$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144363.roa File: AS144363.roa (raw, json) Hash identifier: Zcnzeu03abUfSgh9NN1agprjKHso5JxrIPa4dYeiuPk= Subject key identifier: B2:E5:5E:0E:BB:A3:6D:F5:F8:5C:5F:EF:E5:50:9F:4A:BC:55:EB:9C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4A51B5DCAE8CD5166DC253590EFED95BEE9E789A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144363.roa Signing time: Wed 04 Mar 2026 06:14:34 +0000 ROA not before: Wed 04 Mar 2026 06:09:34 +0000 ROA not after: Wed 03 Mar 2027 06:14:34 +0000 asID: 144363 IP address blocks: 240a:a6b1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:51:b5:dc:ae:8c:d5:16:6d:c2:53:59:0e:fe:d9:5b:ee:9e:78:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:34 2026 GMT Not After : Mar 3 06:14:34 2027 GMT Subject: CN=B2E55E0EBBA36DF5F85C5FEFE5509F4ABC55EB9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:c8:c0:6c:ea:94:26:a4:29:e6:99:e0:9c: a9:f4:94:46:81:ad:ab:89:73:70:35:32:a4:77:3d: 5d:f5:f5:aa:af:e6:8d:fb:36:9f:74:c8:0b:93:c2: 3f:4c:b3:1c:7f:c8:7b:62:7b:6e:4a:97:3d:ce:64: 1a:90:b9:a4:6f:e4:3b:3f:87:81:d0:48:23:bc:1b: bf:f5:9b:f3:16:fe:d9:79:e7:90:b0:60:ea:d0:37: be:c0:25:dc:db:f6:96:96:cf:b7:91:23:00:6c:b8: b0:52:64:8e:95:d2:3d:67:f2:92:86:7e:17:e3:d6: 6f:0a:bc:2f:7e:80:41:2d:0d:4e:c7:0c:01:2e:4f: 8d:e4:1c:dc:7d:cd:da:ea:00:76:05:f1:1d:ee:a6: 92:5d:9c:9b:5a:1d:9a:87:bf:87:fa:f5:91:fd:71: 07:23:61:fd:4e:d4:50:0f:d3:3a:51:3d:bb:a6:a5: 42:59:77:05:2f:cd:5c:24:94:0c:7e:b1:8a:02:e9: 0f:d9:14:cc:39:f2:c6:7d:a9:d9:2d:db:0c:10:6e: 5e:f0:7f:da:25:c6:6f:3c:19:15:b1:7f:d4:c4:06: f7:2a:42:c1:40:76:da:00:d2:71:4f:ab:15:75:2b: 2c:4c:7a:83:81:fe:c4:0b:4d:c5:b2:f3:f0:c9:4b: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E5:5E:0E:BB:A3:6D:F5:F8:5C:5F:EF:E5:50:9F:4A:BC:55:EB:9C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144363.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6b1::/32 Signature Algorithm: sha256WithRSAEncryption 4e:6e:42:50:42:72:f6:38:5c:78:bc:1c:83:2e:26:ac:ff:9c: 7a:9b:54:68:81:27:51:bd:c1:93:d4:04:8d:0f:28:dc:90:ee: f7:29:bb:20:49:f7:48:92:31:79:3e:7a:80:67:f3:f7:6b:11: 62:2a:08:46:ef:fc:38:e2:84:47:4d:ed:bf:77:34:ac:b4:fd: 89:19:cc:6c:4a:c4:2c:c9:7f:dd:a9:59:eb:56:66:b1:9a:07: d6:fb:ca:97:c2:13:2b:46:df:ef:f7:cc:33:4a:ee:3e:89:81: bb:6f:82:9b:f3:ad:9d:98:58:d8:1e:9b:cb:ef:9c:62:c2:79: ab:40:fc:c4:2f:08:c7:fc:91:11:da:12:3e:46:9b:c7:d6:d8: 77:8a:63:a8:3b:ca:25:1d:fc:ef:f0:1f:12:d7:a6:fd:db:2c: 6d:3b:52:f8:2d:32:97:cb:e4:a1:53:f1:0f:ec:c4:f4:e8:1a: 56:a3:a1:e4:b9:1c:23:dd:13:58:33:b9:80:65:4a:57:0a:0b: 18:9e:b2:0f:9a:93:ef:17:e8:f6:80:69:24:72:0f:12:9c:c4: 26:2e:5f:b5:6f:34:dd:55:bd:ec:72:4a:7a:06:c0:76:ed:2e: fb:54:aa:ab:bd:d0:ef:1f:6a:6c:41:63:66:ba:ee:0c:6f:9d: d9:c4:d3:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSlG13K6M1RZtwlNZDv7ZW+6eeJowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzNFoX DTI3MDMwMzA2MTQzNFowMzExMC8GA1UEAxMoQjJFNTVFMEVCQkEzNkRGNUY4NUM1 RkVGRTU1MDlGNEFCQzU1RUI5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZ+yMBs6pQmpCnmmeCcqfSURoGtq4lzcDUypHc9XfX1qq/mjfs2n3TIC5PC P0yzHH/Ie2J7bkqXPc5kGpC5pG/kOz+HgdBII7wbv/Wb8xb+2XnnkLBg6tA3vsAl 3Nv2lpbPt5EjAGy4sFJkjpXSPWfykoZ+F+PWbwq8L36AQS0NTscMAS5PjeQc3H3N 2uoAdgXxHe6mkl2cm1odmoe/h/r1kf1xByNh/U7UUA/TOlE9u6alQll3BS/NXCSU DH6xigLpD9kUzDnyxn2p2S3bDBBuXvB/2iXGbzwZFbF/1MQG9ypCwUB22gDScU+r FXUrLEx6g4H+xAtNxbLz8MlLu0MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSy5V4O u6Nt9fhcX+/lUJ9KvFXrnDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK prEwDQYJKoZIhvcNAQELBQADggEBAE5uQlBCcvY4XHi8HIMuJqz/nHqbVGiBJ1G9 wZPUBI0PKNyQ7vcpuyBJ90iSMXk+eoBn8/drEWIqCEbv/DjihEdN7b93NKy0/YkZ zGxKxCzJf92pWetWZrGaB9b7ypfCEytG3+/3zDNK7j6JgbtvgpvzrZ2YWNgem8vv nGLCeatA/MQvCMf8kRHaEj5Gm8fW2HeKY6g7yiUd/O/wHxLXpv3bLG07UvgtMpfL 5KFT8Q/sxPToGlajoeS5HCPdE1gzuYBlSlcKCxiesg+ak+8X6PaAaSRyDxKcxCYu X7VvNN1VvexySnoGwHbtLvtUqqu90O8famxBY2a67gxvndnE02M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:41 2026 by rpki-client