$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144224.roa File: AS144224.roa (raw, json) Hash identifier: IPR0qtUXZzPFuWH7O/56YwQKD2a8/GRM7ZcKsUTt5WU= Subject key identifier: 64:B8:86:7B:28:22:C1:69:34:B4:C6:E4:3E:EE:32:E6:46:8C:A0:A2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 141FF7C1756C8EE2B8CE545A491CE43F991493A6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144224.roa Signing time: Wed 04 Mar 2026 06:14:47 +0000 ROA not before: Wed 04 Mar 2026 06:09:47 +0000 ROA not after: Wed 03 Mar 2027 06:14:47 +0000 asID: 144224 IP address blocks: 240a:a626::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1f:f7:c1:75:6c:8e:e2:b8:ce:54:5a:49:1c:e4:3f:99:14:93:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:47 2026 GMT Not After : Mar 3 06:14:47 2027 GMT Subject: CN=64B8867B2822C16934B4C6E43EEE32E6468CA0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:88:79:40:08:1c:84:21:0e:f7:bc:a4:3c: 71:46:e3:aa:f3:33:a0:f8:d6:cf:fe:0f:f3:69:b8: 99:51:fe:af:93:09:b9:70:e7:d4:e5:fb:42:7d:56: db:82:8e:f7:c1:91:bd:b0:be:43:4e:03:17:b5:0e: 6e:43:f9:f5:2b:ca:79:10:9f:c7:5c:eb:32:43:cd: 80:e4:dc:2a:4a:66:a2:9b:1d:3d:df:87:93:9a:29: 26:16:95:4c:75:34:73:03:fc:ba:a9:cd:c3:e3:4a: ab:dc:6a:0b:2f:ae:68:4d:b7:b1:de:2d:7f:b0:f4: 43:09:55:e8:44:8f:fb:92:db:42:b2:b6:24:1c:3b: d9:2a:9b:ad:43:78:c4:98:c8:4b:4f:6e:cc:74:3c: 4c:b1:b6:a4:e5:0f:84:d2:d9:d2:5e:2c:c0:d0:26: 63:83:e0:9e:c4:9f:f6:fd:cf:b6:51:a2:2f:24:7a: e7:b6:e8:f8:7b:a3:ff:a4:5b:62:7c:59:d2:0a:bf: 35:92:e7:0b:98:a3:18:95:83:4c:c4:c9:8e:50:23: ae:d3:5c:ef:97:f3:ee:60:fc:13:f1:fd:10:de:70: 68:b0:28:a1:f9:98:91:f3:7d:77:14:3d:94:b5:5c: 98:0b:f1:ab:b4:2d:5a:c8:ff:09:eb:bb:d4:17:21: 02:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B8:86:7B:28:22:C1:69:34:B4:C6:E4:3E:EE:32:E6:46:8C:A0:A2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144224.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a626::/32 Signature Algorithm: sha256WithRSAEncryption 60:44:fe:7e:bb:24:23:d4:9e:14:df:15:8c:b2:cc:41:b3:be: b6:43:d6:92:bf:f9:a2:c3:0a:c5:73:47:50:38:a2:94:5d:0e: 5f:e8:7c:92:04:17:93:e3:47:b3:dd:da:37:cb:32:5b:8b:3f: 2c:4e:1d:5e:91:34:83:9e:e4:0e:a8:57:81:9f:b1:64:ae:37: b5:7d:ef:62:63:51:35:63:7c:bd:c2:4e:f9:27:3e:f1:c7:cc: 32:1b:c6:59:34:2a:fa:62:c9:dc:3d:c8:28:8b:13:2a:e3:72: 9b:33:94:5c:66:64:53:25:d1:f7:3c:63:05:c1:26:16:51:83: cc:0f:60:83:a3:35:50:bb:16:ff:c3:91:5d:cb:af:9b:53:c9: de:b9:db:43:52:38:a7:19:5b:0f:c1:63:4f:a7:eb:1e:26:dd: 06:aa:43:9c:6f:4c:a5:a0:31:f7:dc:45:33:75:fe:c2:ad:39: 23:86:c6:ed:1a:98:69:c4:a4:a1:93:38:3c:0f:83:79:a4:ca: 59:cc:e7:a2:51:79:78:5b:c6:ac:bb:90:a3:5c:b2:eb:13:d9: 6e:b6:a0:47:e1:5f:41:73:34:e5:cd:4c:90:f4:28:65:44:b6: 2d:df:41:23:f8:1f:bd:81:d9:2b:ed:dc:15:e6:42:00:91:f4: 0a:c6:6b:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFB/3wXVsjuK4zlRaSRzkP5kUk6YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0N1oX DTI3MDMwMzA2MTQ0N1owMzExMC8GA1UEAxMoNjRCODg2N0IyODIyQzE2OTM0QjRD NkU0M0VFRTMyRTY0NjhDQTBBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx/iHlACByEIQ73vKQ8cUbjqvMzoPjWz/4P82m4mVH+r5MJuXDn1OX7Qn1W 24KO98GRvbC+Q04DF7UObkP59SvKeRCfx1zrMkPNgOTcKkpmopsdPd+Hk5opJhaV THU0cwP8uqnNw+NKq9xqCy+uaE23sd4tf7D0QwlV6ESP+5LbQrK2JBw72SqbrUN4 xJjIS09uzHQ8TLG2pOUPhNLZ0l4swNAmY4PgnsSf9v3PtlGiLyR657bo+Huj/6Rb YnxZ0gq/NZLnC5ijGJWDTMTJjlAjrtNc75fz7mD8E/H9EN5waLAoofmYkfN9dxQ9 lLVcmAvxq7QtWsj/Ceu71BchAkcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRkuIZ7 KCLBaTS0xuQ+7jLmRoygojAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK piYwDQYJKoZIhvcNAQELBQADggEBAGBE/n67JCPUnhTfFYyyzEGzvrZD1pK/+aLD CsVzR1A4opRdDl/ofJIEF5PjR7Pd2jfLMluLPyxOHV6RNIOe5A6oV4GfsWSuN7V9 72JjUTVjfL3CTvknPvHHzDIbxlk0Kvpiydw9yCiLEyrjcpszlFxmZFMl0fc8YwXB JhZRg8wPYIOjNVC7Fv/DkV3Lr5tTyd6520NSOKcZWw/BY0+n6x4m3QaqQ5xvTKWg MffcRTN1/sKtOSOGxu0amGnEpKGTODwPg3mkylnM56JReXhbxqy7kKNcsusT2W62 oEfhX0FzNOXNTJD0KGVEti3fQSP4H72B2Svt3BXmQgCR9ArGa9A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:39 2026 by rpki-client