$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS142999.roa File: AS142999.roa (raw, json) Hash identifier: hfk2oq0ocBrHJnSOBttg3Ml+mHwXSOdB0/Esw+Qw6z8= Subject key identifier: 66:B3:7B:D8:2D:8F:2E:D9:DD:21:75:17:E3:9C:10:A0:88:30:EA:17 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3444F61CA5B1AD8A28A2C1072B2AA72619EBE552 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS142999.roa Signing time: Wed 04 Mar 2026 06:05:39 +0000 ROA not before: Wed 04 Mar 2026 06:00:39 +0000 ROA not after: Wed 03 Mar 2027 06:05:39 +0000 asID: 142999 IP address blocks: 240a:a15d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:44:f6:1c:a5:b1:ad:8a:28:a2:c1:07:2b:2a:a7:26:19:eb:e5:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:39 2026 GMT Not After : Mar 3 06:05:39 2027 GMT Subject: CN=66B37BD82D8F2ED9DD217517E39C10A08830EA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:f8:a9:74:ab:d7:47:ec:f8:a7:4a:55:c2: 88:d3:c5:70:d7:56:9f:72:1a:a7:15:b3:cf:8d:71: 8a:f0:80:6e:2b:2e:ed:ce:ef:ad:56:68:e4:2c:87: fa:6a:ae:4c:7a:10:06:79:b8:7f:9f:29:13:1b:60: bb:0d:41:dd:5d:2c:91:73:1f:86:07:3d:5e:eb:9e: de:52:8d:0b:31:23:eb:79:da:d6:9f:da:e2:7f:bd: 9a:f1:65:00:35:e2:43:16:0f:84:15:d6:ef:5d:52: ab:b3:a7:ad:d9:74:ce:46:53:69:81:e2:c3:8f:0c: 65:e5:a2:cc:a4:62:8c:d7:82:b4:76:fe:0c:ab:7e: 38:42:ff:10:ad:8e:7f:1e:ed:8a:79:60:d1:a2:5b: 77:5d:8d:93:18:dd:5a:d4:30:2f:b3:d5:b8:93:ab: 85:e4:57:70:95:84:50:56:30:06:2a:5f:cb:d4:b9: 91:d0:4c:79:44:a1:8e:ad:b2:e3:60:b9:48:8a:52: a9:57:8f:8d:ae:71:fc:03:89:eb:a6:ba:58:c0:a5: 1f:a6:27:35:a2:89:c2:5f:d0:94:8b:59:3e:a9:48: 2a:87:84:d3:ee:55:25:4e:9b:49:81:f0:78:67:b9: 47:2f:3e:10:db:8f:5c:38:32:27:78:fd:5b:e2:df: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B3:7B:D8:2D:8F:2E:D9:DD:21:75:17:E3:9C:10:A0:88:30:EA:17 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS142999.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a15d::/32 Signature Algorithm: sha256WithRSAEncryption 64:30:b5:b2:2c:e5:94:8f:0c:f9:c3:78:bc:ef:83:9f:fa:e0: 82:31:d3:ea:d7:fe:f1:fd:3f:0f:0d:9f:fc:ef:51:50:6c:90: 7c:b5:0b:b9:ef:1d:0f:ca:87:1d:f4:be:62:4d:52:0e:70:8b: db:e7:af:e1:56:8d:15:4e:9d:a0:d8:84:32:dd:88:88:60:18: e6:b5:3f:46:a7:e1:f6:53:27:22:8a:f3:9f:b7:05:8c:44:00: f4:ab:1e:67:08:e0:e6:8b:7c:16:bb:2d:ba:89:82:86:b6:bb: da:db:cb:34:4a:4f:ad:dd:3a:56:00:47:77:4b:73:6e:66:1e: a6:18:82:c9:2d:06:b5:e2:1a:ba:ee:f6:51:1b:ae:c0:79:7a: bf:8c:e8:c5:b7:0b:fa:be:b9:98:ae:b7:8e:34:eb:f5:a5:e1: ce:44:36:d2:70:0e:87:89:c8:92:91:f5:4e:47:37:53:58:be: c9:39:65:c6:9c:a0:8f:69:a7:2c:51:52:40:0b:d5:85:55:1f: cf:72:71:34:7a:21:4b:78:d5:bc:83:9b:ae:ba:45:ba:6d:4d: c0:46:d3:55:da:b1:1d:a3:70:94:5e:92:a8:de:12:b2:17:90: 28:64:f6:f3:a0:3c:2b:f1:b8:78:19:d9:ed:5e:10:ec:55:2e: 9a:fb:39:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNET2HKWxrYooosEHKyqnJhnr5VIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDAzOVoX DTI3MDMwMzA2MDUzOVowMzExMC8GA1UEAxMoNjZCMzdCRDgyRDhGMkVEOUREMjE3 NTE3RTM5QzEwQTA4ODMwRUExNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRq+Kl0q9dH7PinSlXCiNPFcNdWn3IapxWzz41xivCAbisu7c7vrVZo5CyH +mquTHoQBnm4f58pExtguw1B3V0skXMfhgc9Xuue3lKNCzEj63na1p/a4n+9mvFl ADXiQxYPhBXW711Sq7Onrdl0zkZTaYHiw48MZeWizKRijNeCtHb+DKt+OEL/EK2O fx7tinlg0aJbd12NkxjdWtQwL7PVuJOrheRXcJWEUFYwBipfy9S5kdBMeUShjq2y 42C5SIpSqVePja5x/AOJ66a6WMClH6YnNaKJwl/QlItZPqlIKoeE0+5VJU6bSYHw eGe5Ry8+ENuPXDgyJ3j9W+Lf51ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRms3vY LY8u2d0hdRfjnBCgiDDqFzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0Mjk5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oV0wDQYJKoZIhvcNAQELBQADggEBAGQwtbIs5ZSPDPnDeLzvg5/64IIx0+rX/vH9 Pw8Nn/zvUVBskHy1C7nvHQ/Khx30vmJNUg5wi9vnr+FWjRVOnaDYhDLdiIhgGOa1 P0an4fZTJyKK85+3BYxEAPSrHmcI4OaLfBa7LbqJgoa2u9rbyzRKT63dOlYAR3dL c25mHqYYgsktBrXiGrru9lEbrsB5er+M6MW3C/q+uZiut4406/Wl4c5ENtJwDoeJ yJKR9U5HN1NYvsk5ZcacoI9ppyxRUkAL1YVVH89ycTR6IUt41byDm666RbptTcBG 01XasR2jcJRekqjeErIXkChk9vOgPCvxuHgZ2e1eEOxVLpr7OVE= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:35 2026 by rpki-client