$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144219.roa File: AS144219.roa (raw, json) Hash identifier: BtA7yt0z8u3MPt0pr7/GvBVoCAQlLfhhklNI3oVDpxk= Subject key identifier: 11:A8:B9:35:64:B5:17:7C:66:13:F7:C0:CD:FC:5C:A6:9C:31:D1:EA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 497880576507EABF03688B34E603A771BA97BCC6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144219.roa Signing time: Wed 04 Mar 2026 06:14:44 +0000 ROA not before: Wed 04 Mar 2026 06:09:44 +0000 ROA not after: Wed 03 Mar 2027 06:14:44 +0000 asID: 144219 IP address blocks: 240a:a621::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:78:80:57:65:07:ea:bf:03:68:8b:34:e6:03:a7:71:ba:97:bc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:44 2026 GMT Not After : Mar 3 06:14:44 2027 GMT Subject: CN=11A8B93564B5177C6613F7C0CDFC5CA69C31D1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f9:ab:d6:2c:4a:ab:17:17:89:94:0e:4c:76: 57:e7:05:22:63:4f:a0:99:45:42:ee:ce:83:0f:49: 4e:c0:45:fb:1b:12:9c:37:2d:40:96:b8:16:91:f1: 4a:f0:29:fd:83:87:92:d5:7e:ad:b6:5e:d5:76:cd: 37:60:b9:c7:23:72:9e:4d:ad:3d:a9:d5:77:fd:a7: d7:76:64:b4:74:fb:6f:1e:f5:f6:f8:73:7b:3a:9c: 56:3a:9e:89:43:d2:0d:64:16:2c:50:04:26:e4:6a: b7:5b:26:d6:3e:9b:81:f8:46:6a:6d:a1:19:a9:94: c1:9d:aa:30:20:fe:2f:34:78:1e:6a:b6:79:5e:5f: de:8a:4c:b1:bb:84:ae:97:40:40:ab:22:bb:1a:5e: c0:c9:71:2a:dc:f6:1d:37:0b:47:52:90:d2:24:f7: f6:87:82:ec:97:68:d8:b8:0b:a6:be:8d:51:6b:89: 2a:34:2c:ad:fd:3d:51:17:82:29:cd:77:3d:43:34: 1d:51:61:df:b8:ea:90:c4:d0:08:dd:8a:62:5b:56: e0:52:e9:bd:36:d9:b9:cd:b0:02:55:ea:17:68:c2: 49:a5:31:df:fb:24:64:cd:7a:d7:7d:04:5c:bd:2d: 29:03:79:57:5e:70:d6:7d:70:ff:34:f7:d0:65:0c: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A8:B9:35:64:B5:17:7C:66:13:F7:C0:CD:FC:5C:A6:9C:31:D1:EA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144219.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a621::/32 Signature Algorithm: sha256WithRSAEncryption 4b:94:b1:58:c0:08:68:5d:a5:3b:a8:40:78:92:8b:43:35:c3: ea:03:c9:86:b4:61:c4:04:8b:75:e8:ac:38:84:ee:36:6e:6e: 4c:79:4e:bc:59:96:d7:25:52:70:4c:e4:a8:58:4a:52:f4:35: 1d:35:cb:7b:32:c0:6f:7c:38:1f:bc:1b:80:a6:90:c0:63:14: 57:33:96:df:0b:22:7f:26:31:2a:0e:73:9e:ca:59:82:2c:12: 2f:dc:22:f3:86:06:6b:d0:20:97:6e:47:41:73:23:d7:9c:b4: 1f:33:ff:49:ae:2f:87:07:c3:14:a9:52:e4:b4:c1:4f:4d:4f: ed:1f:10:20:cf:be:e2:11:e6:7b:20:3b:14:3d:c5:12:18:d4: a0:34:fd:54:a3:2c:ee:17:a9:c1:53:2d:32:8b:07:dc:77:56: 73:31:32:46:cd:3c:71:34:8e:b0:7f:8a:b3:6b:b0:69:ea:fe: 2b:3a:70:ef:f9:c1:7b:0d:78:de:c0:1f:9b:a8:c2:53:c2:82: 00:cd:eb:80:d9:92:34:81:10:99:4f:4e:41:bf:3e:65:98:97: 25:22:86:fc:05:b6:5a:0a:53:68:5e:19:a8:54:71:a3:10:33: bb:18:c6:c0:8b:0f:d0:77:2c:72:85:50:d2:92:52:59:2d:30: aa:7e:d2:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSXiAV2UH6r8DaIs05gOncbqXvMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0NFoX DTI3MDMwMzA2MTQ0NFowMzExMC8GA1UEAxMoMTFBOEI5MzU2NEI1MTc3QzY2MTNG N0MwQ0RGQzVDQTY5QzMxRDFFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOz5q9YsSqsXF4mUDkx2V+cFImNPoJlFQu7Ogw9JTsBF+xsSnDctQJa4FpHx SvAp/YOHktV+rbZe1XbNN2C5xyNynk2tPanVd/2n13ZktHT7bx719vhzezqcVjqe iUPSDWQWLFAEJuRqt1sm1j6bgfhGam2hGamUwZ2qMCD+LzR4Hmq2eV5f3opMsbuE rpdAQKsiuxpewMlxKtz2HTcLR1KQ0iT39oeC7Jdo2LgLpr6NUWuJKjQsrf09UReC Kc13PUM0HVFh37jqkMTQCN2KYltW4FLpvTbZuc2wAlXqF2jCSaUx3/skZM16130E XL0tKQN5V15w1n1w/zT30GUM9IcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQRqLk1 ZLUXfGYT98DN/FymnDHR6jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK piEwDQYJKoZIhvcNAQELBQADggEBAEuUsVjACGhdpTuoQHiSi0M1w+oDyYa0YcQE i3XorDiE7jZubkx5TrxZltclUnBM5KhYSlL0NR01y3sywG98OB+8G4CmkMBjFFcz lt8LIn8mMSoOc57KWYIsEi/cIvOGBmvQIJduR0FzI9ectB8z/0muL4cHwxSpUuS0 wU9NT+0fECDPvuIR5nsgOxQ9xRIY1KA0/VSjLO4XqcFTLTKLB9x3VnMxMkbNPHE0 jrB/irNrsGnq/is6cO/5wXsNeN7AH5uowlPCggDN64DZkjSBEJlPTkG/PmWYlyUi hvwFtloKU2heGahUcaMQM7sYxsCLD9B3LHKFUNKSUlktMKp+0r0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:42 2026 by rpki-client