$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144220.roa File: AS144220.roa (raw, json) Hash identifier: vCxm5Eqyzo0YVM9ThqbZl1SFV2w4mn8gEzRsBjoncP0= Subject key identifier: C4:5E:F5:49:03:7C:2B:D7:F7:40:22:B1:05:E1:F4:0D:91:81:18:67 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1AE81A70D642E06CE15C1CB98F8ED142AAB515BE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144220.roa Signing time: Wed 04 Mar 2026 06:13:37 +0000 ROA not before: Wed 04 Mar 2026 06:08:37 +0000 ROA not after: Wed 03 Mar 2027 06:13:37 +0000 asID: 144220 IP address blocks: 240a:a622::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e8:1a:70:d6:42:e0:6c:e1:5c:1c:b9:8f:8e:d1:42:aa:b5:15:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:37 2026 GMT Not After : Mar 3 06:13:37 2027 GMT Subject: CN=C45EF549037C2BD7F74022B105E1F40D91811867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:43:f5:3a:a5:a4:f0:6a:2b:6d:7b:fd:00: 26:6d:44:9e:3b:b6:c6:ec:bb:00:8c:15:af:cc:0f: b7:ac:75:63:1c:b6:f2:fc:f7:42:97:1f:ec:32:e8: c6:c8:5f:f8:60:3f:7b:4a:37:cd:d2:f6:1e:50:ed: 46:c8:09:74:12:dd:dd:d8:05:91:90:9c:c4:5e:31: 7b:06:3b:4a:1a:74:12:0d:a8:a8:7f:9b:50:be:cc: c1:2f:ea:9d:ac:35:94:b9:97:9b:9e:74:51:ad:fe: c6:52:de:bb:93:f5:d5:a7:9a:5d:d5:db:b6:be:62: 84:04:e1:54:77:6b:73:7f:3e:dd:35:af:d2:30:83: 7e:34:d0:1a:43:85:2d:2e:12:3b:2f:c9:5f:75:a9: c4:82:34:34:73:aa:ef:b4:93:48:06:10:bc:6d:1b: de:e4:fe:a6:1f:46:85:41:7d:6c:4a:f8:e2:8a:7b: dd:22:5d:ad:5e:bd:07:9e:ba:7f:e0:50:2d:47:ae: 10:93:79:3f:38:01:58:ff:a7:e4:3d:23:df:60:f1: 79:ba:6a:80:7e:8c:a0:ab:ee:04:0c:72:25:3d:78: f6:2d:a3:3a:1f:bd:8e:5a:c5:77:68:2c:5c:5e:df: b0:86:be:e8:4d:8c:a4:55:0a:c6:20:c4:15:a4:9b: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5E:F5:49:03:7C:2B:D7:F7:40:22:B1:05:E1:F4:0D:91:81:18:67 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144220.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a622::/32 Signature Algorithm: sha256WithRSAEncryption a2:21:93:7c:7b:48:d9:5b:9f:7c:b9:d2:ed:06:3c:68:39:fe: 84:bc:67:a2:1c:9a:e9:cf:4a:17:9d:bb:69:47:2a:19:5c:12: 2f:a4:a0:db:e9:a8:3d:61:fa:ae:ac:a9:df:7f:45:4d:6c:20: d6:cd:16:1d:dd:ed:09:0c:e9:83:67:76:c3:a3:70:f7:af:db: 43:78:5b:ae:bf:a3:10:b9:9a:cd:13:42:c3:ff:22:f4:4a:38: a3:14:d9:9c:d2:64:40:a5:20:22:dd:c1:e1:bd:9f:e0:e8:f6: 37:c4:b3:28:da:26:ac:99:39:39:19:35:39:00:b6:43:04:80: 27:f8:c4:33:03:df:15:c3:25:43:8d:40:18:fb:61:d4:ba:6f: 30:c3:c1:69:ea:d3:54:57:35:cd:40:ad:af:d4:31:23:3f:ce: c4:bf:fe:a7:1d:df:ef:d2:7f:4f:67:f2:7e:cd:85:c6:70:e3: e8:54:8f:63:d8:94:5e:fc:fb:cc:09:f6:2d:33:bb:e8:88:db: 1c:96:c7:7d:72:a5:81:93:ea:d9:d7:72:67:83:a2:df:9c:71: 8d:b5:3b:50:05:7b:b1:1c:7b:ec:ae:d3:d5:92:7c:ef:00:fc: 7c:6b:f0:71:65:b4:d1:dd:7a:26:a8:fd:8e:31:93:9d:1c:b4: 55:8b:8a:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGugacNZC4GzhXBy5j47RQqq1Fb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzN1oX DTI3MDMwMzA2MTMzN1owMzExMC8GA1UEAxMoQzQ1RUY1NDkwMzdDMkJEN0Y3NDAy MkIxMDVFMUY0MEQ5MTgxMTg2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2yQ/U6paTwaitte/0AJm1Enju2xuy7AIwVr8wPt6x1Yxy28vz3Qpcf7DLo xshf+GA/e0o3zdL2HlDtRsgJdBLd3dgFkZCcxF4xewY7Shp0Eg2oqH+bUL7MwS/q naw1lLmXm550Ua3+xlLeu5P11aeaXdXbtr5ihAThVHdrc38+3TWv0jCDfjTQGkOF LS4SOy/JX3WpxII0NHOq77STSAYQvG0b3uT+ph9GhUF9bEr44op73SJdrV69B566 f+BQLUeuEJN5PzgBWP+n5D0j32DxebpqgH6MoKvuBAxyJT149i2jOh+9jlrFd2gs XF7fsIa+6E2MpFUKxiDEFaSbcQECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTEXvVJ A3wr1/dAIrEF4fQNkYEYZzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK piIwDQYJKoZIhvcNAQELBQADggEBAKIhk3x7SNlbn3y50u0GPGg5/oS8Z6IcmunP Shedu2lHKhlcEi+koNvpqD1h+q6sqd9/RU1sINbNFh3d7QkM6YNndsOjcPev20N4 W66/oxC5ms0TQsP/IvRKOKMU2ZzSZEClICLdweG9n+Do9jfEsyjaJqyZOTkZNTkA tkMEgCf4xDMD3xXDJUONQBj7YdS6bzDDwWnq01RXNc1Ara/UMSM/zsS//qcd3+/S f09n8n7NhcZw4+hUj2PYlF78+8wJ9i0zu+iI2xyWx31ypYGT6tnXcmeDot+ccY21 O1AFe7Ece+yu09WSfO8A/Hxr8HFltNHdeiao/Y4xk50ctFWLih0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:23 2026 by rpki-client