$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144165.roa File: AS144165.roa (raw, json) Hash identifier: 0ckfFy2mGhetf1sAITkWF9jAr71fwyHLbIIeQG+xgxo= Subject key identifier: 4A:A3:C4:BE:CD:18:3D:FF:25:88:D6:EA:08:8C:BB:99:1D:05:79:52 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7DC9924D2AF67D4B04363806346CF563F49459BB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144165.roa Signing time: Wed 04 Mar 2026 06:13:52 +0000 ROA not before: Wed 04 Mar 2026 06:08:52 +0000 ROA not after: Wed 03 Mar 2027 06:13:52 +0000 asID: 144165 IP address blocks: 240a:a5eb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c9:92:4d:2a:f6:7d:4b:04:36:38:06:34:6c:f5:63:f4:94:59:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:52 2026 GMT Not After : Mar 3 06:13:52 2027 GMT Subject: CN=4AA3C4BECD183DFF2588D6EA088CBB991D057952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:5d:c4:76:58:f3:50:80:49:e0:8d:9c:2d: 6c:fc:a0:1a:70:f8:1d:9e:5c:c1:f5:7e:34:22:03: c8:d3:fc:f3:b5:41:04:75:89:98:5b:f9:dc:7b:04: 99:b2:57:dd:36:99:e4:f3:71:be:70:e5:7b:55:73: 6f:c9:cd:8e:30:3e:bd:4d:18:e3:4b:9b:9d:0e:3a: 72:53:04:dd:2f:c3:83:ae:a8:c0:a9:ec:9d:f3:d0: b6:72:53:af:fe:d9:61:17:8a:61:d2:66:9a:80:c6: c8:f1:45:5b:cb:aa:2c:5e:00:34:89:80:63:d2:a2: eb:4d:62:b7:3c:f8:82:47:1d:a2:35:fc:60:0c:e2: ff:c2:37:59:ca:e9:96:78:e2:7e:73:02:45:44:38: 15:83:a7:e0:f7:c7:f4:b0:b2:65:d3:e2:bb:37:9f: 4d:69:84:82:ef:29:31:48:11:44:21:b8:e7:2e:d4: fd:98:3b:aa:4f:bd:4a:93:a6:c1:d3:e4:70:b7:68: 7e:72:45:29:c3:1d:09:0f:cc:8c:b8:5c:dc:f7:b5: 95:d4:3b:73:cc:5c:60:47:29:e1:ca:8c:c7:7a:90: cc:db:62:2d:17:29:ec:e4:02:14:7b:fe:dd:fa:3f: 50:c1:ea:d4:fa:bd:3d:34:62:88:db:6d:e9:12:48: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:C4:BE:CD:18:3D:FF:25:88:D6:EA:08:8C:BB:99:1D:05:79:52 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144165.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5eb::/32 Signature Algorithm: sha256WithRSAEncryption c4:54:aa:ec:49:a6:e0:ee:6b:01:ef:fb:72:3f:fb:5f:fd:f3: 07:66:9a:d1:c3:30:bd:74:bb:04:c5:c4:0a:67:42:a5:d2:ef: 33:46:95:a4:56:ec:37:a0:2a:dc:8e:07:b4:7a:7f:20:a3:04: d4:89:54:8f:b7:b8:7b:e1:f1:56:a3:72:6f:6b:ed:23:03:58: 8a:4b:1d:ea:52:1c:d2:18:23:4c:8f:27:24:5e:c0:20:a8:18: b1:ad:07:de:5e:01:ba:8c:4a:14:73:bd:18:15:07:79:b1:13: e7:99:29:01:78:52:e3:01:e8:c1:b3:6b:b3:61:0d:bd:23:d3: 3c:30:db:0a:c2:94:01:84:d7:df:31:4e:b1:ff:61:75:6a:40: 67:c2:76:12:51:05:ea:28:7d:68:ad:50:66:32:02:21:78:66: d8:52:03:b8:cb:8c:8e:1a:ec:2a:85:fb:0c:5d:e3:18:1b:cb: f0:b1:f8:d0:79:35:c5:50:c2:32:1c:c0:b8:b7:19:8e:c7:f8: 7a:3c:5e:48:f9:55:e7:2a:70:20:4a:97:d7:f6:54:a6:16:94: 4e:46:1e:03:71:3e:34:95:4d:e8:39:99:09:5a:e9:eb:1a:5e: 36:6c:e2:98:30:0c:98:38:3f:39:c4:ec:81:3a:57:e6:ae:90: e5:a2:68:c7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfcmSTSr2fUsENjgGNGz1Y/SUWbswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1MloX DTI3MDMwMzA2MTM1MlowMzExMC8GA1UEAxMoNEFBM0M0QkVDRDE4M0RGRjI1ODhE NkVBMDg4Q0JCOTkxRDA1Nzk1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/pXcR2WPNQgEngjZwtbPygGnD4HZ5cwfV+NCIDyNP887VBBHWJmFv53HsE mbJX3TaZ5PNxvnDle1Vzb8nNjjA+vU0Y40ubnQ46clME3S/Dg66owKnsnfPQtnJT r/7ZYReKYdJmmoDGyPFFW8uqLF4ANImAY9Ki601itzz4gkcdojX8YAzi/8I3Wcrp lnjifnMCRUQ4FYOn4PfH9LCyZdPiuzefTWmEgu8pMUgRRCG45y7U/Zg7qk+9SpOm wdPkcLdofnJFKcMdCQ/MjLhc3Pe1ldQ7c8xcYEcp4cqMx3qQzNtiLRcp7OQCFHv+ 3fo/UMHq1Pq9PTRiiNtt6RJIT4sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRKo8S+ zRg9/yWI1uoIjLuZHQV5UjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK peswDQYJKoZIhvcNAQELBQADggEBAMRUquxJpuDuawHv+3I/+1/98wdmmtHDML10 uwTFxApnQqXS7zNGlaRW7DegKtyOB7R6fyCjBNSJVI+3uHvh8Vajcm9r7SMDWIpL HepSHNIYI0yPJyRewCCoGLGtB95eAbqMShRzvRgVB3mxE+eZKQF4UuMB6MGza7Nh Db0j0zww2wrClAGE198xTrH/YXVqQGfCdhJRBeoofWitUGYyAiF4ZthSA7jLjI4a 7CqF+wxd4xgby/Cx+NB5NcVQwjIcwLi3GY7H+Ho8Xkj5VecqcCBKl9f2VKYWlE5G HgNxPjSVTeg5mQla6esaXjZs4pgwDJg4PznE7IE6V+aukOWiaMc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:01 2026 by rpki-client