$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144109.roa File: AS144109.roa (raw, json) Hash identifier: kdiFDsN8Sq3Uvkt/lUkiUI/cw3BLO4d1qM0arY/uTkc= Subject key identifier: 59:64:46:5C:A4:90:31:C7:C3:81:A0:B9:A0:F3:A0:13:57:3E:8E:95 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0708003F714A025F7FD0226777B439B7CFDC0F3F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144109.roa Signing time: Wed 04 Mar 2026 06:14:21 +0000 ROA not before: Wed 04 Mar 2026 06:09:21 +0000 ROA not after: Wed 03 Mar 2027 06:14:21 +0000 asID: 144109 IP address blocks: 240a:a5b3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:08:00:3f:71:4a:02:5f:7f:d0:22:67:77:b4:39:b7:cf:dc:0f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:21 2026 GMT Not After : Mar 3 06:14:21 2027 GMT Subject: CN=5964465CA49031C7C381A0B9A0F3A013573E8E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:4c:7e:d5:8b:ec:4b:80:1c:3a:5c:e1:14: 1f:d9:29:c6:fc:2f:31:3a:d4:8d:11:a3:dc:c5:02: df:cb:82:ef:a0:c9:30:43:d7:43:b7:c2:1c:2e:59: 75:ab:2e:b8:bf:1b:41:40:75:ac:a8:cd:de:4f:2f: 40:e0:86:01:5f:1c:d9:fe:51:05:96:b5:1c:50:26: 56:74:a8:09:5c:6c:60:ab:0b:22:22:09:87:00:14: d1:d9:c1:84:8c:7a:6b:ca:a7:ed:3d:d4:9c:ac:6d: dd:dc:a3:08:33:b6:a2:7f:c4:83:5f:59:d4:0c:7a: b0:bf:c4:93:62:e7:2d:1f:9c:b2:3e:1c:db:80:44: a6:c0:97:aa:77:2a:9f:8c:c1:58:a5:ca:a6:28:1b: e7:03:3c:31:d0:32:48:b3:96:ca:e0:5e:46:2a:c2: 8c:b0:67:e5:01:de:1e:d3:72:20:72:56:63:2b:80: 15:9f:b7:60:85:f1:26:74:2d:89:a9:17:c8:bc:ee: f6:62:70:63:9e:57:ac:67:ba:3e:75:ef:11:7e:3d: df:fc:2c:ea:0f:26:c8:53:1c:56:dc:9d:9e:63:07: 23:bf:cf:69:d9:42:38:d5:da:d1:27:24:02:c0:ae: 2a:b9:1b:08:b4:a7:d8:bc:55:a6:50:5a:80:7f:04: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:46:5C:A4:90:31:C7:C3:81:A0:B9:A0:F3:A0:13:57:3E:8E:95 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144109.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5b3::/32 Signature Algorithm: sha256WithRSAEncryption 96:c9:1f:60:03:e4:12:26:5c:e7:20:0a:83:27:35:a6:61:73: 89:e4:45:8c:80:f8:2d:e1:fa:b8:2f:c4:d5:7d:d8:33:91:bf: 56:da:30:06:5a:bb:43:e7:f6:6f:55:d4:e5:5b:43:ef:27:23: c2:ef:a2:0f:4a:5b:c5:b0:4e:e2:5c:8a:96:2d:a2:30:91:13: 24:6f:62:4f:fe:ac:d9:6e:17:c9:20:15:52:d3:f6:42:99:f1: 02:cc:bc:fa:0c:26:e2:d5:c9:65:06:2f:9f:25:30:4b:56:e0: af:a4:51:58:85:41:af:7c:11:dd:a1:07:0d:f6:5a:2b:7b:f9: ad:4b:66:5d:15:36:39:cb:0a:1a:fa:5b:45:2c:bf:f9:c3:50: 20:42:1c:44:6b:e5:f9:73:71:b4:46:04:ff:f4:2c:80:42:f8: 6d:7f:7a:12:37:d5:d2:8c:1e:46:3f:50:e1:56:cc:c5:f5:65: 1c:3d:9e:96:03:2c:86:c7:25:77:e4:60:b4:04:1a:f5:3b:b7: 58:a9:c1:e4:92:67:d7:84:0e:6c:39:3a:6f:b3:5f:0d:32:ab: 09:53:1c:db:90:ac:ec:5a:7d:60:3b:82:04:ba:d2:f3:a2:f4: 89:ca:6d:b0:50:47:dc:df:3d:73:26:98:3b:9d:66:99:d6:44: 0f:7b:6e:6b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBwgAP3FKAl9/0CJnd7Q5t8/cDz8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyMVoX DTI3MDMwMzA2MTQyMVowMzExMC8GA1UEAxMoNTk2NDQ2NUNBNDkwMzFDN0MzODFB MEI5QTBGM0EwMTM1NzNFOEU5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKwTH7Vi+xLgBw6XOEUH9kpxvwvMTrUjRGj3MUC38uC76DJMEPXQ7fCHC5Z dasuuL8bQUB1rKjN3k8vQOCGAV8c2f5RBZa1HFAmVnSoCVxsYKsLIiIJhwAU0dnB hIx6a8qn7T3UnKxt3dyjCDO2on/Eg19Z1Ax6sL/Ek2LnLR+csj4c24BEpsCXqncq n4zBWKXKpigb5wM8MdAySLOWyuBeRirCjLBn5QHeHtNyIHJWYyuAFZ+3YIXxJnQt iakXyLzu9mJwY55XrGe6PnXvEX493/ws6g8myFMcVtydnmMHI7/PadlCONXa0Sck AsCuKrkbCLSn2LxVplBagH8Esa8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRZZEZc pJAxx8OBoLmg86ATVz6OlTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pbMwDQYJKoZIhvcNAQELBQADggEBAJbJH2AD5BImXOcgCoMnNaZhc4nkRYyA+C3h +rgvxNV92DORv1baMAZau0Pn9m9V1OVbQ+8nI8Lvog9KW8WwTuJcipYtojCREyRv Yk/+rNluF8kgFVLT9kKZ8QLMvPoMJuLVyWUGL58lMEtW4K+kUViFQa98Ed2hBw32 Wit7+a1LZl0VNjnLChr6W0Usv/nDUCBCHERr5flzcbRGBP/0LIBC+G1/ehI31dKM HkY/UOFWzMX1ZRw9npYDLIbHJXfkYLQEGvU7t1ipweSSZ9eEDmw5Om+zXw0yqwlT HNuQrOxafWA7ggS60vOi9InKbbBQR9zfPXMmmDudZpnWRA97bms= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:59 2026 by rpki-client