$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144188.roa File: AS144188.roa (raw, json) Hash identifier: pA1E+B7YaZ0tNV1puJ6/MdCRMUD1tVTgaefW0FLKa9g= Subject key identifier: E1:1B:89:F7:A9:8A:0E:C0:80:15:4C:D6:7B:1B:A3:94:CC:B4:0E:1A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 202B0BA0A421685A29C615F94C7DFED63CAF0C75 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144188.roa Signing time: Wed 04 Mar 2026 06:15:06 +0000 ROA not before: Wed 04 Mar 2026 06:10:06 +0000 ROA not after: Wed 03 Mar 2027 06:15:06 +0000 asID: 144188 IP address blocks: 240a:a602::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2b:0b:a0:a4:21:68:5a:29:c6:15:f9:4c:7d:fe:d6:3c:af:0c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:06 2026 GMT Not After : Mar 3 06:15:06 2027 GMT Subject: CN=E11B89F7A98A0EC080154CD67B1BA394CCB40E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:14:80:8b:dc:b7:f1:35:64:92:a6:f7:07:5a: 28:2e:6f:bb:df:59:7d:0d:68:10:02:87:25:dc:1a: 8d:e4:15:e7:aa:4a:b3:81:a9:cc:3e:a9:8d:37:50: ca:b2:c4:91:60:7f:fd:01:e2:1e:7d:97:45:66:3d: ef:35:3b:41:bd:88:8b:ab:bb:df:1d:95:45:b6:f1: 33:b9:c7:fc:e8:f6:19:02:57:a9:5c:10:96:1e:3c: 0f:ab:a0:6f:0f:28:d7:c5:d3:88:0a:42:91:eb:02: 22:28:8f:02:ee:9f:c7:57:df:6f:1a:8e:82:f4:6d: f0:2b:72:98:c3:ef:1f:78:4c:e2:67:dd:5f:68:85: 3b:bc:e4:b6:e4:09:26:a2:d1:1f:3c:6a:d1:e6:07: df:2c:28:3b:e4:3c:95:19:ce:d4:88:f7:81:1c:f6: 47:6b:40:13:62:04:2f:de:5b:4b:c4:d8:2c:61:86: 58:79:98:a2:f0:bb:af:ef:00:96:c0:99:8f:c6:36: 56:49:2b:3e:f3:96:bf:59:81:ef:f2:a6:4e:9d:b7: 5c:03:8d:65:43:e4:1e:c4:cb:91:f1:c7:ba:4a:61: ee:31:2a:63:be:cb:9e:65:a7:f4:9d:3d:ac:73:ff: 33:b2:4d:44:cd:65:11:30:18:ec:5d:1c:08:54:f7: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1B:89:F7:A9:8A:0E:C0:80:15:4C:D6:7B:1B:A3:94:CC:B4:0E:1A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144188.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a602::/32 Signature Algorithm: sha256WithRSAEncryption 99:1f:7e:12:c6:e7:51:6c:f8:5b:12:94:ed:2a:90:b2:f3:de: 56:ea:2d:97:0a:a7:72:c3:9f:ae:21:b8:67:54:8d:dd:27:4b: 71:a5:4f:72:2a:87:56:4e:9b:53:e9:15:7d:bb:71:3d:15:99: b8:92:6f:45:d9:3a:15:12:04:96:0e:d2:2c:ec:7a:a3:d6:2a: 23:10:e5:b0:5e:cd:9e:09:42:66:f0:0f:01:85:43:4f:ac:9f: 94:aa:45:e8:f6:82:4d:96:5a:b1:1f:a1:ba:c0:32:96:a5:40: c3:99:06:ee:0f:6b:df:09:85:bf:3e:e6:5e:58:bb:1b:70:e3: 76:ce:9b:ab:90:47:04:a1:c4:e7:6e:c0:76:f7:ca:a4:f0:bc: 65:dc:4c:69:01:57:7a:70:da:1f:e3:d5:2d:64:f4:ab:3e:05: d9:d6:f1:6a:55:ca:d7:c8:fe:9b:c6:17:a2:b7:09:46:a5:ea: 65:db:f8:f4:f9:56:4d:27:1b:fa:47:7e:12:f6:eb:a2:7f:96: e1:3f:4a:82:e2:da:c2:6e:75:3d:78:ff:14:60:6b:6f:b9:89: 14:19:a2:c6:ee:95:49:a0:aa:9f:50:e4:7a:9e:6b:59:1d:ae: 23:02:b0:0f:a2:ea:06:61:30:1f:de:3e:c8:d6:24:ea:a8:80: 9b:be:c6:ba -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUICsLoKQhaFopxhX5TH3+1jyvDHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwNloX DTI3MDMwMzA2MTUwNlowMzExMC8GA1UEAxMoRTExQjg5RjdBOThBMEVDMDgwMTU0 Q0Q2N0IxQkEzOTRDQ0I0MEUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0UgIvct/E1ZJKm9wdaKC5vu99ZfQ1oEAKHJdwajeQV56pKs4GpzD6pjTdQ yrLEkWB//QHiHn2XRWY97zU7Qb2Ii6u73x2VRbbxM7nH/Oj2GQJXqVwQlh48D6ug bw8o18XTiApCkesCIiiPAu6fx1ffbxqOgvRt8CtymMPvH3hM4mfdX2iFO7zktuQJ JqLRHzxq0eYH3ywoO+Q8lRnO1Ij3gRz2R2tAE2IEL95bS8TYLGGGWHmYovC7r+8A lsCZj8Y2VkkrPvOWv1mB7/KmTp23XAONZUPkHsTLkfHHukph7jEqY77LnmWn9J09 rHP/M7JNRM1lETAY7F0cCFT3YosCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBThG4n3 qYoOwIAVTNZ7G6OUzLQOGjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pgIwDQYJKoZIhvcNAQELBQADggEBAJkffhLG51Fs+FsSlO0qkLLz3lbqLZcKp3LD n64huGdUjd0nS3GlT3Iqh1ZOm1PpFX27cT0VmbiSb0XZOhUSBJYO0izseqPWKiMQ 5bBezZ4JQmbwDwGFQ0+sn5SqRej2gk2WWrEfobrAMpalQMOZBu4Pa98Jhb8+5l5Y uxtw43bOm6uQRwShxOduwHb3yqTwvGXcTGkBV3pw2h/j1S1k9Ks+BdnW8WpVytfI /pvGF6K3CUal6mXb+PT5Vk0nG/pHfhL266J/luE/SoLi2sJudT14/xRga2+5iRQZ osbulUmgqp9Q5Hqea1kdriMCsA+i6gZhMB/ePsjWJOqogJu+xro= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:07 2026 by rpki-client