$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142965.roa File: AS142965.roa (raw, json) Hash identifier: ZaHsmVMB0F2EVLafqBHvnI2/GYtWxgK6KI3LrGMFp14= Subject key identifier: 3C:20:16:76:5E:5D:C6:7E:A3:87:4C:22:F3:E0:5B:07:AC:4C:EB:B2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5E4A1DE0DBACA7FA5A826FE797D2A721DB34C81C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142965.roa Signing time: Wed 04 Mar 2026 06:05:56 +0000 ROA not before: Wed 04 Mar 2026 06:00:56 +0000 ROA not after: Wed 03 Mar 2027 06:05:56 +0000 asID: 142965 IP address blocks: 240a:a13b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4a:1d:e0:db:ac:a7:fa:5a:82:6f:e7:97:d2:a7:21:db:34:c8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:56 2026 GMT Not After : Mar 3 06:05:56 2027 GMT Subject: CN=3C2016765E5DC67EA3874C22F3E05B07AC4CEBB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:06:60:56:e5:58:4d:d3:d8:af:03:de:a2: 68:99:28:96:3c:ec:f5:72:64:b6:93:f6:67:cb:5c: 01:72:3f:65:cb:d6:1e:72:4b:83:2c:6b:83:f9:cf: 60:f9:18:fd:19:13:73:10:f8:86:1f:af:ef:df:d8: b4:54:f8:b8:84:2f:90:47:02:7e:11:a6:e8:39:dd: fb:46:52:3f:8e:c3:ec:73:3f:d9:84:50:2a:8b:f5: 15:61:f6:8a:15:c1:12:3c:79:a0:bb:26:1f:8d:48: 80:74:95:7f:72:5e:26:ff:d4:87:d8:36:d0:1f:f9: 98:af:b6:75:d5:3e:b1:2a:ca:ac:d9:ca:fa:e3:e3: ed:aa:3d:c6:d9:3e:cb:66:8d:c1:14:0c:61:f0:5e: 38:b7:8b:ba:85:ac:57:ca:ee:08:e5:b1:d3:6c:08: 81:ba:64:20:d5:39:93:a8:85:c9:a8:5f:8c:16:f2: b8:24:9b:e6:87:b0:e6:9e:d0:0d:ef:29:37:83:a1: 50:62:b9:2e:e6:14:c3:f8:41:27:3d:69:cb:2a:3d: c9:3b:d1:df:a1:31:c2:67:f1:9e:8d:30:68:72:b1: b1:d6:85:2d:24:01:d7:5b:09:42:66:37:07:5d:54: a8:3a:24:2b:ce:2a:28:ad:1c:ca:b7:61:f1:14:32: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:20:16:76:5E:5D:C6:7E:A3:87:4C:22:F3:E0:5B:07:AC:4C:EB:B2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142965.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a13b::/32 Signature Algorithm: sha256WithRSAEncryption 26:77:8d:72:c3:df:5f:78:ea:a8:4f:a5:93:b7:b9:04:0d:a0: fd:d1:e4:72:f6:e9:18:c9:02:02:fd:57:37:91:d1:9f:66:51: 0c:ff:7d:30:1e:9a:d0:6f:75:c4:b0:e5:2e:a1:47:d8:f8:5e: 2a:92:3e:78:6f:c5:41:1c:cd:20:59:f0:41:17:5f:e9:31:5a: d3:b8:6f:3a:ef:a0:81:5c:06:3c:e1:92:02:27:e9:9b:b6:15: 3a:ed:26:6b:ee:92:23:38:02:e5:1e:0f:93:3d:a8:a9:26:66: 60:5f:96:8a:e4:e2:d2:36:5b:77:50:12:6d:f7:4b:d7:98:57: f2:28:7b:7a:9e:28:29:6e:df:59:94:16:1f:32:f8:65:ab:e1: df:3a:39:b4:10:d4:a8:fc:01:95:ce:43:b8:d9:f5:dd:44:60: ac:fe:f1:2b:85:3c:c6:61:bf:de:17:1d:19:1c:56:3a:e4:3a: ad:32:5a:da:e5:29:6c:b7:b2:08:42:91:28:35:56:08:11:26: 23:c1:63:d4:45:4b:09:c8:f3:bf:26:52:ad:74:d0:9c:a2:cd: 53:26:db:86:aa:b6:d8:1d:07:4f:b7:73:da:7b:3f:b8:c4:ce: 8f:13:07:81:d7:dd:c3:f5:e4:5c:61:22:2e:1f:b2:f3:fd:f3: 92:4d:0c:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXkod4Nusp/pagm/nl9KnIds0yBwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1NloX DTI3MDMwMzA2MDU1NlowMzExMC8GA1UEAxMoM0MyMDE2NzY1RTVEQzY3RUEzODc0 QzIyRjNFMDVCMDdBQzRDRUJCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAqBmBW5VhN09ivA96iaJkoljzs9XJktpP2Z8tcAXI/ZcvWHnJLgyxrg/nP YPkY/RkTcxD4hh+v79/YtFT4uIQvkEcCfhGm6Dnd+0ZSP47D7HM/2YRQKov1FWH2 ihXBEjx5oLsmH41IgHSVf3JeJv/Uh9g20B/5mK+2ddU+sSrKrNnK+uPj7ao9xtk+ y2aNwRQMYfBeOLeLuoWsV8ruCOWx02wIgbpkINU5k6iFyahfjBbyuCSb5oew5p7Q De8pN4OhUGK5LuYUw/hBJz1pyyo9yTvR36Exwmfxno0waHKxsdaFLSQB11sJQmY3 B11UqDokK84qKK0cyrdh8RQyb0MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ8IBZ2 Xl3GfqOHTCLz4FsHrEzrsjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oTswDQYJKoZIhvcNAQELBQADggEBACZ3jXLD31946qhPpZO3uQQNoP3R5HL26RjJ AgL9VzeR0Z9mUQz/fTAemtBvdcSw5S6hR9j4XiqSPnhvxUEczSBZ8EEXX+kxWtO4 bzrvoIFcBjzhkgIn6Zu2FTrtJmvukiM4AuUeD5M9qKkmZmBflork4tI2W3dQEm33 S9eYV/Ioe3qeKClu31mUFh8y+GWr4d86ObQQ1Kj8AZXOQ7jZ9d1EYKz+8SuFPMZh v94XHRkcVjrkOq0yWtrlKWy3sghCkSg1VggRJiPBY9RFSwnI878mUq100JyizVMm 24aqttgdB0+3c9p7P7jEzo8TB4HX3cP15FxhIi4fsvP985JNDN4= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:35 2026 by rpki-client