$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142994.roa File: AS142994.roa (raw, json) Hash identifier: E75JySmVAtEjjELCm+Wc5l5YixZda9WgP8hfshmEAjw= Subject key identifier: EA:14:D7:84:04:A3:5D:D0:D0:CB:60:90:E3:D2:7D:87:FA:FB:E6:55 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6AE9F54B51E6D7B6F5C8B59E7B4B0A1D0193F720 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142994.roa Signing time: Wed 04 Mar 2026 06:07:45 +0000 ROA not before: Wed 04 Mar 2026 06:02:45 +0000 ROA not after: Wed 03 Mar 2027 06:07:45 +0000 asID: 142994 IP address blocks: 240a:a158::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e9:f5:4b:51:e6:d7:b6:f5:c8:b5:9e:7b:4b:0a:1d:01:93:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:45 2026 GMT Not After : Mar 3 06:07:45 2027 GMT Subject: CN=EA14D78404A35DD0D0CB6090E3D27D87FAFBE655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:fe:f1:d3:b0:73:b4:06:b1:93:7b:5a:66: b5:2d:46:43:55:70:18:bb:2c:da:0d:c5:57:14:a6: 71:66:cc:8d:5c:50:57:f7:ba:37:a7:4c:78:68:25: e8:2b:70:68:cf:2e:bd:b6:d7:74:2c:da:68:a9:2d: cb:53:8a:e6:69:51:e1:fb:1f:d3:1e:da:15:46:12: e2:90:60:30:da:27:d3:73:86:e6:1b:cb:09:f0:6d: a0:23:f4:31:70:5f:3e:5e:27:25:56:10:ca:6d:24: 22:08:54:24:95:a1:5a:a8:f5:69:6a:be:7c:ea:93: 60:48:cb:2c:9a:79:4c:07:f4:c3:10:b0:8d:be:2c: bf:4f:f2:8d:f2:92:84:48:9e:27:d9:ee:87:24:8f: 4f:41:db:f7:2b:e6:ce:81:ee:4c:a6:b3:02:10:0e: 7c:a7:0a:d2:e9:1c:c4:92:9f:85:0f:c3:ee:47:be: c1:17:47:44:29:7c:bf:db:d9:b1:7b:0d:08:a2:39: 64:df:f3:c7:cd:55:d6:88:48:72:d4:67:5a:fe:57: 46:4f:37:d0:36:cc:1d:cb:32:83:6a:88:9d:37:f5: ec:0d:57:ff:c0:90:be:30:10:8b:a3:62:bd:60:eb: 0a:5c:30:8f:a9:10:7c:91:02:8e:a7:67:ee:17:e2: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:14:D7:84:04:A3:5D:D0:D0:CB:60:90:E3:D2:7D:87:FA:FB:E6:55 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142994.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a158::/32 Signature Algorithm: sha256WithRSAEncryption 30:bc:9d:b7:38:8a:66:03:70:a2:e2:a6:2d:68:b2:84:75:c5: a1:a3:aa:bf:42:91:fe:aa:ea:f9:92:4b:87:1a:24:3a:fa:ee: 1e:c4:07:5e:65:2b:ac:91:ea:41:71:18:73:c1:6d:fa:a4:47: ce:58:11:62:e0:8c:f8:11:34:56:12:6a:f6:60:d7:a1:f6:5a: 99:9b:09:59:99:1e:6a:6a:ab:92:62:aa:80:d4:df:eb:3f:e8: f7:1c:ec:90:08:0a:9f:ac:72:36:66:cd:91:e1:c7:9c:4c:dd: 9b:91:4f:a4:5b:9a:77:2f:d3:f3:47:18:12:b1:f0:79:43:ec: 89:be:40:bd:c7:0c:20:81:69:77:bb:ba:20:2d:58:a8:72:d1: 00:ab:14:83:61:d7:91:06:f6:64:8a:3a:9d:b1:2e:93:ec:c7: 3a:98:5a:18:38:65:63:4e:b0:44:ac:f8:bc:71:3c:a8:36:a1: ce:4e:64:9a:99:05:92:f7:aa:a8:fc:c8:ec:a0:51:ff:71:94: 30:92:d5:6d:41:91:d7:b7:0a:f2:b6:3d:f8:13:f2:e3:57:90: 92:c7:85:52:e7:13:75:2e:57:84:66:52:d4:9e:fb:9c:d6:6d: c6:6a:72:3b:72:e7:28:db:5f:94:e6:c5:63:76:e9:0e:a2:97: 8f:b8:13:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaun1S1Hm17b1yLWee0sKHQGT9yAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI0NVoX DTI3MDMwMzA2MDc0NVowMzExMC8GA1UEAxMoRUExNEQ3ODQwNEEzNUREMEQwQ0I2 MDkwRTNEMjdEODdGQUZCRTY1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQ2/vHTsHO0BrGTe1pmtS1GQ1VwGLss2g3FVxSmcWbMjVxQV/e6N6dMeGgl 6CtwaM8uvbbXdCzaaKkty1OK5mlR4fsf0x7aFUYS4pBgMNon03OG5hvLCfBtoCP0 MXBfPl4nJVYQym0kIghUJJWhWqj1aWq+fOqTYEjLLJp5TAf0wxCwjb4sv0/yjfKS hEieJ9nuhySPT0Hb9yvmzoHuTKazAhAOfKcK0ukcxJKfhQ/D7ke+wRdHRCl8v9vZ sXsNCKI5ZN/zx81V1ohIctRnWv5XRk830DbMHcsyg2qInTf17A1X/8CQvjAQi6Ni vWDrClwwj6kQfJECjqdn7hfiKDECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTqFNeE BKNd0NDLYJDj0n2H+vvmVTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oVgwDQYJKoZIhvcNAQELBQADggEBADC8nbc4imYDcKLipi1osoR1xaGjqr9Ckf6q 6vmSS4caJDr67h7EB15lK6yR6kFxGHPBbfqkR85YEWLgjPgRNFYSavZg16H2Wpmb CVmZHmpqq5JiqoDU3+s/6Pcc7JAICp+scjZmzZHhx5xM3ZuRT6Rbmncv0/NHGBKx 8HlD7Im+QL3HDCCBaXe7uiAtWKhy0QCrFINh15EG9mSKOp2xLpPsxzqYWhg4ZWNO sESs+LxxPKg2oc5OZJqZBZL3qqj8yOygUf9xlDCS1W1Bkde3CvK2PfgT8uNXkJLH hVLnE3UuV4RmUtSe+5zWbcZqcjty5yjbX5TmxWN26Q6il4+4E7k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:03 2026 by rpki-client