$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142960.roa File: AS142960.roa (raw, json) Hash identifier: NhqAjqrkHYRs66zcVZtD4b2tveXQxAUgCdwmhl35/mU= Subject key identifier: E5:30:93:D7:E6:B7:29:B8:EF:A5:B1:F7:60:62:81:E5:83:27:D3:51 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 18A2AFB542C310DCF5CC4E1E75EC641F308ED6FB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142960.roa Signing time: Wed 04 Mar 2026 06:07:23 +0000 ROA not before: Wed 04 Mar 2026 06:02:23 +0000 ROA not after: Wed 03 Mar 2027 06:07:23 +0000 asID: 142960 IP address blocks: 240a:a136::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a2:af:b5:42:c3:10:dc:f5:cc:4e:1e:75:ec:64:1f:30:8e:d6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:23 2026 GMT Not After : Mar 3 06:07:23 2027 GMT Subject: CN=E53093D7E6B729B8EFA5B1F7606281E58327D351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:22:fe:d7:83:10:ee:53:3a:45:a8:43:58: 7c:64:ae:e1:a2:e4:52:36:c7:ae:a5:67:d3:00:d3: 2c:4b:3e:a9:f6:ec:89:ba:a3:15:ab:e2:88:20:be: 6a:cd:68:d2:ba:34:1f:d5:91:54:39:0f:ea:35:ac: b3:d2:ca:dc:83:f5:c0:94:30:dc:91:b8:92:e4:3c: a4:5d:1c:f5:25:e7:88:20:cc:f8:68:2a:2b:6d:f8: d3:cc:d7:88:22:37:93:c6:8f:2a:99:a5:75:7a:69: 09:be:fe:03:32:82:71:d4:d8:51:bb:e8:9e:a5:d9: a8:1b:48:ab:45:e9:c5:39:b5:e0:52:09:a2:d5:ec: db:36:12:74:df:c3:3c:ae:4f:34:a4:eb:b3:50:56: 28:94:68:02:70:d7:16:03:62:35:84:48:bb:f8:c7: d1:0a:f6:cb:b9:fc:c4:4b:b4:ed:63:77:da:7a:a3: cd:bb:be:f6:e3:10:bf:7d:c8:64:ce:e7:d6:48:b2: ba:e7:d8:6c:ee:af:29:07:94:24:a0:3a:62:ea:e0: 33:b8:1b:f6:f4:40:3c:29:3c:ac:55:c6:7c:76:5f: 10:d0:f2:29:4e:6e:c9:11:e9:45:d5:9e:fc:da:ef: 2b:e0:8a:64:8e:22:57:1e:b1:c6:d4:d2:a9:fc:ba: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:93:D7:E6:B7:29:B8:EF:A5:B1:F7:60:62:81:E5:83:27:D3:51 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142960.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a136::/32 Signature Algorithm: sha256WithRSAEncryption 07:40:a9:ea:10:e2:9e:e2:3c:d1:f8:e6:ea:1b:21:3b:24:fe: 1c:b3:04:11:02:80:8d:3d:e3:42:21:c8:0d:0d:41:8a:82:4e: e8:4f:23:1f:10:76:58:c9:f1:4a:cb:69:8f:98:f5:f7:77:c6: e6:be:8e:db:58:cf:bb:93:df:dc:6e:19:fd:92:6b:05:0a:38: b3:2c:92:02:39:03:bb:e7:0d:03:7c:74:bf:92:ba:f3:b6:e4: fd:ea:f5:15:ae:34:39:52:b1:47:2f:f2:20:42:6c:65:ea:c8: 16:32:aa:f5:c4:cd:17:c3:89:99:7c:e8:98:b3:e6:fa:20:d6: 8d:45:5c:c3:12:95:40:24:bc:06:4a:3e:26:c2:7c:af:4d:7d: 4e:78:b8:1d:8d:c6:e2:07:79:46:3e:bb:5c:a6:c3:55:b6:33: a1:f9:1d:53:d7:bf:36:54:78:b2:21:32:54:7d:be:5a:60:a2: 54:2b:14:7a:86:71:85:67:f8:72:3a:38:48:7b:81:2b:af:83: c0:a0:e6:00:3a:4f:4a:7a:49:24:d6:79:31:e0:49:fa:f5:89: 3e:4c:83:52:08:aa:6b:de:a2:b5:4b:8a:5d:d8:6b:77:9c:39: 65:45:67:f0:2f:f1:b5:ec:26:dd:34:70:ce:dd:b1:e1:11:7d: d9:41:17:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGKKvtULDENz1zE4edexkHzCO1vswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyM1oX DTI3MDMwMzA2MDcyM1owMzExMC8GA1UEAxMoRTUzMDkzRDdFNkI3MjlCOEVGQTVC MUY3NjA2MjgxRTU4MzI3RDM1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDWIv7XgxDuUzpFqENYfGSu4aLkUjbHrqVn0wDTLEs+qfbsibqjFaviiCC+ as1o0ro0H9WRVDkP6jWss9LK3IP1wJQw3JG4kuQ8pF0c9SXniCDM+GgqK23408zX iCI3k8aPKpmldXppCb7+AzKCcdTYUbvonqXZqBtIq0XpxTm14FIJotXs2zYSdN/D PK5PNKTrs1BWKJRoAnDXFgNiNYRIu/jH0Qr2y7n8xEu07WN32nqjzbu+9uMQv33I ZM7n1kiyuufYbO6vKQeUJKA6YurgM7gb9vRAPCk8rFXGfHZfENDyKU5uyRHpRdWe /NrvK+CKZI4iVx6xxtTSqfy6z4UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTlMJPX 5rcpuO+lsfdgYoHlgyfTUTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oTYwDQYJKoZIhvcNAQELBQADggEBAAdAqeoQ4p7iPNH45uobITsk/hyzBBECgI09 40IhyA0NQYqCTuhPIx8QdljJ8UrLaY+Y9fd3xua+jttYz7uT39xuGf2SawUKOLMs kgI5A7vnDQN8dL+SuvO25P3q9RWuNDlSsUcv8iBCbGXqyBYyqvXEzRfDiZl86Jiz 5vog1o1FXMMSlUAkvAZKPibCfK9NfU54uB2NxuIHeUY+u1ymw1W2M6H5HVPXvzZU eLIhMlR9vlpgolQrFHqGcYVn+HI6OEh7gSuvg8Cg5gA6T0p6SSTWeTHgSfr1iT5M g1IIqmveorVLil3Ya3ecOWVFZ/Av8bXsJt00cM7dseERfdlBFzk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:59 2026 by rpki-client