$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144246.roa File: AS144246.roa (raw, json) Hash identifier: OBXf1e71cg2rygDon/q3SKeJR9tW4hHtKAgK+lFPLNY= Subject key identifier: B2:F0:C5:78:75:3C:2D:4B:72:39:A8:AC:6F:A5:FF:EF:CA:4C:12:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 25CDB15E3CA586873FAAB31A4A682647CA1D1C78 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144246.roa Signing time: Wed 04 Mar 2026 06:12:31 +0000 ROA not before: Wed 04 Mar 2026 06:07:31 +0000 ROA not after: Wed 03 Mar 2027 06:12:31 +0000 asID: 144246 IP address blocks: 240a:a63c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:cd:b1:5e:3c:a5:86:87:3f:aa:b3:1a:4a:68:26:47:ca:1d:1c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:31 2026 GMT Not After : Mar 3 06:12:31 2027 GMT Subject: CN=B2F0C578753C2D4B7239A8AC6FA5FFEFCA4C12A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:09:65:e1:b8:b3:0f:09:be:32:38:4a:5e: ca:3f:bc:51:77:72:6d:a2:c3:8f:97:42:1d:df:a8: e6:1c:71:39:aa:2e:52:82:25:e1:7b:e8:7a:f1:91: a1:31:bd:4a:06:93:32:b0:14:ba:2a:6e:aa:d8:17: 41:b9:ab:4d:09:a9:15:1c:f3:ed:59:4c:1d:88:0e: cc:81:c8:83:dc:12:82:b7:6b:bc:a1:c5:eb:95:2d: 92:e3:22:d4:6c:68:7a:ef:24:8a:46:f5:a9:2b:bf: a1:d2:c4:38:33:cb:69:38:ab:51:55:69:d1:f1:20: 62:41:da:8c:6d:6b:03:3e:d9:2c:b1:8f:0f:2e:18: ac:88:ce:78:3c:8e:9d:b8:f8:9a:21:3f:65:f4:87: f4:85:51:ca:c7:0c:aa:aa:ea:c1:fc:28:bd:25:9e: 16:78:7c:4d:22:20:03:a8:97:f3:3f:7d:2c:25:c2: be:0a:96:7e:9d:12:d5:fe:40:12:51:c2:09:02:ca: 80:2f:65:57:c8:57:ef:c5:e6:bd:23:f4:7e:aa:ef: de:d1:e8:8a:bb:38:9a:0f:a4:2b:8f:c7:23:b3:de: 22:ac:92:59:bc:18:03:23:1c:96:8a:69:b5:9b:fe: 1b:34:5b:af:87:e2:c6:ad:a6:46:a2:2c:69:86:e2: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F0:C5:78:75:3C:2D:4B:72:39:A8:AC:6F:A5:FF:EF:CA:4C:12:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144246.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a63c::/32 Signature Algorithm: sha256WithRSAEncryption 2a:68:a1:65:7d:91:9b:c1:4a:61:2a:a2:1f:b3:1f:b2:bd:20: 26:93:7c:e4:26:5c:a3:e4:e5:b2:01:34:a0:72:4a:e8:0a:fc: 15:38:4f:63:1e:2e:c6:ce:3f:6c:6c:4a:de:b6:28:91:d1:1c: 37:55:31:90:ae:5d:a7:f7:25:de:8d:69:3b:9a:ad:2d:7a:34: cb:40:6f:71:27:e9:42:37:af:db:3a:f8:de:b6:a0:88:f9:d7: 5e:bc:a4:20:9e:8f:6f:95:e9:b7:5b:ed:cf:45:34:47:9e:4a: cb:18:16:b7:3d:e4:d9:49:75:c5:ff:02:61:a8:ca:0b:a7:e4: 08:1d:38:92:f4:23:01:3c:c0:c7:23:7f:05:d2:2a:32:1d:f7: 0f:f1:44:19:c3:48:5e:89:db:cd:5d:06:11:7b:6a:25:64:23: 92:9f:ae:5c:46:e3:01:d6:ee:0a:3c:95:5a:9d:e6:85:7c:e8: 51:50:e0:e0:b0:71:67:cf:98:ae:14:0f:24:ed:22:d9:e0:33: f1:2c:57:e6:40:c8:88:67:bf:0e:6a:6a:de:d9:f8:75:ce:e0: 15:3b:6f:98:38:3c:5b:e1:73:1e:38:87:86:bd:a8:cc:b7:47: 7d:05:04:14:42:4d:c4:19:29:97:7e:d0:b7:39:28:4f:9a:88: ea:8b:d3:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJc2xXjylhoc/qrMaSmgmR8odHHgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczMVoX DTI3MDMwMzA2MTIzMVowMzExMC8GA1UEAxMoQjJGMEM1Nzg3NTNDMkQ0QjcyMzlB OEFDNkZBNUZGRUZDQTRDMTJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyiCWXhuLMPCb4yOEpeyj+8UXdybaLDj5dCHd+o5hxxOaouUoIl4XvoevGR oTG9SgaTMrAUuipuqtgXQbmrTQmpFRzz7VlMHYgOzIHIg9wSgrdrvKHF65UtkuMi 1Gxoeu8kikb1qSu/odLEODPLaTirUVVp0fEgYkHajG1rAz7ZLLGPDy4YrIjOeDyO nbj4miE/ZfSH9IVRyscMqqrqwfwovSWeFnh8TSIgA6iX8z99LCXCvgqWfp0S1f5A ElHCCQLKgC9lV8hX78XmvSP0fqrv3tHoirs4mg+kK4/HI7PeIqySWbwYAyMclopp tZv+GzRbr4fixq2mRqIsaYbiJScCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSy8MV4 dTwtS3I5qKxvpf/vykwSpTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pjwwDQYJKoZIhvcNAQELBQADggEBACpooWV9kZvBSmEqoh+zH7K9ICaTfOQmXKPk 5bIBNKBySugK/BU4T2MeLsbOP2xsSt62KJHRHDdVMZCuXaf3Jd6NaTuarS16NMtA b3En6UI3r9s6+N62oIj51168pCCej2+V6bdb7c9FNEeeSssYFrc95NlJdcX/AmGo ygun5AgdOJL0IwE8wMcjfwXSKjId9w/xRBnDSF6J281dBhF7aiVkI5KfrlxG4wHW 7go8lVqd5oV86FFQ4OCwcWfPmK4UDyTtItngM/EsV+ZAyIhnvw5qat7Z+HXO4BU7 b5g4PFvhcx44h4a9qMy3R30FBBRCTcQZKZd+0Lc5KE+aiOqL0ww= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:24 2026 by rpki-client