$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144393.roa File: AS144393.roa (raw, json) Hash identifier: EilqncHarnMooWp3LG9ocEv2ZqV1MHe/iIvlsUlRyh0= Subject key identifier: 4C:0E:47:DB:13:CA:AE:B4:AA:49:B4:A1:7E:0B:1B:52:67:B2:39:F9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4B16363CD381846DF310C3D16EF37E6A456B5124 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144393.roa Signing time: Wed 04 Mar 2026 06:13:01 +0000 ROA not before: Wed 04 Mar 2026 06:08:01 +0000 ROA not after: Wed 03 Mar 2027 06:13:01 +0000 asID: 144393 IP address blocks: 240a:a6cf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:16:36:3c:d3:81:84:6d:f3:10:c3:d1:6e:f3:7e:6a:45:6b:51:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:01 2026 GMT Not After : Mar 3 06:13:01 2027 GMT Subject: CN=4C0E47DB13CAAEB4AA49B4A17E0B1B5267B239F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e5:00:90:c4:26:ed:c8:ea:a6:db:41:39:22: 05:82:9b:ac:df:56:9d:b9:1e:9f:df:c7:bf:e5:ba: d8:8a:bb:47:a6:9a:f1:46:69:fd:98:79:07:f4:27: 84:76:a8:94:21:55:eb:64:91:f1:1b:df:f2:6c:f8: ec:2c:c5:ae:0e:83:00:04:d4:56:6e:48:aa:6b:eb: 5e:05:7f:f1:8a:0b:de:63:42:89:bc:aa:4b:e2:0a: b6:a4:80:e1:4f:7b:ea:5c:cf:7c:94:33:69:3c:98: 03:da:c9:70:10:47:c7:a3:0e:dc:0f:94:e7:19:1a: 66:10:69:78:7d:f1:8c:13:bd:ec:b2:ae:b0:3b:2e: a2:62:7e:04:bd:3b:ba:9f:8b:a0:52:e3:99:f3:0a: 19:ae:90:55:81:1b:13:38:46:5d:d8:79:3b:fc:29: 4f:df:ca:e9:7d:82:2a:f7:7c:45:68:87:fb:65:d5: 05:bf:e0:a7:46:2e:89:17:5c:c8:c2:46:e8:d8:f5: 49:62:c2:14:66:d8:1f:73:ec:b8:34:9b:40:2c:b6: 46:20:24:0d:cf:f5:0e:10:ec:a3:a9:6b:e9:49:5d: 38:6f:b9:8e:6d:8f:39:0b:2f:cb:6d:9f:e4:83:8b: a2:2e:64:35:0b:0d:fe:c6:5e:1c:b4:51:b7:f2:bb: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0E:47:DB:13:CA:AE:B4:AA:49:B4:A1:7E:0B:1B:52:67:B2:39:F9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144393.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6cf::/32 Signature Algorithm: sha256WithRSAEncryption da:6c:5f:aa:77:6e:ef:5f:7d:65:d7:9d:d3:62:fd:36:b1:34: 02:31:cf:4b:1b:33:1e:ff:6f:6b:b8:a1:71:ae:e3:8d:7d:fe: f3:ae:3a:1d:31:e0:4c:0e:7c:ef:07:1a:48:69:38:45:8f:e9: 9e:69:4b:77:3c:09:90:09:89:d4:69:55:4d:3f:82:34:93:8a: 72:17:ef:1c:d6:a4:4e:7e:10:e6:31:50:67:02:a2:5a:f2:7d: 50:db:fd:b6:f5:ae:5e:66:43:28:21:7f:69:a0:df:c3:8c:42: 0e:77:a9:e6:4d:84:af:31:cc:3c:d1:6b:51:d1:e9:d5:06:67: fc:c8:f0:7b:72:78:f1:79:ec:f5:80:ec:7e:21:ab:be:d4:36: 5c:33:31:e4:25:f9:3b:d7:0a:bf:08:ed:7a:f9:1f:ae:b7:d6: f4:9f:4f:d5:0f:61:c5:e6:fa:c2:6b:8a:ac:89:a5:40:1f:3a: a0:8b:13:1e:dd:da:a1:a1:18:ab:50:66:a5:1c:6d:49:48:0f: 7e:39:b2:94:0a:7b:28:d0:cc:30:4a:de:06:5f:51:3e:af:4c: d1:c7:df:74:22:e7:d2:2a:24:a4:40:e8:11:b5:9b:36:f9:1f: 57:29:04:de:35:d2:51:25:a0:ad:b7:a5:93:09:ca:77:3a:89: e0:9e:f0:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSxY2PNOBhG3zEMPRbvN+akVrUSQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwMVoX DTI3MDMwMzA2MTMwMVowMzExMC8GA1UEAxMoNEMwRTQ3REIxM0NBQUVCNEFBNDlC NEExN0UwQjFCNTI2N0IyMzlGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODlAJDEJu3I6qbbQTkiBYKbrN9Wnbken9/Hv+W62Iq7R6aa8UZp/Zh5B/Qn hHaolCFV62SR8Rvf8mz47CzFrg6DAATUVm5IqmvrXgV/8YoL3mNCibyqS+IKtqSA 4U976lzPfJQzaTyYA9rJcBBHx6MO3A+U5xkaZhBpeH3xjBO97LKusDsuomJ+BL07 up+LoFLjmfMKGa6QVYEbEzhGXdh5O/wpT9/K6X2CKvd8RWiH+2XVBb/gp0YuiRdc yMJG6Nj1SWLCFGbYH3PsuDSbQCy2RiAkDc/1DhDso6lr6UldOG+5jm2POQsvy22f 5IOLoi5kNQsN/sZeHLRRt/K7Zt0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRMDkfb E8qutKpJtKF+CxtSZ7I5+TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ps8wDQYJKoZIhvcNAQELBQADggEBANpsX6p3bu9ffWXXndNi/TaxNAIxz0sbMx7/ b2u4oXGu4419/vOuOh0x4EwOfO8HGkhpOEWP6Z5pS3c8CZAJidRpVU0/gjSTinIX 7xzWpE5+EOYxUGcColryfVDb/bb1rl5mQyghf2mg38OMQg53qeZNhK8xzDzRa1HR 6dUGZ/zI8HtyePF57PWA7H4hq77UNlwzMeQl+TvXCr8I7Xr5H6631vSfT9UPYcXm +sJriqyJpUAfOqCLEx7d2qGhGKtQZqUcbUlID345spQKeyjQzDBK3gZfUT6vTNHH 33Qi59IqJKRA6BG1mzb5H1cpBN410lEloK23pZMJync6ieCe8Ms= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:34 2026 by rpki-client