$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144004.roa File: AS144004.roa (raw, json) Hash identifier: 9rqf6iWFB0DEypf//BzPJzN+ys1lmMU00H9s+3iL/b4= Subject key identifier: D7:55:3B:0C:ED:E9:84:7F:63:92:5E:9C:34:0B:3D:D7:AD:8F:EB:7E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 54AA03A6CAF09E4C1718CA922971BDA5DBD36B39 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144004.roa Signing time: Wed 04 Mar 2026 06:14:10 +0000 ROA not before: Wed 04 Mar 2026 06:09:10 +0000 ROA not after: Wed 03 Mar 2027 06:14:10 +0000 asID: 144004 IP address blocks: 240a:a54a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:aa:03:a6:ca:f0:9e:4c:17:18:ca:92:29:71:bd:a5:db:d3:6b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:10 2026 GMT Not After : Mar 3 06:14:10 2027 GMT Subject: CN=D7553B0CEDE9847F63925E9C340B3DD7AD8FEB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:5d:4d:a0:2f:35:01:95:a8:5f:3f:e0:77: d4:1a:86:d0:30:c6:59:fc:36:a5:8b:a4:90:16:63: cf:c8:2d:1a:e8:77:e2:43:df:8f:36:31:e9:00:bd: 00:fe:0e:88:2e:01:2d:92:ef:6a:67:fa:4d:b2:45: 34:78:47:9d:b3:4f:43:03:ee:a5:10:68:3a:16:6a: 37:ce:da:96:11:fa:51:6b:49:b2:de:e4:1a:10:48: 2b:2b:b1:b7:aa:bb:cd:85:0d:df:bc:1b:ff:a5:6d: e1:91:e1:9c:9d:2c:8d:77:28:5e:bd:a8:83:d4:52: b3:96:88:f3:5b:b5:45:0b:15:e0:4f:1a:c4:c8:70: e6:d8:7b:02:0e:12:1c:52:9b:67:b5:8b:31:8e:21: 84:86:b8:ca:06:69:0c:eb:02:e4:7d:89:d2:bc:07: 4e:a3:1d:55:4a:1d:41:95:00:2c:a5:02:1a:1c:7b: ba:83:52:f2:06:b0:0b:9f:6f:18:76:6a:14:f0:04: 26:63:6d:0e:99:9b:b7:39:ac:8f:ce:9b:75:d1:b7: 5c:ae:9f:26:1b:f8:d3:60:67:73:07:5a:c8:61:37: b0:f6:dc:3c:c6:ae:95:b4:4d:d4:4f:b1:b5:37:c5: 03:ac:4e:40:10:a0:9f:19:2d:f9:25:70:d7:6b:2b: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:55:3B:0C:ED:E9:84:7F:63:92:5E:9C:34:0B:3D:D7:AD:8F:EB:7E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144004.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a54a::/32 Signature Algorithm: sha256WithRSAEncryption 67:0e:6c:76:63:5b:61:57:1a:ed:fe:b6:92:08:0a:13:be:ac: cb:a0:fb:25:3a:11:54:38:08:32:cb:bb:b4:26:bb:d2:10:ca: e9:09:e5:ab:ed:76:a7:d1:2a:3a:5b:97:b3:ef:d1:9f:23:81: 02:7b:e8:e5:17:a2:44:15:5f:db:8f:7d:f4:3e:36:72:a0:e7: d3:5d:8e:b0:6f:b9:a9:5d:0f:5b:ba:72:16:84:f1:1c:7f:02: d3:df:7a:39:2b:ca:80:c9:3b:0c:36:50:5c:6f:b2:54:31:9e: 1d:7a:cb:52:40:29:2e:c4:58:1a:85:04:c8:b1:4a:b4:90:98: b9:4b:e8:1d:b8:38:e6:81:ae:50:49:1f:1e:67:36:6d:7f:93: ed:ad:72:c8:35:af:41:c5:b7:be:d8:e8:50:43:a6:5f:c0:fa: 03:98:b9:bb:ed:d7:b1:fb:1d:e1:a3:93:57:f6:a8:cf:80:97: fe:30:3d:1b:05:18:33:1c:69:95:71:ee:40:3b:8a:5d:fb:55: 01:e4:fc:f1:19:87:3f:7b:ee:f2:8d:85:ee:e2:b4:e1:8b:7d: c8:d7:af:64:db:fe:09:b2:24:95:d9:d2:aa:40:e7:b5:02:5f: f9:c0:d5:a3:16:5c:21:e2:1c:07:c0:87:1f:85:fc:db:52:35: 9c:23:45:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVKoDpsrwnkwXGMqSKXG9pdvTazkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxMFoX DTI3MDMwMzA2MTQxMFowMzExMC8GA1UEAxMoRDc1NTNCMENFREU5ODQ3RjYzOTI1 RTlDMzQwQjNERDdBRDhGRUI3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIJXU2gLzUBlahfP+B31BqG0DDGWfw2pYukkBZjz8gtGuh34kPfjzYx6QC9 AP4OiC4BLZLvamf6TbJFNHhHnbNPQwPupRBoOhZqN87alhH6UWtJst7kGhBIKyux t6q7zYUN37wb/6Vt4ZHhnJ0sjXcoXr2og9RSs5aI81u1RQsV4E8axMhw5th7Ag4S HFKbZ7WLMY4hhIa4ygZpDOsC5H2J0rwHTqMdVUodQZUALKUCGhx7uoNS8gawC59v GHZqFPAEJmNtDpmbtzmsj86bddG3XK6fJhv402BncwdayGE3sPbcPMaulbRN1E+x tTfFA6xOQBCgnxkt+SVw12srRt0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTXVTsM 7emEf2OSXpw0Cz3XrY/rfjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pUowDQYJKoZIhvcNAQELBQADggEBAGcObHZjW2FXGu3+tpIIChO+rMug+yU6EVQ4 CDLLu7Qmu9IQyukJ5avtdqfRKjpbl7Pv0Z8jgQJ76OUXokQVX9uPffQ+NnKg59Nd jrBvualdD1u6chaE8Rx/AtPfejkryoDJOww2UFxvslQxnh16y1JAKS7EWBqFBMix SrSQmLlL6B24OOaBrlBJHx5nNm1/k+2tcsg1r0HFt77Y6FBDpl/A+gOYubvt17H7 HeGjk1f2qM+Al/4wPRsFGDMcaZVx7kA7il37VQHk/PEZhz977vKNhe7itOGLfcjX r2Tb/gmyJJXZ0qpA57UCX/nA1aMWXCHiHAfAhx+F/NtSNZwjRf4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:51 2026 by rpki-client