$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144309.roa File: AS144309.roa (raw, json) Hash identifier: sH2whKWFcVDfpcCLGY9D9E6Ij7M+TXyeCu4FnBmNtKA= Subject key identifier: 7F:60:53:B5:20:4E:38:A5:DE:A7:DC:AD:7B:53:B2:52:B1:8E:C2:33 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 61031979B6EB6B1F8A83D96AC39CD34A77B07A66 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144309.roa Signing time: Wed 04 Mar 2026 06:15:25 +0000 ROA not before: Wed 04 Mar 2026 06:10:25 +0000 ROA not after: Wed 03 Mar 2027 06:15:25 +0000 asID: 144309 IP address blocks: 240a:a67b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:03:19:79:b6:eb:6b:1f:8a:83:d9:6a:c3:9c:d3:4a:77:b0:7a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:25 2026 GMT Not After : Mar 3 06:15:25 2027 GMT Subject: CN=7F6053B5204E38A5DEA7DCAD7B53B252B18EC233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:d0:da:56:80:58:97:4d:24:7d:82:24:8d: 13:fb:da:9c:49:35:c0:5a:86:16:a4:78:5f:31:89: e6:d9:ca:e0:e6:c7:de:ea:fe:5d:8d:6c:63:82:0e: 93:d0:b2:90:7e:af:7f:84:49:97:c5:62:84:84:e2: 21:80:a2:e7:7d:40:b6:cc:37:c4:87:1d:fc:ce:79: a3:10:08:5d:8a:97:ee:aa:fd:1b:18:50:80:12:7b: e6:6e:c7:9a:b4:d7:de:08:5b:8a:6c:17:64:29:ea: 3d:b8:5f:ea:0a:d9:2c:0a:a4:ac:31:85:81:e2:87: 65:d7:06:4f:01:6c:5e:53:8a:7e:03:47:d0:93:62: 18:b0:37:ee:fc:7f:55:45:28:e2:6e:b5:d3:ac:8e: a6:a7:69:17:7b:8d:ad:fb:99:4d:70:40:e1:24:fa: ff:e2:e9:f2:4d:4d:8a:36:7e:a1:a5:7c:f3:15:4c: b1:c3:9e:76:39:60:8c:f9:e5:8a:d7:8b:69:b5:c8: 96:c4:a0:c5:53:cc:a0:30:33:bd:9d:dd:93:ad:a8: 50:9e:b5:81:5a:ab:dc:e4:d1:ba:50:e7:1f:06:59: 01:c4:6a:77:bc:e9:de:32:dd:0f:79:b6:31:cd:64: 80:2c:18:89:67:08:e4:17:cb:05:7f:29:a7:ac:a9: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:60:53:B5:20:4E:38:A5:DE:A7:DC:AD:7B:53:B2:52:B1:8E:C2:33 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144309.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a67b::/32 Signature Algorithm: sha256WithRSAEncryption bd:18:50:99:68:6a:2f:80:79:97:95:62:34:ff:4f:2c:dc:bf: 7b:e0:21:41:71:d9:0b:6e:4f:d3:3f:cb:df:80:2e:71:e4:40: 35:ec:57:05:18:b3:d6:f8:f7:ab:2b:d3:bb:c3:58:e4:93:c4: b4:d0:52:e5:d7:cc:39:61:ba:b4:09:56:9a:60:ed:b6:15:5a: 3a:c7:06:c1:45:50:7e:88:77:b8:32:54:44:1c:bc:87:61:20: a5:8b:4e:de:b5:35:c0:9b:42:ac:5d:e3:35:2c:8f:6b:f9:47: dc:5a:4f:cf:fe:eb:fa:bf:8f:0b:cb:55:f2:8a:d3:38:fe:0d: 5f:82:0e:5e:1d:90:06:99:f4:1e:c3:d9:fc:d2:4c:1b:b6:6d: 7f:25:1a:5e:84:50:8c:74:7a:11:ba:0c:a8:35:f4:99:bd:72: 36:88:92:65:62:35:01:70:42:7b:2d:7b:cd:86:55:ae:12:5c: 3b:d1:82:56:86:1b:4c:1b:2a:12:ff:34:92:e5:60:dd:7d:c5: 5e:ca:be:bb:fd:ae:3a:68:de:55:2c:b1:6e:29:72:f1:25:d4: 43:b6:f7:66:a0:6a:30:76:1c:ef:d0:fc:06:8b:c8:7d:eb:b6: df:2b:fe:54:4d:5a:2f:98:3b:56:fa:6e:13:4d:b2:51:d2:2c: e7:cd:1e:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYQMZebbrax+Kg9lqw5zTSnewemYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyNVoX DTI3MDMwMzA2MTUyNVowMzExMC8GA1UEAxMoN0Y2MDUzQjUyMDRFMzhBNURFQTdE Q0FEN0I1M0IyNTJCMThFQzIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsB0NpWgFiXTSR9giSNE/vanEk1wFqGFqR4XzGJ5tnK4ObH3ur+XY1sY4IO k9CykH6vf4RJl8VihITiIYCi531Atsw3xIcd/M55oxAIXYqX7qr9GxhQgBJ75m7H mrTX3ghbimwXZCnqPbhf6grZLAqkrDGFgeKHZdcGTwFsXlOKfgNH0JNiGLA37vx/ VUUo4m6106yOpqdpF3uNrfuZTXBA4ST6/+Lp8k1NijZ+oaV88xVMscOedjlgjPnl iteLabXIlsSgxVPMoDAzvZ3dk62oUJ61gVqr3OTRulDnHwZZAcRqd7zp3jLdD3m2 Mc1kgCwYiWcI5BfLBX8pp6ypwfUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR/YFO1 IE44pd6n3K17U7JSsY7CMzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pnswDQYJKoZIhvcNAQELBQADggEBAL0YUJloai+AeZeVYjT/Tyzcv3vgIUFx2Qtu T9M/y9+ALnHkQDXsVwUYs9b496sr07vDWOSTxLTQUuXXzDlhurQJVppg7bYVWjrH BsFFUH6Id7gyVEQcvIdhIKWLTt61NcCbQqxd4zUsj2v5R9xaT8/+6/q/jwvLVfKK 0zj+DV+CDl4dkAaZ9B7D2fzSTBu2bX8lGl6EUIx0ehG6DKg19Jm9cjaIkmViNQFw Qnste82GVa4SXDvRglaGG0wbKhL/NJLlYN19xV7Kvrv9rjpo3lUssW4pcvEl1EO2 92agajB2HO/Q/AaLyH3rtt8r/lRNWi+YO1b6bhNNslHSLOfNHok= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:34 2026 by rpki-client