$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144263.roa File: AS144263.roa (raw, json) Hash identifier: oRd3gbTcG9YQGOrY/nFZAfYRI5v56BXW/FzyJAGegB4= Subject key identifier: 5F:4C:42:D2:E8:E3:5B:9E:3B:20:12:67:9A:D3:E3:04:69:E1:C8:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6CEC91CE9C42A7CCDACA1F85A34D72844826C247 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144263.roa Signing time: Wed 04 Mar 2026 06:14:02 +0000 ROA not before: Wed 04 Mar 2026 06:09:02 +0000 ROA not after: Wed 03 Mar 2027 06:14:02 +0000 asID: 144263 IP address blocks: 240a:a64d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ec:91:ce:9c:42:a7:cc:da:ca:1f:85:a3:4d:72:84:48:26:c2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:02 2026 GMT Not After : Mar 3 06:14:02 2027 GMT Subject: CN=5F4C42D2E8E35B9E3B2012679AD3E30469E1C8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:41:27:aa:95:f4:47:a8:85:09:0f:c6:fb: bc:43:4a:2e:76:4e:c3:a7:df:b9:1b:bc:d1:c4:82: 8c:5c:6c:80:c0:61:4d:fa:88:23:ec:ec:76:54:b6: 1e:ca:af:13:af:bb:93:3b:7e:aa:cc:61:cb:e8:23: 00:4e:26:94:c3:48:72:9c:90:3b:ea:c1:bb:cd:4c: 4d:68:79:76:23:36:fa:be:ee:bc:86:fa:b0:d6:5a: 13:25:be:db:aa:c4:6c:19:1c:30:62:ab:bf:94:42: ed:98:0c:d1:a0:ad:6f:df:2b:2b:a5:b4:89:be:6d: 4c:4f:64:29:12:02:02:9d:74:5b:cf:f0:89:c5:14: d6:a5:af:93:85:95:66:24:50:93:07:0a:5d:46:dc: e7:97:f2:a6:27:70:c4:ff:50:14:80:c2:ed:96:40: a0:a7:66:f5:a9:f7:1a:d4:93:dc:8b:fb:14:65:0e: e5:b1:be:c9:2f:20:87:67:fb:cd:a7:26:d0:d0:d9: 81:f3:de:be:d1:f0:72:c0:51:08:76:b0:cf:15:ac: 31:ca:a0:f2:c3:ff:32:10:9f:37:72:55:c4:d4:ff: 6e:2c:54:0b:50:68:8e:f7:3a:7e:a7:9a:e4:0f:7f: 98:94:58:dc:1d:38:9b:6a:ff:47:60:af:8d:dd:5f: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:42:D2:E8:E3:5B:9E:3B:20:12:67:9A:D3:E3:04:69:E1:C8:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144263.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a64d::/32 Signature Algorithm: sha256WithRSAEncryption 20:7f:58:3e:99:b1:89:57:3c:31:bc:98:12:bd:b7:f3:7f:5a: f2:99:15:60:08:73:84:f1:63:15:ff:76:ba:30:e5:9f:93:e4: 78:75:21:09:cc:7c:e4:e8:0a:02:00:2e:86:17:cf:51:e3:46: ba:5c:29:3c:7b:5b:6d:e1:a1:6b:69:24:1d:8f:04:21:14:43: 17:9f:eb:de:47:88:ac:bf:13:a5:ea:bc:58:fc:52:a4:25:0c: 0d:fc:dd:1d:ea:50:19:6f:24:80:8b:89:59:d1:c3:92:99:e9: 79:f9:99:6d:fa:29:72:f2:bf:4b:2d:55:60:4c:cf:aa:5f:fd: d0:da:e7:7e:d4:7b:d5:b9:03:79:a6:61:c6:75:ca:e5:4b:33: e0:d3:f8:6b:f9:75:b2:4e:67:a0:40:28:63:46:e4:83:ac:71: 2f:15:54:78:44:ab:7f:c2:8c:8d:c7:a6:49:b3:7c:a6:29:83: 75:1a:fc:9a:79:e5:34:e2:57:38:a5:f8:50:cc:21:0d:4c:67: 5e:29:06:9d:41:84:04:3f:28:7f:73:a6:51:7b:91:95:ee:fc: d8:94:40:c0:84:a5:0f:39:62:40:72:26:77:d3:bc:f6:f4:c3: b0:99:b1:0e:7c:e9:80:dd:36:ce:3d:5d:dd:d6:20:dc:82:f2: 8a:97:86:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbOyRzpxCp8zayh+Fo01yhEgmwkcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwMloX DTI3MDMwMzA2MTQwMlowMzExMC8GA1UEAxMoNUY0QzQyRDJFOEUzNUI5RTNCMjAx MjY3OUFEM0UzMDQ2OUUxQzhENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIyjQSeqlfRHqIUJD8b7vENKLnZOw6ffuRu80cSCjFxsgMBhTfqII+zsdlS2 HsqvE6+7kzt+qsxhy+gjAE4mlMNIcpyQO+rBu81MTWh5diM2+r7uvIb6sNZaEyW+ 26rEbBkcMGKrv5RC7ZgM0aCtb98rK6W0ib5tTE9kKRICAp10W8/wicUU1qWvk4WV ZiRQkwcKXUbc55fypidwxP9QFIDC7ZZAoKdm9an3GtST3Iv7FGUO5bG+yS8gh2f7 zacm0NDZgfPevtHwcsBRCHawzxWsMcqg8sP/MhCfN3JVxNT/bixUC1Bojvc6fqea 5A9/mJRY3B04m2r/R2Cvjd1f/2cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRfTELS 6ONbnjsgEmea0+MEaeHI1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pk0wDQYJKoZIhvcNAQELBQADggEBACB/WD6ZsYlXPDG8mBK9t/N/WvKZFWAIc4Tx YxX/drow5Z+T5Hh1IQnMfOToCgIALoYXz1HjRrpcKTx7W23hoWtpJB2PBCEUQxef 695HiKy/E6XqvFj8UqQlDA383R3qUBlvJICLiVnRw5KZ6Xn5mW36KXLyv0stVWBM z6pf/dDa537Ue9W5A3mmYcZ1yuVLM+DT+Gv5dbJOZ6BAKGNG5IOscS8VVHhEq3/C jI3HpkmzfKYpg3Ua/Jp55TTiVzil+FDMIQ1MZ14pBp1BhAQ/KH9zplF7kZXu/NiU QMCEpQ85YkByJnfTvPb0w7CZsQ586YDdNs49Xd3WINyC8oqXhss= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:27 2026 by rpki-client