$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144391.roa File: AS144391.roa (raw, json) Hash identifier: S0rwiowHz7bsc0oQoKlF9LNf+MoorSkj7RFPELEF1W4= Subject key identifier: 79:16:20:79:52:47:35:BC:2B:23:6C:E4:92:74:F8:31:7D:EF:F4:72 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 26716DE870EE856C223CAB3FAE34B66E7FB6D996 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144391.roa Signing time: Wed 04 Mar 2026 06:14:13 +0000 ROA not before: Wed 04 Mar 2026 06:09:13 +0000 ROA not after: Wed 03 Mar 2027 06:14:13 +0000 asID: 144391 IP address blocks: 240a:a6cd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:71:6d:e8:70:ee:85:6c:22:3c:ab:3f:ae:34:b6:6e:7f:b6:d9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:13 2026 GMT Not After : Mar 3 06:14:13 2027 GMT Subject: CN=79162079524735BC2B236CE49274F8317DEFF472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:66:01:33:d1:da:ab:31:54:52:31:0a:41: a9:3d:e5:13:c4:34:c6:f0:f3:c7:fd:53:e1:ba:02: b6:92:0f:50:74:b7:81:6e:a0:49:cb:35:1c:d8:f6: 57:8b:b0:b1:ef:ce:79:82:0a:65:7c:ba:0a:8b:43: d3:59:4f:8f:0b:f7:9c:80:bf:8a:d1:04:61:db:c1: 63:53:14:5c:1d:60:4d:2e:3c:d9:1b:04:ce:ca:1d: 12:ca:3c:9d:f1:f4:ad:60:69:be:82:b4:74:4a:9b: 10:f9:af:14:90:ef:45:49:2d:e3:08:b1:71:e9:7a: eb:d7:94:d4:b0:ae:c8:f5:5d:10:4f:28:07:47:32: fb:f6:3d:ea:b6:21:4d:a1:85:51:69:f5:4b:51:e5: 2b:5e:a6:97:b6:d6:e6:a9:0c:11:3f:0f:74:02:0f: 87:5e:3a:55:32:56:dc:66:51:6e:77:27:f2:6d:ea: fd:f2:70:92:eb:8b:45:c0:34:db:fd:6e:9d:d6:eb: 10:ef:1a:09:ff:36:5f:a0:ab:50:20:d3:53:63:7f: 37:8a:a6:d4:bc:30:d0:42:96:ff:1c:56:35:42:52: 95:49:0a:c4:9d:1b:0d:9c:ad:01:2b:99:bb:77:77: 17:d9:f2:e9:b1:61:14:40:91:79:02:aa:7c:cf:0e: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:16:20:79:52:47:35:BC:2B:23:6C:E4:92:74:F8:31:7D:EF:F4:72 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144391.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6cd::/32 Signature Algorithm: sha256WithRSAEncryption cb:1b:47:b4:ed:de:47:cb:29:65:da:fa:2a:d6:67:11:da:00: 10:80:29:d4:c1:1c:dd:33:c9:20:00:18:01:d5:96:c3:ea:98: 73:32:b9:bf:75:c3:68:9b:47:b9:5f:e5:1a:f1:08:ae:e5:98: a8:1e:c3:85:34:92:d7:44:86:3e:be:ee:05:ac:dd:dd:f8:67: 46:fa:93:35:24:5a:f4:ba:6e:43:fa:97:79:ee:22:52:63:7b: f7:d3:39:6c:80:32:6a:56:d0:0e:93:4a:f6:7b:94:2e:cf:6c: 12:a9:36:3f:60:64:18:a2:bf:09:ce:4f:0b:56:60:72:f2:f6: 1b:6d:40:27:85:00:fb:ca:5e:94:99:6e:4e:88:a2:62:c4:75: fc:45:d5:a1:a7:d9:60:c2:cd:80:27:79:a0:09:ba:b9:97:26: dc:d2:0e:0a:bd:ff:4c:75:df:31:a0:98:6c:c0:78:77:f0:ce: 9c:99:34:30:b3:33:1c:a2:0a:82:5a:4f:ae:d8:8e:0e:a3:7c: 7a:9b:db:77:de:33:46:bb:8d:c7:74:b1:ab:68:6b:f0:4c:3d: 71:d4:51:78:9b:f9:38:6c:32:b3:9f:e6:5d:17:66:8c:81:f4: 38:00:66:c2:b1:69:98:ac:c6:ba:d1:13:fc:89:da:29:c6:7a: 22:f9:43:ef -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJnFt6HDuhWwiPKs/rjS2bn+22ZYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxM1oX DTI3MDMwMzA2MTQxM1owMzExMC8GA1UEAxMoNzkxNjIwNzk1MjQ3MzVCQzJCMjM2 Q0U0OTI3NEY4MzE3REVGRjQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALN1ZgEz0dqrMVRSMQpBqT3lE8Q0xvDzx/1T4boCtpIPUHS3gW6gScs1HNj2 V4uwse/OeYIKZXy6CotD01lPjwv3nIC/itEEYdvBY1MUXB1gTS482RsEzsodEso8 nfH0rWBpvoK0dEqbEPmvFJDvRUkt4wixcel669eU1LCuyPVdEE8oB0cy+/Y96rYh TaGFUWn1S1HlK16ml7bW5qkMET8PdAIPh146VTJW3GZRbncn8m3q/fJwkuuLRcA0 2/1undbrEO8aCf82X6CrUCDTU2N/N4qm1Lww0EKW/xxWNUJSlUkKxJ0bDZytASuZ u3d3F9ny6bFhFECReQKqfM8OaS0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR5FiB5 Ukc1vCsjbOSSdPgxfe/0cjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ps0wDQYJKoZIhvcNAQELBQADggEBAMsbR7Tt3kfLKWXa+irWZxHaABCAKdTBHN0z ySAAGAHVlsPqmHMyub91w2ibR7lf5RrxCK7lmKgew4U0ktdEhj6+7gWs3d34Z0b6 kzUkWvS6bkP6l3nuIlJje/fTOWyAMmpW0A6TSvZ7lC7PbBKpNj9gZBiivwnOTwtW YHLy9httQCeFAPvKXpSZbk6IomLEdfxF1aGn2WDCzYAneaAJurmXJtzSDgq9/0x1 3zGgmGzAeHfwzpyZNDCzMxyiCoJaT67Yjg6jfHqb23feM0a7jcd0satoa/BMPXHU UXib+ThsMrOf5l0XZoyB9DgAZsKxaZisxrrRE/yJ2inGeiL5Q+8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:52 2026 by rpki-client