$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144095.roa File: AS144095.roa (raw, json) Hash identifier: FQddG6ED+wKg3yh3F6mBHXsVQuYt5Ri3MlFoyvu2Gag= Subject key identifier: 1A:0E:3D:5D:D8:E3:24:79:D3:CE:A2:37:5A:7A:56:75:C0:29:58:E5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7CF367200578BCFA157316E9D37609FF1BE30175 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144095.roa Signing time: Wed 04 Mar 2026 06:15:51 +0000 ROA not before: Wed 04 Mar 2026 06:10:51 +0000 ROA not after: Wed 03 Mar 2027 06:15:51 +0000 asID: 144095 IP address blocks: 240a:a5a5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f3:67:20:05:78:bc:fa:15:73:16:e9:d3:76:09:ff:1b:e3:01:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:51 2026 GMT Not After : Mar 3 06:15:51 2027 GMT Subject: CN=1A0E3D5DD8E32479D3CEA2375A7A5675C02958E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:d5:6f:92:6f:07:0d:3a:82:74:98:8a:37: b4:c0:e3:9d:ff:54:3e:cb:42:f0:08:fd:0e:fa:76: 30:d7:8f:81:85:85:ac:6d:16:d3:e8:f4:7b:ba:17: 96:72:f1:4d:fd:d2:2c:7d:ce:ea:5c:60:fa:e1:a4: 2d:ab:87:37:2a:72:8b:40:bb:01:0b:d2:3a:4b:e0: a0:01:27:85:74:83:af:02:15:e8:ef:4e:77:97:4f: ac:97:f6:56:80:50:cd:a9:a5:ff:6a:e3:83:61:7f: 60:71:96:77:1b:1b:fa:66:6c:c5:8a:75:2d:74:80: 88:4e:55:8f:9b:85:16:9c:35:9e:e8:3c:29:36:cc: f2:aa:df:85:bf:75:44:be:64:13:36:b4:48:fd:f9: 29:b0:42:2b:04:9b:cd:eb:c2:1a:03:aa:c8:f4:38: ea:64:3d:19:ea:ae:42:0a:11:e1:dc:7c:9d:26:d4: 84:ea:08:19:1b:62:db:04:e6:74:a5:8c:bf:e5:e2: 2d:2f:88:14:af:16:6d:47:11:ad:a3:83:00:0e:32: 30:a0:51:72:a9:f7:e5:71:08:7d:66:40:fa:fd:15: b3:80:02:4b:88:f0:80:97:db:f8:0e:4f:45:13:7d: 7c:e4:f6:fb:c2:6a:67:4c:e1:c5:6d:0e:24:12:9f: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0E:3D:5D:D8:E3:24:79:D3:CE:A2:37:5A:7A:56:75:C0:29:58:E5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5a5::/32 Signature Algorithm: sha256WithRSAEncryption 8e:6a:08:43:4b:fb:ff:ac:f1:f7:23:32:aa:f7:33:05:ba:70: 5b:d8:4c:07:ae:a5:30:80:b2:a6:28:4a:ef:3c:da:bb:22:a9: 91:86:08:25:2f:71:cd:71:d9:df:9b:e3:ee:6a:12:8b:58:4d: 61:25:eb:ae:83:eb:b4:7b:e1:d0:fc:dd:15:6a:d2:03:27:b0: 67:7a:f2:61:8a:1e:cb:07:fd:00:dc:f7:24:24:92:0c:18:bc: 99:9d:9e:6b:49:5b:ce:8a:93:a3:49:06:9a:59:c0:75:77:79: b4:61:be:9d:86:ef:7f:75:64:ef:ac:3c:26:7e:dc:5b:42:ac: 5a:1c:b0:d9:8c:9b:df:8e:93:4d:01:8a:10:81:6d:b8:40:8a: 38:38:3f:66:90:d0:a4:72:1a:12:0a:2a:d8:74:9c:d8:34:1e: 3c:2f:c9:06:c4:37:7d:59:a9:03:29:31:7a:b8:a0:2d:97:cd: 88:e2:64:d1:5c:18:6f:1b:ab:61:32:8f:ba:cb:53:1f:1a:ce: 09:79:3f:63:c4:9c:17:17:ee:d2:3a:cb:18:9a:57:86:70:09: f4:d9:bf:c2:70:34:c8:c9:27:67:bb:82:4e:18:99:12:d4:e9: 97:91:45:65:6f:2c:ea:5c:8f:53:e7:3e:75:ed:aa:ae:41:2b: 9f:28:a6:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfPNnIAV4vPoVcxbp03YJ/xvjAXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA1MVoX DTI3MDMwMzA2MTU1MVowMzExMC8GA1UEAxMoMUEwRTNENUREOEUzMjQ3OUQzQ0VB MjM3NUE3QTU2NzVDMDI5NThFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALii1W+SbwcNOoJ0mIo3tMDjnf9UPstC8Aj9Dvp2MNePgYWFrG0W0+j0e7oX lnLxTf3SLH3O6lxg+uGkLauHNypyi0C7AQvSOkvgoAEnhXSDrwIV6O9Od5dPrJf2 VoBQzaml/2rjg2F/YHGWdxsb+mZsxYp1LXSAiE5Vj5uFFpw1nug8KTbM8qrfhb91 RL5kEza0SP35KbBCKwSbzevCGgOqyPQ46mQ9GequQgoR4dx8nSbUhOoIGRti2wTm dKWMv+XiLS+IFK8WbUcRraODAA4yMKBRcqn35XEIfWZA+v0Vs4ACS4jwgJfb+A5P RRN9fOT2+8JqZ0zhxW0OJBKfN/cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQaDj1d 2OMkedPOojdaelZ1wClY5TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK paUwDQYJKoZIhvcNAQELBQADggEBAI5qCENL+/+s8fcjMqr3MwW6cFvYTAeupTCA sqYoSu882rsiqZGGCCUvcc1x2d+b4+5qEotYTWEl666D67R74dD83RVq0gMnsGd6 8mGKHssH/QDc9yQkkgwYvJmdnmtJW86Kk6NJBppZwHV3ebRhvp2G7391ZO+sPCZ+ 3FtCrFocsNmMm9+Ok00BihCBbbhAijg4P2aQ0KRyGhIKKth0nNg0HjwvyQbEN31Z qQMpMXq4oC2XzYjiZNFcGG8bq2Eyj7rLUx8azgl5P2PEnBcX7tI6yxiaV4ZwCfTZ v8JwNMjJJ2e7gk4YmRLU6ZeRRWVvLOpcj1PnPnXtqq5BK58oprM= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:31 2026 by rpki-client