$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144245.roa File: AS144245.roa (raw, json) Hash identifier: 3Tui0gtJSiYc9on0nVFnZmKfO1vQcuz4zE9fVjiMO5k= Subject key identifier: 50:FA:1B:E6:CF:99:8C:D5:3D:B0:49:F5:26:7B:A0:09:F0:58:8E:99 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 25BF5122679A2C166BE7A0BFD56411B959D4AEA4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144245.roa Signing time: Wed 04 Mar 2026 06:15:44 +0000 ROA not before: Wed 04 Mar 2026 06:10:44 +0000 ROA not after: Wed 03 Mar 2027 06:15:44 +0000 asID: 144245 IP address blocks: 240a:a63b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bf:51:22:67:9a:2c:16:6b:e7:a0:bf:d5:64:11:b9:59:d4:ae:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:44 2026 GMT Not After : Mar 3 06:15:44 2027 GMT Subject: CN=50FA1BE6CF998CD53DB049F5267BA009F0588E99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:0e:81:c9:69:3f:00:61:25:aa:fc:d7:c6: da:1a:7c:48:d5:ab:e5:19:39:88:f8:66:a1:f4:b9: 15:f9:72:61:2d:6e:d2:5b:4f:1a:ea:0d:3c:90:8d: 63:2f:10:a7:b1:da:11:fc:91:fe:78:a8:26:72:44: 12:5e:54:e0:89:74:43:26:9e:33:7c:c2:6c:a2:86: 5b:ac:20:1e:ac:c0:b5:3a:5c:9d:1d:a2:84:19:06: 79:38:d4:64:a1:27:2a:cd:6a:fe:ee:40:99:06:3a: 87:40:fa:ff:b5:23:e1:8f:d6:f5:95:3c:5c:3d:0b: 9b:62:64:72:e9:45:70:75:31:07:80:89:dd:60:dc: 78:e7:38:e9:f6:3a:d1:f3:36:ba:ab:c2:b0:f5:6b: 78:30:cf:36:02:3b:79:c7:55:9a:5e:da:c6:1f:48: 67:1a:16:ce:30:8e:33:2b:6d:a2:7e:bb:26:9b:75: da:12:6b:29:cc:83:0e:e2:f1:3b:c8:c1:89:fc:9c: 2c:3b:95:e9:2f:98:f6:76:ac:4a:95:51:74:d6:86: 5d:7d:68:f0:30:f2:52:87:85:39:15:57:f5:86:db: d1:5a:74:29:5f:38:3c:cb:6b:57:50:47:1f:c3:03: 66:d5:59:9a:a8:f9:55:82:08:2c:9c:2c:bb:54:0b: c0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FA:1B:E6:CF:99:8C:D5:3D:B0:49:F5:26:7B:A0:09:F0:58:8E:99 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144245.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a63b::/32 Signature Algorithm: sha256WithRSAEncryption 82:0a:22:2e:a4:89:48:41:59:e3:b3:3c:4c:46:34:b2:06:dc: 2d:a3:dc:89:7c:37:2c:82:46:af:22:b0:18:cd:a2:9b:e8:0f: d2:73:b2:0a:af:f6:2d:2d:74:d9:ce:4a:fb:57:1b:52:3b:d0: fa:d7:a9:e1:bb:66:03:e3:f5:1a:e9:13:7c:92:17:80:0b:7a: 37:a1:6d:64:bc:4d:74:50:31:44:70:78:00:b6:9b:f3:ca:fb: 5f:3a:3f:08:50:fb:d0:3e:c0:04:6f:6a:d1:f0:6e:02:81:39: 90:38:2f:d2:ce:06:41:aa:d0:b1:57:d7:94:dc:b3:ea:61:7b: a1:00:ab:c3:df:2f:78:4e:72:b6:4c:5c:de:38:a0:bd:a1:11: 6f:ba:09:99:71:17:27:ca:d9:f2:6a:37:0f:98:79:18:5a:5a: eb:99:1c:5d:d9:2b:2a:81:af:95:79:80:a3:39:40:f5:fa:d1: d9:72:63:4b:a1:89:fc:a3:ed:2c:be:ca:df:2e:7c:50:ae:b6: 51:16:62:0e:89:c6:fb:f1:b9:a1:71:64:b9:0f:7f:4c:ab:d0: 7e:aa:97:b8:c5:d4:43:ae:47:38:94:2c:7f:67:cb:6c:39:de: 64:46:67:90:e7:b4:7e:be:68:6f:0d:35:44:df:f5:83:ab:3a: cb:24:ab:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJb9RImeaLBZr56C/1WQRuVnUrqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0NFoX DTI3MDMwMzA2MTU0NFowMzExMC8GA1UEAxMoNTBGQTFCRTZDRjk5OENENTNEQjA0 OUY1MjY3QkEwMDlGMDU4OEU5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALs9DoHJaT8AYSWq/NfG2hp8SNWr5Rk5iPhmofS5FflyYS1u0ltPGuoNPJCN Yy8Qp7HaEfyR/nioJnJEEl5U4Il0QyaeM3zCbKKGW6wgHqzAtTpcnR2ihBkGeTjU ZKEnKs1q/u5AmQY6h0D6/7Uj4Y/W9ZU8XD0Lm2JkculFcHUxB4CJ3WDceOc46fY6 0fM2uqvCsPVreDDPNgI7ecdVml7axh9IZxoWzjCOMytton67Jpt12hJrKcyDDuLx O8jBifycLDuV6S+Y9nasSpVRdNaGXX1o8DDyUoeFORVX9Ybb0Vp0KV84PMtrV1BH H8MDZtVZmqj5VYIILJwsu1QLwF0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRQ+hvm z5mM1T2wSfUme6AJ8FiOmTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pjswDQYJKoZIhvcNAQELBQADggEBAIIKIi6kiUhBWeOzPExGNLIG3C2j3Il8NyyC Rq8isBjNopvoD9Jzsgqv9i0tdNnOSvtXG1I70PrXqeG7ZgPj9RrpE3ySF4ALejeh bWS8TXRQMURweAC2m/PK+186PwhQ+9A+wARvatHwbgKBOZA4L9LOBkGq0LFX15Tc s+phe6EAq8PfL3hOcrZMXN44oL2hEW+6CZlxFyfK2fJqNw+YeRhaWuuZHF3ZKyqB r5V5gKM5QPX60dlyY0uhifyj7Sy+yt8ufFCutlEWYg6JxvvxuaFxZLkPf0yr0H6q l7jF1EOuRziULH9ny2w53mRGZ5DntH6+aG8NNUTf9YOrOsskqxo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:47 2026 by rpki-client