$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144042.roa File: AS144042.roa (raw, json) Hash identifier: /qceuz3zlzMwXXwtrRFFk+oLNuZkGvkB1BvgF+QxVS4= Subject key identifier: CE:88:6C:FD:6B:0F:CA:8C:6F:D8:18:19:21:CB:C3:78:6D:8B:28:7A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 546ECFD76B7BA451BE697C9F21CAFC0796EB7B7D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144042.roa Signing time: Wed 04 Mar 2026 06:15:43 +0000 ROA not before: Wed 04 Mar 2026 06:10:43 +0000 ROA not after: Wed 03 Mar 2027 06:15:43 +0000 asID: 144042 IP address blocks: 240a:a570::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6e:cf:d7:6b:7b:a4:51:be:69:7c:9f:21:ca:fc:07:96:eb:7b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:43 2026 GMT Not After : Mar 3 06:15:43 2027 GMT Subject: CN=CE886CFD6B0FCA8C6FD8181921CBC3786D8B287A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:36:16:77:67:c5:d7:f5:49:9e:7c:34:5f: a0:6f:94:33:4a:9c:d8:8c:5b:2a:af:6f:d4:e9:a8: 3e:72:1b:ea:e1:1c:8f:f6:f1:a9:ae:91:55:be:cb: dc:b5:c3:6b:68:55:4b:52:d6:16:3a:3d:c9:09:71: a2:04:c6:0a:b1:e8:e9:df:22:25:fd:ad:a3:52:67: 0f:65:e3:fc:8e:e5:67:4c:b0:09:85:d4:84:3f:9b: 96:7e:de:ef:66:93:e1:fc:79:e1:11:66:d6:8b:81: 9d:3c:27:e7:6b:ec:4b:a6:30:a0:30:d2:a0:48:b9: 3b:d4:c6:9a:b8:df:64:ec:b7:f1:fa:26:b3:a3:e1: 11:2a:2e:20:47:95:e4:80:00:2d:3e:05:04:8e:c0: b1:0a:6c:e1:d5:73:96:5c:a9:3e:46:75:06:f2:22: 63:aa:60:59:ff:f1:ff:e4:3b:6f:e9:07:67:0d:ba: c3:ec:7b:d1:e5:9d:06:0e:bc:bd:83:9d:ce:67:69: 17:f8:29:1b:ec:0c:b1:e0:33:9e:f8:a8:6c:97:5c: 80:e2:12:cd:d7:fc:c3:3e:7c:b8:40:5d:e7:d1:fa: 22:45:04:48:31:45:77:3d:0b:9b:d3:71:46:3e:60: 06:27:22:c5:c4:1f:6d:c2:7f:9e:a7:9f:a3:49:5d: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:88:6C:FD:6B:0F:CA:8C:6F:D8:18:19:21:CB:C3:78:6D:8B:28:7A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a570::/32 Signature Algorithm: sha256WithRSAEncryption 98:28:f9:b0:c8:e6:93:b2:14:06:22:84:c7:c3:33:ef:ed:78: ad:6f:3a:0d:53:9a:d1:d6:bd:63:2a:d4:27:ff:13:7a:bf:f8: 28:5f:ed:f2:d0:ab:e9:de:97:47:43:77:65:16:1a:45:a4:3b: bf:8e:0b:3b:95:72:8c:d6:60:92:b2:80:a9:62:79:fe:83:5a: 9d:ad:b3:5e:8d:47:0e:c0:e3:84:9c:1f:af:7e:36:7f:16:2e: 3a:a2:96:23:20:60:fe:41:29:7a:c2:85:ce:5d:69:af:ab:74: 33:e0:6e:4c:c6:0c:38:2e:4f:63:93:1e:72:4d:af:85:7b:bb: 18:40:8d:1f:2d:0d:cd:dc:cb:7c:50:17:b8:af:92:92:ac:39: 31:ab:a8:8e:c3:66:30:86:b5:ce:5c:da:28:c8:f3:d8:1a:bb: b6:71:16:1c:8a:42:90:9d:a9:ca:e0:03:ec:15:c5:91:e9:ec: 36:d9:3c:6a:a3:cb:fc:8f:75:57:a5:4e:85:a4:f6:f2:eb:e8: 77:e8:9e:9c:8d:70:ce:d0:d7:ae:07:5e:8d:1f:63:5b:26:43: 8f:f1:63:8b:ab:63:86:29:d5:c2:dc:ef:d7:20:35:68:64:9d: 9c:b5:12:bb:41:28:07:32:d7:19:81:08:66:8b:79:f4:af:4c: 97:8f:0f:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVG7P12t7pFG+aXyfIcr8B5bre30wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0M1oX DTI3MDMwMzA2MTU0M1owMzExMC8GA1UEAxMoQ0U4ODZDRkQ2QjBGQ0E4QzZGRDgx ODE5MjFDQkMzNzg2RDhCMjg3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIQNhZ3Z8XX9UmefDRfoG+UM0qc2IxbKq9v1OmoPnIb6uEcj/bxqa6RVb7L 3LXDa2hVS1LWFjo9yQlxogTGCrHo6d8iJf2to1JnD2Xj/I7lZ0ywCYXUhD+bln7e 72aT4fx54RFm1ouBnTwn52vsS6YwoDDSoEi5O9TGmrjfZOy38foms6PhESouIEeV 5IAALT4FBI7AsQps4dVzllypPkZ1BvIiY6pgWf/x/+Q7b+kHZw26w+x70eWdBg68 vYOdzmdpF/gpG+wMseAznviobJdcgOISzdf8wz58uEBd59H6IkUESDFFdz0Lm9Nx Rj5gBicixcQfbcJ/nqefo0ldVwECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTOiGz9 aw/KjG/YGBkhy8N4bYsoejAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pXAwDQYJKoZIhvcNAQELBQADggEBAJgo+bDI5pOyFAYihMfDM+/teK1vOg1TmtHW vWMq1Cf/E3q/+Chf7fLQq+nel0dDd2UWGkWkO7+OCzuVcozWYJKygKlief6DWp2t s16NRw7A44ScH69+Nn8WLjqiliMgYP5BKXrChc5daa+rdDPgbkzGDDguT2OTHnJN r4V7uxhAjR8tDc3cy3xQF7ivkpKsOTGrqI7DZjCGtc5c2ijI89gau7ZxFhyKQpCd qcrgA+wVxZHp7DbZPGqjy/yPdVelToWk9vLr6HfonpyNcM7Q164HXo0fY1smQ4/x Y4urY4Yp1cLc79cgNWhknZy1ErtBKAcy1xmBCGaLefSvTJePDy8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:16 2026 by rpki-client