$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144108.roa File: AS144108.roa (raw, json) Hash identifier: Qxn44QTOJzZtpNMAOT3FlgyQxzhFUtQIqwZl4LNU73c= Subject key identifier: C2:53:1B:76:28:F9:0F:2A:BB:11:C9:7F:6B:48:A8:EE:D2:D4:A3:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 62D5E0819BB20D1C2914ECBEE2D2F5CDA84D3875 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144108.roa Signing time: Wed 04 Mar 2026 06:14:05 +0000 ROA not before: Wed 04 Mar 2026 06:09:05 +0000 ROA not after: Wed 03 Mar 2027 06:14:05 +0000 asID: 144108 IP address blocks: 240a:a5b2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d5:e0:81:9b:b2:0d:1c:29:14:ec:be:e2:d2:f5:cd:a8:4d:38:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:05 2026 GMT Not After : Mar 3 06:14:05 2027 GMT Subject: CN=C2531B7628F90F2ABB11C97F6B48A8EED2D4A396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:38:21:98:99:6e:d8:52:22:b4:5a:5f:1b: 57:b0:c6:89:1c:cd:d9:6d:5f:a9:be:98:90:8a:f4: 35:ca:02:58:8b:b4:29:de:b7:77:4d:fc:3e:91:43: 00:9d:98:3d:93:3b:3d:c1:d9:64:6b:a3:17:35:03: 5c:30:4c:a0:f7:27:50:3f:4b:d4:a3:18:80:ef:bd: 5f:59:8c:99:4f:2c:e9:1e:8a:9e:1c:1b:a3:ae:14: fe:ac:ff:c6:22:3b:97:ef:fe:f4:56:70:c9:9d:cb: 07:78:b1:81:5d:fe:4e:be:b9:44:ec:9e:5d:30:49: 9c:29:fa:97:09:99:c3:13:bf:b1:64:8b:57:b8:d6: cc:4f:56:28:1a:4a:a8:83:dc:54:25:d4:3f:c1:99: 86:f0:4b:d9:f3:1d:da:bf:e3:f0:c8:6a:7e:f9:01: c7:0c:18:10:07:57:6e:a7:7f:6c:ca:8a:93:76:39: d5:0e:51:cb:41:f5:b6:71:1a:92:46:87:d1:37:df: d3:70:02:23:24:9e:f7:a4:df:68:fb:d7:02:cb:81: 88:98:d4:ac:14:2b:b4:ba:03:6f:3c:4b:c7:8d:7c: 0d:31:18:e4:8a:8b:70:88:b5:c7:8d:16:ce:1a:44: 4c:8a:c4:c5:27:07:f3:3b:0b:35:e4:76:b7:e9:3b: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:1B:76:28:F9:0F:2A:BB:11:C9:7F:6B:48:A8:EE:D2:D4:A3:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144108.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5b2::/32 Signature Algorithm: sha256WithRSAEncryption 79:a2:66:b7:53:82:3e:82:97:fd:29:69:2f:c1:31:0d:3b:34: d7:10:d0:c1:b6:a5:bf:a9:c7:d5:38:a1:c3:7f:b8:14:67:6c: 42:cd:f6:45:ae:86:36:08:4f:1d:d2:a0:79:7b:10:6b:13:1a: 65:02:ba:5c:90:8d:60:b9:c9:9a:6e:4d:ee:df:03:1b:b1:77: 1a:a3:5c:03:b2:66:b5:5d:60:69:e7:b5:21:2e:05:34:38:64: 03:ea:91:08:d1:f3:71:7c:3c:f8:d4:13:3a:2c:db:0c:a9:6b: 48:b1:33:41:32:a3:e6:e2:18:56:96:2e:71:76:97:7b:7d:39: a5:d7:9b:48:ef:58:b8:cc:a3:08:e3:ec:55:51:13:0c:cd:1a: a7:b8:4e:99:eb:05:ee:a6:f5:f3:b9:b2:91:fd:25:0d:48:18: 82:9a:43:b9:43:de:43:2a:e5:2b:d1:ce:9b:88:8c:70:d7:de: cd:4d:ae:55:ce:d4:3b:22:52:a5:75:58:08:e2:04:52:12:b5: be:0a:cc:e2:6a:8e:f4:b7:ed:9b:a5:a0:0d:49:7a:26:4a:f0: 5d:9d:ce:d1:ba:14:e7:b6:b6:1e:bf:1b:d8:ea:84:85:b9:7f: 41:82:3a:97:48:3c:7b:7d:fa:e0:9c:54:1f:e3:ab:8e:05:b3: 20:1f:e6:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYtXggZuyDRwpFOy+4tL1zahNOHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwNVoX DTI3MDMwMzA2MTQwNVowMzExMC8GA1UEAxMoQzI1MzFCNzYyOEY5MEYyQUJCMTFD OTdGNkI0OEE4RUVEMkQ0QTM5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwjOCGYmW7YUiK0Wl8bV7DGiRzN2W1fqb6YkIr0NcoCWIu0Kd63d038PpFD AJ2YPZM7PcHZZGujFzUDXDBMoPcnUD9L1KMYgO+9X1mMmU8s6R6Knhwbo64U/qz/ xiI7l+/+9FZwyZ3LB3ixgV3+Tr65ROyeXTBJnCn6lwmZwxO/sWSLV7jWzE9WKBpK qIPcVCXUP8GZhvBL2fMd2r/j8MhqfvkBxwwYEAdXbqd/bMqKk3Y51Q5Ry0H1tnEa kkaH0Tff03ACIySe96TfaPvXAsuBiJjUrBQrtLoDbzxLx418DTEY5IqLcIi1x40W zhpETIrExScH8zsLNeR2t+k7SZMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTCUxt2 KPkPKrsRyX9rSKju0tSjljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pbIwDQYJKoZIhvcNAQELBQADggEBAHmiZrdTgj6Cl/0paS/BMQ07NNcQ0MG2pb+p x9U4ocN/uBRnbELN9kWuhjYITx3SoHl7EGsTGmUCulyQjWC5yZpuTe7fAxuxdxqj XAOyZrVdYGnntSEuBTQ4ZAPqkQjR83F8PPjUEzos2wypa0ixM0Eyo+biGFaWLnF2 l3t9OaXXm0jvWLjMowjj7FVREwzNGqe4TpnrBe6m9fO5spH9JQ1IGIKaQ7lD3kMq 5SvRzpuIjHDX3s1NrlXO1DsiUqV1WAjiBFIStb4KzOJqjvS37ZuloA1JeiZK8F2d ztG6FOe2th6/G9jqhIW5f0GCOpdIPHt9+uCcVB/jq44FsyAf5ow= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:10 2026 by rpki-client