$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142974.roa File: AS142974.roa (raw, json) Hash identifier: uxtF5A4ojliRO3Kya0YQX6qxjoVqLszeYGJ/bVGoDgM= Subject key identifier: 5E:A7:2B:87:FE:E8:AA:B4:B9:37:6D:47:DF:FB:7B:8F:84:48:6E:08 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4F36C9C856076032B596267EA2D70EF7D595E0AC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142974.roa Signing time: Wed 04 Mar 2026 06:07:47 +0000 ROA not before: Wed 04 Mar 2026 06:02:47 +0000 ROA not after: Wed 03 Mar 2027 06:07:47 +0000 asID: 142974 IP address blocks: 240a:a144::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:36:c9:c8:56:07:60:32:b5:96:26:7e:a2:d7:0e:f7:d5:95:e0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:47 2026 GMT Not After : Mar 3 06:07:47 2027 GMT Subject: CN=5EA72B87FEE8AAB4B9376D47DFFB7B8F84486E08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0c:01:d7:62:24:c0:42:6c:04:de:b5:73:eb: d1:52:da:e0:22:84:bf:b9:6e:9e:e0:56:2f:fb:40: ca:c2:23:57:5d:08:af:8b:54:50:33:dd:62:01:58: b8:ec:1e:51:b6:c9:a3:cf:db:69:c8:2e:b4:f6:77: d9:cc:87:7a:42:c9:ed:d9:fd:45:e7:07:0c:fa:d5: 3c:33:8b:d4:f3:1e:ef:c6:8c:c7:38:3e:1e:3a:03: 18:89:ec:7f:07:4f:ff:93:c9:5d:78:df:0b:05:e5: 2a:74:9c:9a:53:67:f4:b8:6f:70:da:b9:a2:46:86: a4:c0:e4:73:2a:c7:95:7a:85:0e:e1:d9:38:c6:6b: b9:60:25:a1:62:e4:69:e0:82:2b:dd:4a:ef:6d:38: cf:8a:a4:84:cc:00:48:d7:75:80:e7:b3:c3:16:bb: 96:92:16:ca:52:59:85:84:07:e2:60:39:05:2c:0e: 55:e6:4a:aa:39:2f:e2:9f:8b:c5:ee:f3:52:0f:f1: 76:e3:f9:18:9c:3e:f3:76:09:6b:20:c3:19:9f:97: ca:07:62:c4:5e:6f:af:52:a3:3d:df:9e:39:0e:7c: 66:6a:97:b4:74:0d:be:58:f0:92:74:ff:ab:48:f5: f3:7e:19:28:ed:dd:32:fb:5a:c5:b6:54:e4:f5:2b: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A7:2B:87:FE:E8:AA:B4:B9:37:6D:47:DF:FB:7B:8F:84:48:6E:08 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142974.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a144::/32 Signature Algorithm: sha256WithRSAEncryption 84:a7:89:3f:64:37:dd:b9:39:3c:b9:a8:27:bb:51:19:a4:ec: e3:af:0b:19:7c:8e:e1:74:72:f2:1d:e7:90:fe:eb:66:5d:bf: ae:72:b5:c3:04:a5:a5:f0:9c:24:da:c4:c8:24:c5:56:38:29: cb:ae:b3:de:eb:14:58:f9:90:3c:59:a5:db:88:2e:a3:e7:12: 42:58:bb:70:b6:d1:5e:79:ed:5c:1a:cc:0d:b2:5b:d1:4a:23: 93:10:ba:9d:ae:80:5b:c6:0b:40:ea:66:3f:8a:36:a5:e2:b1: 3e:fb:a4:a2:b5:71:2b:f0:84:86:19:19:97:42:5a:10:91:4b: 1a:8b:bc:bb:17:c6:19:69:89:0b:1a:67:ad:a3:c5:3c:df:2e: dc:a7:a2:97:a4:5d:9f:87:67:b9:12:c8:08:ff:a7:92:48:4d: aa:ea:25:09:ef:31:1a:9d:b6:9d:da:aa:55:0b:21:d4:f9:20: 2c:34:8e:39:3e:83:34:ce:91:30:59:15:03:27:31:0c:77:c1: e3:45:95:23:06:51:d4:b0:e0:8e:78:89:50:25:7f:1a:0a:33: 62:68:17:39:c9:8d:c4:35:03:4b:b8:68:05:10:72:1b:58:c8: 09:96:2a:89:b9:b7:3d:04:b6:77:b5:54:8e:ca:bb:07:85:b1: 9a:76:80:31 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTzbJyFYHYDK1liZ+otcO99WV4KwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0N1oX DTI3MDMwMzA2MDc0N1owMzExMC8GA1UEAxMoNUVBNzJCODdGRUU4QUFCNEI5Mzc2 RDQ3REZGQjdCOEY4NDQ4NkUwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEMAddiJMBCbATetXPr0VLa4CKEv7lunuBWL/tAysIjV10Ir4tUUDPdYgFY uOweUbbJo8/bacgutPZ32cyHekLJ7dn9RecHDPrVPDOL1PMe78aMxzg+HjoDGIns fwdP/5PJXXjfCwXlKnScmlNn9LhvcNq5okaGpMDkcyrHlXqFDuHZOMZruWAloWLk aeCCK91K7204z4qkhMwASNd1gOezwxa7lpIWylJZhYQH4mA5BSwOVeZKqjkv4p+L xe7zUg/xduP5GJw+83YJayDDGZ+XygdixF5vr1KjPd+eOQ58ZmqXtHQNvljwknT/ q0j1834ZKO3dMvtaxbZU5PUrwnECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRepyuH /uiqtLk3bUff+3uPhEhuCDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oUQwDQYJKoZIhvcNAQELBQADggEBAISniT9kN925OTy5qCe7URmk7OOvCxl8juF0 cvId55D+62Zdv65ytcMEpaXwnCTaxMgkxVY4Kcuus97rFFj5kDxZpduILqPnEkJY u3C20V557VwazA2yW9FKI5MQup2ugFvGC0DqZj+KNqXisT77pKK1cSvwhIYZGZdC WhCRSxqLvLsXxhlpiQsaZ62jxTzfLtynopekXZ+HZ7kSyAj/p5JITarqJQnvMRqd tp3aqlULIdT5ICw0jjk+gzTOkTBZFQMnMQx3weNFlSMGUdSw4I54iVAlfxoKM2Jo FznJjcQ1A0u4aAUQchtYyAmWKom5tz0Etne1VI7KuweFsZp2gDE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:41 2026 by rpki-client