$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144308.roa File: AS144308.roa (raw, json) Hash identifier: 9jVyvX8AiLFc3YBkILwsN8rIU4QUKkCpnDr7o05Muko= Subject key identifier: FA:31:D4:7F:81:FA:7F:D4:15:42:09:C8:1B:0A:ED:B5:FD:03:FD:73 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0EE887344A6DBAC659497D52CA0FC94E437C3AFA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144308.roa Signing time: Wed 04 Mar 2026 06:13:18 +0000 ROA not before: Wed 04 Mar 2026 06:08:18 +0000 ROA not after: Wed 03 Mar 2027 06:13:18 +0000 asID: 144308 IP address blocks: 240a:a67a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e8:87:34:4a:6d:ba:c6:59:49:7d:52:ca:0f:c9:4e:43:7c:3a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:18 2026 GMT Not After : Mar 3 06:13:18 2027 GMT Subject: CN=FA31D47F81FA7FD4154209C81B0AEDB5FD03FD73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:3d:8c:11:3c:0f:6a:c3:e8:39:e7:6c:47: 4b:70:2b:0e:08:15:56:1d:63:de:a4:e8:ff:4e:3b: 3b:c2:15:34:13:e6:cb:72:00:f1:af:04:3d:06:9f: e3:e8:19:cd:4f:72:1f:3d:f2:51:34:2e:f1:8c:4d: de:0f:a5:0d:a3:13:f5:36:36:0a:c2:72:a2:34:b2: 0d:70:16:2d:e5:f6:83:a4:97:fc:2f:b1:34:a8:aa: fa:0c:47:d5:3d:77:1b:f4:f3:93:4b:b5:62:e2:4a: dc:2e:59:31:9d:9b:d1:1b:b2:13:08:66:c7:3c:cc: 43:53:39:9e:71:52:48:04:13:a2:a3:58:ea:ec:64: 5f:82:e1:c6:bf:f3:f1:e4:9c:ea:35:3e:62:4a:d4: a8:b7:b1:e2:c1:6e:96:a7:ad:34:a6:d1:c5:4e:a5: 5b:dd:09:10:ac:5c:25:9c:77:37:53:a7:ce:97:f6: 72:41:03:07:13:da:0f:b0:27:06:86:7f:c1:9d:3c: 0e:fe:f1:70:f1:2b:b1:83:dd:f3:a8:0b:35:c0:f7: 7b:fd:04:1a:69:f9:e2:de:8f:43:05:8d:b1:eb:5d: 34:19:ad:0b:1e:d9:16:eb:23:0b:68:4e:14:bb:b5: 2b:08:7a:49:49:53:d9:3d:db:67:14:af:94:8e:3b: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:31:D4:7F:81:FA:7F:D4:15:42:09:C8:1B:0A:ED:B5:FD:03:FD:73 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144308.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a67a::/32 Signature Algorithm: sha256WithRSAEncryption 4c:b9:1d:63:99:92:68:67:32:a9:76:60:68:6d:0e:33:05:b4: a7:0d:59:e7:cc:53:79:9b:36:9b:48:2f:25:ea:ef:e2:5f:73: 0d:a7:70:5f:57:0a:0e:bb:09:1b:82:ee:f0:0e:65:d3:41:64: 69:9f:c2:a0:23:4e:18:d3:6f:ff:f7:15:61:2c:d1:3f:23:4e: c7:54:04:89:3b:5b:2c:09:53:2c:30:58:a1:cc:98:cd:e7:ea: 37:6e:9b:90:31:29:62:c9:42:16:f0:d2:e7:59:6b:9f:74:4c: bf:c4:11:bc:a1:3e:a5:9a:00:a3:ef:f4:d2:a8:c4:9c:76:af: fc:3e:94:cc:34:51:9d:52:ec:b5:c2:0d:49:3a:5b:fa:f1:d4: bc:ec:b8:77:e2:ae:ed:7d:83:16:e4:d7:3b:21:0b:7c:fc:6d: 5e:17:7e:e2:c0:46:51:49:41:56:25:fa:b9:ce:8d:66:ec:de: d8:17:31:fc:49:b0:f0:36:68:63:f8:dc:bd:23:57:03:40:c7: 49:37:e4:19:a4:6a:fd:d6:fb:13:5e:56:55:7c:11:47:63:c2: 05:f5:18:da:f1:7f:64:de:e2:c5:82:74:0d:84:d0:21:97:bd: dd:5f:8b:d6:5a:b8:10:52:7d:0a:11:ff:91:22:6e:66:93:8e: f3:d9:ad:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDuiHNEptusZZSX1Syg/JTkN8OvowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxOFoX DTI3MDMwMzA2MTMxOFowMzExMC8GA1UEAxMoRkEzMUQ0N0Y4MUZBN0ZENDE1NDIw OUM4MUIwQUVEQjVGRDAzRkQ3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxsPYwRPA9qw+g552xHS3ArDggVVh1j3qTo/047O8IVNBPmy3IA8a8EPQaf 4+gZzU9yHz3yUTQu8YxN3g+lDaMT9TY2CsJyojSyDXAWLeX2g6SX/C+xNKiq+gxH 1T13G/Tzk0u1YuJK3C5ZMZ2b0RuyEwhmxzzMQ1M5nnFSSAQToqNY6uxkX4Lhxr/z 8eSc6jU+YkrUqLex4sFulqetNKbRxU6lW90JEKxcJZx3N1Onzpf2ckEDBxPaD7An BoZ/wZ08Dv7xcPErsYPd86gLNcD3e/0EGmn54t6PQwWNsetdNBmtCx7ZFusjC2hO FLu1Kwh6SUlT2T3bZxSvlI47SvUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT6MdR/ gfp/1BVCCcgbCu21/QP9czAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pnowDQYJKoZIhvcNAQELBQADggEBAEy5HWOZkmhnMql2YGhtDjMFtKcNWefMU3mb NptILyXq7+Jfcw2ncF9XCg67CRuC7vAOZdNBZGmfwqAjThjTb//3FWEs0T8jTsdU BIk7WywJUywwWKHMmM3n6jdum5AxKWLJQhbw0udZa590TL/EEbyhPqWaAKPv9NKo xJx2r/w+lMw0UZ1S7LXCDUk6W/rx1LzsuHfiru19gxbk1zshC3z8bV4XfuLARlFJ QVYl+rnOjWbs3tgXMfxJsPA2aGP43L0jVwNAx0k35Bmkav3W+xNeVlV8EUdjwgX1 GNrxf2Te4sWCdA2E0CGXvd1fi9ZauBBSfQoR/5EibmaTjvPZrZE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:03 2026 by rpki-client