$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144260.roa File: AS144260.roa (raw, json) Hash identifier: nuFv/itX2xFYZ5mLFu7HwnbSYg0VZeQsklJDJ1drYoU= Subject key identifier: B6:FC:B7:F6:8E:BF:08:67:7B:C2:55:90:59:B2:A0:E2:A5:9D:10:93 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30F67622C0581A09E6CBAF6E0D020AE3F75FC52F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144260.roa Signing time: Wed 04 Mar 2026 06:13:51 +0000 ROA not before: Wed 04 Mar 2026 06:08:51 +0000 ROA not after: Wed 03 Mar 2027 06:13:51 +0000 asID: 144260 IP address blocks: 240a:a64a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f6:76:22:c0:58:1a:09:e6:cb:af:6e:0d:02:0a:e3:f7:5f:c5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:51 2026 GMT Not After : Mar 3 06:13:51 2027 GMT Subject: CN=B6FCB7F68EBF08677BC2559059B2A0E2A59D1093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:04:00:af:e4:26:bd:34:c6:9f:a5:a9:da: 25:b7:88:70:c7:01:ae:04:fd:fa:90:32:12:1e:65: f9:da:0c:cc:dc:6a:76:29:f0:61:24:54:54:30:28: dd:17:13:43:a2:ff:3b:cf:c1:cf:fe:2a:4a:5c:af: fc:e4:be:ac:a4:f5:e2:41:98:3f:2d:ae:a2:4b:2b: ed:3b:79:31:6f:e3:f0:b8:70:e9:1e:6f:e5:77:c0: 84:78:dc:56:47:5c:74:90:d0:ea:ec:46:8d:94:d6: 39:b5:5f:11:05:11:78:89:d1:d3:df:53:41:c8:4f: 19:1f:54:f6:7b:5f:aa:33:5d:01:33:dd:ba:fc:8c: ca:ac:ea:cc:83:93:50:5b:7b:7c:cc:df:28:db:da: 3a:52:2e:a5:76:1f:b7:27:47:86:a6:a9:e8:5b:d3: 33:55:07:d0:f2:50:af:ef:87:c4:6a:50:ad:d2:82: 63:fd:41:f5:cb:93:b5:ba:41:4c:7f:bd:8f:f4:49: ac:10:3a:4a:b7:b7:0b:53:fa:94:b7:ba:43:ab:7e: cf:d3:4e:d3:87:0e:b1:98:fc:1a:34:cb:65:3b:79: 20:96:21:db:e3:4a:95:aa:b8:93:cd:60:a8:ce:9d: f1:e8:18:1f:2c:d4:3b:a9:56:5e:08:17:b3:e4:cb: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FC:B7:F6:8E:BF:08:67:7B:C2:55:90:59:B2:A0:E2:A5:9D:10:93 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144260.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a64a::/32 Signature Algorithm: sha256WithRSAEncryption a4:f2:c6:e8:65:3b:7e:6d:38:f6:8a:e8:68:31:3a:26:a4:96: 3a:45:6a:12:cb:b1:70:c6:0f:1a:83:06:0c:f1:7d:01:aa:a4: b6:6b:f2:86:7c:a5:d6:69:bb:1f:7a:83:cd:39:a7:11:ee:84: 0d:0b:4e:f7:cd:f5:7b:25:6b:ef:84:5a:be:c9:de:71:db:25: bc:38:9b:a2:f5:a7:ee:b2:9a:d5:50:b0:51:ef:a0:ae:89:df: dc:fd:23:b7:22:bd:fc:16:ce:70:a5:06:95:f2:f8:14:80:4a: 14:c9:2c:25:b4:6c:0b:13:db:93:07:51:9a:c2:d3:54:46:1d: 1e:15:50:0b:24:31:bb:ff:ea:97:cc:63:36:df:3a:16:4f:55: 2a:f4:79:3c:fd:0c:e7:db:5a:8a:f4:39:bb:1d:75:3a:30:d6: 5d:81:89:b4:0a:58:2d:64:d2:4f:da:7a:e4:f1:26:d5:3b:87: 6e:4c:ae:c0:bc:8c:d4:b9:e3:88:76:a3:7d:9f:be:29:4a:d8: 71:d4:20:75:fc:f7:ff:1d:a7:19:a6:bc:0a:4f:9f:0b:c9:86: c3:7e:58:f9:8a:24:57:0d:69:88:94:85:a4:c1:45:14:8a:dc: 44:6e:c6:19:4a:84:af:69:67:f1:6d:5e:93:9b:e7:ee:a4:0d: 4b:cf:27:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMPZ2IsBYGgnmy69uDQIK4/dfxS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1MVoX DTI3MDMwMzA2MTM1MVowMzExMC8GA1UEAxMoQjZGQ0I3RjY4RUJGMDg2NzdCQzI1 NTkwNTlCMkEwRTJBNTlEMTA5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyABACv5Ca9NMafpanaJbeIcMcBrgT9+pAyEh5l+doMzNxqdinwYSRUVDAo 3RcTQ6L/O8/Bz/4qSlyv/OS+rKT14kGYPy2uoksr7Tt5MW/j8Lhw6R5v5XfAhHjc VkdcdJDQ6uxGjZTWObVfEQUReInR099TQchPGR9U9ntfqjNdATPduvyMyqzqzIOT UFt7fMzfKNvaOlIupXYftydHhqap6FvTM1UH0PJQr++HxGpQrdKCY/1B9cuTtbpB TH+9j/RJrBA6Sre3C1P6lLe6Q6t+z9NO04cOsZj8GjTLZTt5IJYh2+NKlaq4k81g qM6d8egYHyzUO6lWXggXs+TLJUMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS2/Lf2 jr8IZ3vCVZBZsqDipZ0QkzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pkowDQYJKoZIhvcNAQELBQADggEBAKTyxuhlO35tOPaK6GgxOiakljpFahLLsXDG DxqDBgzxfQGqpLZr8oZ8pdZpux96g805pxHuhA0LTvfN9Xsla++EWr7J3nHbJbw4 m6L1p+6ymtVQsFHvoK6J39z9I7civfwWznClBpXy+BSAShTJLCW0bAsT25MHUZrC 01RGHR4VUAskMbv/6pfMYzbfOhZPVSr0eTz9DOfbWor0ObsddTow1l2BibQKWC1k 0k/aeuTxJtU7h25MrsC8jNS544h2o32fvilK2HHUIHX89/8dpxmmvApPnwvJhsN+ WPmKJFcNaYiUhaTBRRSK3ERuxhlKhK9pZ/FtXpOb5+6kDUvPJ6E= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:45 2026 by rpki-client