$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144313.roa File: AS144313.roa (raw, json) Hash identifier: M444BcdsvQ1/bd17hfQ3QL+G4XcxKQmFqGZs3ILEQHE= Subject key identifier: 0F:62:01:7A:FC:17:FA:64:4E:39:1B:00:FA:F7:9A:34:4B:F2:57:67 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4026CFE3502FC0D6AFA5A5AA795F2E0EF3024A3E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144313.roa Signing time: Wed 04 Mar 2026 06:15:44 +0000 ROA not before: Wed 04 Mar 2026 06:10:44 +0000 ROA not after: Wed 03 Mar 2027 06:15:44 +0000 asID: 144313 IP address blocks: 240a:a67f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:26:cf:e3:50:2f:c0:d6:af:a5:a5:aa:79:5f:2e:0e:f3:02:4a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:44 2026 GMT Not After : Mar 3 06:15:44 2027 GMT Subject: CN=0F62017AFC17FA644E391B00FAF79A344BF25767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0d:07:ca:67:f6:12:d4:e9:5c:73:79:d8:32: de:e3:91:c8:3e:27:d7:11:bf:68:f8:52:56:49:ed: bd:5d:17:74:71:f9:99:70:f1:1d:94:9b:e6:a8:06: e0:1b:d6:0a:9a:2d:c7:5f:bb:4e:fe:92:bf:1b:2d: 5c:a7:08:0c:57:41:31:ec:d2:74:3f:9c:70:42:cc: 51:1a:ad:c3:09:42:9b:27:2e:55:ba:16:e5:d7:4a: 46:83:6f:ab:b8:74:b2:fd:d2:0a:82:07:71:18:9d: be:72:09:9f:6e:58:b8:cc:a1:e7:23:2a:7c:d1:09: 6f:8a:7a:51:32:eb:b7:fb:7e:5a:2d:18:9c:8a:84: 99:aa:b1:a3:9a:08:bc:d7:9b:9d:dc:ae:1f:ac:d3: 47:3d:4c:c3:21:1b:3b:33:15:d5:7a:7f:f7:96:a4: 22:ff:c5:50:28:b8:0d:1a:01:2a:91:1b:ca:38:8b: 97:99:45:88:c4:1d:41:c5:eb:21:92:c4:ba:80:73: 61:af:69:3c:3b:6a:bf:55:ea:2e:63:2c:ff:1f:85: 53:f3:61:55:f9:89:b2:f8:0c:74:16:03:4a:63:26: 98:4a:2f:65:7d:7a:7b:32:a1:40:ad:3e:57:07:9c: 6a:a4:95:90:d3:99:fa:84:61:ee:a5:40:c6:11:a6: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:62:01:7A:FC:17:FA:64:4E:39:1B:00:FA:F7:9A:34:4B:F2:57:67 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144313.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a67f::/32 Signature Algorithm: sha256WithRSAEncryption 4e:f9:23:2d:20:c0:c9:29:cf:7f:92:3f:4d:f5:83:67:0b:b7: cc:f8:db:e5:67:69:47:f6:08:05:b7:17:f8:6b:56:39:0a:2f: c6:0e:ca:b0:be:9a:ba:08:10:12:ce:c2:40:a3:fe:c3:e1:88: 0e:f0:51:fc:60:ad:ca:12:19:da:db:b9:25:08:28:4e:cc:7f: 63:91:6a:87:c0:3d:49:dc:9b:9b:a4:36:3e:c4:2a:de:9e:b6: 5e:71:3d:06:61:f5:59:08:dc:96:5f:ad:9e:68:0b:7e:49:8f: 5d:f7:3f:81:b0:95:4e:97:6d:95:b3:ea:23:ea:16:45:b4:ed: 99:8a:af:bb:11:2d:96:d6:f0:64:24:df:2a:6c:f3:bd:92:c1: 23:f2:f9:d1:80:83:4e:e8:c9:76:1e:2d:53:91:fb:7d:3c:c3: 59:bf:8d:85:36:83:c9:11:2d:d2:f5:11:96:06:b6:7f:44:3d: 4c:e2:08:5d:79:d8:39:7f:c7:02:65:d3:eb:2d:dd:44:43:da: e8:cd:55:45:ff:c5:81:f7:86:90:48:29:fc:1a:9c:98:e4:72: a5:b8:bb:b7:e7:11:2c:03:40:4e:db:56:e3:fc:cf:99:4d:ff: 76:e2:fd:0a:0e:fc:95:36:e5:77:cf:d3:c3:db:d3:95:20:b6: 20:80:53:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQCbP41AvwNavpaWqeV8uDvMCSj4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0NFoX DTI3MDMwMzA2MTU0NFowMzExMC8GA1UEAxMoMEY2MjAxN0FGQzE3RkE2NDRFMzkx QjAwRkFGNzlBMzQ0QkYyNTc2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwNB8pn9hLU6Vxzedgy3uORyD4n1xG/aPhSVkntvV0XdHH5mXDxHZSb5qgG 4BvWCpotx1+7Tv6SvxstXKcIDFdBMezSdD+ccELMURqtwwlCmycuVboW5ddKRoNv q7h0sv3SCoIHcRidvnIJn25YuMyh5yMqfNEJb4p6UTLrt/t+Wi0YnIqEmaqxo5oI vNebndyuH6zTRz1MwyEbOzMV1Xp/95akIv/FUCi4DRoBKpEbyjiLl5lFiMQdQcXr IZLEuoBzYa9pPDtqv1XqLmMs/x+FU/NhVfmJsvgMdBYDSmMmmEovZX16ezKhQK0+ VwecaqSVkNOZ+oRh7qVAxhGmP90CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQPYgF6 /Bf6ZE45GwD695o0S/JXZzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pn8wDQYJKoZIhvcNAQELBQADggEBAE75Iy0gwMkpz3+SP031g2cLt8z42+VnaUf2 CAW3F/hrVjkKL8YOyrC+mroIEBLOwkCj/sPhiA7wUfxgrcoSGdrbuSUIKE7Mf2OR aofAPUncm5ukNj7EKt6etl5xPQZh9VkI3JZfrZ5oC35Jj133P4GwlU6XbZWz6iPq FkW07ZmKr7sRLZbW8GQk3yps872SwSPy+dGAg07oyXYeLVOR+308w1m/jYU2g8kR LdL1EZYGtn9EPUziCF152Dl/xwJl0+st3URD2ujNVUX/xYH3hpBIKfwanJjkcqW4 u7fnESwDQE7bVuP8z5lN/3bi/QoO/JU25XfP08Pb05UgtiCAU9g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:42 2026 by rpki-client