$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142992.roa File: AS142992.roa (raw, json) Hash identifier: TYxkbS1I+2zvS+Kr8g6L1p52Ikv9POSlDZ97xlCB+sc= Subject key identifier: 5B:45:90:2A:83:61:70:63:3F:4F:45:50:10:09:F1:4C:CC:9C:9F:BA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0972422EB1EEC518F2645171B3BE126C97488372 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142992.roa Signing time: Wed 04 Mar 2026 06:07:26 +0000 ROA not before: Wed 04 Mar 2026 06:02:26 +0000 ROA not after: Wed 03 Mar 2027 06:07:26 +0000 asID: 142992 IP address blocks: 240a:a156::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:72:42:2e:b1:ee:c5:18:f2:64:51:71:b3:be:12:6c:97:48:83:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:26 2026 GMT Not After : Mar 3 06:07:26 2027 GMT Subject: CN=5B45902A836170633F4F45501009F14CCC9C9FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:13:3a:b3:96:9f:aa:b4:f8:8d:13:09:2b: 85:0d:18:da:f4:f7:b7:c3:6d:d8:af:c9:38:4b:c9: 7a:fa:8b:5e:77:1b:8b:35:7a:59:26:c9:61:ba:a7: e1:79:16:0e:88:36:a9:3d:b2:5f:c9:ef:bc:33:2e: 16:bb:ff:d7:49:4c:9f:11:4f:2f:b9:3b:cc:2e:da: 15:dc:75:16:06:6d:d4:e3:d0:6a:db:f5:25:77:a6: 58:38:db:1d:66:d1:42:90:38:e3:bd:f7:7b:68:03: 7a:ac:34:a1:11:c1:27:3e:5a:f9:78:cf:c8:59:56: c4:54:43:ca:d1:7c:7c:57:78:70:18:73:38:98:6c: cc:c4:66:49:a9:08:0d:8d:af:aa:eb:fa:d3:f8:36: 51:a4:77:bc:2c:ec:cc:7d:0e:76:c3:27:0c:fb:bf: 29:e9:84:0c:99:83:8d:03:be:2f:1e:5a:51:86:d5: 84:e7:12:74:3f:f9:bd:50:80:74:32:9a:36:51:79: 40:a5:e4:57:00:97:15:f1:03:52:c8:b3:2f:48:01: 0f:94:14:c1:2e:7c:02:df:5c:75:1d:a2:9e:b9:02: 8d:7b:ad:04:76:87:5b:93:51:10:06:cf:f7:41:72: f4:b7:65:ea:19:25:b5:88:b3:33:84:6b:44:25:b2: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:45:90:2A:83:61:70:63:3F:4F:45:50:10:09:F1:4C:CC:9C:9F:BA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142992.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a156::/32 Signature Algorithm: sha256WithRSAEncryption aa:ff:f6:b4:3f:92:a0:ca:5f:f8:6f:b3:bc:5f:cc:f5:e3:de: 31:76:45:cd:c1:9f:87:d2:b1:2d:83:f5:21:97:51:62:82:96: 5f:79:30:f9:93:ff:be:cb:7b:5f:bc:09:e4:a3:ec:6f:93:63: d8:a8:56:1f:c5:ec:31:0b:e8:be:8f:4b:bc:92:fe:43:54:57: d9:a6:ee:f2:cf:da:47:48:2f:56:1e:41:fa:a0:9e:77:c5:5d: 68:a7:b1:84:96:95:03:cf:0e:a1:d8:e5:2c:49:8e:4f:46:20: 67:bf:16:cc:9e:32:59:be:a7:b0:fd:e6:f4:df:b8:fe:b0:90: af:27:36:46:81:cb:89:3f:c5:2c:c8:b1:8e:07:5d:ee:e8:04: bd:b1:d7:53:fc:f4:53:29:46:56:f0:b7:46:d2:a6:7a:fd:6d: a7:26:37:20:98:2e:83:8c:ac:78:74:b3:29:6b:14:89:28:12: fe:19:a0:a4:36:cf:7f:46:57:d7:aa:5b:74:d4:79:37:81:ae: 12:60:73:80:a7:8a:8a:d6:ce:18:3e:70:d1:fc:34:80:8f:77: 25:0e:b7:ef:07:ac:be:f3:60:cc:7f:70:62:4d:e9:47:6b:08: f1:33:c9:c6:b6:a6:a2:ff:02:7b:76:03:74:57:46:13:37:14: 2e:16:be:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCXJCLrHuxRjyZFFxs74SbJdIg3IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIyNloX DTI3MDMwMzA2MDcyNlowMzExMC8GA1UEAxMoNUI0NTkwMkE4MzYxNzA2MzNGNEY0 NTUwMTAwOUYxNENDQzlDOUZCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlIEzqzlp+qtPiNEwkrhQ0Y2vT3t8Nt2K/JOEvJevqLXncbizV6WSbJYbqn 4XkWDog2qT2yX8nvvDMuFrv/10lMnxFPL7k7zC7aFdx1FgZt1OPQatv1JXemWDjb HWbRQpA44733e2gDeqw0oRHBJz5a+XjPyFlWxFRDytF8fFd4cBhzOJhszMRmSakI DY2vquv60/g2UaR3vCzszH0OdsMnDPu/KemEDJmDjQO+Lx5aUYbVhOcSdD/5vVCA dDKaNlF5QKXkVwCXFfEDUsizL0gBD5QUwS58At9cdR2inrkCjXutBHaHW5NREAbP 90Fy9Ldl6hkltYizM4RrRCWygmkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRbRZAq g2FwYz9PRVAQCfFMzJyfujAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oVYwDQYJKoZIhvcNAQELBQADggEBAKr/9rQ/kqDKX/hvs7xfzPXj3jF2Rc3Bn4fS sS2D9SGXUWKCll95MPmT/77Le1+8CeSj7G+TY9ioVh/F7DEL6L6PS7yS/kNUV9mm 7vLP2kdIL1YeQfqgnnfFXWinsYSWlQPPDqHY5SxJjk9GIGe/FsyeMlm+p7D95vTf uP6wkK8nNkaBy4k/xSzIsY4HXe7oBL2x11P89FMpRlbwt0bSpnr9bacmNyCYLoOM rHh0sylrFIkoEv4ZoKQ2z39GV9eqW3TUeTeBrhJgc4CniorWzhg+cNH8NICPdyUO t+8HrL7zYMx/cGJN6UdrCPEzyca2pqL/Ant2A3RXRhM3FC4Wvuw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:36 2026 by rpki-client