$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144195.roa File: AS144195.roa (raw, json) Hash identifier: FIa2A358PkjQuXt4doAxDaTwSH+wxalKYw0V5ejoByg= Subject key identifier: 8D:DA:1C:31:08:9B:2E:CF:C3:B0:62:18:6F:EE:43:56:0A:2C:58:BF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 491E55CB57B5E5CC16C2B07BCAAA3771B8DD4AEC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144195.roa Signing time: Wed 04 Mar 2026 06:15:25 +0000 ROA not before: Wed 04 Mar 2026 06:10:25 +0000 ROA not after: Wed 03 Mar 2027 06:15:25 +0000 asID: 144195 IP address blocks: 240a:a609::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1e:55:cb:57:b5:e5:cc:16:c2:b0:7b:ca:aa:37:71:b8:dd:4a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:25 2026 GMT Not After : Mar 3 06:15:25 2027 GMT Subject: CN=8DDA1C31089B2ECFC3B062186FEE43560A2C58BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:76:f8:8d:1a:ba:e3:83:84:0a:35:1a:4f:4e: 6e:3d:0b:c7:44:97:a1:6b:98:49:eb:08:9f:d1:ba: a1:ab:52:17:7e:5a:ef:37:a7:47:84:54:ba:77:81: f2:1e:05:ad:75:d7:5b:ee:57:a4:66:a4:ed:7e:1c: 7e:c7:59:5d:7f:79:b0:e7:73:be:fb:a9:2f:c7:a9: d1:c1:46:41:19:f5:c6:54:fd:11:fe:19:c3:61:b4: 7e:9c:af:10:b4:d3:fd:8b:e0:ad:40:dd:9f:6c:45: 44:d5:0b:d2:92:f9:05:14:e2:42:99:e3:b7:fa:af: 29:f0:3b:b7:dc:90:ce:83:b0:54:eb:c5:a0:6b:cf: 7e:91:bc:92:e7:ce:11:45:c1:88:95:a4:ee:8f:66: b6:bf:3e:d4:47:7c:21:cf:32:63:bb:e5:6d:c5:0f: e6:fe:57:84:98:1f:03:ff:e5:82:62:92:d2:ec:2f: e6:28:6c:dc:ea:37:5e:97:ea:0f:9c:25:15:6a:90: c6:89:de:e7:07:85:9a:c7:b2:91:8f:d0:c8:c7:43: 06:df:57:2d:52:2f:ca:fe:cb:66:1e:33:b7:c1:d1: 5c:f4:a2:bf:0f:09:1a:de:70:43:f7:2e:4d:81:f2: bc:52:69:d5:32:76:e3:86:9b:b9:7c:16:c2:0a:a9: 22:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DA:1C:31:08:9B:2E:CF:C3:B0:62:18:6F:EE:43:56:0A:2C:58:BF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144195.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a609::/32 Signature Algorithm: sha256WithRSAEncryption 69:a2:87:87:a8:90:9a:93:29:23:67:96:90:b1:4f:f4:cd:33: f9:08:ac:fe:88:26:66:24:b0:99:f9:5c:17:7a:b9:31:36:dc: dd:52:b4:26:85:8c:52:9f:e6:26:18:15:5f:44:12:d1:cd:89: ec:4c:4d:ce:0e:3b:80:88:e6:22:09:e2:8f:73:f3:e6:76:f6: 35:54:54:d3:95:f8:92:d9:98:71:26:51:e1:60:b7:1d:bf:b2: ec:0d:dd:57:7b:c8:24:aa:46:48:cd:3d:25:16:a9:cf:e1:e3: c7:7a:06:e8:a3:aa:9f:e5:90:9a:3c:ba:ab:c3:16:ae:7e:de: 1a:a4:d8:e7:f7:33:31:6b:92:e8:91:98:64:0d:b0:4c:14:23: 67:05:d5:32:2c:64:8f:78:2f:83:34:02:41:21:15:67:d4:1c: de:e9:76:7d:5f:70:eb:83:d7:de:78:b1:9f:a6:0f:11:a4:3c: c6:9f:88:63:ec:3b:d4:c6:72:34:0c:a4:08:66:d4:0a:17:a1: 9f:03:d9:b1:b5:9a:fe:e9:11:80:88:ab:98:30:cf:3c:e0:33: 9a:4a:3a:ed:d3:72:13:8b:e7:56:7a:95:26:88:83:b9:9e:56: e9:7a:40:16:95:2c:c7:3a:91:9f:78:e5:44:96:fb:e9:d2:f2: fd:7d:9f:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSR5Vy1e15cwWwrB7yqo3cbjdSuwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyNVoX DTI3MDMwMzA2MTUyNVowMzExMC8GA1UEAxMoOEREQTFDMzEwODlCMkVDRkMzQjA2 MjE4NkZFRTQzNTYwQTJDNThCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJh2+I0auuODhAo1Gk9Obj0Lx0SXoWuYSesIn9G6oatSF35a7zenR4RUuneB 8h4FrXXXW+5XpGak7X4cfsdZXX95sOdzvvupL8ep0cFGQRn1xlT9Ef4Zw2G0fpyv ELTT/YvgrUDdn2xFRNUL0pL5BRTiQpnjt/qvKfA7t9yQzoOwVOvFoGvPfpG8kufO EUXBiJWk7o9mtr8+1Ed8Ic8yY7vlbcUP5v5XhJgfA//lgmKS0uwv5ihs3Oo3Xpfq D5wlFWqQxone5weFmseykY/QyMdDBt9XLVIvyv7LZh4zt8HRXPSivw8JGt5wQ/cu TYHyvFJp1TJ244abuXwWwgqpIs8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSN2hwx CJsuz8OwYhhv7kNWCixYvzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pgkwDQYJKoZIhvcNAQELBQADggEBAGmih4eokJqTKSNnlpCxT/TNM/kIrP6IJmYk sJn5XBd6uTE23N1StCaFjFKf5iYYFV9EEtHNiexMTc4OO4CI5iIJ4o9z8+Z29jVU VNOV+JLZmHEmUeFgtx2/suwN3Vd7yCSqRkjNPSUWqc/h48d6Buijqp/lkJo8uqvD Fq5+3hqk2Of3MzFrkuiRmGQNsEwUI2cF1TIsZI94L4M0AkEhFWfUHN7pdn1fcOuD 1954sZ+mDxGkPMafiGPsO9TGcjQMpAhm1AoXoZ8D2bG1mv7pEYCIq5gwzzzgM5pK Ou3TchOL51Z6lSaIg7meVul6QBaVLMc6kZ945USW++nS8v19n+M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:33 2026 by rpki-client