$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142968.roa File: AS142968.roa (raw, json) Hash identifier: CajL7TC6FQK0FN9wbwdpzOIyrpAA7Mre77NODLM4OIg= Subject key identifier: 1A:45:8B:39:DA:3F:B7:FB:0B:C7:83:6A:4A:0E:DC:DA:46:73:8E:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5EC678391555701EC6ECBD9D8A387ABB4EF24DB2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142968.roa Signing time: Wed 04 Mar 2026 06:07:44 +0000 ROA not before: Wed 04 Mar 2026 06:02:44 +0000 ROA not after: Wed 03 Mar 2027 06:07:44 +0000 asID: 142968 IP address blocks: 240a:a13e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c6:78:39:15:55:70:1e:c6:ec:bd:9d:8a:38:7a:bb:4e:f2:4d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:44 2026 GMT Not After : Mar 3 06:07:44 2027 GMT Subject: CN=1A458B39DA3FB7FB0BC7836A4A0EDCDA46738E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:22:b8:24:68:0d:19:dd:18:b7:c8:b4:8c: e5:0c:89:fa:57:77:da:11:bb:b3:07:7b:df:42:20: bd:27:c1:a6:5b:50:1a:d8:f2:f7:b5:cb:7d:33:16: 25:24:a1:d5:e0:34:69:3a:94:cc:0d:41:e7:bd:8d: e6:e6:14:3b:d3:d7:36:10:ac:42:1b:ae:2a:06:e5: e0:b2:bc:12:80:73:ac:1b:7f:05:e4:c4:b5:a9:15: 70:43:aa:67:d4:44:89:50:ae:e8:d6:39:61:82:49: c8:be:06:d1:9d:91:7e:2a:55:a3:9f:02:3a:5f:fa: 28:56:aa:57:30:0e:d5:a5:c8:06:5c:fb:5d:85:50: a0:96:7c:86:ad:81:ff:69:89:6d:dd:6f:a9:c0:43: dd:5b:b7:24:26:25:94:4d:f9:26:49:ce:92:3c:fb: 12:d1:9d:4d:5f:1a:ee:e7:fd:cf:00:38:84:e2:a2: 3c:04:1c:56:66:94:d1:af:c7:e6:c5:19:1e:0e:70: c0:c8:89:e1:37:06:56:ea:7a:4c:c9:59:c3:7e:17: d4:52:2f:51:60:33:6f:92:96:72:5d:b8:8e:cf:69: ff:7a:99:8f:d2:a6:88:07:2b:c9:dd:ce:79:40:e7: 24:34:bc:56:fa:0e:bc:a1:c5:f8:d7:0f:19:45:20: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:45:8B:39:DA:3F:B7:FB:0B:C7:83:6A:4A:0E:DC:DA:46:73:8E:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a13e::/32 Signature Algorithm: sha256WithRSAEncryption 07:9b:ae:d7:aa:29:4f:46:7c:c9:d7:31:27:d6:fe:51:00:22: 5c:52:d8:d4:5d:28:80:c5:a1:42:1b:31:73:5d:30:c5:72:d1: f7:d1:80:25:30:bc:98:eb:02:b2:0b:e4:3f:cf:35:f2:37:fb: ac:61:35:74:c3:01:4f:6a:3d:6f:bd:ca:20:4f:32:a6:7d:ca: 39:ea:04:c9:75:dc:17:c3:7f:ba:25:08:e4:f8:49:54:29:cd: 22:00:06:4c:20:40:c9:a4:e9:08:c8:0b:18:f9:7c:d6:a9:53: cf:1f:a3:c1:6d:33:4c:1c:32:7b:6f:9e:f4:ef:d8:a5:49:e3: 07:a5:00:e1:b3:cb:3d:0c:03:07:6e:74:17:71:d9:b9:45:ef: 49:30:ea:b9:4d:33:af:11:42:21:23:f6:07:7e:b1:81:ad:22: 75:21:60:67:ca:cc:df:dd:24:1f:80:82:41:c4:e9:79:f9:a0: 81:be:1b:60:fa:6b:4e:fd:31:65:31:1a:1d:56:7d:12:a8:80: ba:dd:a6:39:b1:c0:e5:04:dd:a9:f2:de:cb:52:cd:52:44:a7: a4:d4:46:a6:1a:78:cc:58:13:80:42:f5:6a:c6:ec:aa:fe:e2: cf:52:aa:e4:ba:d3:bc:eb:41:80:1f:e5:72:54:b9:b2:4b:38: 14:9c:1d:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXsZ4ORVVcB7G7L2dijh6u07yTbIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0NFoX DTI3MDMwMzA2MDc0NFowMzExMC8GA1UEAxMoMUE0NThCMzlEQTNGQjdGQjBCQzc4 MzZBNEEwRURDREE0NjczOEU5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpVIrgkaA0Z3Ri3yLSM5QyJ+ld32hG7swd730IgvSfBpltQGtjy97XLfTMW JSSh1eA0aTqUzA1B572N5uYUO9PXNhCsQhuuKgbl4LK8EoBzrBt/BeTEtakVcEOq Z9REiVCu6NY5YYJJyL4G0Z2RfipVo58COl/6KFaqVzAO1aXIBlz7XYVQoJZ8hq2B /2mJbd1vqcBD3Vu3JCYllE35JknOkjz7EtGdTV8a7uf9zwA4hOKiPAQcVmaU0a/H 5sUZHg5wwMiJ4TcGVup6TMlZw34X1FIvUWAzb5KWcl24js9p/3qZj9KmiAcryd3O eUDnJDS8VvoOvKHF+NcPGUUgoCsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQaRYs5 2j+3+wvHg2pKDtzaRnOOljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oT4wDQYJKoZIhvcNAQELBQADggEBAAebrteqKU9GfMnXMSfW/lEAIlxS2NRdKIDF oUIbMXNdMMVy0ffRgCUwvJjrArIL5D/PNfI3+6xhNXTDAU9qPW+9yiBPMqZ9yjnq BMl13BfDf7olCOT4SVQpzSIABkwgQMmk6QjICxj5fNapU88fo8FtM0wcMntvnvTv 2KVJ4welAOGzyz0MAwdudBdx2blF70kw6rlNM68RQiEj9gd+sYGtInUhYGfKzN/d JB+AgkHE6Xn5oIG+G2D6a079MWUxGh1WfRKogLrdpjmxwOUE3any3stSzVJEp6TU RqYaeMxYE4BC9WrG7Kr+4s9SquS607zrQYAf5XJUubJLOBScHeM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:10 2026 by rpki-client