$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144373.roa File: AS144373.roa (raw, json) Hash identifier: twfBpcapGqx4Iii6Sta46pDoVp/cchwT0e+ZpmSd+v4= Subject key identifier: 75:2F:68:B8:1B:84:E2:81:7D:C6:BB:B0:C3:C1:C1:AA:D5:D0:78:C1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 122CD4F842D4DE68F98362FD75D66259AB9DEC6E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144373.roa Signing time: Wed 04 Mar 2026 06:12:39 +0000 ROA not before: Wed 04 Mar 2026 06:07:39 +0000 ROA not after: Wed 03 Mar 2027 06:12:39 +0000 asID: 144373 IP address blocks: 240a:a6bb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2c:d4:f8:42:d4:de:68:f9:83:62:fd:75:d6:62:59:ab:9d:ec:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:39 2026 GMT Not After : Mar 3 06:12:39 2027 GMT Subject: CN=752F68B81B84E2817DC6BBB0C3C1C1AAD5D078C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:9a:5a:28:45:8f:90:4d:5a:ba:1a:27:8d: f7:21:a0:08:cc:b4:91:21:42:e0:96:72:ba:4a:fa: 90:30:31:25:2b:5e:45:80:92:c0:78:2b:4e:4f:57: dd:a6:ec:fa:e0:a8:e0:4d:fa:7e:27:6f:d5:a0:79: 82:44:d4:af:5f:1d:c7:58:db:71:2d:cc:7f:25:32: 7a:bb:c9:81:3e:23:21:fe:b0:0d:b9:ba:d6:55:d0: c4:06:18:7d:22:66:08:e2:ca:4e:9b:7b:bf:91:bd: 9a:6f:d4:00:bf:2b:bd:ed:52:2a:fd:f2:09:39:35: 21:7f:78:f4:ad:b0:57:50:c7:9a:db:0e:1a:5d:54: 39:d3:64:96:cc:dd:e4:b3:73:f7:3a:d3:d0:4c:96: f5:ea:13:7d:08:b3:9d:55:1b:74:cb:94:91:7f:5d: 70:8b:4a:e6:ec:e7:ff:07:93:db:c7:18:2b:31:3b: 92:e0:08:4c:7e:3c:ac:4e:73:8f:60:f0:4c:09:d7: 59:9a:22:68:56:1f:53:72:ed:09:c1:98:5b:67:7f: 96:e0:db:53:d4:e5:98:94:10:c6:e5:8e:88:ec:41: f8:28:02:50:33:bc:48:d1:08:b8:70:7c:e2:e1:fc: fb:8c:ab:c5:41:3d:85:03:3a:47:22:2d:7a:04:70: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2F:68:B8:1B:84:E2:81:7D:C6:BB:B0:C3:C1:C1:AA:D5:D0:78:C1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6bb::/32 Signature Algorithm: sha256WithRSAEncryption b6:50:eb:10:9a:65:1e:85:46:d4:22:3a:c4:a3:2d:eb:12:4e: 94:03:7e:3b:6c:75:a3:cb:f5:0c:d0:24:22:7e:d9:0a:cc:29: 0c:26:e9:32:54:2f:29:53:20:2d:35:4a:e2:e8:72:7c:b1:c3: d7:15:26:1c:73:a7:56:a4:dd:c0:2f:17:e9:50:74:5a:3a:5c: a3:8e:a4:cf:44:ca:c7:12:0d:44:9f:3e:83:9a:69:4d:0b:cc: 9b:64:d7:55:85:cf:ca:de:18:7b:dc:3f:52:cf:5d:ac:51:06: 24:5b:93:09:fc:ac:3a:01:3d:e5:2b:83:fa:c7:d9:90:19:e4: 5e:2c:b1:2e:10:52:8b:49:f6:b5:a5:ab:b3:0b:7b:1b:04:bf: 09:84:45:b5:54:7d:b1:68:95:b5:f5:ca:1c:8d:8e:8f:d1:dc: bf:1a:39:1b:0e:bf:f0:e6:70:01:7f:e7:53:a2:78:ed:18:96: 54:e1:ed:95:95:9c:02:3a:78:71:cc:df:9e:88:d3:a0:0a:e9: 6c:96:19:3c:cf:f8:4d:e3:37:a4:c8:e0:cb:06:4a:3a:e4:90: f1:01:5a:f8:d0:5e:d6:48:58:ab:c7:08:6f:db:53:78:8d:15: c8:bc:45:34:d7:93:ce:bf:ed:27:7c:e5:c6:de:9e:c8:2a:50: fb:aa:76:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEizU+ELU3mj5g2L9ddZiWaud7G4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczOVoX DTI3MDMwMzA2MTIzOVowMzExMC8GA1UEAxMoNzUyRjY4QjgxQjg0RTI4MTdEQzZC QkIwQzNDMUMxQUFENUQwNzhDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+emlooRY+QTVq6GieN9yGgCMy0kSFC4JZyukr6kDAxJSteRYCSwHgrTk9X 3abs+uCo4E36fidv1aB5gkTUr18dx1jbcS3MfyUyervJgT4jIf6wDbm61lXQxAYY fSJmCOLKTpt7v5G9mm/UAL8rve1SKv3yCTk1IX949K2wV1DHmtsOGl1UOdNklszd 5LNz9zrT0EyW9eoTfQiznVUbdMuUkX9dcItK5uzn/weT28cYKzE7kuAITH48rE5z j2DwTAnXWZoiaFYfU3LtCcGYW2d/luDbU9TlmJQQxuWOiOxB+CgCUDO8SNEIuHB8 4uH8+4yrxUE9hQM6RyItegRwBUkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR1L2i4 G4TigX3Gu7DDwcGq1dB4wTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK prswDQYJKoZIhvcNAQELBQADggEBALZQ6xCaZR6FRtQiOsSjLesSTpQDfjtsdaPL 9QzQJCJ+2QrMKQwm6TJULylTIC01SuLocnyxw9cVJhxzp1ak3cAvF+lQdFo6XKOO pM9EyscSDUSfPoOaaU0LzJtk11WFz8reGHvcP1LPXaxRBiRbkwn8rDoBPeUrg/rH 2ZAZ5F4ssS4QUotJ9rWlq7MLexsEvwmERbVUfbFolbX1yhyNjo/R3L8aORsOv/Dm cAF/51OieO0YllTh7ZWVnAI6eHHM356I06AK6WyWGTzP+E3jN6TI4MsGSjrkkPEB WvjQXtZIWKvHCG/bU3iNFci8RTTXk86/7Sd85cbensgqUPuqdoM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:27 2026 by rpki-client