$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144289.roa File: AS144289.roa (raw, json) Hash identifier: 2N0g+HkJPNNj/S//hTtJrT0CAVehxfpjUNpo6nbut84= Subject key identifier: 6C:5B:11:B1:00:89:40:0F:EB:F0:7B:91:C3:B6:35:CD:B6:97:B8:3B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 423106700BE6B6604DFCCCF9C04F3FC1C5B99151 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144289.roa Signing time: Wed 04 Mar 2026 06:13:21 +0000 ROA not before: Wed 04 Mar 2026 06:08:21 +0000 ROA not after: Wed 03 Mar 2027 06:13:21 +0000 asID: 144289 IP address blocks: 240a:a667::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:31:06:70:0b:e6:b6:60:4d:fc:cc:f9:c0:4f:3f:c1:c5:b9:91:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:21 2026 GMT Not After : Mar 3 06:13:21 2027 GMT Subject: CN=6C5B11B10089400FEBF07B91C3B635CDB697B83B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:88:9a:87:6b:95:09:03:34:08:c3:15:65: b5:5d:70:95:e7:ff:ad:1d:a9:8b:fc:3d:91:40:ef: 6c:21:86:71:1b:41:92:23:ea:4d:5c:a1:e2:8b:6a: b3:21:58:8b:d9:a7:9c:80:7a:72:b3:aa:e5:ce:91: 09:f2:79:9b:03:b8:64:bb:99:6c:52:16:75:80:21: ac:68:0d:b9:bc:06:20:ac:b3:8c:88:d2:06:41:2e: 12:30:e7:4e:bd:51:fe:31:29:65:7a:e2:84:02:e6: 15:d8:04:e4:32:1d:4f:55:05:71:0e:49:ae:67:a6: f2:2c:ba:ba:04:b7:8b:e8:48:7e:a9:bb:86:1c:cb: 16:96:71:49:50:b3:11:8e:79:cb:2a:79:77:8f:aa: 8c:43:0e:c8:68:36:01:4d:8f:4d:3c:0a:d3:5c:1f: 04:8a:c6:44:59:d7:70:01:b5:31:6e:7c:d9:80:c0: 12:df:ef:f1:40:51:da:71:90:a1:3c:17:49:28:2d: dc:5e:4f:1c:36:26:30:bc:0b:37:66:77:73:61:62: 9c:47:20:89:e0:73:98:39:6f:6f:ef:6f:74:a9:4e: 4b:c3:18:65:72:3a:68:5f:ac:35:cc:4e:0a:06:07: d4:0f:e9:6f:8a:22:f3:b9:c8:d4:2b:78:04:95:80: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5B:11:B1:00:89:40:0F:EB:F0:7B:91:C3:B6:35:CD:B6:97:B8:3B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144289.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a667::/32 Signature Algorithm: sha256WithRSAEncryption 38:17:69:d6:85:1e:75:90:67:83:c6:fe:ec:ac:65:d1:e7:bc: 34:76:b7:f3:35:c8:ea:92:bb:b8:d1:28:6c:98:13:68:c5:35: f1:99:82:bf:97:fd:ec:4c:dd:a3:53:aa:73:00:20:35:3a:bf: f9:31:7e:98:aa:dc:b3:d2:c6:fa:da:52:75:c7:6c:28:89:b3: 33:62:91:e8:1e:87:7b:b4:32:62:12:d5:f3:d7:e9:70:91:88: b0:86:3d:99:fd:d4:d5:5a:36:8d:e4:05:74:10:d6:ed:c0:0a: 90:30:7c:cc:dd:5b:2e:5b:2c:c3:fa:bc:3b:c7:2c:f3:cd:d1: 2c:73:40:86:da:b0:a8:3f:bb:de:51:fc:1b:d9:4a:90:42:84: be:52:39:7b:eb:e2:3c:09:e2:1f:2f:37:5d:5d:d0:62:22:a2: ed:79:df:f8:ba:0d:19:d5:24:4a:75:0b:e3:74:df:3b:aa:2e: f4:06:06:4e:30:96:06:b5:78:95:2a:a2:56:9f:4b:c0:12:bb: e2:16:5f:6d:3e:c5:ac:8f:f9:0f:33:92:8e:2f:68:19:bd:e4: c0:39:a2:39:3f:7c:a1:24:fb:08:ed:b8:77:21:18:ad:72:0c: d3:e4:d5:40:df:e0:d8:8c:14:38:4e:87:8d:9d:11:76:79:bf: 5a:d6:ed:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQjEGcAvmtmBN/Mz5wE8/wcW5kVEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyMVoX DTI3MDMwMzA2MTMyMVowMzExMC8GA1UEAxMoNkM1QjExQjEwMDg5NDAwRkVCRjA3 QjkxQzNCNjM1Q0RCNjk3QjgzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTViJqHa5UJAzQIwxVltV1wlef/rR2pi/w9kUDvbCGGcRtBkiPqTVyh4otq syFYi9mnnIB6crOq5c6RCfJ5mwO4ZLuZbFIWdYAhrGgNubwGIKyzjIjSBkEuEjDn Tr1R/jEpZXrihALmFdgE5DIdT1UFcQ5Jrmem8iy6ugS3i+hIfqm7hhzLFpZxSVCz EY55yyp5d4+qjEMOyGg2AU2PTTwK01wfBIrGRFnXcAG1MW582YDAEt/v8UBR2nGQ oTwXSSgt3F5PHDYmMLwLN2Z3c2FinEcgieBzmDlvb+9vdKlOS8MYZXI6aF+sNcxO CgYH1A/pb4oi87nI1Ct4BJWAUu0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRsWxGx AIlAD+vwe5HDtjXNtpe4OzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pmcwDQYJKoZIhvcNAQELBQADggEBADgXadaFHnWQZ4PG/uysZdHnvDR2t/M1yOqS u7jRKGyYE2jFNfGZgr+X/exM3aNTqnMAIDU6v/kxfpiq3LPSxvraUnXHbCiJszNi kegeh3u0MmIS1fPX6XCRiLCGPZn91NVaNo3kBXQQ1u3ACpAwfMzdWy5bLMP6vDvH LPPN0SxzQIbasKg/u95R/BvZSpBChL5SOXvr4jwJ4h8vN11d0GIiou153/i6DRnV JEp1C+N03zuqLvQGBk4wlga1eJUqolafS8ASu+IWX20+xayP+Q8zko4vaBm95MA5 ojk/fKEk+wjtuHchGK1yDNPk1UDf4NiMFDhOh42dEXZ5v1rW7S4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:10 2026 by rpki-client