$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142961.roa File: AS142961.roa (raw, json) Hash identifier: CTTlB6b6JppOi4UYiMIc/+9j15O2eH6VhS04ED02QRc= Subject key identifier: FC:EE:C4:F5:52:F4:B0:03:C5:F2:C5:CD:F1:2C:35:FC:E9:E9:C9:8F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5408B29395D3D93B72BEB663E6925984FA026C34 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142961.roa Signing time: Wed 04 Mar 2026 06:07:40 +0000 ROA not before: Wed 04 Mar 2026 06:02:40 +0000 ROA not after: Wed 03 Mar 2027 06:07:40 +0000 asID: 142961 IP address blocks: 240a:a137::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:08:b2:93:95:d3:d9:3b:72:be:b6:63:e6:92:59:84:fa:02:6c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:40 2026 GMT Not After : Mar 3 06:07:40 2027 GMT Subject: CN=FCEEC4F552F4B003C5F2C5CDF12C35FCE9E9C98F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:ff:01:94:e7:87:36:be:90:6d:15:ad:40: 29:47:27:8e:4f:f8:b2:6e:75:95:83:26:7e:ba:54: 51:af:c6:a9:5f:04:08:c2:64:8c:c0:b2:bb:94:29: a8:a4:70:a1:1a:c4:78:01:09:bc:2e:36:7f:92:31: fd:bb:b3:10:96:ee:90:de:92:01:14:d6:b3:d8:48: 98:56:0d:98:80:72:d8:96:49:46:60:f8:c5:e8:c2: b9:7f:2e:a5:94:50:30:bf:43:38:05:88:53:29:4f: fb:c1:42:dd:64:c3:11:98:ef:8f:6a:e7:50:af:f3: 29:04:bf:ed:ed:cf:0a:60:d2:be:d5:c0:bf:48:51: db:5d:03:0b:4e:9e:54:b1:0d:ea:3f:55:b5:69:45: fc:77:52:00:cd:80:87:a4:ab:38:1f:58:d8:c6:d9: c7:02:93:3f:1e:e3:7e:d7:5c:e7:d4:7c:b1:e0:b3: 15:af:f2:1c:f1:27:72:9c:a4:00:cc:4c:43:8e:94: f5:b0:e8:1c:af:d3:21:1d:8f:0e:60:f4:2a:df:f4: 34:5b:c6:31:8b:ab:13:8d:6d:92:d5:50:86:3c:e5: 81:6a:4b:14:33:fb:70:96:0a:28:95:b2:95:28:2c: 8a:13:0a:7e:09:4b:ad:4a:a8:76:d7:87:1f:4b:f2: 8e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EE:C4:F5:52:F4:B0:03:C5:F2:C5:CD:F1:2C:35:FC:E9:E9:C9:8F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142961.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a137::/32 Signature Algorithm: sha256WithRSAEncryption cc:ea:40:d3:65:81:49:94:18:ec:a8:b3:13:5b:e4:09:8d:36: c0:5b:ea:b4:a1:8c:de:5a:4f:14:80:35:44:52:39:30:e8:bf: bb:61:2a:b4:ec:74:b3:23:18:a8:16:94:5e:cf:5a:aa:f3:d1: df:73:17:9a:b4:4d:32:3d:25:37:40:85:b8:80:a6:1a:a3:fa: 78:c8:81:49:d1:e7:74:75:1d:4b:f9:49:e1:9e:d7:db:80:04: b4:d5:bb:db:d3:6a:75:94:19:f8:24:d6:d0:4f:d2:8c:89:bf: 5f:21:de:f3:c1:1a:8b:1c:e7:de:7b:2a:99:6d:7e:d6:2e:9c: 75:3f:ec:89:0d:91:35:22:f1:7b:55:f0:20:cc:64:0b:29:e7: 4d:43:58:2e:36:f5:a3:1f:fb:48:cb:c4:2d:7a:e6:91:aa:de: 23:bc:73:5a:c1:85:9f:1c:5b:59:d3:50:8e:03:38:87:bf:b8: bf:89:32:42:83:2a:01:65:f6:55:c2:47:d3:c6:c9:c3:e5:70: 62:2d:a7:75:6e:fe:8f:34:9d:60:c5:d6:17:db:ee:64:67:4d: 1d:f0:5c:62:fb:14:a5:9e:04:d9:2f:7a:5b:96:b7:89:3a:c3: 7a:f4:cc:2b:b6:8f:bb:66:45:6e:cc:56:28:4a:24:1d:57:2a: 18:56:c8:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVAiyk5XT2TtyvrZj5pJZhPoCbDQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0MFoX DTI3MDMwMzA2MDc0MFowMzExMC8GA1UEAxMoRkNFRUM0RjU1MkY0QjAwM0M1RjJD NUNERjEyQzM1RkNFOUU5Qzk4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALB+/wGU54c2vpBtFa1AKUcnjk/4sm51lYMmfrpUUa/GqV8ECMJkjMCyu5Qp qKRwoRrEeAEJvC42f5Ix/buzEJbukN6SARTWs9hImFYNmIBy2JZJRmD4xejCuX8u pZRQML9DOAWIUylP+8FC3WTDEZjvj2rnUK/zKQS/7e3PCmDSvtXAv0hR210DC06e VLEN6j9VtWlF/HdSAM2Ah6SrOB9Y2MbZxwKTPx7jftdc59R8seCzFa/yHPEncpyk AMxMQ46U9bDoHK/TIR2PDmD0Kt/0NFvGMYurE41tktVQhjzlgWpLFDP7cJYKKJWy lSgsihMKfglLrUqodteHH0vyjr0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT87sT1 UvSwA8Xyxc3xLDX86enJjzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oTcwDQYJKoZIhvcNAQELBQADggEBAMzqQNNlgUmUGOyosxNb5AmNNsBb6rShjN5a TxSANURSOTDov7thKrTsdLMjGKgWlF7PWqrz0d9zF5q0TTI9JTdAhbiAphqj+njI gUnR53R1HUv5SeGe19uABLTVu9vTanWUGfgk1tBP0oyJv18h3vPBGosc5957Kplt ftYunHU/7IkNkTUi8XtV8CDMZAsp501DWC429aMf+0jLxC165pGq3iO8c1rBhZ8c W1nTUI4DOIe/uL+JMkKDKgFl9lXCR9PGycPlcGItp3Vu/o80nWDF1hfb7mRnTR3w XGL7FKWeBNkveluWt4k6w3r0zCu2j7tmRW7MVihKJB1XKhhWyFI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:58 2026 by rpki-client