$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144348.roa File: AS144348.roa (raw, json) Hash identifier: i+iMDcYRloG2p9c9/yMGrRza0Xc0Vy7UtvrkUekJLn4= Subject key identifier: 39:AF:B4:78:25:E5:4A:E9:91:66:6D:29:AA:81:F4:DF:FE:CF:9C:BD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2991A806B29FA4F35BF2BF3175CD82D5F0A458A1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144348.roa Signing time: Wed 04 Mar 2026 06:12:48 +0000 ROA not before: Wed 04 Mar 2026 06:07:48 +0000 ROA not after: Wed 03 Mar 2027 06:12:48 +0000 asID: 144348 IP address blocks: 240a:a6a2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:91:a8:06:b2:9f:a4:f3:5b:f2:bf:31:75:cd:82:d5:f0:a4:58:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:48 2026 GMT Not After : Mar 3 06:12:48 2027 GMT Subject: CN=39AFB47825E54AE991666D29AA81F4DFFECF9CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4d:2a:db:9f:42:5e:a3:b7:0d:32:a3:4f:f3: 6e:bf:e3:56:08:eb:ec:af:26:e5:df:9a:8c:c3:a0: fb:6b:41:c8:0d:de:99:28:3f:00:57:a5:52:24:c5: c5:fb:65:d3:88:8f:28:42:69:39:dc:25:52:d8:76: 50:84:d0:2b:bb:1d:a2:80:0f:20:22:65:2a:ad:6e: c8:fc:c3:59:04:de:4f:fa:ae:f9:52:6f:2e:e8:33: 2f:aa:94:98:03:9a:c7:ef:ad:50:15:7a:02:5f:8d: c4:0a:0c:27:b7:33:4f:35:1e:99:91:ea:85:d7:e4: 4a:0c:87:7c:a2:6d:a1:48:88:e6:63:45:96:ee:6c: f5:68:a1:19:1b:2d:f7:25:91:ef:40:47:aa:99:c8: f6:cf:9b:04:95:dc:71:d7:f5:e5:8e:bc:a5:38:c2: a9:39:cc:97:24:82:f6:db:a5:d6:10:ac:95:70:67: 9f:68:9c:b5:04:bc:03:a1:08:5c:bb:fc:b3:39:d9: 75:97:56:4b:61:8d:13:c9:4c:80:31:e0:0c:91:49: b1:c1:24:8d:07:b9:44:8b:c2:f0:b1:5b:91:6b:77: 82:5d:e7:4b:ae:73:58:dc:7b:25:c2:eb:ff:27:24: bc:1b:e7:68:64:c9:89:7c:7d:1a:8d:d7:6d:ba:4c: c2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:B4:78:25:E5:4A:E9:91:66:6D:29:AA:81:F4:DF:FE:CF:9C:BD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144348.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6a2::/32 Signature Algorithm: sha256WithRSAEncryption 06:f5:bb:ed:05:ef:94:42:24:14:c2:18:59:51:da:27:36:cc: d4:20:bc:d2:33:57:c2:76:91:ed:92:0c:8d:a7:56:a7:0f:cf: 94:00:40:c7:61:d3:46:83:f9:32:55:32:4a:50:46:b6:2d:bd: a1:94:6d:4b:4c:92:ed:28:f3:2a:bf:e3:cb:09:b3:cd:a7:84: 33:ec:29:3a:58:0f:ec:3e:96:22:00:83:78:75:7e:a1:5d:2a: f7:4c:ff:3d:2b:4b:1d:24:a2:a1:72:68:70:8c:6f:b3:d4:8b: 22:cb:91:9e:e8:c5:f8:71:07:54:39:df:8a:0a:e8:a5:68:81: e9:96:df:c3:6f:87:26:fb:60:ed:6c:e5:65:73:4c:4a:44:f9: 02:00:ab:48:b8:9a:7a:f2:4a:70:75:5d:cf:b2:e5:08:3e:4b: f8:40:83:6d:14:5b:5d:88:ac:f9:df:78:75:e9:8f:9b:45:79: dd:78:57:5c:51:d7:e7:73:fe:17:19:41:f2:3f:b7:84:f8:c8: fa:78:d8:9b:1e:81:c2:2a:a2:9e:97:5a:eb:0d:0b:fb:55:56: 92:c4:ad:2c:5d:b0:1a:ec:01:11:45:9d:ac:e5:e6:ad:a8:d8: c9:67:86:5a:e8:a5:8d:cb:23:66:f5:9a:9a:84:0a:89:71:46: 81:dc:f2:b5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKZGoBrKfpPNb8r8xdc2C1fCkWKEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0OFoX DTI3MDMwMzA2MTI0OFowMzExMC8GA1UEAxMoMzlBRkI0NzgyNUU1NEFFOTkxNjY2 RDI5QUE4MUY0REZGRUNGOUNCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI9NKtufQl6jtw0yo0/zbr/jVgjr7K8m5d+ajMOg+2tByA3emSg/AFelUiTF xftl04iPKEJpOdwlUth2UITQK7sdooAPICJlKq1uyPzDWQTeT/qu+VJvLugzL6qU mAOax++tUBV6Al+NxAoMJ7czTzUemZHqhdfkSgyHfKJtoUiI5mNFlu5s9WihGRst 9yWR70BHqpnI9s+bBJXccdf15Y68pTjCqTnMlySC9tul1hCslXBnn2ictQS8A6EI XLv8sznZdZdWS2GNE8lMgDHgDJFJscEkjQe5RIvC8LFbkWt3gl3nS65zWNx7JcLr /yckvBvnaGTJiXx9Go3XbbpMwi0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ5r7R4 JeVK6ZFmbSmqgfTf/s+cvTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pqIwDQYJKoZIhvcNAQELBQADggEBAAb1u+0F75RCJBTCGFlR2ic2zNQgvNIzV8J2 ke2SDI2nVqcPz5QAQMdh00aD+TJVMkpQRrYtvaGUbUtMku0o8yq/48sJs82nhDPs KTpYD+w+liIAg3h1fqFdKvdM/z0rSx0koqFyaHCMb7PUiyLLkZ7oxfhxB1Q534oK 6KVogemW38Nvhyb7YO1s5WVzTEpE+QIAq0i4mnrySnB1Xc+y5Qg+S/hAg20UW12I rPnfeHXpj5tFed14V1xR1+dz/hcZQfI/t4T4yPp42JsegcIqop6XWusNC/tVVpLE rSxdsBrsARFFnazl5q2o2MlnhlropY3LI2b1mpqEColxRoHc8rU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:14 2026 by rpki-client