$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142973.roa File: AS142973.roa (raw, json) Hash identifier: ke5ffqyt2xDreSnZRw5sczvfsTWrwzCVKYFz02pDagc= Subject key identifier: 9F:1C:56:CA:B8:43:77:DA:2B:0B:99:8B:20:43:2C:FA:8F:78:5A:98 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0D8CCDC666EC0918FCFD49BE12ECC7AB4941E9B9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142973.roa Signing time: Wed 04 Mar 2026 06:05:54 +0000 ROA not before: Wed 04 Mar 2026 06:00:54 +0000 ROA not after: Wed 03 Mar 2027 06:05:54 +0000 asID: 142973 IP address blocks: 240a:a143::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8c:cd:c6:66:ec:09:18:fc:fd:49:be:12:ec:c7:ab:49:41:e9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:54 2026 GMT Not After : Mar 3 06:05:54 2027 GMT Subject: CN=9F1C56CAB84377DA2B0B998B20432CFA8F785A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:35:a2:80:4e:a8:c0:74:bd:37:61:4e:ca: 4f:ae:e6:3a:ac:62:5f:56:c9:24:57:1a:74:8b:ee: 85:d5:2c:80:b7:dc:4d:8d:37:68:99:20:ff:e6:31: b0:05:ad:11:58:68:b7:c5:93:f2:0d:c8:37:a7:07: bb:5d:ee:c4:d6:25:75:c0:cc:0b:6e:9a:5d:4c:90: 3b:9a:72:d9:8e:49:a7:75:fb:84:0f:7c:77:28:ee: 69:e0:fa:cb:15:a0:ff:79:8e:61:b5:0c:d2:7d:fe: 22:c6:82:5f:c2:b2:5c:03:9d:b1:9c:25:f7:6e:9e: 69:0f:43:1f:b9:01:89:b7:53:96:d3:b8:06:12:d7: 56:6b:63:92:e6:4c:ab:06:af:5d:c6:85:0f:3c:e4: 10:b5:e8:47:8b:b0:11:b4:6f:64:9d:dd:50:0c:ac: 8b:30:3a:c4:88:25:82:fa:b5:b1:6c:0f:72:a3:88: 60:71:a1:8d:f9:b2:c9:27:50:08:28:78:f9:18:c1: 21:a5:e9:d0:13:4d:bb:7e:aa:fa:42:e1:1d:85:bf: 17:9f:ee:29:4d:30:b6:1e:1e:65:b2:8f:ee:90:9a: 2a:65:92:23:dd:d4:c0:a3:c8:1a:7c:8f:41:ce:d4: f0:37:28:a4:cb:9c:f4:d5:fa:48:57:ee:64:8a:9b: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1C:56:CA:B8:43:77:DA:2B:0B:99:8B:20:43:2C:FA:8F:78:5A:98 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142973.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a143::/32 Signature Algorithm: sha256WithRSAEncryption b4:cc:a5:a0:f6:8b:5a:11:b1:a5:fb:55:5b:39:79:5c:50:5e: 91:ad:27:aa:65:17:ea:ce:cd:ed:7d:d9:b3:bd:c9:17:13:68: 8d:25:ea:03:bc:c9:d5:ad:ad:ab:51:41:e4:39:f4:d1:18:fe: 97:71:43:25:ce:9e:b8:92:91:8b:bd:72:ba:ba:00:81:b9:dd: ea:7a:30:d0:c7:ef:0d:09:20:29:ff:72:04:33:af:43:1f:47: 22:fd:cf:4f:35:6d:97:9d:8e:98:a2:72:38:06:f9:cb:13:01: 84:c9:02:e4:3a:17:70:eb:e5:7a:2c:df:53:6c:9d:f1:29:97: 4a:5d:c5:85:c1:34:e1:0f:60:66:8a:b3:86:f9:fa:28:ac:39: 80:97:1d:ab:37:81:04:88:e7:0f:f6:63:0d:a8:82:05:ca:06: fe:6a:92:c4:7c:37:f5:27:ce:54:ce:13:3f:9c:17:ad:9f:1f: 13:a7:35:ac:67:76:07:f1:d0:a1:72:57:e7:4d:80:f5:5c:07: 95:3a:5b:9f:5f:37:3a:5c:d0:4b:02:aa:f7:1d:cb:79:cd:1e: 73:10:3e:d4:e6:e4:2e:be:c8:95:9b:f5:07:76:9e:a0:83:0a: 55:7c:85:99:54:8f:50:6a:99:6f:3f:66:30:b6:1a:ec:df:fb: 08:d8:5e:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDYzNxmbsCRj8/Um+EuzHq0lB6bkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1NFoX DTI3MDMwMzA2MDU1NFowMzExMC8GA1UEAxMoOUYxQzU2Q0FCODQzNzdEQTJCMEI5 OThCMjA0MzJDRkE4Rjc4NUE5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUqNaKATqjAdL03YU7KT67mOqxiX1bJJFcadIvuhdUsgLfcTY03aJkg/+Yx sAWtEVhot8WT8g3IN6cHu13uxNYldcDMC26aXUyQO5py2Y5Jp3X7hA98dyjuaeD6 yxWg/3mOYbUM0n3+IsaCX8KyXAOdsZwl926eaQ9DH7kBibdTltO4BhLXVmtjkuZM qwavXcaFDzzkELXoR4uwEbRvZJ3dUAysizA6xIglgvq1sWwPcqOIYHGhjfmyySdQ CCh4+RjBIaXp0BNNu36q+kLhHYW/F5/uKU0wth4eZbKP7pCaKmWSI93UwKPIGnyP Qc7U8DcopMuc9NX6SFfuZIqbpHsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSfHFbK uEN32isLmYsgQyz6j3hamDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oUMwDQYJKoZIhvcNAQELBQADggEBALTMpaD2i1oRsaX7VVs5eVxQXpGtJ6plF+rO ze192bO9yRcTaI0l6gO8ydWtratRQeQ59NEY/pdxQyXOnriSkYu9crq6AIG53ep6 MNDH7w0JICn/cgQzr0MfRyL9z081bZedjpiicjgG+csTAYTJAuQ6F3Dr5Xos31Ns nfEpl0pdxYXBNOEPYGaKs4b5+iisOYCXHas3gQSI5w/2Yw2oggXKBv5qksR8N/Un zlTOEz+cF62fHxOnNaxndgfx0KFyV+dNgPVcB5U6W59fNzpc0EsCqvcdy3nNHnMQ PtTm5C6+yJWb9Qd2nqCDClV8hZlUj1BqmW8/ZjC2Guzf+wjYXnA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:43 2026 by rpki-client