$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144106.roa File: AS144106.roa (raw, json) Hash identifier: WmA3sgtujHjtLY6/Fqkxp0iyjP8oOCj8LjbcP5d/844= Subject key identifier: 94:AA:E8:84:02:ED:6E:56:51:EE:14:73:C5:51:DE:58:B2:54:92:64 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 296B560E789AFD0E195E890AC70B2F9A8C37E34E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144106.roa Signing time: Wed 04 Mar 2026 06:13:12 +0000 ROA not before: Wed 04 Mar 2026 06:08:12 +0000 ROA not after: Wed 03 Mar 2027 06:13:12 +0000 asID: 144106 IP address blocks: 240a:a5b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6b:56:0e:78:9a:fd:0e:19:5e:89:0a:c7:0b:2f:9a:8c:37:e3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:12 2026 GMT Not After : Mar 3 06:13:12 2027 GMT Subject: CN=94AAE88402ED6E5651EE1473C551DE58B2549264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:d9:92:b7:5a:a4:01:04:9e:b3:30:aa:76: 12:11:eb:8e:6d:6a:2b:36:23:f0:e5:a3:9e:13:df: c6:87:f4:12:69:2a:4a:46:77:81:95:45:8a:7c:e8: 10:23:dd:89:ce:02:e1:f8:51:4b:70:ae:f7:f7:eb: a0:f7:f0:5c:df:ec:9f:fe:97:e0:32:76:44:7d:b5: 30:52:61:24:2b:d7:72:4d:82:53:9d:66:7e:53:b2: d9:19:b4:ff:bf:5d:df:d5:00:37:5f:be:df:21:5a: b0:aa:9e:ed:f8:f8:82:3a:59:79:c0:80:45:99:8e: fc:91:d1:42:b4:4f:3b:9f:2f:a3:49:9a:d4:99:0b: c6:b3:5e:b4:9e:d4:37:7a:2c:3a:52:ef:76:21:1a: 39:34:fc:a2:65:26:b8:9a:b2:1d:d1:9c:56:19:e7: 38:b6:42:4c:49:af:cb:83:fe:0d:4e:10:a2:05:b3: 05:41:44:c6:f7:f7:85:46:97:0b:c1:63:8d:95:e8: 5e:97:fd:fe:8d:02:d8:60:de:13:bb:32:39:f4:c0: 23:3a:f1:2a:fe:44:c0:98:97:fb:22:4e:bf:c9:38: 6d:88:37:0f:24:53:49:e5:95:d6:84:87:5e:7c:e6: 2e:c9:b7:39:cc:c4:cf:ae:fa:5e:ee:ac:0e:ca:91: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AA:E8:84:02:ED:6E:56:51:EE:14:73:C5:51:DE:58:B2:54:92:64 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144106.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5b0::/32 Signature Algorithm: sha256WithRSAEncryption ca:26:22:fb:17:c3:85:a5:c5:e4:9e:89:09:8e:43:c6:2a:ee: 41:69:7d:2c:5c:59:08:ba:ce:8e:da:df:eb:8f:e5:c8:8e:7e: de:c7:11:7a:42:57:68:f8:08:bb:eb:90:e1:26:4a:3b:3f:0c: fb:94:d4:94:14:2a:6a:1e:70:9c:87:b6:44:c6:3c:75:61:3c: c0:29:80:d9:ff:78:7d:61:b6:4a:e5:b8:a2:e7:73:d4:23:cb: 8b:a7:07:ce:1a:ae:56:15:ef:02:75:58:d1:b6:f0:75:a2:9d: e6:de:90:a7:c3:f0:0a:fa:26:7f:2c:41:ed:77:24:dd:b8:ed: db:69:27:a1:48:f9:7d:c0:7b:7b:38:44:db:8a:80:04:01:01: bd:c7:93:cd:a2:0d:9c:ec:86:8e:3a:e8:59:56:34:e7:8e:91: 5f:22:12:bb:94:3c:58:83:2f:09:3b:fd:69:43:f6:41:b5:68: d7:70:6c:8b:27:40:c3:56:23:44:55:12:71:53:a3:c9:c2:b8: 72:75:2f:f2:d2:97:36:18:cc:de:b5:33:50:9f:da:b6:c7:2f: 0a:b8:bf:ce:41:3d:31:b1:44:d3:06:2b:2f:13:c1:d3:b4:06: 2a:32:74:4b:2b:c3:eb:1c:6d:3d:94:7b:d8:c9:7a:42:27:84: 32:23:6e:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKWtWDnia/Q4ZXokKxwsvmow3404wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxMloX DTI3MDMwMzA2MTMxMlowMzExMC8GA1UEAxMoOTRBQUU4ODQwMkVENkU1NjUxRUUx NDczQzU1MURFNThCMjU0OTI2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJFW2ZK3WqQBBJ6zMKp2EhHrjm1qKzYj8OWjnhPfxof0EmkqSkZ3gZVFinzo ECPdic4C4fhRS3Cu9/froPfwXN/sn/6X4DJ2RH21MFJhJCvXck2CU51mflOy2Rm0 /79d39UAN1++3yFasKqe7fj4gjpZecCARZmO/JHRQrRPO58vo0ma1JkLxrNetJ7U N3osOlLvdiEaOTT8omUmuJqyHdGcVhnnOLZCTEmvy4P+DU4QogWzBUFExvf3hUaX C8FjjZXoXpf9/o0C2GDeE7syOfTAIzrxKv5EwJiX+yJOv8k4bYg3DyRTSeWV1oSH XnzmLsm3OczEz676Xu6sDsqRTE8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSUquiE Au1uVlHuFHPFUd5YslSSZDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pbAwDQYJKoZIhvcNAQELBQADggEBAMomIvsXw4WlxeSeiQmOQ8Yq7kFpfSxcWQi6 zo7a3+uP5ciOft7HEXpCV2j4CLvrkOEmSjs/DPuU1JQUKmoecJyHtkTGPHVhPMAp gNn/eH1htkrluKLnc9Qjy4unB84arlYV7wJ1WNG28HWinebekKfD8Ar6Jn8sQe13 JN247dtpJ6FI+X3Ae3s4RNuKgAQBAb3Hk82iDZzsho466FlWNOeOkV8iEruUPFiD Lwk7/WlD9kG1aNdwbIsnQMNWI0RVEnFTo8nCuHJ1L/LSlzYYzN61M1Cf2rbHLwq4 v85BPTGxRNMGKy8TwdO0BioydEsrw+scbT2Ue9jJekInhDIjbow= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:42 2026 by rpki-client