$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144129.roa File: AS144129.roa (raw, json) Hash identifier: Wi2WrdHh/S7pjjus1ygN6XzoMWMSpf7aLrL/3dyrXV0= Subject key identifier: CE:3E:A8:3C:11:63:32:A7:DC:EF:BA:F8:F6:55:B7:62:E2:FF:94:78 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 09734229BC7CA03002C107F770C658FB73655CB7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144129.roa Signing time: Wed 04 Mar 2026 06:15:16 +0000 ROA not before: Wed 04 Mar 2026 06:10:16 +0000 ROA not after: Wed 03 Mar 2027 06:15:16 +0000 asID: 144129 IP address blocks: 240a:a5c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:73:42:29:bc:7c:a0:30:02:c1:07:f7:70:c6:58:fb:73:65:5c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:16 2026 GMT Not After : Mar 3 06:15:16 2027 GMT Subject: CN=CE3EA83C116332A7DCEFBAF8F655B762E2FF9478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ca:5b:6c:b4:ad:99:1a:b9:fb:8d:d5:4f:5e: 4d:b8:81:23:8b:00:cc:c8:8b:1a:ef:27:0f:f2:d0: 40:62:5a:ce:48:75:08:76:f2:26:be:f4:a2:c7:82: 33:ef:4d:0e:4f:91:a6:0d:ed:f4:d1:fe:3a:ae:37: d2:51:fa:0f:da:c6:49:b5:c9:f7:cc:47:80:81:6f: 78:76:7c:59:0a:44:0d:a7:c7:a2:ab:f6:fd:44:0f: 44:8f:86:fe:da:68:b7:cb:52:c6:aa:38:dd:83:f0: eb:d2:2a:7f:c1:0f:2c:c0:c6:60:98:a3:79:18:69: 5e:75:a7:f8:ed:59:7e:a5:7f:da:7d:23:36:09:67: c2:a5:c6:58:e4:d3:80:c1:77:e2:f2:b0:ba:88:f9: 71:e6:d1:8c:0a:09:02:5c:b5:54:10:22:6f:60:01: cc:81:72:b8:f2:98:6d:ff:05:9c:79:b7:94:bc:f2: 2c:23:fd:9a:36:71:6e:68:81:7b:43:dd:21:66:e5: 3b:94:8b:f5:27:12:41:40:c5:93:a7:30:9b:81:3f: e5:f0:6b:27:5a:ae:43:65:a9:fe:e7:fc:0d:de:f0: 7f:97:35:80:9b:a3:7c:bb:35:bc:69:91:b9:ec:36: a7:54:ce:67:98:80:a8:de:5a:b3:eb:f6:0b:b5:50: a4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3E:A8:3C:11:63:32:A7:DC:EF:BA:F8:F6:55:B7:62:E2:FF:94:78 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144129.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5c7::/32 Signature Algorithm: sha256WithRSAEncryption 65:c4:e1:3b:a4:23:2d:ba:f2:71:ae:dc:b9:f9:00:86:51:a1: e1:d6:4f:6e:b3:8d:ef:64:8c:ec:bd:36:d1:44:11:81:b7:83: 04:ef:6d:5e:41:da:06:51:59:2b:5e:75:34:17:5c:40:2d:c8: ff:19:ef:a7:8c:78:d9:25:62:bf:24:bf:13:95:f8:e5:1c:c7: 7a:d8:a2:c2:a0:0b:f3:2b:80:28:64:aa:c2:95:a1:a3:ff:f3: d4:8c:06:63:6e:fe:24:e4:4a:d8:ea:ce:8a:ee:20:bf:43:6b: 48:eb:20:dd:a3:a0:7c:de:d5:50:fc:b1:04:2f:46:f6:53:f2: 7c:e5:bf:92:c2:ce:8f:b8:f5:31:c6:55:46:ab:db:46:e6:a6: 78:57:a3:7d:0a:cc:dd:33:1f:99:62:cc:8f:ec:ae:5b:8a:63: a3:5b:83:48:a8:bc:6a:2d:6c:5d:80:95:31:41:28:14:05:c2: f5:a7:8b:cf:44:d6:ab:f1:7c:9d:78:eb:fa:d5:6b:45:74:96: 01:c4:85:1c:85:eb:91:95:96:cb:80:14:04:dd:fe:ff:53:b2: 47:a1:3e:26:ae:0e:3f:1f:09:f3:6d:17:38:cb:66:62:b8:04: 09:db:8c:bf:d2:5f:81:1d:32:7d:eb:85:a4:c4:82:ef:48:2c: e4:26:4e:b5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCXNCKbx8oDACwQf3cMZY+3NlXLcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxNloX DTI3MDMwMzA2MTUxNlowMzExMC8GA1UEAxMoQ0UzRUE4M0MxMTYzMzJBN0RDRUZC QUY4RjY1NUI3NjJFMkZGOTQ3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHKW2y0rZkaufuN1U9eTbiBI4sAzMiLGu8nD/LQQGJazkh1CHbyJr70oseC M+9NDk+Rpg3t9NH+Oq430lH6D9rGSbXJ98xHgIFveHZ8WQpEDafHoqv2/UQPRI+G /tpot8tSxqo43YPw69Iqf8EPLMDGYJijeRhpXnWn+O1ZfqV/2n0jNglnwqXGWOTT gMF34vKwuoj5cebRjAoJAly1VBAib2ABzIFyuPKYbf8FnHm3lLzyLCP9mjZxbmiB e0PdIWblO5SL9ScSQUDFk6cwm4E/5fBrJ1quQ2Wp/uf8Dd7wf5c1gJujfLs1vGmR uew2p1TOZ5iAqN5as+v2C7VQpHMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTOPqg8 EWMyp9zvuvj2Vbdi4v+UeDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pccwDQYJKoZIhvcNAQELBQADggEBAGXE4TukIy268nGu3Ln5AIZRoeHWT26zje9k jOy9NtFEEYG3gwTvbV5B2gZRWStedTQXXEAtyP8Z76eMeNklYr8kvxOV+OUcx3rY osKgC/MrgChkqsKVoaP/89SMBmNu/iTkStjqzoruIL9Da0jrIN2joHze1VD8sQQv RvZT8nzlv5LCzo+49THGVUar20bmpnhXo30KzN0zH5lizI/srluKY6Nbg0iovGot bF2AlTFBKBQFwvWni89E1qvxfJ146/rVa0V0lgHEhRyF65GVlsuAFATd/v9Tskeh PiauDj8fCfNtFzjLZmK4BAnbjL/SX4EdMn3rhaTEgu9ILOQmTrU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:21 2026 by rpki-client