$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144091.roa File: AS144091.roa (raw, json) Hash identifier: rtu1W6LuMz7OE6SqPkbGAJc1se5EDMa2euitdCU7qtA= Subject key identifier: C7:25:AF:18:3F:0C:B6:0E:5A:D5:3F:C8:04:1A:D3:40:AB:44:BB:59 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4A21D107F1FE71D6A923D9E91F82C725D2C7EF54 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144091.roa Signing time: Wed 04 Mar 2026 06:14:38 +0000 ROA not before: Wed 04 Mar 2026 06:09:38 +0000 ROA not after: Wed 03 Mar 2027 06:14:38 +0000 asID: 144091 IP address blocks: 240a:a5a1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:21:d1:07:f1:fe:71:d6:a9:23:d9:e9:1f:82:c7:25:d2:c7:ef:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:38 2026 GMT Not After : Mar 3 06:14:38 2027 GMT Subject: CN=C725AF183F0CB60E5AD53FC8041AD340AB44BB59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:a3:69:5c:07:ad:1d:31:64:d8:09:db:a9: a4:0c:6b:53:db:af:21:6e:d1:99:85:5d:8a:c1:76: d0:3d:c6:f5:f6:0d:26:f0:36:ae:9e:32:b5:d1:05: 32:07:bf:b9:1a:d9:c7:bf:48:d9:bc:a1:c7:6a:5b: 11:64:03:e7:27:ca:99:df:c6:ec:53:6b:81:be:98: 38:ed:61:1f:de:10:a3:07:59:fb:a0:46:ca:6e:35: 78:8e:ee:ba:79:16:63:e8:09:aa:c9:67:96:cd:11: e2:90:83:82:2a:af:ef:ed:2e:c0:91:72:a6:9d:8d: a7:02:c2:c0:cc:af:99:ed:ab:f0:ac:a6:6d:3f:90: 0d:94:5f:e5:64:56:8d:5e:8e:dc:cf:43:a6:6e:20: 17:09:0d:bb:ba:54:6f:af:c9:2c:74:2c:3e:ae:51: 14:6a:ac:a1:57:ba:12:b3:df:9f:ce:f8:c5:48:7c: 1b:55:45:1a:1e:03:de:08:fd:8e:38:61:2d:fe:a3: 5b:44:f0:33:6e:74:ab:f1:4d:c0:7a:77:66:c1:cd: fb:ca:39:c9:73:85:00:8f:f9:f1:32:ad:bd:1f:fb: e9:c4:6d:a8:40:1d:b9:b8:55:8a:81:48:b8:5d:ff: 42:cd:1c:e3:e3:b3:27:be:c6:31:ee:bb:97:ee:e1: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:25:AF:18:3F:0C:B6:0E:5A:D5:3F:C8:04:1A:D3:40:AB:44:BB:59 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144091.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5a1::/32 Signature Algorithm: sha256WithRSAEncryption 5c:cb:5e:b2:55:32:7a:69:d6:0c:e7:be:c1:d3:2f:e0:57:bb: 25:ed:21:32:5b:6d:fa:55:dd:ce:ba:35:6c:1b:3d:de:d6:f5: ea:0a:cd:72:40:2e:d5:08:fc:ea:c1:51:72:dc:5d:db:56:b7: c2:3c:54:bf:ea:6d:cd:9f:f5:08:d6:ea:53:9e:93:f2:f7:a2: bd:0a:d1:56:c6:6c:6c:77:7c:7f:20:3d:41:43:9c:1e:6c:6e: f6:98:1a:58:49:a6:e5:7c:46:78:15:ad:37:ed:7a:56:11:6b: cc:f4:26:d5:1e:64:e4:f5:72:5b:76:15:a4:e9:59:f4:5a:37: d7:4f:58:78:33:e4:b3:73:c8:f1:8b:97:14:e7:b2:bb:5f:20: 88:dc:2b:9d:8d:04:91:40:9b:da:05:14:38:80:39:a9:ba:fa: 2a:15:a5:c1:8c:e9:1a:9c:90:b7:bf:fd:20:89:8d:b9:5e:b0: 77:a7:ae:82:95:e1:19:eb:b9:f2:51:89:25:5c:a2:f1:22:e5: d8:8f:c2:8f:2e:d4:ea:82:30:8f:31:f9:29:9c:7f:25:c0:d7: 9b:31:4f:04:74:1a:a7:87:ea:d9:b3:9e:ec:c0:80:1f:bd:8b: d8:e2:c4:d8:2a:7f:5c:b5:c7:a4:aa:7c:e9:bb:d0:9c:c0:6d: b6:2f:a0:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSiHRB/H+cdapI9npH4LHJdLH71QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzOFoX DTI3MDMwMzA2MTQzOFowMzExMC8GA1UEAxMoQzcyNUFGMTgzRjBDQjYwRTVBRDUz RkM4MDQxQUQzNDBBQjQ0QkI1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOno2lcB60dMWTYCduppAxrU9uvIW7RmYVdisF20D3G9fYNJvA2rp4ytdEF Mge/uRrZx79I2byhx2pbEWQD5yfKmd/G7FNrgb6YOO1hH94QowdZ+6BGym41eI7u unkWY+gJqslnls0R4pCDgiqv7+0uwJFypp2NpwLCwMyvme2r8KymbT+QDZRf5WRW jV6O3M9Dpm4gFwkNu7pUb6/JLHQsPq5RFGqsoVe6ErPfn874xUh8G1VFGh4D3gj9 jjhhLf6jW0TwM250q/FNwHp3ZsHN+8o5yXOFAI/58TKtvR/76cRtqEAdubhVioFI uF3/Qs0c4+OzJ77GMe67l+7h6FsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTHJa8Y Pwy2DlrVP8gEGtNAq0S7WTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK paEwDQYJKoZIhvcNAQELBQADggEBAFzLXrJVMnpp1gznvsHTL+BXuyXtITJbbfpV 3c66NWwbPd7W9eoKzXJALtUI/OrBUXLcXdtWt8I8VL/qbc2f9QjW6lOek/L3or0K 0VbGbGx3fH8gPUFDnB5sbvaYGlhJpuV8RngVrTftelYRa8z0JtUeZOT1clt2FaTp WfRaN9dPWHgz5LNzyPGLlxTnsrtfIIjcK52NBJFAm9oFFDiAOam6+ioVpcGM6Rqc kLe//SCJjblesHenroKV4RnrufJRiSVcovEi5diPwo8u1OqCMI8x+SmcfyXA15sx TwR0GqeH6tmznuzAgB+9i9jixNgqf1y1x6SqfOm70JzAbbYvoNE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:23 2026 by rpki-client