$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142978.roa File: AS142978.roa (raw, json) Hash identifier: Xhpzk+zF7oIOulK4gNyOZKXQarJFobi9Am/pj4epn7c= Subject key identifier: 08:2B:B3:6C:A4:46:42:C1:C2:D2:B0:B2:B3:74:52:87:32:D0:E9:70 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3B4242DC7386AE19ACEDEBF5DCD07A2DF1679373 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142978.roa Signing time: Wed 04 Mar 2026 06:07:05 +0000 ROA not before: Wed 04 Mar 2026 06:02:05 +0000 ROA not after: Wed 03 Mar 2027 06:07:05 +0000 asID: 142978 IP address blocks: 240a:a148::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:42:42:dc:73:86:ae:19:ac:ed:eb:f5:dc:d0:7a:2d:f1:67:93:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:05 2026 GMT Not After : Mar 3 06:07:05 2027 GMT Subject: CN=082BB36CA44642C1C2D2B0B2B374528732D0E970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:2a:12:a5:36:ba:07:81:6d:77:bd:f9:3f: a5:cf:b6:6b:fa:b3:76:4f:e2:52:73:78:d5:5e:57: 12:85:de:0d:d3:fa:8f:5c:3f:73:5f:31:f4:12:21: 7e:16:ac:ba:95:ff:90:68:7e:4f:4d:5d:98:de:ee: 0e:32:3b:50:7c:e8:18:4c:76:e1:a5:0a:4a:3a:75: 40:6b:d0:7a:ca:1f:11:b2:34:9a:cc:83:09:99:c7: cb:fa:5c:31:ea:aa:09:18:cc:fc:e6:f0:9e:da:ab: 44:19:dd:83:4d:56:3f:95:fb:10:f1:5a:18:19:28: 52:58:4f:9c:14:43:2a:19:e8:1e:dc:f5:03:f1:fe: 11:e3:e1:ff:4c:c1:09:ac:10:c7:89:59:1d:51:40: 26:f4:67:9c:5a:27:6a:10:57:21:44:21:43:08:f0: 28:f5:0d:d2:b9:1c:30:5e:1b:7a:78:77:ab:de:db: 3d:4a:23:ce:71:80:94:65:24:a9:7e:92:12:ea:ca: 8e:8c:cb:27:f2:a4:ec:3a:cf:3a:2f:53:df:a2:15: ca:12:c1:d5:ee:74:e0:1f:04:a1:19:32:0e:bd:41: 8b:77:8c:c6:6e:92:63:77:05:53:88:f3:b7:97:c2: ff:af:6c:87:07:15:36:64:22:58:f4:b1:3a:50:9c: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2B:B3:6C:A4:46:42:C1:C2:D2:B0:B2:B3:74:52:87:32:D0:E9:70 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142978.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a148::/32 Signature Algorithm: sha256WithRSAEncryption b6:45:ad:a2:2d:57:e4:1f:68:22:4b:64:4e:2c:34:36:4f:91: cd:0b:ec:ab:43:f3:51:fa:b3:4b:87:77:82:b5:84:64:3a:e7: 1b:ac:50:33:60:4f:d9:82:f7:3b:1a:7e:cf:13:30:73:49:bd: c1:04:bb:b3:17:b5:c4:ff:2c:b3:7a:f7:97:c2:3c:6f:0c:09: 17:db:01:8a:b2:96:8c:4e:f1:c9:1d:df:32:03:55:9b:78:18: be:cc:f9:41:43:f2:37:e1:f3:ee:8c:9f:ac:13:bc:9e:0d:dd: af:95:99:53:3a:4d:34:51:09:51:84:b2:c9:f3:9e:9c:c2:35: 33:55:77:01:d8:a9:8b:a6:0e:db:34:e8:d5:53:eb:57:c8:42: b6:e5:1f:28:91:34:ca:3a:b5:8a:23:ab:ef:20:ac:38:5f:27: 2f:fa:1c:af:42:93:42:d0:e8:b5:4b:ea:17:9e:9b:cc:6a:06: b4:be:72:c5:b8:15:7a:7e:ae:bb:40:f3:15:7b:6c:86:83:a2: 72:b3:bc:7f:fb:cd:f6:51:34:4a:5d:6b:dc:79:cc:3f:41:bf: e2:eb:60:f0:09:06:4c:93:ef:44:0a:fc:06:73:7e:b8:44:18: 86:f1:04:5d:df:3a:c1:c0:d8:40:31:10:2c:7f:d1:0d:07:31: da:84:2a:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUO0JC3HOGrhms7ev13NB6LfFnk3MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIwNVoX DTI3MDMwMzA2MDcwNVowMzExMC8GA1UEAxMoMDgyQkIzNkNBNDQ2NDJDMUMyRDJC MEIyQjM3NDUyODczMkQwRTk3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgJKhKlNroHgW13vfk/pc+2a/qzdk/iUnN41V5XEoXeDdP6j1w/c18x9BIh fhasupX/kGh+T01dmN7uDjI7UHzoGEx24aUKSjp1QGvQesofEbI0msyDCZnHy/pc MeqqCRjM/ObwntqrRBndg01WP5X7EPFaGBkoUlhPnBRDKhnoHtz1A/H+EePh/0zB CawQx4lZHVFAJvRnnFonahBXIUQhQwjwKPUN0rkcMF4benh3q97bPUojznGAlGUk qX6SEurKjozLJ/Kk7DrPOi9T36IVyhLB1e504B8EoRkyDr1Bi3eMxm6SY3cFU4jz t5fC/69shwcVNmQiWPSxOlCc5rcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQIK7Ns pEZCwcLSsLKzdFKHMtDpcDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oUgwDQYJKoZIhvcNAQELBQADggEBALZFraItV+QfaCJLZE4sNDZPkc0L7KtD81H6 s0uHd4K1hGQ65xusUDNgT9mC9zsafs8TMHNJvcEEu7MXtcT/LLN695fCPG8MCRfb AYqyloxO8ckd3zIDVZt4GL7M+UFD8jfh8+6Mn6wTvJ4N3a+VmVM6TTRRCVGEssnz npzCNTNVdwHYqYumDts06NVT61fIQrblHyiRNMo6tYojq+8grDhfJy/6HK9Ck0LQ 6LVL6heem8xqBrS+csW4FXp+rrtA8xV7bIaDonKzvH/7zfZRNEpda9x5zD9Bv+Lr YPAJBkyT70QK/AZzfrhEGIbxBF3fOsHA2EAxECx/0Q0HMdqEKvI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:00 2026 by rpki-client