$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144019.roa File: AS144019.roa (raw, json) Hash identifier: eFYBQz1XOKpy4DrdVxNOo0+RX5K0wSTk8rkQ80dgiuY= Subject key identifier: 7B:A3:A6:E5:A6:6B:E0:43:71:64:E7:70:5B:F7:4B:48:A1:8C:BD:75 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3329EE341A19D91A515EE81CC40A4BA64C75D442 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144019.roa Signing time: Wed 04 Mar 2026 06:15:42 +0000 ROA not before: Wed 04 Mar 2026 06:10:42 +0000 ROA not after: Wed 03 Mar 2027 06:15:42 +0000 asID: 144019 IP address blocks: 240a:a559::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:29:ee:34:1a:19:d9:1a:51:5e:e8:1c:c4:0a:4b:a6:4c:75:d4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:42 2026 GMT Not After : Mar 3 06:15:42 2027 GMT Subject: CN=7BA3A6E5A66BE0437164E7705BF74B48A18CBD75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0b:ba:09:5b:37:f3:65:38:09:12:67:fa:7a: ac:29:c3:44:4c:28:5d:3e:c0:fe:0b:b9:f9:bc:f1: b1:55:0e:ba:57:15:0d:1c:17:e6:96:f6:f1:25:f5: 9c:3e:f7:6e:30:42:ef:fc:9a:51:be:a2:e5:c7:f6: 66:20:e9:cc:ea:b4:6a:90:79:5b:06:cb:3e:50:93: aa:bc:6c:b2:3f:7f:a4:7a:18:60:74:2e:bd:59:cb: e1:d0:f6:a0:66:61:21:1e:99:10:14:aa:fd:42:15: 55:30:45:ff:5e:54:11:81:3a:1b:ad:07:50:40:82: 60:aa:42:bb:29:d0:13:b5:8a:e3:cd:53:ea:e4:8e: 6e:aa:fe:7a:fc:8b:8e:e7:5b:60:19:e5:42:ab:0f: e8:a2:50:c7:0e:36:ee:23:b6:74:86:66:4d:1b:a0: 58:c8:e4:bc:4b:a2:70:b6:36:e1:f7:c2:b7:6a:28: d5:cc:42:c8:9d:85:ed:da:0a:c7:29:0f:eb:40:a2: 2a:c4:76:75:72:c0:25:e5:68:fc:53:fa:a9:3c:0c: 30:68:18:9c:26:2a:bf:b4:99:f9:26:f4:42:fb:8a: b7:83:2f:94:2b:f7:0f:a4:8d:e2:33:76:8a:4e:a9: 29:26:c4:59:c1:7b:db:db:7d:9c:d1:a2:8d:06:65: 59:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A3:A6:E5:A6:6B:E0:43:71:64:E7:70:5B:F7:4B:48:A1:8C:BD:75 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a559::/32 Signature Algorithm: sha256WithRSAEncryption 2f:24:d3:83:d1:23:b4:a5:12:1a:0a:29:b9:06:5c:64:92:68: 45:91:31:b2:21:b2:74:e6:b2:4f:7e:6e:4d:11:b5:0a:e3:3a: 3e:fe:be:e3:56:47:16:9b:f7:91:7d:2f:99:9e:36:df:01:a7: b6:f1:9d:ca:8c:c5:7b:66:2f:d9:c5:95:ce:d0:73:74:a8:48: 5b:72:a4:c4:9f:2a:fb:99:96:dc:a0:ea:0f:f9:f4:22:51:e2: a4:3b:00:ef:07:ae:f6:bf:2b:4b:2d:ad:75:67:56:d4:e7:32: 80:c8:6c:e9:bf:7d:41:7c:ab:be:2c:32:a8:57:10:12:97:42: 4f:40:c6:9a:89:c7:f0:43:1f:70:e4:9b:9b:28:7f:82:18:1f: 16:42:a9:26:c3:1c:d2:ac:17:46:30:08:9c:47:3d:c1:64:d0: d9:00:11:cd:02:d3:ce:d2:22:17:53:d7:38:d0:b8:8d:0e:ff: 05:07:e8:07:08:00:94:a6:1b:9c:a8:d9:10:72:94:ff:88:06: 35:66:6c:24:0d:44:e8:f3:f4:e7:e2:fd:15:7f:f0:14:76:4c: 54:3b:20:2f:1d:5b:aa:3b:41:a5:56:39:94:5d:35:ab:75:7e: 17:6c:9d:70:bd:ef:9e:20:57:7a:ce:96:3e:4c:56:2e:ec:0f: 65:41:ab:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMynuNBoZ2RpRXugcxApLpkx11EIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0MloX DTI3MDMwMzA2MTU0MlowMzExMC8GA1UEAxMoN0JBM0E2RTVBNjZCRTA0MzcxNjRF NzcwNUJGNzRCNDhBMThDQkQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0LuglbN/NlOAkSZ/p6rCnDREwoXT7A/gu5+bzxsVUOulcVDRwX5pb28SX1 nD73bjBC7/yaUb6i5cf2ZiDpzOq0apB5WwbLPlCTqrxssj9/pHoYYHQuvVnL4dD2 oGZhIR6ZEBSq/UIVVTBF/15UEYE6G60HUECCYKpCuynQE7WK481T6uSObqr+evyL judbYBnlQqsP6KJQxw427iO2dIZmTRugWMjkvEuicLY24ffCt2oo1cxCyJ2F7doK xykP60CiKsR2dXLAJeVo/FP6qTwMMGgYnCYqv7SZ+Sb0QvuKt4MvlCv3D6SN4jN2 ik6pKSbEWcF729t9nNGijQZlWf0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR7o6bl pmvgQ3Fk53Bb90tIoYy9dTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pVkwDQYJKoZIhvcNAQELBQADggEBAC8k04PRI7SlEhoKKbkGXGSSaEWRMbIhsnTm sk9+bk0RtQrjOj7+vuNWRxab95F9L5meNt8Bp7bxncqMxXtmL9nFlc7Qc3SoSFty pMSfKvuZltyg6g/59CJR4qQ7AO8Hrva/K0strXVnVtTnMoDIbOm/fUF8q74sMqhX EBKXQk9AxpqJx/BDH3Dkm5sof4IYHxZCqSbDHNKsF0YwCJxHPcFk0NkAEc0C087S IhdT1zjQuI0O/wUH6AcIAJSmG5yo2RBylP+IBjVmbCQNROjz9Ofi/RV/8BR2TFQ7 IC8dW6o7QaVWOZRdNat1fhdsnXC9754gV3rOlj5MVi7sD2VBqy0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:26 2026 by rpki-client