$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142963.roa File: AS142963.roa (raw, json) Hash identifier: U3TEFLAgaxvJCZDmmZIXje5JpZoBX6lFyJsRktg1VWw= Subject key identifier: B3:DC:69:6C:39:DA:23:92:CA:43:B9:85:2C:A7:E2:17:F5:B5:C5:B3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7865C9A1D98D552BFEFDD4DF1D751750EAFA5A08 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142963.roa Signing time: Wed 04 Mar 2026 06:07:27 +0000 ROA not before: Wed 04 Mar 2026 06:02:27 +0000 ROA not after: Wed 03 Mar 2027 06:07:27 +0000 asID: 142963 IP address blocks: 240a:a139::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:65:c9:a1:d9:8d:55:2b:fe:fd:d4:df:1d:75:17:50:ea:fa:5a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:27 2026 GMT Not After : Mar 3 06:07:27 2027 GMT Subject: CN=B3DC696C39DA2392CA43B9852CA7E217F5B5C5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:42:be:b2:e0:2c:41:4a:14:49:e2:0f:f7: c4:13:9b:0c:ce:6e:58:e2:52:bb:42:d6:44:52:5b: e5:a3:12:f5:e2:f8:1f:ce:83:68:0d:61:3a:ac:95: 5a:dd:44:31:05:17:7a:47:c0:48:3e:8d:6d:55:3d: c8:46:61:0f:da:0d:e2:e4:80:64:f7:ae:02:c3:56: ea:80:fa:1c:53:75:f5:a0:8f:9a:a6:fa:41:06:94: 36:b9:30:77:90:bd:a5:07:55:cb:6d:f8:82:7d:26: 85:ee:bb:8d:5b:79:be:b0:cc:cb:49:a2:0b:4b:be: 05:2e:58:59:79:6d:3e:99:ea:a7:6c:f6:c8:6a:8d: ae:ae:67:76:5b:84:9d:81:b5:be:ea:e0:f6:04:41: 65:6d:82:26:05:ef:35:38:18:c4:14:60:38:32:01: 4b:3b:34:2e:05:6f:86:9f:6e:fb:39:88:5f:11:b3: 3e:6b:4d:f5:0f:db:b0:a5:ed:8f:32:ee:26:5e:34: 32:14:4e:25:d2:10:f1:3b:15:ec:61:96:24:ab:36: ab:d3:0c:95:99:f5:2c:78:e9:22:89:5a:0f:60:3e: 6c:21:f0:45:77:f6:0e:94:cb:c0:87:7c:55:2d:af: 94:05:5d:c7:fb:77:bd:97:a1:77:50:11:1e:76:54: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DC:69:6C:39:DA:23:92:CA:43:B9:85:2C:A7:E2:17:F5:B5:C5:B3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142963.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a139::/32 Signature Algorithm: sha256WithRSAEncryption b3:80:f7:d9:5c:af:70:b2:b3:00:c8:cf:cb:da:e5:52:50:07: ec:f5:25:b8:ee:6e:06:cc:de:f5:8a:06:73:9a:2a:df:e2:c9: d9:b8:4f:74:ac:90:90:23:58:5f:98:b1:61:e8:67:08:c0:2c: 6c:d4:b2:6e:6c:da:56:1c:47:a1:34:49:1c:10:9a:31:56:02: 7b:f0:55:49:de:37:a5:46:e6:6f:7f:73:78:a6:64:03:29:2d: 85:89:4d:9c:01:f1:e2:fd:44:f9:c2:1a:14:5a:27:30:d7:97: 4b:8f:47:1b:b4:ac:08:70:fd:d7:b9:4c:6a:26:a9:ea:fb:f3: 13:30:77:74:79:f4:b9:eb:55:fd:ae:85:dd:67:cb:e7:f4:d2: fc:1e:9c:d8:b5:1c:46:56:72:35:e8:04:f4:98:e1:15:2c:0f: b2:e4:eb:14:32:0a:64:4a:a1:1c:d1:17:a0:5a:d1:dd:30:df: 3a:50:f4:0c:ec:aa:92:a1:e4:30:61:1b:f5:99:47:63:83:11: 94:3a:78:3c:32:82:4b:35:f4:e7:fa:bd:7f:d7:ad:fb:70:eb: 74:bb:a2:27:6b:65:d4:70:7a:3a:20:69:dd:5f:82:9d:a3:e7: 89:b3:2d:2f:4f:9c:d5:be:99:5b:7d:a7:06:30:6d:b5:ac:9f: 66:80:82:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeGXJodmNVSv+/dTfHXUXUOr6WggwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyN1oX DTI3MDMwMzA2MDcyN1owMzExMC8GA1UEAxMoQjNEQzY5NkMzOURBMjM5MkNBNDNC OTg1MkNBN0UyMTdGNUI1QzVCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaMQr6y4CxBShRJ4g/3xBObDM5uWOJSu0LWRFJb5aMS9eL4H86DaA1hOqyV Wt1EMQUXekfASD6NbVU9yEZhD9oN4uSAZPeuAsNW6oD6HFN19aCPmqb6QQaUNrkw d5C9pQdVy234gn0mhe67jVt5vrDMy0miC0u+BS5YWXltPpnqp2z2yGqNrq5ndluE nYG1vurg9gRBZW2CJgXvNTgYxBRgODIBSzs0LgVvhp9u+zmIXxGzPmtN9Q/bsKXt jzLuJl40MhROJdIQ8TsV7GGWJKs2q9MMlZn1LHjpIolaD2A+bCHwRXf2DpTLwId8 VS2vlAVdx/t3vZehd1ARHnZU38sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSz3Gls OdojkspDuYUsp+IX9bXFszAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oTkwDQYJKoZIhvcNAQELBQADggEBALOA99lcr3CyswDIz8va5VJQB+z1JbjubgbM 3vWKBnOaKt/iydm4T3SskJAjWF+YsWHoZwjALGzUsm5s2lYcR6E0SRwQmjFWAnvw VUneN6VG5m9/c3imZAMpLYWJTZwB8eL9RPnCGhRaJzDXl0uPRxu0rAhw/de5TGom qer78xMwd3R59LnrVf2uhd1ny+f00vwenNi1HEZWcjXoBPSY4RUsD7Lk6xQyCmRK oRzRF6Ba0d0w3zpQ9AzsqpKh5DBhG/WZR2ODEZQ6eDwygks19Of6vX/Xrftw63S7 oidrZdRwejogad1fgp2j54mzLS9PnNW+mVt9pwYwbbWsn2aAgkg= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:36 2026 by rpki-client