$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144069.roa File: AS144069.roa (raw, json) Hash identifier: NgzR3R4KzJIqVZuqCxCCwzfDjXTA0GvRZz9+LuHH36k= Subject key identifier: 82:1F:DB:6D:38:7D:8C:C6:83:74:16:A6:79:96:34:13:9E:23:E4:75 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0CB9D965E1844C427CD2B077822F296ABFFC7717 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144069.roa Signing time: Wed 04 Mar 2026 06:15:03 +0000 ROA not before: Wed 04 Mar 2026 06:10:03 +0000 ROA not after: Wed 03 Mar 2027 06:15:03 +0000 asID: 144069 IP address blocks: 240a:a58b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b9:d9:65:e1:84:4c:42:7c:d2:b0:77:82:2f:29:6a:bf:fc:77:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:03 2026 GMT Not After : Mar 3 06:15:03 2027 GMT Subject: CN=821FDB6D387D8CC6837416A6799634139E23E475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:08:d5:08:5c:27:39:9c:c1:20:9d:33:04:02: b8:42:7f:9b:1a:d8:3c:f9:a1:14:a8:27:d7:b4:9a: 99:42:39:6d:1a:88:a5:a5:85:68:ac:3a:93:d9:a7: 62:7e:af:5b:fd:d7:c2:3f:00:5c:72:75:71:2c:fc: 92:31:8c:a2:24:4d:40:5e:fc:56:ac:80:6e:8d:ea: cb:32:bc:bf:44:ce:14:88:32:6b:c3:91:75:b3:91: 2c:f4:99:98:3f:28:c2:61:d1:54:53:9a:07:55:3e: 00:90:bd:9b:03:5c:b2:f0:e6:bc:48:29:a9:33:b3: f9:c8:54:88:44:a9:55:d6:32:8f:17:90:0c:2c:42: aa:cf:5d:0f:d4:56:54:3f:b3:16:33:d9:93:d3:61: 48:87:75:bc:da:f4:18:1f:ae:89:6e:cb:23:43:e1: eb:84:a0:63:60:5f:ec:59:6e:b8:dc:42:54:d1:f5: 59:6b:91:1d:ce:aa:7d:9a:b7:9e:35:2a:a2:ba:dc: 70:95:32:14:44:54:01:27:f4:69:43:00:fa:fd:3d: 11:e4:9f:5f:d3:dc:25:3b:cc:9d:d8:57:c2:92:0e: 8b:44:a0:af:07:12:d1:e6:dd:a9:f9:9c:e5:a8:09: 68:27:98:72:e0:65:69:c4:d3:fe:9d:9f:0e:09:24: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1F:DB:6D:38:7D:8C:C6:83:74:16:A6:79:96:34:13:9E:23:E4:75 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144069.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a58b::/32 Signature Algorithm: sha256WithRSAEncryption a9:34:32:ba:34:d3:83:13:06:19:dc:9e:ae:9c:71:46:9d:11: dc:d7:c9:f1:9d:0f:81:7a:80:7b:ae:fd:93:fc:7f:fb:e9:d3: 0a:1a:ee:5c:93:f4:86:e4:60:c2:87:38:f2:d1:67:81:2f:f2: 48:6d:85:cc:50:63:2a:9d:01:10:5c:aa:4a:15:b8:4e:e7:c6: 28:57:24:d8:30:2a:e7:bf:41:ea:d4:53:df:22:fa:de:8e:a9: e5:19:ae:57:43:35:6e:5c:82:12:7f:a9:96:08:44:44:f7:48: 82:91:91:8a:b5:a0:5d:06:90:50:ab:1b:19:54:4b:58:c5:6d: e3:93:a5:3e:7d:45:42:fb:4f:87:cd:59:7c:8f:92:2c:35:66: 08:bb:a7:da:35:c7:c1:22:4f:4f:de:e8:08:55:70:68:1d:fa: d9:5f:58:97:99:9b:77:a5:f0:87:b4:7f:b6:53:80:a3:ee:fa: 6a:87:f3:6c:54:dd:65:21:9f:0e:f9:84:0f:aa:2c:eb:e9:7f: fd:e1:84:f1:2f:89:0e:66:c8:0e:02:df:8b:b0:0e:e0:06:39: 65:a7:80:d9:91:70:51:3b:c2:ff:b9:fa:c5:56:51:10:a0:39: 94:9e:98:34:0f:66:24:c5:c9:cd:cb:29:95:c1:aa:5d:1a:6b: ae:c8:cf:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDLnZZeGETEJ80rB3gi8par/8dxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwM1oX DTI3MDMwMzA2MTUwM1owMzExMC8GA1UEAxMoODIxRkRCNkQzODdEOENDNjgzNzQx NkE2Nzk5NjM0MTM5RTIzRTQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIgI1QhcJzmcwSCdMwQCuEJ/mxrYPPmhFKgn17SamUI5bRqIpaWFaKw6k9mn Yn6vW/3Xwj8AXHJ1cSz8kjGMoiRNQF78VqyAbo3qyzK8v0TOFIgya8ORdbORLPSZ mD8owmHRVFOaB1U+AJC9mwNcsvDmvEgpqTOz+chUiESpVdYyjxeQDCxCqs9dD9RW VD+zFjPZk9NhSId1vNr0GB+uiW7LI0Ph64SgY2Bf7FluuNxCVNH1WWuRHc6qfZq3 njUqorrccJUyFERUASf0aUMA+v09EeSfX9PcJTvMndhXwpIOi0SgrwcS0ebdqfmc 5agJaCeYcuBlacTT/p2fDgkktx0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSCH9tt OH2MxoN0FqZ5ljQTniPkdTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pYswDQYJKoZIhvcNAQELBQADggEBAKk0Mro004MTBhncnq6ccUadEdzXyfGdD4F6 gHuu/ZP8f/vp0woa7lyT9IbkYMKHOPLRZ4Ev8khthcxQYyqdARBcqkoVuE7nxihX JNgwKue/QerUU98i+t6OqeUZrldDNW5cghJ/qZYIRET3SIKRkYq1oF0GkFCrGxlU S1jFbeOTpT59RUL7T4fNWXyPkiw1Zgi7p9o1x8EiT0/e6AhVcGgd+tlfWJeZm3el 8Ie0f7ZTgKPu+mqH82xU3WUhnw75hA+qLOvpf/3hhPEviQ5myA4C34uwDuAGOWWn gNmRcFE7wv+5+sVWURCgOZSemDQPZiTFyc3LKZXBql0aa67Izx4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:02 2026 by rpki-client