$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144307.roa File: AS144307.roa (raw, json) Hash identifier: zn7Me/1xfhhQDt/2iTY4Dpd+H77HQxr1nwO2MC9Ax9k= Subject key identifier: 5D:33:14:BC:82:47:46:42:43:A9:DE:06:2E:60:35:AE:29:7B:D7:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6D2EF32962E3C57B00ECCFA2A67CE33E99B65526 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144307.roa Signing time: Wed 04 Mar 2026 06:14:55 +0000 ROA not before: Wed 04 Mar 2026 06:09:55 +0000 ROA not after: Wed 03 Mar 2027 06:14:55 +0000 asID: 144307 IP address blocks: 240a:a679::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2e:f3:29:62:e3:c5:7b:00:ec:cf:a2:a6:7c:e3:3e:99:b6:55:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:55 2026 GMT Not After : Mar 3 06:14:55 2027 GMT Subject: CN=5D3314BC8247464243A9DE062E6035AE297BD7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:98:85:9e:b6:4b:ba:dc:dc:a2:4b:3f:5e:65: a2:02:ba:8c:cd:69:c3:4b:26:0d:d3:f1:c9:b7:eb: 8a:4d:80:cf:6e:6a:23:11:78:3e:fc:3d:eb:45:fe: f9:1b:74:7c:cf:21:ac:59:90:98:af:9e:e4:dd:bb: b6:15:80:08:c5:2e:a3:54:8b:5f:8a:92:28:93:34: d8:f2:ce:10:8d:34:02:26:31:9e:6d:d9:dc:8c:57: 86:24:e6:55:c7:3f:ba:4b:57:8b:30:a0:b5:32:54: 2b:2b:ce:b4:19:0b:63:da:af:ae:61:fc:43:01:32: 83:bd:d4:d3:d5:17:52:40:bf:49:50:f6:ef:5b:14: 6b:6f:5a:9a:0f:8b:df:ee:6f:dd:68:58:b7:b6:63: 20:1c:56:55:2c:a7:3d:ee:21:c9:0d:f7:7e:1c:4c: 89:ba:53:e7:37:b2:7f:e8:f8:d6:2e:49:93:9b:a8: d5:0a:15:dc:78:db:ba:1a:e4:da:2f:d7:4c:0c:1e: 68:86:8b:34:f8:b1:f0:4b:64:03:7f:dc:57:cf:bb: c6:c6:ea:e4:c5:35:63:a9:6e:fb:9e:be:d1:ec:28: 51:d6:3f:bc:a4:92:4c:6a:d6:62:b7:48:8c:3f:4e: 1c:ba:ea:fa:e4:5a:4d:f0:86:aa:9c:c7:78:28:7b: fa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:33:14:BC:82:47:46:42:43:A9:DE:06:2E:60:35:AE:29:7B:D7:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144307.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a679::/32 Signature Algorithm: sha256WithRSAEncryption 91:88:dc:82:fd:f1:99:71:ea:2c:7c:28:65:74:83:27:61:b4: 13:20:eb:58:01:2c:bc:5a:4d:e2:f6:a9:3d:e4:60:e9:e5:5c: 7f:89:94:f8:d5:76:24:6b:e4:68:be:34:64:45:96:67:3b:f9: 6f:9b:9e:62:c9:47:bd:98:c0:89:3d:8f:65:bb:52:0e:56:8c: 5c:e2:f2:16:80:f7:30:e7:47:55:58:00:49:6a:11:1e:3e:88: 63:49:21:9f:a8:a5:f5:fe:91:4f:cd:35:a6:b2:5f:6d:18:29: a3:77:be:fa:c8:d5:47:9b:c2:ed:71:fd:08:5d:ce:55:73:ca: ad:2d:20:f9:d3:31:d4:a8:09:18:d3:5a:b1:69:fa:3f:9b:92: e6:83:82:30:0c:e3:3e:94:35:ce:0a:a7:06:8d:a0:07:67:3c: fb:6e:f3:a6:57:90:88:3e:65:52:99:ac:97:d9:c3:5b:08:1d: 22:51:cb:c4:3b:10:0d:6b:4b:6c:e5:e7:3c:66:8d:13:b7:68: e2:b4:cd:d7:66:7e:2c:8d:28:4b:e2:77:c0:03:36:d9:41:df: 59:55:df:0b:f6:4b:09:17:51:c0:cd:21:cd:74:c8:1c:88:5a: 48:bb:f4:f8:5e:74:9c:52:c6:25:51:a6:c7:07:af:40:9f:46: 1b:67:91:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbS7zKWLjxXsA7M+ipnzjPpm2VSYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1NVoX DTI3MDMwMzA2MTQ1NVowMzExMC8GA1UEAxMoNUQzMzE0QkM4MjQ3NDY0MjQzQTlE RTA2MkU2MDM1QUUyOTdCRDdCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKYhZ62S7rc3KJLP15logK6jM1pw0smDdPxybfrik2Az25qIxF4Pvw960X+ +Rt0fM8hrFmQmK+e5N27thWACMUuo1SLX4qSKJM02PLOEI00AiYxnm3Z3IxXhiTm Vcc/uktXizCgtTJUKyvOtBkLY9qvrmH8QwEyg73U09UXUkC/SVD271sUa29amg+L 3+5v3WhYt7ZjIBxWVSynPe4hyQ33fhxMibpT5zeyf+j41i5Jk5uo1QoV3Hjbuhrk 2i/XTAweaIaLNPix8EtkA3/cV8+7xsbq5MU1Y6lu+56+0ewoUdY/vKSSTGrWYrdI jD9OHLrq+uRaTfCGqpzHeCh7+jkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRdMxS8 gkdGQkOp3gYuYDWuKXvXuDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pnkwDQYJKoZIhvcNAQELBQADggEBAJGI3IL98Zlx6ix8KGV0gydhtBMg61gBLLxa TeL2qT3kYOnlXH+JlPjVdiRr5Gi+NGRFlmc7+W+bnmLJR72YwIk9j2W7Ug5WjFzi 8haA9zDnR1VYAElqER4+iGNJIZ+opfX+kU/NNaayX20YKaN3vvrI1Uebwu1x/Qhd zlVzyq0tIPnTMdSoCRjTWrFp+j+bkuaDgjAM4z6UNc4KpwaNoAdnPPtu86ZXkIg+ ZVKZrJfZw1sIHSJRy8Q7EA1rS2zl5zxmjRO3aOK0zddmfiyNKEvid8ADNtlB31lV 3wv2SwkXUcDNIc10yByIWki79PhedJxSxiVRpscHr0CfRhtnkbQ= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:37 2026 by rpki-client