$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144126.roa File: AS144126.roa (raw, json) Hash identifier: dKXKJX77LQkJKkdlz0QHPCAPMAstfUr51+GNUul4lxs= Subject key identifier: 66:95:77:F0:5A:80:24:CB:1E:0E:C7:21:8F:F1:06:8D:BC:AE:BF:35 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 37EA5983B732F9758AC5FC7959A7DCE29747CB75 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144126.roa Signing time: Wed 04 Mar 2026 06:15:23 +0000 ROA not before: Wed 04 Mar 2026 06:10:23 +0000 ROA not after: Wed 03 Mar 2027 06:15:23 +0000 asID: 144126 IP address blocks: 240a:a5c4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ea:59:83:b7:32:f9:75:8a:c5:fc:79:59:a7:dc:e2:97:47:cb:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:23 2026 GMT Not After : Mar 3 06:15:23 2027 GMT Subject: CN=669577F05A8024CB1E0EC7218FF1068DBCAEBF35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:be:2d:22:16:c3:3d:ae:8c:63:ff:e7:e7: 65:ac:39:f7:70:75:d8:5c:2b:b5:c5:9b:dc:44:52: ae:1a:64:26:95:1d:35:30:9a:65:d8:a4:64:17:70: a9:14:c8:e7:90:a1:24:1d:a8:85:ae:f0:53:4c:71: d9:d9:e5:19:28:d5:23:aa:b0:7f:10:93:36:06:e0: 01:34:ff:dd:24:38:b1:1e:8a:a7:91:40:2a:4a:21: 9d:38:64:48:dd:7b:95:b8:03:dd:b4:76:df:33:0e: 4e:65:4a:89:0b:e3:da:82:3d:d8:7c:40:56:9a:e4: 58:3b:65:7a:93:c8:ae:40:f1:24:98:5e:6c:a6:a3: 76:64:09:fa:19:d1:6e:bf:53:b1:10:03:7f:94:a4: 55:0b:3a:0a:91:b7:3c:a1:b6:e4:e6:c5:75:74:39: f1:8c:a5:e0:2b:78:5b:ae:57:ff:55:1a:5f:a4:3c: a8:e2:1a:16:68:b0:39:f2:cf:10:87:84:4e:33:e9: 8d:52:a0:78:cb:f9:ca:1d:de:a6:50:76:3d:05:d9: 15:fe:75:b0:10:de:5e:c8:22:63:fc:bd:49:99:f0: c4:f6:66:e4:82:df:7f:c3:59:de:a1:c1:95:a9:37: f3:ff:6b:fb:ae:76:84:6a:c3:e3:ef:35:3a:88:af: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:77:F0:5A:80:24:CB:1E:0E:C7:21:8F:F1:06:8D:BC:AE:BF:35 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144126.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5c4::/32 Signature Algorithm: sha256WithRSAEncryption b5:81:43:18:9e:86:c8:7f:57:5f:3d:fc:c8:c2:77:92:f3:89: 6f:63:bf:19:84:28:41:6f:41:3a:4d:d2:df:59:7c:18:38:50: 45:f8:2d:38:09:98:12:a4:9e:91:d3:4c:ec:b8:ac:33:91:0d: b6:04:48:16:14:56:a3:b6:15:cd:39:0d:83:5f:ea:4b:10:59: bf:d7:ff:bf:4f:83:fb:44:b9:06:56:5d:4c:60:3b:46:31:8a: ea:e8:f8:60:33:25:1d:43:ea:d4:85:b7:96:0f:b2:f3:5d:58: 85:21:50:b4:60:25:01:9a:74:86:c5:a1:db:3b:cd:16:05:5f: 69:71:fc:33:54:55:0d:ea:64:77:ef:12:0b:71:ee:f1:f2:c4: 2a:14:74:d4:b1:2d:88:6f:80:dd:04:7b:a5:69:0f:1e:58:59: df:f6:44:cd:47:6f:49:44:43:23:3f:16:80:31:3a:4e:e1:21: 5d:d8:d6:4f:5e:09:76:13:ae:09:d5:04:fe:c6:79:cb:9b:9f: a6:0e:2b:66:df:93:98:cb:e0:9f:05:52:46:88:6c:cb:e8:cd: 75:1f:b8:dd:b1:7b:bd:15:1b:d6:98:d4:c4:ff:c2:25:1c:3c: 60:f7:e7:78:f3:3f:34:8f:7e:f3:43:0e:04:7f:92:b8:9f:32: 5d:bb:6c:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN+pZg7cy+XWKxfx5Wafc4pdHy3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyM1oX DTI3MDMwMzA2MTUyM1owMzExMC8GA1UEAxMoNjY5NTc3RjA1QTgwMjRDQjFFMEVD NzIxOEZGMTA2OERCQ0FFQkYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLtvi0iFsM9roxj/+fnZaw593B12FwrtcWb3ERSrhpkJpUdNTCaZdikZBdw qRTI55ChJB2oha7wU0xx2dnlGSjVI6qwfxCTNgbgATT/3SQ4sR6Kp5FAKkohnThk SN17lbgD3bR23zMOTmVKiQvj2oI92HxAVprkWDtlepPIrkDxJJhebKajdmQJ+hnR br9TsRADf5SkVQs6CpG3PKG25ObFdXQ58Yyl4Ct4W65X/1UaX6Q8qOIaFmiwOfLP EIeETjPpjVKgeMv5yh3eplB2PQXZFf51sBDeXsgiY/y9SZnwxPZm5ILff8NZ3qHB lak38/9r+652hGrD4+81Ooiv/UECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRmlXfw WoAkyx4OxyGP8QaNvK6/NTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pcQwDQYJKoZIhvcNAQELBQADggEBALWBQxiehsh/V189/MjCd5LziW9jvxmEKEFv QTpN0t9ZfBg4UEX4LTgJmBKknpHTTOy4rDORDbYESBYUVqO2Fc05DYNf6ksQWb/X /79Pg/tEuQZWXUxgO0Yxiuro+GAzJR1D6tSFt5YPsvNdWIUhULRgJQGadIbFods7 zRYFX2lx/DNUVQ3qZHfvEgtx7vHyxCoUdNSxLYhvgN0Ee6VpDx5YWd/2RM1Hb0lE QyM/FoAxOk7hIV3Y1k9eCXYTrgnVBP7Gecubn6YOK2bfk5jL4J8FUkaIbMvozXUf uN2xe70VG9aY1MT/wiUcPGD353jzPzSPfvNDDgR/krifMl27bJ4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:00 2026 by rpki-client