$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144099.roa File: AS144099.roa (raw, json) Hash identifier: 2mCFQ67n/sXITmEZOhW38kYqpIdWIdedAb+LSNSM3YE= Subject key identifier: 2B:03:3B:EA:6F:8D:2F:B3:F3:DE:C4:A5:0A:BE:9C:68:EA:D1:2B:E7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 345DCCB6CD76AB2DE1D8C0861E13FFC281183491 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144099.roa Signing time: Wed 04 Mar 2026 06:13:04 +0000 ROA not before: Wed 04 Mar 2026 06:08:04 +0000 ROA not after: Wed 03 Mar 2027 06:13:04 +0000 asID: 144099 IP address blocks: 240a:a5a9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5d:cc:b6:cd:76:ab:2d:e1:d8:c0:86:1e:13:ff:c2:81:18:34:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:04 2026 GMT Not After : Mar 3 06:13:04 2027 GMT Subject: CN=2B033BEA6F8D2FB3F3DEC4A50ABE9C68EAD12BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8a:22:c1:90:26:c5:74:46:db:6f:d3:82:e3: 98:a4:ea:aa:c8:d3:c7:7f:b0:92:be:03:53:35:6b: 71:96:16:54:6b:18:15:cc:f8:4a:ac:7b:5d:dd:55: 14:2d:23:7d:18:0a:7b:be:6b:6a:29:ab:f3:42:1f: 61:4f:c3:0b:a2:01:63:a1:0f:9d:fb:ee:53:e5:57: 7e:93:67:a9:03:1e:c6:eb:46:b0:2f:3f:75:2d:42: a4:95:84:a3:bf:7a:0b:c6:31:41:00:1a:ac:ed:d5: 76:7c:9f:08:82:f7:c2:30:15:b1:e4:ff:b1:ea:df: 33:fa:18:54:68:2d:bf:af:aa:ca:3f:cd:e0:fd:c7: d6:d5:b3:bb:aa:d6:3d:0d:db:8e:d9:51:0d:a9:3a: c3:5a:db:e4:e6:33:a5:8f:19:a1:dc:02:11:2f:14: 49:63:39:6e:f2:e3:d2:4e:d6:97:2c:4b:79:89:fe: 82:71:76:db:48:3d:cb:b0:5c:49:61:92:39:0e:d7: 7d:76:1c:06:04:0d:2f:d9:cd:1c:d8:3f:25:97:ab: 9c:cf:6f:c4:43:6e:2c:e1:e7:ea:40:f2:6f:6c:2e: 14:d8:1d:81:c3:b5:b7:cd:a0:ba:df:f9:5e:4f:41: a2:75:ea:b3:95:94:da:b6:14:d5:84:c2:3e:03:71: 7b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:03:3B:EA:6F:8D:2F:B3:F3:DE:C4:A5:0A:BE:9C:68:EA:D1:2B:E7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144099.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5a9::/32 Signature Algorithm: sha256WithRSAEncryption a4:0d:c8:ba:02:a7:50:8c:b1:d9:c4:7b:b9:9f:a6:f9:b4:fa: 01:0d:17:8d:3a:f3:48:bd:40:f3:e9:43:94:b0:40:a5:0a:46: 21:58:aa:b9:07:4a:62:b3:3c:94:ab:66:67:c2:19:16:f1:44: d0:3a:38:1f:ad:96:e8:66:18:4d:e1:cf:6d:dd:8e:85:fc:c4: e0:41:2b:a3:3f:b5:f8:dd:05:f4:34:ac:a7:8d:fa:6b:e7:2f: d8:3a:0c:18:bd:4f:e8:74:5c:5f:52:b6:dc:c1:25:b6:6b:1e: 7b:95:e3:4b:ff:e5:5f:5d:7f:94:d1:ed:06:83:02:81:48:6c: b2:9f:29:69:8a:3a:49:3b:8f:24:71:56:4b:1f:96:ae:9f:f2: f0:29:35:0e:ee:e9:8c:2a:96:fd:a8:80:7d:28:8c:45:56:13: d7:9e:f5:ec:dd:b2:ab:de:78:12:6c:89:81:0e:58:15:0f:a7: dd:fe:fb:07:18:81:08:20:2d:94:6e:d9:03:9a:b1:7d:07:5e: 77:46:b9:5e:96:7b:65:fb:f0:4b:b2:a9:7e:9f:f3:db:68:6f: c4:f1:45:42:a3:d1:cd:e7:ed:8f:ac:e4:19:29:52:bb:8c:44: 0f:ee:cf:45:fd:e0:a5:d6:d9:9f:3c:b7:2c:63:47:d6:2f:43: d4:ac:69:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNF3Mts12qy3h2MCGHhP/woEYNJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwNFoX DTI3MDMwMzA2MTMwNFowMzExMC8GA1UEAxMoMkIwMzNCRUE2RjhEMkZCM0YzREVD NEE1MEFCRTlDNjhFQUQxMkJFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOuKIsGQJsV0Rttv04LjmKTqqsjTx3+wkr4DUzVrcZYWVGsYFcz4Sqx7Xd1V FC0jfRgKe75raimr80IfYU/DC6IBY6EPnfvuU+VXfpNnqQMexutGsC8/dS1CpJWE o796C8YxQQAarO3VdnyfCIL3wjAVseT/serfM/oYVGgtv6+qyj/N4P3H1tWzu6rW PQ3bjtlRDak6w1rb5OYzpY8ZodwCES8USWM5bvLj0k7WlyxLeYn+gnF220g9y7Bc SWGSOQ7XfXYcBgQNL9nNHNg/JZernM9vxENuLOHn6kDyb2wuFNgdgcO1t82gut/5 Xk9BonXqs5WU2rYU1YTCPgNxe3UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQrAzvq b40vs/PexKUKvpxo6tEr5zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pakwDQYJKoZIhvcNAQELBQADggEBAKQNyLoCp1CMsdnEe7mfpvm0+gENF40680i9 QPPpQ5SwQKUKRiFYqrkHSmKzPJSrZmfCGRbxRNA6OB+tluhmGE3hz23djoX8xOBB K6M/tfjdBfQ0rKeN+mvnL9g6DBi9T+h0XF9SttzBJbZrHnuV40v/5V9df5TR7QaD AoFIbLKfKWmKOkk7jyRxVksflq6f8vApNQ7u6Ywqlv2ogH0ojEVWE9ee9ezdsqve eBJsiYEOWBUPp93++wcYgQggLZRu2QOasX0HXndGuV6We2X78EuyqX6f89tob8Tx RUKj0c3n7Y+s5BkpUruMRA/uz0X94KXW2Z88tyxjR9YvQ9Ssaeo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:13 2026 by rpki-client