:9d:ec:be:4d:ea:80:7e:90:d7:13: 41:b1:2b:86:76:de:d0:b2:c1:00:08:05:87:51:0a: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:C7:72:F0:16:C6:2C:E8:1C:54:BC:9D:5E:7C:CA:9F:1B:3C:F4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a134::/32 Signature Algorithm: sha256WithRSAEncryption a6:ae:b9:32:e7:4a:59:d5:d6:b2:4e:99:21:86:6e:17:c4:22: 61:58:c3:81:a8:5a:63:70:19:14:08:6f:a2:36:7e:05:1f:01: 34:09:d9:30:b8:5d:84:71:10:24:ca:f3:2d:19:14:16:bf:91: 66:ac:05:2c:0f:84:92:a5:87:37:fb:cd:a1:e6:84:8b:d4:b8: 55:2e:eb:ea:16:67:e0:d3:83:98:d6:9f:de:5d:76:01:6a:3e: 46:a1:18:1e:cd:e2:b5:67:66:2b:53:8c:18:b9:c4:34:13:a6: 83:ad:83:c0:49:56:37:cc:c4:e0:96:da:f8:a7:dd:e1:c0:0d: aa:03:3a:27:ac:04:92:bd:03:31:1a:5c:fa:8f:c3:20:c2:69: 5c:41:9a:b2:5d:ed:9d:9e:17:b9:22:df:e8:64:91:55:11:b5: 3d:c2:33:7e:e4:1c:0e:3a:ea:ae:73:5f:35:59:17:62:73:d5: 7f:43:43:a1:ff:90:66:54:c2:c8:7e:42:22:f9:91:54:33:bc: b8:c2:23:4c:55:90:77:f6:f3:0f:26:cb:73:52:fc:dd:f2:9d: 63:f0:ed:31:d3:02:65:f4:7e:d6:30:c2:00:a7:1a:f8:82:55: 59:cc:cb:eb:c0:66:ec:dd:8b:58:93:a7:ae:e3:b9:ee:51:ca: 38:8f:2a:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUONBg5HwhRZLyM5m83pjyD40kvWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzNVoX DTI3MDMwMzA2MDczNVowMzExMC8GA1UEAxMoMUFCOUM3NzJGMDE2QzYyQ0U4MUM1 NEJDOUQ1RTdDQ0E5RjFCM0NGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZoGiLebEpMplGHQETI++fY/mg4nL35X3kQqTzuoz0FP0isZafFvyt8S1hm gSOm0cDRwKlJ5nuXius2EnX72l392n7MnFf85iXGDV75RNoZtIloMWYk2iIh3ah9 fnH+q0BCh29OYgDzMHv+ny2EBp+5jnF5aAZp62oPPBpnc37LhXTBbR0orkSxkq+l 1uzuGIruXiEtl5VOA6ez5ZBqJSDTdPdGJ8OWNWaxeKaEMxoGR5j6rjUAkYa+KinT AaT0TES+V2Hf4rTOQZLx7lhW4XtJAqsksSUeu6qP2381dMB9N16OIHid7L5N6oB+ kNcTQbErhnbe0LLBAAgFh1EKt9MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQaucdy 8BbGLOgcVLydXnzKnxs89DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oTQwDQYJKoZIhvcNAQELBQADggEBAKauuTLnSlnV1rJOmSGGbhfEImFYw4GoWmNw GRQIb6I2fgUfATQJ2TC4XYRxECTK8y0ZFBa/kWasBSwPhJKlhzf7zaHmhIvUuFUu 6+oWZ+DTg5jWn95ddgFqPkahGB7N4rVnZitTjBi5xDQTpoOtg8BJVjfMxOCW2vin 3eHADaoDOiesBJK9AzEaXPqPwyDCaVxBmrJd7Z2eF7ki3+hkkVURtT3CM37kHA46 6q5zXzVZF2Jz1X9DQ6H/kGZUwsh+QiL5kVQzvLjCI0xVkHf28w8my3NS/N3ynWPw 7THTAmX0ftYwwgCnGviCVVnMy+vAZuzdi1iTp67jue5RyjiPKpY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:55 2026 by rpki-client