$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144008.roa File: AS144008.roa (raw, json) Hash identifier: 7aSEkHKZtkF9lobCmkC9Dtxm1il+dm2BxAZwj90Au2E= Subject key identifier: 92:24:A7:27:7C:7E:07:71:B3:B1:E3:49:5B:17:E1:77:25:39:B2:EB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7A1F6ED125CDEB8DB1707BE607E852681FE0B80A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144008.roa Signing time: Wed 04 Mar 2026 06:14:11 +0000 ROA not before: Wed 04 Mar 2026 06:09:11 +0000 ROA not after: Wed 03 Mar 2027 06:14:11 +0000 asID: 144008 IP address blocks: 240a:a54e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1f:6e:d1:25:cd:eb:8d:b1:70:7b:e6:07:e8:52:68:1f:e0:b8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:11 2026 GMT Not After : Mar 3 06:14:11 2027 GMT Subject: CN=9224A7277C7E0771B3B1E3495B17E1772539B2EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:92:64:5a:99:2d:61:bb:f8:f1:a4:46:a3:ff: c8:18:bc:ef:b3:a4:49:b8:25:1c:6e:ff:b4:64:45: d8:eb:e8:e2:da:64:59:3b:89:f4:6f:bd:1e:aa:bf: 61:b8:c9:b6:40:e7:9e:7b:f9:3f:29:b0:56:a7:11: ab:df:54:47:53:e1:0b:a4:61:a8:41:51:89:26:75: ca:79:b5:b9:63:20:26:d9:ec:1d:a5:f8:5c:20:08: 6c:f2:f0:6c:ae:03:3b:42:53:67:71:c8:c5:7a:5f: b4:d3:c1:d7:2a:2a:39:b1:73:d2:68:23:34:83:56: ba:31:54:c1:48:25:3b:c8:f0:f1:eb:75:84:9b:e6: 4c:4e:a2:b3:48:99:b4:de:26:78:dd:1f:12:7e:9b: 6e:86:e2:91:97:f5:8f:bf:58:16:48:0e:25:0d:9f: 10:12:df:92:c7:7c:14:7c:2b:0b:f6:aa:5b:0b:f9: 30:fd:a9:7a:1f:6c:1b:6d:89:da:99:d5:22:dc:9d: f6:14:65:9a:ff:5e:0c:5f:1e:e9:b6:39:24:76:54: 60:54:6e:eb:08:00:d6:70:d9:60:7a:e9:bc:49:13: c8:53:bb:ba:be:42:ae:ff:88:91:87:bd:70:42:95: 6a:22:aa:4b:55:a7:73:aa:29:c5:fa:bf:30:87:b2: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:24:A7:27:7C:7E:07:71:B3:B1:E3:49:5B:17:E1:77:25:39:B2:EB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144008.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a54e::/32 Signature Algorithm: sha256WithRSAEncryption 50:bb:23:6d:40:a3:85:9b:32:d3:8c:24:6c:ec:27:7b:1c:5b: 6b:f8:43:88:32:25:1d:73:f3:5d:00:f3:5a:ca:f6:5a:7a:8b: bd:9d:4a:df:11:08:6c:60:a9:fd:ee:63:71:c0:a1:2b:be:cd: 44:54:33:09:da:a5:10:2a:49:74:05:c8:b0:8e:ef:dc:93:5d: 94:9b:b3:0f:72:11:0f:5a:4d:16:2b:3b:8b:93:8f:b0:0b:a4: 51:42:08:5c:24:d8:4c:44:82:dc:26:d2:ae:92:be:c5:1a:a3: 2f:de:19:84:e6:9e:99:3e:45:f2:4c:e9:45:8f:c8:f5:3e:56: d4:55:4a:d3:90:12:0f:96:7c:7b:a4:5b:01:b1:cf:3a:e8:a6: ec:52:53:2a:ad:43:a5:62:0a:a4:80:0c:ca:54:13:69:43:d6: 5e:6b:30:b3:5e:e5:4a:08:71:40:78:0e:db:7e:e3:32:75:f6: f1:92:3a:44:1b:16:18:ad:79:7c:25:82:4d:74:3d:b4:3f:35: 93:b0:0e:31:7f:e2:b4:23:d1:af:2f:0d:d2:fd:73:7a:1e:43: f4:e8:b1:ed:13:b4:13:64:58:df:f7:35:c5:ac:99:f6:bb:85: 41:2d:95:e8:1a:75:b3:0f:ae:f5:f0:2d:b6:ba:2d:5f:2f:04: 08:1c:c7:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeh9u0SXN642xcHvmB+hSaB/guAowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxMVoX DTI3MDMwMzA2MTQxMVowMzExMC8GA1UEAxMoOTIyNEE3Mjc3QzdFMDc3MUIzQjFF MzQ5NUIxN0UxNzcyNTM5QjJFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJWSZFqZLWG7+PGkRqP/yBi877OkSbglHG7/tGRF2Ovo4tpkWTuJ9G+9Hqq/ YbjJtkDnnnv5PymwVqcRq99UR1PhC6RhqEFRiSZ1ynm1uWMgJtnsHaX4XCAIbPLw bK4DO0JTZ3HIxXpftNPB1yoqObFz0mgjNINWujFUwUglO8jw8et1hJvmTE6is0iZ tN4meN0fEn6bbobikZf1j79YFkgOJQ2fEBLfksd8FHwrC/aqWwv5MP2peh9sG22J 2pnVItyd9hRlmv9eDF8e6bY5JHZUYFRu6wgA1nDZYHrpvEkTyFO7ur5Crv+IkYe9 cEKVaiKqS1Wnc6opxfq/MIeyCqUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSJKcn fH4HcbOx40lbF+F3JTmy6zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pU4wDQYJKoZIhvcNAQELBQADggEBAFC7I21Ao4WbMtOMJGzsJ3scW2v4Q4gyJR1z 810A81rK9lp6i72dSt8RCGxgqf3uY3HAoSu+zURUMwnapRAqSXQFyLCO79yTXZSb sw9yEQ9aTRYrO4uTj7ALpFFCCFwk2ExEgtwm0q6SvsUaoy/eGYTmnpk+RfJM6UWP yPU+VtRVStOQEg+WfHukWwGxzzropuxSUyqtQ6ViCqSADMpUE2lD1l5rMLNe5UoI cUB4Dtt+4zJ19vGSOkQbFhiteXwlgk10PbQ/NZOwDjF/4rQj0a8vDdL9c3oeQ/To se0TtBNkWN/3NcWsmfa7hUEtlegadbMPrvXwLba6LV8vBAgcxzU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:48 2026 by rpki-client