$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144380.roa File: AS144380.roa (raw, json) Hash identifier: m6HTeE1bQEIVfkb2+zf9SdocNil1M/hks3oAPu+cxmI= Subject key identifier: 65:E0:4E:AC:13:66:1C:AF:E6:6E:E6:C8:5C:62:D0:79:0F:C2:47:11 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0BE835D3D29E936636CDBD04C56740400E5231A5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144380.roa Signing time: Wed 04 Mar 2026 06:14:29 +0000 ROA not before: Wed 04 Mar 2026 06:09:29 +0000 ROA not after: Wed 03 Mar 2027 06:14:29 +0000 asID: 144380 IP address blocks: 240a:a6c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e8:35:d3:d2:9e:93:66:36:cd:bd:04:c5:67:40:40:0e:52:31:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:29 2026 GMT Not After : Mar 3 06:14:29 2027 GMT Subject: CN=65E04EAC13661CAFE66EE6C85C62D0790FC24711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:ce:98:07:cb:75:c5:25:23:61:3b:33:1f: 63:e4:fb:4f:06:34:bc:2c:7e:8a:9e:1a:84:db:81: 3d:74:3e:7d:20:31:a4:dc:09:94:f4:63:8c:e4:d6: 28:e8:4f:45:d7:2e:82:81:69:05:9a:3e:ce:99:fb: b7:82:46:da:a2:d7:a5:a4:e9:58:0e:c7:c9:71:b2: 4b:c0:db:c7:ec:cc:a7:84:6b:db:5d:38:94:f5:20: 89:21:b5:d9:b6:1e:76:c1:c6:c8:0f:8f:08:5d:e7: 91:ce:55:2b:a3:14:e1:bc:ba:37:b8:e6:b0:74:2e: bb:c0:55:f8:42:fe:9f:27:36:9c:70:7b:10:11:ce: 61:e2:da:9c:fb:53:59:3a:08:12:f2:a3:a6:40:7f: 5e:49:f6:f7:99:4b:88:9b:22:b1:47:1d:cc:5a:86: 67:d0:a4:0d:c2:61:89:a0:70:7d:73:63:2e:b2:f7: 25:6f:61:ae:bc:4d:79:c8:50:9c:66:ce:0e:37:7b: fe:83:5d:3d:d8:59:83:b3:21:8f:1c:35:92:3d:65: fc:2b:f7:fd:19:ff:1c:4c:4e:4a:5c:59:b8:1b:82: a0:94:5a:45:12:b2:d9:4b:68:37:c7:49:bf:8d:68: cd:e8:07:3b:78:76:8c:56:f7:6f:9b:67:50:e8:05: 0f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E0:4E:AC:13:66:1C:AF:E6:6E:E6:C8:5C:62:D0:79:0F:C2:47:11 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144380.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6c2::/32 Signature Algorithm: sha256WithRSAEncryption 15:61:16:3c:ce:e7:51:54:7a:45:c7:df:fe:b6:81:ed:7f:7f: 0f:a4:ac:73:db:33:64:9d:66:70:5d:32:3a:d2:f9:da:5d:5c: cb:40:01:73:68:cd:a3:a2:8a:fe:54:a7:0c:d1:51:ca:81:7a: f2:c0:13:8c:12:6b:6c:15:c5:d5:d3:e7:6a:37:ee:33:44:b2: fc:fa:b5:8a:d1:30:b8:cb:dd:4f:ba:8d:ea:0b:aa:03:d8:7a: 1d:f9:2b:8e:a3:62:31:4b:49:ae:ce:bb:23:45:21:70:73:66: 08:08:c9:7b:5c:8d:2f:52:67:60:57:0c:df:0f:f3:92:fc:18: 04:eb:df:fb:94:09:88:5b:15:5d:25:0d:e4:0b:0d:64:d3:f0: 31:99:9d:39:ec:5d:76:3a:d7:e6:97:0c:ac:c4:40:d9:ec:1e: 30:46:3f:32:7f:b0:64:8d:14:77:17:9f:e3:69:ec:8a:67:d3: 69:8c:d0:3d:6d:10:03:ad:cd:3c:06:d1:3f:07:89:c6:f5:77: 72:a2:73:e2:40:0b:1d:76:ee:b0:30:c4:fe:35:5c:fe:9b:e6: 2c:e0:c2:ed:fe:5c:9e:8e:49:57:59:b6:65:0e:05:f6:85:0f: 15:68:65:6e:58:63:7b:8e:f6:74:cf:c1:7e:e3:55:3e:06:8f: 4d:45:64:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC+g109Kek2Y2zb0ExWdAQA5SMaUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyOVoX DTI3MDMwMzA2MTQyOVowMzExMC8GA1UEAxMoNjVFMDRFQUMxMzY2MUNBRkU2NkVF NkM4NUM2MkQwNzkwRkMyNDcxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqRzpgHy3XFJSNhOzMfY+T7TwY0vCx+ip4ahNuBPXQ+fSAxpNwJlPRjjOTW KOhPRdcugoFpBZo+zpn7t4JG2qLXpaTpWA7HyXGyS8Dbx+zMp4Rr2104lPUgiSG1 2bYedsHGyA+PCF3nkc5VK6MU4by6N7jmsHQuu8BV+EL+nyc2nHB7EBHOYeLanPtT WToIEvKjpkB/Xkn295lLiJsisUcdzFqGZ9CkDcJhiaBwfXNjLrL3JW9hrrxNechQ nGbODjd7/oNdPdhZg7Mhjxw1kj1l/Cv3/Rn/HExOSlxZuBuCoJRaRRKy2UtoN8dJ v41ozegHO3h2jFb3b5tnUOgFDxUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRl4E6s E2Ycr+Zu5shcYtB5D8JHETAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK psIwDQYJKoZIhvcNAQELBQADggEBABVhFjzO51FUekXH3/62ge1/fw+krHPbM2Sd ZnBdMjrS+dpdXMtAAXNozaOiiv5UpwzRUcqBevLAE4wSa2wVxdXT52o37jNEsvz6 tYrRMLjL3U+6jeoLqgPYeh35K46jYjFLSa7OuyNFIXBzZggIyXtcjS9SZ2BXDN8P 85L8GATr3/uUCYhbFV0lDeQLDWTT8DGZnTnsXXY61+aXDKzEQNnsHjBGPzJ/sGSN FHcXn+Np7Ipn02mM0D1tEAOtzTwG0T8Hicb1d3Kic+JACx127rAwxP41XP6b5izg wu3+XJ6OSVdZtmUOBfaFDxVoZW5YY3uO9nTPwX7jVT4Gj01FZLg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:47 2026 by rpki-client