$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144354.roa File: AS144354.roa (raw, json) Hash identifier: UVvjpyeQkEQCwalqlrEmr/T6FnV6zQTzul1tCrhUSaw= Subject key identifier: 1A:E8:BB:43:C0:A9:85:16:5C:38:87:44:C6:DC:63:70:6E:EC:3A:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5A6683E2B9C6F76F7B03DA9D11065FF7B9743B21 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144354.roa Signing time: Wed 04 Mar 2026 06:12:46 +0000 ROA not before: Wed 04 Mar 2026 06:07:46 +0000 ROA not after: Wed 03 Mar 2027 06:12:46 +0000 asID: 144354 IP address blocks: 240a:a6a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:66:83:e2:b9:c6:f7:6f:7b:03:da:9d:11:06:5f:f7:b9:74:3b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:46 2026 GMT Not After : Mar 3 06:12:46 2027 GMT Subject: CN=1AE8BB43C0A985165C388744C6DC63706EEC3A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:bb:6a:c9:c9:42:80:c7:19:c2:47:19:01: 2d:ea:54:3d:a3:10:d1:e9:20:11:07:ba:a8:61:ae: 21:31:17:73:28:f6:53:5f:92:a0:44:bc:48:82:5e: 63:44:ae:6e:e6:e7:ee:72:17:d4:4b:22:c4:b9:8b: 39:7e:5e:93:a6:da:91:c9:83:a9:22:78:ed:1e:54: 83:85:2b:97:c0:4d:4e:dc:d4:c8:55:b7:1f:5d:7a: 10:b9:ab:c4:cd:8a:35:4e:47:f5:a2:5c:ac:cd:32: b9:d5:76:47:11:6d:42:51:9e:f9:fc:8b:34:70:86: a3:9d:1f:cb:2b:dc:b9:1f:af:f1:8e:08:6d:26:a5: 82:a3:c6:37:e7:94:9e:7c:e9:08:21:0f:32:61:6b: 04:7d:72:29:3f:65:b3:10:9b:c6:9f:13:8c:d8:f0: ec:08:ff:39:ce:e9:95:4b:63:39:f6:2e:84:46:31: 0f:1a:4b:f0:af:9f:3a:ae:37:f7:11:77:ae:6f:eb: df:08:d5:43:9c:d8:8d:97:db:d0:99:05:6c:9e:3a: db:e7:07:ce:f7:c2:ac:4c:31:7f:15:29:0f:8c:c9: c7:27:54:20:0e:0e:99:2e:e0:c8:d7:14:21:c0:ee: 08:fc:07:88:98:b0:7d:1e:6e:23:de:7a:9c:47:c5: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E8:BB:43:C0:A9:85:16:5C:38:87:44:C6:DC:63:70:6E:EC:3A:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144354.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6a8::/32 Signature Algorithm: sha256WithRSAEncryption b4:0f:b2:fd:9d:72:61:03:af:1c:5c:7d:cc:46:a7:09:38:fe: 98:94:8d:b2:d2:fa:3d:e7:f5:56:22:2e:7d:e7:ee:5e:b1:b4: 68:8d:75:11:a2:1f:c1:84:18:7f:74:2b:15:44:75:b2:d2:50: 9d:37:8f:38:2c:3d:2e:29:4b:f1:e5:e0:3e:31:f5:03:7b:bf: af:6d:ba:a0:1f:80:92:92:d7:da:fc:4d:c0:cd:4e:c1:d0:6b: f1:22:bc:04:a4:0b:65:78:2c:54:c7:64:7e:e9:b2:3c:e9:d7: 54:93:76:87:aa:c5:15:3e:fa:71:ee:95:87:64:ed:14:77:e2: 2a:18:6f:0b:2c:49:67:e3:ab:2d:db:bc:3b:d1:7a:62:ab:8a: f2:9a:30:0c:71:5e:bd:85:0d:c6:f6:58:98:0e:e4:c4:61:c7: df:c7:92:bb:4c:2f:af:5b:51:2d:79:e7:7e:a4:52:83:5d:7d: 95:1f:02:6c:5f:2e:37:14:99:4f:11:7d:e5:73:bf:5e:59:36: fb:8a:cf:e3:5c:de:ae:fb:21:6b:d4:42:c3:2d:ab:27:82:40: df:02:f4:8a:ed:95:c9:0d:d4:7f:41:7c:13:1b:7f:cd:73:90: e1:5d:9e:8d:c7:2b:ed:13:37:a5:1a:1f:c1:50:0d:5c:03:c6: 01:71:3f:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWmaD4rnG9297A9qdEQZf97l0OyEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0NloX DTI3MDMwMzA2MTI0NlowMzExMC8GA1UEAxMoMUFFOEJCNDNDMEE5ODUxNjVDMzg4 NzQ0QzZEQzYzNzA2RUVDM0E5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALV7u2rJyUKAxxnCRxkBLepUPaMQ0ekgEQe6qGGuITEXcyj2U1+SoES8SIJe Y0Sububn7nIX1EsixLmLOX5ek6bakcmDqSJ47R5Ug4Url8BNTtzUyFW3H116ELmr xM2KNU5H9aJcrM0yudV2RxFtQlGe+fyLNHCGo50fyyvcuR+v8Y4IbSalgqPGN+eU nnzpCCEPMmFrBH1yKT9lsxCbxp8TjNjw7Aj/Oc7plUtjOfYuhEYxDxpL8K+fOq43 9xF3rm/r3wjVQ5zYjZfb0JkFbJ462+cHzvfCrEwxfxUpD4zJxydUIA4OmS7gyNcU IcDuCPwHiJiwfR5uI956nEfF1Q0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQa6LtD wKmFFlw4h0TG3GNwbuw6ljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pqgwDQYJKoZIhvcNAQELBQADggEBALQPsv2dcmEDrxxcfcxGpwk4/piUjbLS+j3n 9VYiLn3n7l6xtGiNdRGiH8GEGH90KxVEdbLSUJ03jzgsPS4pS/Hl4D4x9QN7v69t uqAfgJKS19r8TcDNTsHQa/EivASkC2V4LFTHZH7psjzp11STdoeqxRU++nHulYdk 7RR34ioYbwssSWfjqy3bvDvRemKrivKaMAxxXr2FDcb2WJgO5MRhx9/HkrtML69b US15536kUoNdfZUfAmxfLjcUmU8RfeVzv15ZNvuKz+Nc3q77IWvUQsMtqyeCQN8C 9IrtlckN1H9BfBMbf81zkOFdno3HK+0TN6UaH8FQDVwDxgFxPzQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:48 2026 by rpki-client