$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144255.roa File: AS144255.roa (raw, json) Hash identifier: 4EXyLSXQZlk50LgnP0Khi+h5FZM07fCSeX6tb1nnOis= Subject key identifier: 22:CD:CE:CF:30:DC:C8:27:6A:EB:AE:BC:26:B9:EF:4F:F8:F8:6C:FB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 56B2C6730BCCB0813B140A3B72315A38E8E5F794 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144255.roa Signing time: Wed 04 Mar 2026 06:13:54 +0000 ROA not before: Wed 04 Mar 2026 06:08:54 +0000 ROA not after: Wed 03 Mar 2027 06:13:54 +0000 asID: 144255 IP address blocks: 240a:a645::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b2:c6:73:0b:cc:b0:81:3b:14:0a:3b:72:31:5a:38:e8:e5:f7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:54 2026 GMT Not After : Mar 3 06:13:54 2027 GMT Subject: CN=22CDCECF30DCC8276AEBAEBC26B9EF4FF8F86CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:f8:df:9a:8f:74:5e:f0:a2:a5:ae:18:ba: b3:06:9a:4f:5d:f0:4e:b2:14:ad:8d:d7:28:d4:ba: a2:21:cd:2e:74:83:74:b2:5d:9d:7f:a1:cd:30:d2: c1:19:65:fd:98:86:9e:33:4f:1a:b2:8f:f8:11:ee: 0e:f6:c0:eb:a1:b8:89:d5:55:13:52:2c:81:88:bd: 65:62:93:d3:b1:bb:a1:6b:82:aa:24:0b:6f:e3:98: 77:e5:8a:0d:95:ed:f3:f6:52:e4:2e:8f:5a:c5:3a: 55:4e:3a:9b:4c:28:4d:56:02:a9:0e:49:4c:db:7d: 3c:f6:66:7b:c6:8a:c8:db:7c:df:a9:03:0d:df:80: 48:e5:d0:bf:c5:07:32:6e:85:1c:3b:b4:4e:aa:b6: 27:03:29:18:a2:8a:55:a5:3a:fd:43:90:5b:e0:2d: b4:52:43:27:d7:8c:02:ae:ad:6f:e6:6a:24:df:2d: 92:27:a9:22:05:80:4a:da:d1:38:07:45:c9:93:5e: 68:94:c8:e3:1c:fa:3b:b2:ef:67:d6:52:da:b0:57: c4:bc:86:cd:40:0f:8e:d7:93:82:c9:76:c8:00:6e: d2:73:20:ee:c3:ef:4f:14:f3:03:88:55:71:97:3a: 23:3e:01:54:64:5a:d5:9d:17:33:21:12:98:b3:bf: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CD:CE:CF:30:DC:C8:27:6A:EB:AE:BC:26:B9:EF:4F:F8:F8:6C:FB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144255.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a645::/32 Signature Algorithm: sha256WithRSAEncryption 0d:1b:d2:41:10:d2:ce:02:d0:f1:41:97:d1:35:5f:a7:42:19: 7f:06:5c:03:0f:18:2e:14:9e:60:5d:46:29:0f:da:2a:8d:31: 1f:52:e7:8a:87:14:24:e6:59:70:73:6c:ab:35:17:44:e6:f5: 5c:2f:f9:b9:69:ba:75:ad:52:b0:af:23:4e:7d:24:c3:ce:ef: fa:b2:28:d7:b2:20:b3:8e:a0:ee:2e:46:d8:ad:1e:13:ea:84: 77:f2:35:53:0e:71:62:08:73:7a:a3:66:71:8c:49:3c:45:26: ec:d3:a3:5d:ee:a4:eb:b9:2a:84:ce:2c:74:63:d9:96:59:18: d3:20:ed:97:e4:8c:20:9e:67:ed:a4:89:fc:48:fe:92:17:09: 31:29:48:4b:d8:db:38:c6:25:5f:7d:47:49:2b:e4:83:0d:b4: e0:c3:eb:e3:55:d7:9a:14:89:6e:56:23:93:3b:b3:95:ed:a0: b1:7b:47:b1:84:03:2d:b4:d3:5e:f3:74:98:65:1e:e1:36:2a: 46:c9:cc:f6:1c:a9:19:c3:c8:1e:9d:11:0f:a6:0c:f9:d7:9f: 7d:81:0f:9c:72:a2:e3:f3:7a:0a:7b:6d:21:42:ef:0e:76:50: e6:7e:ef:1f:c7:77:4e:c0:eb:08:57:ba:8f:46:79:1a:71:9f: 50:3f:60:5c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVrLGcwvMsIE7FAo7cjFaOOjl95QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1NFoX DTI3MDMwMzA2MTM1NFowMzExMC8GA1UEAxMoMjJDRENFQ0YzMERDQzgyNzZBRUJB RUJDMjZCOUVGNEZGOEY4NkNGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjr+N+aj3Re8KKlrhi6swaaT13wTrIUrY3XKNS6oiHNLnSDdLJdnX+hzTDS wRll/ZiGnjNPGrKP+BHuDvbA66G4idVVE1IsgYi9ZWKT07G7oWuCqiQLb+OYd+WK DZXt8/ZS5C6PWsU6VU46m0woTVYCqQ5JTNt9PPZme8aKyNt836kDDd+ASOXQv8UH Mm6FHDu0Tqq2JwMpGKKKVaU6/UOQW+AttFJDJ9eMAq6tb+ZqJN8tkiepIgWAStrR OAdFyZNeaJTI4xz6O7LvZ9ZS2rBXxLyGzUAPjteTgsl2yABu0nMg7sPvTxTzA4hV cZc6Iz4BVGRa1Z0XMyESmLO/r7ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQizc7P MNzIJ2rrrrwmue9P+Phs+zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pkUwDQYJKoZIhvcNAQELBQADggEBAA0b0kEQ0s4C0PFBl9E1X6dCGX8GXAMPGC4U nmBdRikP2iqNMR9S54qHFCTmWXBzbKs1F0Tm9Vwv+blpunWtUrCvI059JMPO7/qy KNeyILOOoO4uRtitHhPqhHfyNVMOcWIIc3qjZnGMSTxFJuzTo13upOu5KoTOLHRj 2ZZZGNMg7ZfkjCCeZ+2kifxI/pIXCTEpSEvY2zjGJV99R0kr5IMNtODD6+NV15oU iW5WI5M7s5XtoLF7R7GEAy20017zdJhlHuE2KkbJzPYcqRnDyB6dEQ+mDPnXn32B D5xyouPzegp7bSFC7w52UOZ+7x/Hd07A6whXuo9GeRpxn1A/YFw= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:01 2026 by rpki-client