$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142996.roa File: AS142996.roa (raw, json) Hash identifier: FuV0l8zvGvoeiwz9VX785J84H3tZyFVhWEUhl1J72/4= Subject key identifier: 24:C5:D7:18:CC:3F:4D:4D:52:C9:CD:57:FE:B0:C1:22:34:3F:1D:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 15B6649B3CC026B4661F878973474FDDD5870923 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142996.roa Signing time: Wed 04 Mar 2026 06:07:57 +0000 ROA not before: Wed 04 Mar 2026 06:02:57 +0000 ROA not after: Wed 03 Mar 2027 06:07:57 +0000 asID: 142996 IP address blocks: 240a:a15a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b6:64:9b:3c:c0:26:b4:66:1f:87:89:73:47:4f:dd:d5:87:09:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:57 2026 GMT Not After : Mar 3 06:07:57 2027 GMT Subject: CN=24C5D718CC3F4D4D52C9CD57FEB0C122343F1DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:f3:cc:fb:f0:17:4c:2d:38:e6:ea:1f:20: f2:fd:93:1e:50:27:56:29:11:97:ef:9b:39:57:39: 6b:ad:d8:04:37:0e:53:1d:a3:28:45:4f:da:ce:1f: 57:7e:4e:8b:55:f5:45:69:69:1c:6f:b2:6f:92:67: d4:f1:2f:fc:b6:e4:fc:c5:ef:fd:6b:63:87:26:cf: 85:c1:6e:f4:d3:1d:dc:e9:74:74:51:5f:53:b8:7c: d0:d1:86:e4:c2:65:ac:4a:4d:aa:8a:91:9c:07:04: 08:a7:86:bc:93:cf:20:f0:56:09:e3:04:f6:48:14: b2:ac:b4:28:ac:29:eb:ba:7c:1a:ca:f6:85:e9:1c: 62:04:34:8a:48:0b:37:bf:29:39:c6:05:e9:8b:ce: f7:cd:e6:d3:b6:c1:b0:c9:7c:52:1b:b9:52:7a:37: 1c:fb:10:f2:5e:21:78:75:ec:49:50:6f:7e:16:04: 11:5a:b9:a2:81:ba:1a:e3:f2:15:97:a5:c6:36:96: 7d:f2:06:f3:88:9a:84:d3:54:1d:bb:07:3a:6f:9d: 85:74:da:bf:a1:a0:ea:13:d6:b7:c8:99:9a:92:cb: ea:3e:49:d0:25:5c:58:3d:9b:3d:77:e5:58:83:11: 75:4e:1a:cc:77:59:5a:72:79:41:ff:07:8a:36:63: 31:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:D7:18:CC:3F:4D:4D:52:C9:CD:57:FE:B0:C1:22:34:3F:1D:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a15a::/32 Signature Algorithm: sha256WithRSAEncryption a0:8b:e4:17:24:9f:b9:aa:a2:97:e0:79:43:8a:b9:1a:72:ff: bc:01:33:ac:98:6c:33:6d:96:75:3e:3c:ed:14:93:b3:03:86: 42:63:c7:61:8f:a4:b3:92:de:a5:8d:c0:47:e1:70:84:21:2b: d0:54:cb:b1:7c:19:2f:23:99:dd:27:3c:01:3a:b6:13:d6:37: a4:01:92:1d:dd:7a:b9:55:f1:76:b4:92:0e:79:0b:c3:85:71: 05:bd:38:66:dd:c9:70:9a:36:5c:ea:14:a2:df:fc:7f:48:06: 55:d5:35:3d:f0:4c:0c:6d:76:7f:ce:a3:e3:50:d4:53:38:a9: 3b:1d:9f:48:f3:8c:69:c1:07:89:0e:46:7d:e0:0b:3d:2b:74: c6:92:5d:ea:df:c7:f3:2d:bd:31:19:c1:eb:48:bd:57:72:6a: 5f:8c:98:78:65:13:65:ae:de:9e:ee:a1:50:8e:8b:3e:06:c9: 60:87:55:f8:b9:b4:d2:b2:5a:e6:93:82:b5:a6:01:0d:e5:de: ac:3b:b4:b7:95:b8:82:db:18:20:65:b5:f6:e3:ea:7d:bd:4f: be:ff:92:21:0f:e2:27:4b:e4:17:39:50:ff:2c:77:8e:d0:39: ae:21:30:40:b5:4b:27:16:be:46:d4:0d:32:b5:19:58:8c:c9: 5a:5f:9f:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFbZkmzzAJrRmH4eJc0dP3dWHCSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1N1oX DTI3MDMwMzA2MDc1N1owMzExMC8GA1UEAxMoMjRDNUQ3MThDQzNGNEQ0RDUyQzlD RDU3RkVCMEMxMjIzNDNGMURCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXc88z78BdMLTjm6h8g8v2THlAnVikRl++bOVc5a63YBDcOUx2jKEVP2s4f V35Oi1X1RWlpHG+yb5Jn1PEv/Lbk/MXv/WtjhybPhcFu9NMd3Ol0dFFfU7h80NGG 5MJlrEpNqoqRnAcECKeGvJPPIPBWCeME9kgUsqy0KKwp67p8Gsr2hekcYgQ0ikgL N78pOcYF6YvO983m07bBsMl8Uhu5Uno3HPsQ8l4heHXsSVBvfhYEEVq5ooG6GuPy FZelxjaWffIG84iahNNUHbsHOm+dhXTav6Gg6hPWt8iZmpLL6j5J0CVcWD2bPXfl WIMRdU4azHdZWnJ5Qf8HijZjMVECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQkxdcY zD9NTVLJzVf+sMEiND8duDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oVowDQYJKoZIhvcNAQELBQADggEBAKCL5Bckn7mqopfgeUOKuRpy/7wBM6yYbDNt lnU+PO0Uk7MDhkJjx2GPpLOS3qWNwEfhcIQhK9BUy7F8GS8jmd0nPAE6thPWN6QB kh3derlV8Xa0kg55C8OFcQW9OGbdyXCaNlzqFKLf/H9IBlXVNT3wTAxtdn/Oo+NQ 1FM4qTsdn0jzjGnBB4kORn3gCz0rdMaSXerfx/MtvTEZwetIvVdyal+MmHhlE2Wu 3p7uoVCOiz4GyWCHVfi5tNKyWuaTgrWmAQ3l3qw7tLeVuILbGCBltfbj6n29T77/ kiEP4idL5Bc5UP8sd47QOa4hMEC1SycWvkbUDTK1GViMyVpfn0o= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:15 2026 by rpki-client