$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142997.roa File: AS142997.roa (raw, json) Hash identifier: aJKrdPrnc1cHPIVW344Ff4kqbRA6OtKborHP4Ao76/I= Subject key identifier: E6:C7:6A:E6:BC:CC:86:F1:73:46:77:BD:F5:94:EA:FD:28:E1:0A:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 32AC19ECEF1097185033AF855420E68B53109789 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142997.roa Signing time: Wed 04 Mar 2026 06:07:34 +0000 ROA not before: Wed 04 Mar 2026 06:02:34 +0000 ROA not after: Wed 03 Mar 2027 06:07:34 +0000 asID: 142997 IP address blocks: 240a:a15b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ac:19:ec:ef:10:97:18:50:33:af:85:54:20:e6:8b:53:10:97:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:34 2026 GMT Not After : Mar 3 06:07:34 2027 GMT Subject: CN=E6C76AE6BCCC86F1734677BDF594EAFD28E10AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:6d:5d:01:e8:15:a5:97:e0:01:8a:5b:ce: cc:79:0f:d3:83:db:17:b3:7e:b3:48:9c:f3:cc:11: 33:c9:cb:0c:8e:9d:e8:8c:cc:37:a0:51:6c:44:07: 75:d7:3d:3c:75:87:4d:84:23:ce:a3:3f:d7:c1:4c: b0:5a:88:fc:19:cc:48:3d:1c:4e:8b:0f:72:0a:7c: e7:73:b1:ec:8d:b3:b7:ff:90:7c:54:5d:9d:ee:9f: d6:6e:22:8c:15:be:64:0a:dc:dd:7a:1c:75:65:f5: 55:9a:be:71:a9:36:0f:0d:a3:f5:b7:50:61:9f:59: be:23:d9:68:db:6e:fa:d5:71:f4:d7:af:76:9a:4c: 38:4d:02:c0:1c:6e:f6:01:e2:19:e6:4d:c5:81:d3: 91:97:b1:5f:5c:c2:1d:28:29:54:e1:a3:f5:d3:62: c7:e0:79:80:de:29:85:eb:5d:63:ec:10:59:05:b3: b8:d6:25:18:39:78:e2:4b:a3:dc:27:54:39:74:1e: 6d:e3:70:76:60:77:78:37:08:f5:6e:c3:64:bc:c2: 1a:86:d7:77:d4:63:31:31:e0:02:0e:53:8d:b0:1b: 29:63:ab:5f:1a:61:5a:7d:e3:a5:2d:9e:67:14:2c: 71:bd:70:19:ed:1a:88:91:9c:f2:76:fb:42:80:50: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C7:6A:E6:BC:CC:86:F1:73:46:77:BD:F5:94:EA:FD:28:E1:0A:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a15b::/32 Signature Algorithm: sha256WithRSAEncryption 69:a2:6b:9e:26:47:b9:2b:3a:bc:b8:b1:7a:69:7b:5f:27:ac: a7:7e:7a:0f:aa:bf:27:ea:5d:20:60:d1:5b:80:d9:ad:74:4b: 7c:df:c2:85:8a:e6:d9:fd:e5:da:86:20:95:e5:82:cc:f4:0e: c6:c2:93:5e:f6:92:5a:c7:a7:37:9d:94:6a:a1:30:ca:a7:60: 1a:ec:59:40:73:ad:8d:90:af:65:5f:06:c9:01:fc:84:8c:1b: f0:34:1c:ac:1d:b0:f9:70:f6:a6:9a:ee:1a:dd:93:31:58:1a: 10:61:7b:73:d6:7f:2c:ae:10:35:59:a7:79:11:e2:8b:6a:88: 7a:e5:da:cb:96:e3:31:29:03:27:d1:92:0c:22:3d:b3:48:55: b4:99:89:f2:9e:20:7c:f6:b6:1f:ef:3d:69:06:b2:15:fb:80: 79:c8:02:d8:1f:a9:07:86:dd:b3:41:e5:7f:01:1f:33:f1:8f: eb:80:d8:09:22:a8:67:3e:24:5c:89:9f:51:82:c1:f1:7f:fe: 46:27:0a:d5:05:db:f7:3c:25:09:55:4d:02:f2:ab:24:7a:84: 6b:d5:f9:b3:1d:c3:c6:15:d1:49:38:7f:d2:29:0a:35:e7:54: bc:ef:26:9d:ff:37:1a:69:a6:aa:af:53:e9:a0:60:51:29:89: ec:1b:bb:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMqwZ7O8QlxhQM6+FVCDmi1MQl4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzNFoX DTI3MDMwMzA2MDczNFowMzExMC8GA1UEAxMoRTZDNzZBRTZCQ0NDODZGMTczNDY3 N0JERjU5NEVBRkQyOEUxMEFBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcObV0B6BWll+ABilvOzHkP04PbF7N+s0ic88wRM8nLDI6d6IzMN6BRbEQH ddc9PHWHTYQjzqM/18FMsFqI/BnMSD0cTosPcgp853Ox7I2zt/+QfFRdne6f1m4i jBW+ZArc3XocdWX1VZq+cak2Dw2j9bdQYZ9ZviPZaNtu+tVx9NevdppMOE0CwBxu 9gHiGeZNxYHTkZexX1zCHSgpVOGj9dNix+B5gN4phetdY+wQWQWzuNYlGDl44kuj 3CdUOXQebeNwdmB3eDcI9W7DZLzCGobXd9RjMTHgAg5TjbAbKWOrXxphWn3jpS2e ZxQscb1wGe0aiJGc8nb7QoBQJN0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTmx2rm vMyG8XNGd731lOr9KOEKpTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oVswDQYJKoZIhvcNAQELBQADggEBAGmia54mR7krOry4sXppe18nrKd+eg+qvyfq XSBg0VuA2a10S3zfwoWK5tn95dqGIJXlgsz0DsbCk172klrHpzedlGqhMMqnYBrs WUBzrY2Qr2VfBskB/ISMG/A0HKwdsPlw9qaa7hrdkzFYGhBhe3PWfyyuEDVZp3kR 4otqiHrl2suW4zEpAyfRkgwiPbNIVbSZifKeIHz2th/vPWkGshX7gHnIAtgfqQeG 3bNB5X8BHzPxj+uA2AkiqGc+JFyJn1GCwfF//kYnCtUF2/c8JQlVTQLyqyR6hGvV +bMdw8YV0Uk4f9IpCjXnVLzvJp3/NxpppqqvU+mgYFEpiewbu9A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:08 2026 by rpki-client