$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144376.roa File: AS144376.roa (raw, json) Hash identifier: ZqIIw7WjMnkjpuKsJRT4rX0uUFAnHRrwA7DvfAWuKEs= Subject key identifier: 86:AB:BC:AD:B5:3B:A5:35:D3:B8:CF:94:91:9F:87:29:87:9E:D7:0D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 352688C05CAFAE6D434221358420E69B9286B6AD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144376.roa Signing time: Wed 04 Mar 2026 06:12:29 +0000 ROA not before: Wed 04 Mar 2026 06:07:29 +0000 ROA not after: Wed 03 Mar 2027 06:12:29 +0000 asID: 144376 IP address blocks: 240a:a6be::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:26:88:c0:5c:af:ae:6d:43:42:21:35:84:20:e6:9b:92:86:b6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:29 2026 GMT Not After : Mar 3 06:12:29 2027 GMT Subject: CN=86ABBCADB53BA535D3B8CF94919F8729879ED70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8c:4b:5d:3f:c3:5f:24:fe:c9:c5:34:52:a9: 37:03:d8:98:eb:e3:5a:4d:ad:b1:8b:7b:fc:38:b4: 63:f7:4c:7b:ef:89:d2:3d:2e:7d:6f:5a:32:61:b1: a8:da:4e:24:3b:fd:25:05:8a:c1:78:e7:dc:13:65: 97:c4:82:ec:6c:8f:d6:da:c3:f0:d3:75:c2:0a:5c: de:9b:4f:39:c6:46:ac:f9:ae:90:69:16:70:ac:d4: f5:a2:e3:65:6d:3b:3e:32:5c:93:6e:61:93:c2:03: e3:4e:e7:62:63:25:a1:c1:16:0e:e9:80:0d:90:5d: 22:c8:3e:c3:92:b1:0b:81:20:a5:35:68:15:8f:89: 6c:92:36:ff:ce:61:1a:8d:aa:45:bb:74:1f:c3:6e: 40:d6:75:d7:a9:ec:1e:9f:25:30:9d:48:4b:9e:8d: da:75:54:bf:36:59:ae:7c:ec:be:74:8f:c7:19:b4: 39:d2:a1:18:de:23:0d:b1:19:c4:fb:81:f4:27:fa: bf:82:88:6a:54:b0:f9:ae:11:a0:be:f8:a8:90:8e: f2:11:c3:24:d4:90:99:15:d0:c8:ac:83:ae:a2:e5: a1:7e:99:91:d0:b6:e2:40:aa:06:da:d9:2b:6f:87: b2:f4:97:03:42:de:bf:e5:bb:cd:d0:e3:4a:f9:1f: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AB:BC:AD:B5:3B:A5:35:D3:B8:CF:94:91:9F:87:29:87:9E:D7:0D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144376.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6be::/32 Signature Algorithm: sha256WithRSAEncryption 3f:0d:9b:bb:5b:1f:5d:eb:28:1b:69:b8:41:45:f3:ce:8b:37: b2:fc:34:b9:08:21:e1:4a:b3:9d:c9:c3:c9:b5:3d:e5:c3:7f: 30:54:1e:c4:10:07:33:f7:2a:42:4f:23:aa:17:d8:80:b9:c9: 09:0c:b7:e6:b8:fe:08:01:51:7b:cf:b0:9e:0f:3e:14:b8:8b: c6:21:e8:38:0e:2d:c7:35:70:6b:3d:9b:bc:6e:86:4f:f4:fa: eb:d2:a8:e1:fc:6a:3c:32:cf:17:6f:ce:9d:e6:b3:45:1a:9e: 98:d2:98:41:19:b5:cc:f0:b2:3e:f2:b7:a5:70:15:fe:96:6b: cd:41:b2:59:b1:d5:83:98:01:61:b5:db:ff:1f:09:f7:5b:3a: b0:02:e3:da:79:bb:23:e0:14:3b:f6:85:22:b4:14:3e:83:94: 0e:7f:bd:df:00:02:49:41:29:0f:f4:3e:82:ff:de:6a:b9:0d: 47:c6:bc:bc:d6:01:78:9b:6f:8d:c5:91:52:d3:29:dc:01:dd: 9f:6d:c8:63:d0:d3:88:2a:3c:ef:c0:dc:9d:86:67:2a:24:af: 99:ad:be:c1:bf:50:ff:69:5f:87:82:2a:68:66:e1:1b:d3:74: f9:24:0a:dd:06:ff:a6:cd:62:a2:ce:93:25:f1:49:b5:44:17: 45:ef:f3:df -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNSaIwFyvrm1DQiE1hCDmm5KGtq0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDcyOVoX DTI3MDMwMzA2MTIyOVowMzExMC8GA1UEAxMoODZBQkJDQURCNTNCQTUzNUQzQjhD Rjk0OTE5Rjg3Mjk4NzlFRDcwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPuMS10/w18k/snFNFKpNwPYmOvjWk2tsYt7/Di0Y/dMe++J0j0ufW9aMmGx qNpOJDv9JQWKwXjn3BNll8SC7GyP1trD8NN1wgpc3ptPOcZGrPmukGkWcKzU9aLj ZW07PjJck25hk8ID407nYmMlocEWDumADZBdIsg+w5KxC4EgpTVoFY+JbJI2/85h Go2qRbt0H8NuQNZ116nsHp8lMJ1IS56N2nVUvzZZrnzsvnSPxxm0OdKhGN4jDbEZ xPuB9Cf6v4KIalSw+a4RoL74qJCO8hHDJNSQmRXQyKyDrqLloX6ZkdC24kCqBtrZ K2+HsvSXA0Lev+W7zdDjSvkfk8cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSGq7yt tTulNdO4z5SRn4cph57XDTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pr4wDQYJKoZIhvcNAQELBQADggEBAD8Nm7tbH13rKBtpuEFF886LN7L8NLkIIeFK s53Jw8m1PeXDfzBUHsQQBzP3KkJPI6oX2IC5yQkMt+a4/ggBUXvPsJ4PPhS4i8Yh 6DgOLcc1cGs9m7xuhk/0+uvSqOH8ajwyzxdvzp3ms0UanpjSmEEZtczwsj7yt6Vw Ff6Wa81Bslmx1YOYAWG12/8fCfdbOrAC49p5uyPgFDv2hSK0FD6DlA5/vd8AAklB KQ/0PoL/3mq5DUfGvLzWAXibb43FkVLTKdwB3Z9tyGPQ04gqPO/A3J2GZyokr5mt vsG/UP9pX4eCKmhm4RvTdPkkCt0G/6bNYqLOkyXxSbVEF0Xv898= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:24 2026 by rpki-client