$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144051.roa File: AS144051.roa (raw, json) Hash identifier: Tbm1x17cRW3/GWFxLl1kv6kQlM3zXGWSMBIS6jzFo4Q= Subject key identifier: 96:72:57:01:B5:19:B7:98:7B:7F:F2:A6:E5:50:8F:72:6E:A0:57:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6A0700D1D43BCEB4F4FA7916DC4A4F895DFB06C2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144051.roa Signing time: Wed 04 Mar 2026 06:12:45 +0000 ROA not before: Wed 04 Mar 2026 06:07:45 +0000 ROA not after: Wed 03 Mar 2027 06:12:45 +0000 asID: 144051 IP address blocks: 240a:a579::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:07:00:d1:d4:3b:ce:b4:f4:fa:79:16:dc:4a:4f:89:5d:fb:06:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:45 2026 GMT Not After : Mar 3 06:12:45 2027 GMT Subject: CN=96725701B519B7987B7FF2A6E5508F726EA05702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:e8:d6:27:0b:81:0c:81:27:7f:81:b9:3e: 4b:2b:3f:30:49:74:05:cc:ac:47:21:84:a3:b3:89: cf:9c:ac:50:f5:57:52:d1:f5:af:04:73:7a:56:7d: 44:2d:34:3d:12:40:12:4b:c9:d0:02:9e:5a:66:ba: 4c:58:54:67:5e:60:ee:5a:cd:82:58:96:d8:70:b6: 3b:ce:ab:95:58:90:91:5d:c2:84:36:a0:ce:70:69: ed:1b:d0:54:84:f5:31:ee:9d:49:b5:cc:00:ee:ea: 70:47:1c:19:0b:d0:f8:38:ad:de:27:de:09:18:14: 93:ec:9a:8a:1b:1f:22:7c:10:db:f8:58:2c:3f:80: 02:d8:5d:a8:8e:c6:a2:5a:7a:cc:b3:8e:41:96:85: 28:ea:13:df:65:45:42:08:38:5a:26:dc:9c:9b:8b: 18:6e:e8:97:49:8b:80:c6:77:f6:cf:f0:b5:26:9f: 7f:24:fd:45:ff:e8:61:c6:1f:50:5a:c4:ae:2e:74: 2d:f4:99:a6:a5:6f:91:75:77:83:e8:1c:e0:b9:ec: 8c:4c:15:e7:eb:3b:69:cc:1c:ff:6e:2f:0c:1b:0b: b0:a6:2a:68:c8:31:df:22:03:0c:c2:3c:12:10:46: 55:97:e9:80:ac:49:38:0c:95:23:c2:c3:4f:4b:68: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:72:57:01:B5:19:B7:98:7B:7F:F2:A6:E5:50:8F:72:6E:A0:57:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144051.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a579::/32 Signature Algorithm: sha256WithRSAEncryption 25:96:e6:b4:5a:e4:a6:7b:32:f4:b5:2b:c6:54:70:db:db:90: 6f:7e:ea:83:e5:d1:4d:ac:f6:92:b6:85:60:7b:bb:63:15:10: ac:8d:f2:71:e2:4f:70:b5:b6:23:7f:7e:92:67:7c:45:5b:39: 96:6e:11:c4:aa:af:ac:1b:39:ae:df:9f:73:69:42:0a:62:90: a7:72:52:61:8c:fe:57:d8:c3:e3:d4:2e:a5:37:45:b4:e0:4a: 11:01:22:90:71:48:db:98:33:83:f6:33:e8:ae:6f:cf:f4:c0: ba:5e:d8:6b:c0:c8:ef:e1:b8:38:50:d9:17:d3:64:69:5c:f5: 14:58:3b:e4:e2:e0:6e:3a:7d:b2:5f:21:44:f3:42:45:f1:bd: 5e:e7:b5:31:e3:8c:2e:86:7a:f8:cb:bd:64:af:fa:c9:cb:bc: eb:f1:b9:cf:47:52:ca:67:b8:0f:9e:98:2d:0d:88:ba:b9:b3: 81:2d:bf:4f:79:2b:33:33:a2:8f:3c:2e:29:6f:03:44:cd:d4: 43:28:80:c9:53:48:ec:5d:da:b9:c2:11:77:5f:7d:8b:96:1c: 25:2b:bc:0f:e4:26:56:93:67:6f:ac:b9:22:4c:bc:ea:54:17: 5e:53:bc:16:e7:88:13:a0:56:40:0c:c9:65:41:2e:7c:a8:ac: a6:2a:30:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUagcA0dQ7zrT0+nkW3EpPiV37BsIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0NVoX DTI3MDMwMzA2MTI0NVowMzExMC8GA1UEAxMoOTY3MjU3MDFCNTE5Qjc5ODdCN0ZG MkE2RTU1MDhGNzI2RUEwNTcwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxn6NYnC4EMgSd/gbk+Sys/MEl0BcysRyGEo7OJz5ysUPVXUtH1rwRzelZ9 RC00PRJAEkvJ0AKeWma6TFhUZ15g7lrNgliW2HC2O86rlViQkV3ChDagznBp7RvQ VIT1Me6dSbXMAO7qcEccGQvQ+Dit3ifeCRgUk+yaihsfInwQ2/hYLD+AAthdqI7G olp6zLOOQZaFKOoT32VFQgg4WibcnJuLGG7ol0mLgMZ39s/wtSaffyT9Rf/oYcYf UFrEri50LfSZpqVvkXV3g+gc4LnsjEwV5+s7acwc/24vDBsLsKYqaMgx3yIDDMI8 EhBGVZfpgKxJOAyVI8LDT0toDXMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSWclcB tRm3mHt/8qblUI9ybqBXAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pXkwDQYJKoZIhvcNAQELBQADggEBACWW5rRa5KZ7MvS1K8ZUcNvbkG9+6oPl0U2s 9pK2hWB7u2MVEKyN8nHiT3C1tiN/fpJnfEVbOZZuEcSqr6wbOa7fn3NpQgpikKdy UmGM/lfYw+PULqU3RbTgShEBIpBxSNuYM4P2M+iub8/0wLpe2GvAyO/huDhQ2RfT ZGlc9RRYO+Ti4G46fbJfIUTzQkXxvV7ntTHjjC6GevjLvWSv+snLvOvxuc9HUspn uA+emC0NiLq5s4Etv095KzMzoo88LilvA0TN1EMogMlTSOxd2rnCEXdffYuWHCUr vA/kJlaTZ2+suSJMvOpUF15TvBbniBOgVkAMyWVBLnyorKYqMDw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:47 2026 by rpki-client