$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144066.roa File: AS144066.roa (raw, json) Hash identifier: /yaxy+5a4jyuN9ljeRgZ+elDF3Iw3qSGqLjU7icmvPc= Subject key identifier: 13:FD:ED:F6:99:00:A7:3F:B5:8B:20:33:63:A9:1A:3F:08:E8:82:D0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5CF8FEE708F176B629D8F28DA2334E78DFD0368B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144066.roa Signing time: Wed 04 Mar 2026 06:12:53 +0000 ROA not before: Wed 04 Mar 2026 06:07:53 +0000 ROA not after: Wed 03 Mar 2027 06:12:53 +0000 asID: 144066 IP address blocks: 240a:a588::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f8:fe:e7:08:f1:76:b6:29:d8:f2:8d:a2:33:4e:78:df:d0:36:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:53 2026 GMT Not After : Mar 3 06:12:53 2027 GMT Subject: CN=13FDEDF69900A73FB58B203363A91A3F08E882D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:c7:43:51:ea:43:43:65:19:73:88:00:aa: 7c:e6:bc:b7:76:dc:96:1b:1e:e4:65:48:4b:9e:86: 08:ed:c8:3f:e0:70:9a:94:6c:f3:b4:44:83:2f:fd: 9b:ca:ac:37:3e:a0:39:d5:6d:36:f5:ff:8f:7d:43: 9c:4f:ec:98:97:c3:5a:5b:18:41:11:c7:ed:16:e5: 1e:fd:50:26:8a:b3:9b:48:ec:b5:32:9d:48:78:f9: d9:81:5e:9c:be:d0:3c:27:03:5b:86:76:59:b8:3e: 70:24:89:9f:15:ba:28:57:0b:d7:eb:5d:7d:ec:37: f1:80:46:05:5d:f4:e9:1f:46:16:97:14:e3:4e:80: 57:9c:0b:be:59:00:3f:7f:4f:3f:56:fa:95:e4:fa: e0:ca:df:16:33:da:ab:22:80:f3:2c:71:a8:88:32: dd:58:cf:88:a6:5b:21:b0:62:f6:8c:d2:0d:5d:97: 09:57:97:09:4f:ab:3f:67:10:16:cf:84:4b:ea:d4: d2:54:17:45:8c:f0:b4:9d:e6:b4:0b:83:c1:71:ec: a0:e6:52:f0:fd:de:12:77:ee:c7:ca:06:05:d7:5b: 70:ee:4a:7d:50:5b:07:05:39:ad:51:78:69:eb:f8: 40:8b:62:3c:f0:22:1c:6a:75:23:13:5c:3b:c5:67: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FD:ED:F6:99:00:A7:3F:B5:8B:20:33:63:A9:1A:3F:08:E8:82:D0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a588::/32 Signature Algorithm: sha256WithRSAEncryption c5:2c:30:a3:a6:86:2e:e1:11:4b:83:42:bc:0a:a8:a4:51:d4: 6e:0b:13:41:ed:5a:2a:2a:cf:35:2e:81:6b:22:93:68:c0:b7: 0e:92:2d:54:77:78:ee:3e:3c:79:f0:85:23:87:2d:41:4e:2e: cb:03:1e:14:ab:e3:bd:0e:a5:17:2c:bb:c0:db:26:2c:3e:bb: 21:16:99:38:d4:e0:78:5b:59:df:53:b3:9b:50:84:d5:8d:4a: 5e:41:1d:12:f7:f8:31:44:99:cd:84:d5:77:a2:41:0f:1f:44: ac:7d:54:32:e2:74:de:47:94:90:20:0a:b7:9a:fe:55:23:94: 6e:b9:c1:61:d6:d2:83:ca:d8:01:8e:36:d8:36:de:21:d4:08: 28:6e:23:e5:76:f9:b7:6d:3c:25:8a:a2:f7:98:92:db:16:86: 8f:c0:79:19:fa:a8:01:d5:2a:d2:9b:b9:08:85:66:dd:c0:48: ab:eb:01:7e:97:aa:6e:7d:8a:5a:e0:c2:5b:ea:c7:98:9f:19: b7:0d:c6:16:20:ab:ef:df:bb:f9:7c:80:9b:68:f2:86:6e:2f: 92:3f:7c:ec:4c:79:f2:fd:e9:3b:db:c2:04:29:27:a7:92:fb: e7:3b:0a:f5:71:86:16:b4:a2:34:dc:d0:25:f6:2b:82:be:91: 00:d4:9a:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXPj+5wjxdrYp2PKNojNOeN/QNoswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1M1oX DTI3MDMwMzA2MTI1M1owMzExMC8GA1UEAxMoMTNGREVERjY5OTAwQTczRkI1OEIy MDMzNjNBOTFBM0YwOEU4ODJEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIvx0NR6kNDZRlziACqfOa8t3bclhse5GVIS56GCO3IP+BwmpRs87REgy/9 m8qsNz6gOdVtNvX/j31DnE/smJfDWlsYQRHH7RblHv1QJoqzm0jstTKdSHj52YFe nL7QPCcDW4Z2Wbg+cCSJnxW6KFcL1+tdfew38YBGBV306R9GFpcU406AV5wLvlkA P39PP1b6leT64MrfFjPaqyKA8yxxqIgy3VjPiKZbIbBi9ozSDV2XCVeXCU+rP2cQ Fs+ES+rU0lQXRYzwtJ3mtAuDwXHsoOZS8P3eEnfux8oGBddbcO5KfVBbBwU5rVF4 aev4QItiPPAiHGp1IxNcO8VnYlcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQT/e32 mQCnP7WLIDNjqRo/COiC0DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pYgwDQYJKoZIhvcNAQELBQADggEBAMUsMKOmhi7hEUuDQrwKqKRR1G4LE0HtWioq zzUugWsik2jAtw6SLVR3eO4+PHnwhSOHLUFOLssDHhSr470OpRcsu8DbJiw+uyEW mTjU4HhbWd9Ts5tQhNWNSl5BHRL3+DFEmc2E1XeiQQ8fRKx9VDLidN5HlJAgCrea /lUjlG65wWHW0oPK2AGONtg23iHUCChuI+V2+bdtPCWKoveYktsWho/AeRn6qAHV KtKbuQiFZt3ASKvrAX6Xqm59ilrgwlvqx5ifGbcNxhYgq+/fu/l8gJto8oZuL5I/ fOxMefL96TvbwgQpJ6eS++c7CvVxhha0ojTc0CX2K4K+kQDUmp8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:35 2026 by rpki-client