$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144267.roa File: AS144267.roa (raw, json) Hash identifier: 1crIkupPvUiS4IE3d9wM6zvS0kSqWZrgaN2CzVwo0l8= Subject key identifier: 00:54:1B:35:47:61:A7:C2:CC:A1:E4:DC:36:E3:7B:64:64:F5:3D:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7F5B63CA678BE242843EA4391B79B1C962A4C3EE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144267.roa Signing time: Wed 04 Mar 2026 06:15:13 +0000 ROA not before: Wed 04 Mar 2026 06:10:13 +0000 ROA not after: Wed 03 Mar 2027 06:15:13 +0000 asID: 144267 IP address blocks: 240a:a651::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5b:63:ca:67:8b:e2:42:84:3e:a4:39:1b:79:b1:c9:62:a4:c3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:13 2026 GMT Not After : Mar 3 06:15:13 2027 GMT Subject: CN=00541B354761A7C2CCA1E4DC36E37B6464F53DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1a:de:e3:c0:dc:f8:36:3e:4d:a7:4a:ee:10: c7:1e:16:4f:c9:9d:97:56:ab:fe:36:ec:e0:a1:ef: c4:34:6a:86:0e:54:12:bc:c1:bc:0b:a5:f9:53:dd: 2b:8e:ad:8a:ad:a1:2b:33:ae:b6:45:fa:14:c8:3e: 22:1a:8e:58:7a:c1:1b:2e:a8:40:f1:5c:74:59:01: d9:41:5b:46:d6:1a:6f:05:0b:db:91:b0:9d:1f:37: ca:b9:7e:7c:22:62:a4:0e:24:10:e9:81:32:00:ec: 06:74:67:08:7e:7e:22:ce:01:38:e2:88:bf:e1:48: e8:6d:00:f0:94:3f:d8:cb:7c:1f:91:fe:c9:8f:d6: 13:1a:4e:0b:59:87:78:ee:ba:e4:cb:fd:e7:c0:51: be:d1:53:59:67:d9:8c:a1:25:05:e2:c7:87:30:2e: 84:50:7a:e0:cb:de:e3:ef:0a:29:0c:4d:b1:fa:b3: 5b:d8:a3:3f:b6:f0:88:fc:f4:d2:40:01:5f:83:e7: c2:42:91:75:94:a9:c2:bc:54:11:20:b1:0a:bd:69: 5d:83:13:13:20:ff:52:9c:e8:1c:34:55:ec:5b:e4: 6c:82:a5:96:92:a0:1f:1d:1b:14:97:3c:18:75:8f: 2e:51:e2:c8:fa:3b:70:df:61:65:79:10:eb:c7:cc: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:54:1B:35:47:61:A7:C2:CC:A1:E4:DC:36:E3:7B:64:64:F5:3D:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144267.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a651::/32 Signature Algorithm: sha256WithRSAEncryption 2f:36:12:d0:0e:b1:fb:27:ac:4e:44:02:1c:c2:88:ad:f8:2d: 8d:10:c2:8c:66:81:21:15:16:55:d1:e5:b9:58:63:c2:a8:8c: 7e:fd:6a:8f:6d:1e:ed:d4:67:13:34:05:d3:a9:cc:9d:45:d8: 18:23:ee:e3:07:57:2c:2f:54:97:45:c5:09:b9:48:12:1a:d2: 5d:b7:56:c5:08:8d:91:72:da:e9:ac:42:82:52:f6:b7:bf:31: ef:44:ff:75:c4:dd:a1:c0:3f:b8:5a:14:d6:ee:6c:5a:a3:ee: b1:9f:09:c4:74:64:14:90:f3:92:72:69:cf:f8:c2:aa:6d:af: d1:ed:95:da:40:70:e6:66:72:5e:23:4d:42:22:0b:06:61:ed: 43:20:92:83:3f:bf:be:88:44:62:c7:7e:8e:c7:03:0b:c7:35: 78:90:c7:e2:e5:43:b3:a0:aa:95:65:23:6c:18:a6:b5:88:4e: 5c:6a:a7:b9:c6:b5:4e:3b:a1:6e:2f:9d:09:d2:c3:35:92:fe: 90:73:82:b9:94:38:44:01:ca:f6:69:52:4d:0d:79:6b:4f:20: 68:20:97:29:f0:2f:4e:1e:1b:a0:d1:a0:f5:bb:5d:6e:79:15: 5d:da:4b:72:da:4e:72:27:81:83:99:0d:77:54:cc:aa:c9:8b: 5c:cc:48:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf1tjymeL4kKEPqQ5G3mxyWKkw+4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxM1oX DTI3MDMwMzA2MTUxM1owMzExMC8GA1UEAxMoMDA1NDFCMzU0NzYxQTdDMkNDQTFF NERDMzZFMzdCNjQ2NEY1M0RBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOwa3uPA3Pg2Pk2nSu4Qxx4WT8mdl1ar/jbs4KHvxDRqhg5UErzBvAul+VPd K46tiq2hKzOutkX6FMg+IhqOWHrBGy6oQPFcdFkB2UFbRtYabwUL25GwnR83yrl+ fCJipA4kEOmBMgDsBnRnCH5+Is4BOOKIv+FI6G0A8JQ/2Mt8H5H+yY/WExpOC1mH eO665Mv958BRvtFTWWfZjKElBeLHhzAuhFB64Mve4+8KKQxNsfqzW9ijP7bwiPz0 0kABX4PnwkKRdZSpwrxUESCxCr1pXYMTEyD/UpzoHDRV7FvkbIKllpKgHx0bFJc8 GHWPLlHiyPo7cN9hZXkQ68fMm3kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQAVBs1 R2Gnwsyh5Nw243tkZPU9ozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK plEwDQYJKoZIhvcNAQELBQADggEBAC82EtAOsfsnrE5EAhzCiK34LY0QwoxmgSEV FlXR5blYY8KojH79ao9tHu3UZxM0BdOpzJ1F2Bgj7uMHVywvVJdFxQm5SBIa0l23 VsUIjZFy2umsQoJS9re/Me9E/3XE3aHAP7haFNbubFqj7rGfCcR0ZBSQ85Jyac/4 wqptr9HtldpAcOZmcl4jTUIiCwZh7UMgkoM/v76IRGLHfo7HAwvHNXiQx+LlQ7Og qpVlI2wYprWITlxqp7nGtU47oW4vnQnSwzWS/pBzgrmUOEQByvZpUk0NeWtPIGgg lynwL04eG6DRoPW7XW55FV3aS3LaTnIngYOZDXdUzKrJi1zMSA0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:03 2026 by rpki-client