$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142995.roa File: AS142995.roa (raw, json) Hash identifier: LRW4zlrLzcqxgkiDo6iMkthT+FhwCFEcto7yRksZHeE= Subject key identifier: 90:31:8F:38:A9:91:54:F3:2A:82:85:C3:2F:47:A8:12:DF:9C:A6:86 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 37535BFF40304DF4A905E3A5BAA8135F26F2813B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142995.roa Signing time: Wed 04 Mar 2026 06:05:26 +0000 ROA not before: Wed 04 Mar 2026 06:00:26 +0000 ROA not after: Wed 03 Mar 2027 06:05:26 +0000 asID: 142995 IP address blocks: 240a:a159::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:53:5b:ff:40:30:4d:f4:a9:05:e3:a5:ba:a8:13:5f:26:f2:81:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:26 2026 GMT Not After : Mar 3 06:05:26 2027 GMT Subject: CN=90318F38A99154F32A8285C32F47A812DF9CA686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:9f:eb:4a:83:7e:95:7e:45:cd:8f:95:c5: ed:7c:cf:18:b2:6b:8e:31:85:28:8d:e5:6c:bb:2c: e0:80:77:0b:b5:48:d6:9a:15:72:fd:ee:3c:e6:65: 58:78:a7:d3:75:d7:47:ba:4e:eb:48:99:5b:1d:e4: 40:23:c6:80:18:4f:0f:05:b6:49:08:ea:23:a5:e4: 87:23:12:b4:bb:05:ab:52:8e:3c:7e:bc:b2:11:18: a3:e2:49:6e:73:5c:2a:50:2e:2c:79:c0:0c:ab:e1: 0c:5e:a5:e1:5f:39:6a:0b:ee:e1:de:5f:fc:b2:bd: a2:49:28:4f:ac:5d:d3:0f:81:fd:fd:1f:f8:78:92: 04:1a:65:8d:f0:f0:6b:48:0c:11:12:0e:bc:bf:56: e5:24:d8:ec:d7:72:4a:7a:8b:27:19:09:4a:00:03: fb:d7:10:e8:64:3d:8a:74:48:e4:0f:0b:e8:2e:a8: d5:8b:95:85:78:de:e2:e9:6b:a1:35:46:1b:aa:af: c6:e2:0e:e4:69:b3:87:43:68:6e:54:ae:37:33:98: 5b:ab:01:ce:7e:6d:28:38:ec:19:17:c3:af:c9:f6: b6:96:33:92:84:1a:e0:fd:1a:7e:f9:a2:60:0f:ca: 95:e2:98:cb:44:d9:e1:6b:d3:82:fd:ef:3a:d6:a3: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:31:8F:38:A9:91:54:F3:2A:82:85:C3:2F:47:A8:12:DF:9C:A6:86 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142995.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a159::/32 Signature Algorithm: sha256WithRSAEncryption bc:f0:9d:e3:a9:c1:d6:c5:77:69:4e:3f:a6:5e:14:cd:07:f4: c1:9d:8d:62:94:a1:f1:6c:ad:34:f9:a3:43:3a:04:0d:ff:85: 3b:4d:79:cc:17:44:1b:59:f9:52:44:53:95:fc:72:e1:18:7a: 69:13:95:65:ec:d0:38:15:e7:cf:f0:b3:03:d9:7f:c7:3a:3f: 31:ac:f8:db:4b:be:b4:15:a3:9a:bf:cb:93:77:13:9f:75:17: dd:0f:72:30:99:46:d9:ba:77:29:cb:4a:9a:eb:66:78:0e:50: cb:14:63:ec:f1:fb:a5:19:47:17:53:64:d4:3b:69:b3:38:dd: c5:07:53:e3:bb:8e:2f:35:99:3b:84:84:bc:52:72:95:f1:bd: dc:65:fc:34:4a:e2:01:23:4e:ff:42:23:c3:1b:2c:6f:1b:98: 25:b9:ba:b5:ad:5b:5d:17:ab:43:c3:a3:19:fd:8b:aa:59:2e: 79:5a:be:30:42:1b:5d:e9:88:16:82:5d:bb:03:f8:1b:19:0d: 25:98:21:54:5f:52:b2:95:02:f6:b5:fc:45:3c:67:89:cc:ab: 94:f3:22:c2:02:26:7c:0e:16:a6:e1:85:e6:b9:9b:0d:63:73: c3:92:d1:bf:f1:69:83:83:76:7e:7c:52:4b:8d:be:0a:4a:e2: 5a:e5:6c:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN1Nb/0AwTfSpBeOluqgTXybygTswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAyNloX DTI3MDMwMzA2MDUyNlowMzExMC8GA1UEAxMoOTAzMThGMzhBOTkxNTRGMzJBODI4 NUMzMkY0N0E4MTJERjlDQTY4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMswn+tKg36VfkXNj5XF7XzPGLJrjjGFKI3lbLss4IB3C7VI1poVcv3uPOZl WHin03XXR7pO60iZWx3kQCPGgBhPDwW2SQjqI6XkhyMStLsFq1KOPH68shEYo+JJ bnNcKlAuLHnADKvhDF6l4V85agvu4d5f/LK9okkoT6xd0w+B/f0f+HiSBBpljfDw a0gMERIOvL9W5STY7NdySnqLJxkJSgAD+9cQ6GQ9inRI5A8L6C6o1YuVhXje4ulr oTVGG6qvxuIO5Gmzh0NoblSuNzOYW6sBzn5tKDjsGRfDr8n2tpYzkoQa4P0afvmi YA/KleKYy0TZ4WvTgv3vOtajAeUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSQMY84 qZFU8yqChcMvR6gS35ymhjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oVkwDQYJKoZIhvcNAQELBQADggEBALzwneOpwdbFd2lOP6ZeFM0H9MGdjWKUofFs rTT5o0M6BA3/hTtNecwXRBtZ+VJEU5X8cuEYemkTlWXs0DgV58/wswPZf8c6PzGs +NtLvrQVo5q/y5N3E591F90PcjCZRtm6dynLSprrZngOUMsUY+zx+6UZRxdTZNQ7 abM43cUHU+O7ji81mTuEhLxScpXxvdxl/DRK4gEjTv9CI8MbLG8bmCW5urWtW10X q0PDoxn9i6pZLnlavjBCG13piBaCXbsD+BsZDSWYIVRfUrKVAva1/EU8Z4nMq5Tz IsICJnwOFqbhhea5mw1jc8OS0b/xaYODdn58UkuNvgpK4lrlbIc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:42 2026 by rpki-client