$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144291.roa File: AS144291.roa (raw, json) Hash identifier: wFLimJjCOZ2ZFdmBFU9UZQRsVcr3gpdofgqOSAm2ojc= Subject key identifier: 10:EA:3B:53:74:BA:C9:64:90:A6:92:61:74:35:6B:9C:03:A3:61:0E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6BFF4F80F7C1A0F897C5FE2D492175D594F723D5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144291.roa Signing time: Wed 04 Mar 2026 06:12:50 +0000 ROA not before: Wed 04 Mar 2026 06:07:50 +0000 ROA not after: Wed 03 Mar 2027 06:12:50 +0000 asID: 144291 IP address blocks: 240a:a669::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ff:4f:80:f7:c1:a0:f8:97:c5:fe:2d:49:21:75:d5:94:f7:23:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:50 2026 GMT Not After : Mar 3 06:12:50 2027 GMT Subject: CN=10EA3B5374BAC96490A6926174356B9C03A3610E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:83:dc:b3:cd:5b:8c:e9:2a:41:9f:22:32: 14:7b:62:ec:49:52:73:a0:1e:c9:bf:41:0a:eb:7d: c9:5b:11:c7:e5:bf:93:d9:25:d8:85:06:44:fc:8b: 5e:19:17:9d:3c:ed:e6:ac:44:a6:cb:79:38:2a:e3: 21:b0:66:de:23:06:c5:a9:b7:3d:65:f9:bd:76:ef: 25:e4:c0:02:60:13:98:83:31:65:e0:2d:a3:03:7c: bf:ec:b7:2b:84:ab:2f:07:93:a1:3f:c2:ff:f4:52: ef:6b:bc:96:b9:5e:65:bb:9d:86:7f:95:20:9a:f5: 27:2c:e6:da:83:50:83:52:87:f7:14:d1:97:38:6e: 39:a0:2c:86:70:d7:11:b8:4b:5b:ad:1f:ee:87:10: d0:2b:d0:4f:a4:45:9c:7a:af:ef:9e:ba:43:0f:2c: 2b:ac:88:90:9d:2d:12:d0:da:60:be:5e:d8:11:47: 06:4d:90:88:d6:cb:e8:7c:1d:25:82:23:da:a7:1b: 4d:77:90:89:06:49:85:c2:52:c7:8c:3b:32:43:21: 75:da:e1:ed:f1:28:b5:f7:77:dc:75:d9:cd:2e:07: ba:d1:78:05:81:4b:81:57:e0:45:d9:a9:02:40:e0: b9:14:d3:b1:99:8d:56:63:da:b2:85:c2:73:f2:89: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EA:3B:53:74:BA:C9:64:90:A6:92:61:74:35:6B:9C:03:A3:61:0E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a669::/32 Signature Algorithm: sha256WithRSAEncryption 0f:35:4a:b5:b2:e2:a4:9c:2c:20:98:91:54:aa:87:5b:49:00: 3e:0a:6a:9b:4f:ae:07:1e:e6:96:91:1f:9e:08:91:c7:a3:61: bf:f9:fc:01:53:04:7d:32:be:53:8d:79:ad:49:c6:b0:9d:55: 75:10:36:26:a9:fc:ac:d1:87:d1:03:2c:97:91:15:78:21:70: 3c:a0:d0:95:68:1f:29:e9:2f:68:69:06:4d:23:5f:a9:5d:37: c6:a8:d3:64:93:82:27:e0:1c:b1:2f:69:2f:ec:61:e3:71:b7: ef:12:6b:f2:8d:92:79:11:af:d2:27:20:56:71:15:21:de:c0: 08:ca:99:32:7f:4a:04:57:36:08:7a:75:98:16:fa:29:13:99: 74:64:e8:98:b5:f1:78:72:4f:dd:3a:4c:be:19:99:80:8e:59: de:5c:50:de:b7:3d:bd:31:38:b7:dc:49:f3:71:ff:7c:bc:44: 0a:a3:c3:f5:3b:af:0d:c9:5a:ed:4c:ce:9c:ff:56:15:55:83: c1:66:58:e0:6b:f1:4f:76:cf:fb:b5:02:bc:06:eb:cb:80:d0: 51:4b:de:53:8c:f6:39:b2:3a:68:63:8a:d3:b1:3d:0f:78:9e: f7:fe:c3:97:9b:ad:2c:e0:e0:7a:1e:b5:76:73:38:af:81:8d: 56:76:e2:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa/9PgPfBoPiXxf4tSSF11ZT3I9UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1MFoX DTI3MDMwMzA2MTI1MFowMzExMC8GA1UEAxMoMTBFQTNCNTM3NEJBQzk2NDkwQTY5 MjYxNzQzNTZCOUMwM0EzNjEwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJjNg9yzzVuM6SpBnyIyFHti7ElSc6Aeyb9BCut9yVsRx+W/k9kl2IUGRPyL XhkXnTzt5qxEpst5OCrjIbBm3iMGxam3PWX5vXbvJeTAAmATmIMxZeAtowN8v+y3 K4SrLweToT/C//RS72u8lrleZbudhn+VIJr1Jyzm2oNQg1KH9xTRlzhuOaAshnDX EbhLW60f7ocQ0CvQT6RFnHqv7566Qw8sK6yIkJ0tEtDaYL5e2BFHBk2QiNbL6Hwd JYIj2qcbTXeQiQZJhcJSx4w7MkMhddrh7fEotfd33HXZzS4HutF4BYFLgVfgRdmp AkDguRTTsZmNVmPasoXCc/KJs+8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQQ6jtT dLrJZJCmkmF0NWucA6NhDjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pmkwDQYJKoZIhvcNAQELBQADggEBAA81SrWy4qScLCCYkVSqh1tJAD4KaptPrgce 5paRH54IkcejYb/5/AFTBH0yvlONea1JxrCdVXUQNiap/KzRh9EDLJeRFXghcDyg 0JVoHynpL2hpBk0jX6ldN8ao02STgifgHLEvaS/sYeNxt+8Sa/KNknkRr9InIFZx FSHewAjKmTJ/SgRXNgh6dZgW+ikTmXRk6Ji18XhyT906TL4ZmYCOWd5cUN63Pb0x OLfcSfNx/3y8RAqjw/U7rw3JWu1Mzpz/VhVVg8FmWOBr8U92z/u1ArwG68uA0FFL 3lOM9jmyOmhjitOxPQ94nvf+w5ebrSzg4HoetXZzOK+BjVZ24hs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:12 2026 by rpki-client