$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142993.roa File: AS142993.roa (raw, json) Hash identifier: Ao0ayVPVIh1Hg12p1FDS4b8/xKysjGPuZOQL2OFteT8= Subject key identifier: A3:1C:0A:98:D9:6D:2F:07:9D:5B:87:47:01:AE:31:55:F4:B9:46:6C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2D7ED85454AD77F15DBA2388D4DC74E9830D752F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142993.roa Signing time: Wed 04 Mar 2026 06:07:15 +0000 ROA not before: Wed 04 Mar 2026 06:02:15 +0000 ROA not after: Wed 03 Mar 2027 06:07:15 +0000 asID: 142993 IP address blocks: 240a:a157::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7e:d8:54:54:ad:77:f1:5d:ba:23:88:d4:dc:74:e9:83:0d:75:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:15 2026 GMT Not After : Mar 3 06:07:15 2027 GMT Subject: CN=A31C0A98D96D2F079D5B874701AE3155F4B9466C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8b:7d:3b:21:3e:1c:87:c4:ef:2a:18:5e:27: 09:e6:61:9c:cf:9c:5e:1c:0b:7c:7b:12:e3:1c:c2: 06:dc:e7:3f:67:19:d2:2f:47:b8:ec:28:d4:5a:62: a1:33:f1:59:dd:c4:36:cb:82:fc:64:c1:ce:72:0f: bf:fe:38:01:2f:11:79:ab:6d:07:a9:5e:bc:96:12: fa:8a:20:51:03:36:0c:17:8e:bd:67:85:ec:d5:23: 3b:03:cc:21:f5:ac:f2:d9:ca:7b:3f:1a:0f:fb:b3: d6:c8:d6:e9:25:66:62:19:c6:a9:ed:61:c4:e2:8a: 7d:c4:77:c9:a9:c1:6b:85:ed:94:e0:6d:a2:54:1d: 00:27:8a:50:99:49:ef:b0:9b:8c:47:6f:55:a7:60: 6a:2d:a1:e4:ac:70:9c:69:63:1f:c5:de:d1:2a:c8: a8:cb:85:fe:ee:2f:fc:d7:ce:41:db:6c:c7:5e:62: 0a:d9:e6:f4:55:d5:89:44:e0:04:a6:81:df:3e:d7: b1:a1:00:ab:b8:d2:ca:be:13:fe:33:ae:ad:3b:ed: 11:b6:a5:5e:a4:55:2b:f2:fd:d7:5f:14:72:2c:27: 7c:1a:68:5c:59:39:e7:7f:f2:72:e9:4c:8b:ff:ba: d3:01:70:14:36:6f:d0:88:ad:08:56:bf:f0:a2:44: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1C:0A:98:D9:6D:2F:07:9D:5B:87:47:01:AE:31:55:F4:B9:46:6C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142993.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a157::/32 Signature Algorithm: sha256WithRSAEncryption ac:ef:0e:41:54:ee:de:cc:fd:60:61:68:da:5b:22:8f:83:fb: d0:85:d2:ff:c8:02:02:68:9c:c1:b1:6f:d3:ba:9e:f9:9e:be: 0b:f3:1e:5f:54:aa:48:7f:18:06:5c:c8:42:dc:97:e0:0d:2d: 59:81:37:83:4c:0b:07:03:29:d7:5c:06:f2:11:11:7f:26:b1: ac:5b:84:ab:b0:7b:b0:e9:b6:ae:9a:88:19:23:86:04:83:b4: be:c3:76:ee:37:5d:c1:51:4f:09:e7:06:ac:28:fe:83:9d:71: 34:fa:af:f5:06:16:ef:9a:96:e5:3d:2f:3f:f0:c2:a0:d6:4e: d6:24:3a:47:6f:8a:db:30:e3:76:79:db:9c:e4:66:3f:72:36: 21:a3:8e:f8:51:5f:7d:5f:85:96:75:ce:69:15:fb:cd:8b:99: 64:d6:c1:e5:b4:9c:38:bf:e2:79:b6:3c:b3:e0:f8:b3:98:22: 4b:d2:ba:50:83:28:88:25:3a:1a:c8:85:8e:ed:57:f7:0c:99: aa:75:66:ce:2e:32:15:13:d8:6b:c5:0a:64:35:52:3a:98:61: cf:0f:6f:2e:a4:ee:9c:72:43:f4:1e:cf:cf:82:82:52:ff:b0: ab:17:e6:65:40:73:77:23:09:b1:02:af:a1:c5:da:48:14:c3: f0:d5:17:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULX7YVFStd/FduiOI1Nx06YMNdS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIxNVoX DTI3MDMwMzA2MDcxNVowMzExMC8GA1UEAxMoQTMxQzBBOThEOTZEMkYwNzlENUI4 NzQ3MDFBRTMxNTVGNEI5NDY2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO+LfTshPhyHxO8qGF4nCeZhnM+cXhwLfHsS4xzCBtznP2cZ0i9HuOwo1Fpi oTPxWd3ENsuC/GTBznIPv/44AS8ReattB6levJYS+oogUQM2DBeOvWeF7NUjOwPM IfWs8tnKez8aD/uz1sjW6SVmYhnGqe1hxOKKfcR3yanBa4XtlOBtolQdACeKUJlJ 77CbjEdvVadgai2h5KxwnGljH8Xe0SrIqMuF/u4v/NfOQdtsx15iCtnm9FXViUTg BKaB3z7XsaEAq7jSyr4T/jOurTvtEbalXqRVK/L9118UciwnfBpoXFk553/yculM i/+60wFwFDZv0IitCFa/8KJELkECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSjHAqY 2W0vB51bh0cBrjFV9LlGbDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oVcwDQYJKoZIhvcNAQELBQADggEBAKzvDkFU7t7M/WBhaNpbIo+D+9CF0v/IAgJo nMGxb9O6nvmevgvzHl9Uqkh/GAZcyELcl+ANLVmBN4NMCwcDKddcBvIREX8msaxb hKuwe7Dptq6aiBkjhgSDtL7Ddu43XcFRTwnnBqwo/oOdcTT6r/UGFu+aluU9Lz/w wqDWTtYkOkdvitsw43Z525zkZj9yNiGjjvhRX31fhZZ1zmkV+82LmWTWweW0nDi/ 4nm2PLPg+LOYIkvSulCDKIglOhrIhY7tV/cMmap1Zs4uMhUT2GvFCmQ1UjqYYc8P by6k7pxyQ/Qez8+CglL/sKsX5mVAc3cjCbECr6HF2kgUw/DVF2Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:46 2026 by rpki-client