$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144403.roa File: AS144403.roa (raw, json) Hash identifier: 8TbxskuXCIh0BynZncMNLLEBs1/O7Z2f9gXxJDbA5Ig= Subject key identifier: 67:0A:20:3D:30:2F:57:35:B0:B6:77:F8:B5:E0:B6:4B:CF:DE:58:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 266521AE2980CE6EA767362B785CFD9852D31C48 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144403.roa Signing time: Wed 04 Mar 2026 06:15:20 +0000 ROA not before: Wed 04 Mar 2026 06:10:20 +0000 ROA not after: Wed 03 Mar 2027 06:15:20 +0000 asID: 144403 IP address blocks: 240a:a6d9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:65:21:ae:29:80:ce:6e:a7:67:36:2b:78:5c:fd:98:52:d3:1c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:20 2026 GMT Not After : Mar 3 06:15:20 2027 GMT Subject: CN=670A203D302F5735B0B677F8B5E0B64BCFDE5896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:5f:19:c1:31:aa:ed:81:a9:ad:ea:a3:f2: 64:21:d8:62:27:eb:ac:74:17:39:a3:ae:be:ca:73: 15:b2:51:95:3f:33:74:62:d3:62:d7:9c:f3:57:15: 3d:46:66:b9:a0:4d:1d:e4:30:e4:23:aa:aa:c8:e0: 26:a9:69:a3:96:0c:f0:ca:36:25:1d:70:01:86:00: 36:6e:4e:6c:89:95:52:8f:ef:23:8e:d7:f2:a7:d0: c9:d8:44:39:0e:02:c6:ea:34:ee:65:9b:a5:e8:74: 3a:98:d7:1b:f0:7c:36:c2:65:73:9b:89:af:e0:78: 0f:1c:0f:a3:1f:d1:c2:83:58:fc:ab:a1:40:0b:73: 38:35:7b:e3:c3:86:b8:ff:77:fe:c3:bb:b3:3d:af: d1:88:2d:5f:2b:0b:a0:4d:2f:61:f4:26:62:c5:d3: 22:0f:f0:c0:e6:c0:56:05:7e:c4:2d:a8:32:83:0c: ae:fe:1d:da:33:06:dd:7e:36:13:77:8e:a1:78:cd: 42:dc:31:fb:01:05:3f:41:3a:95:c0:78:5a:02:0c: 57:22:73:0f:fe:b3:ac:70:4d:66:ac:d1:76:a2:2f: 5e:7c:82:75:89:da:74:f7:0d:6d:4d:32:f9:33:53: 89:30:8b:d1:34:85:d4:c3:4a:a6:d0:a1:3d:53:e3: 70:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0A:20:3D:30:2F:57:35:B0:B6:77:F8:B5:E0:B6:4B:CF:DE:58:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144403.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6d9::/32 Signature Algorithm: sha256WithRSAEncryption 9f:ef:4d:b4:37:b6:7d:7a:40:12:78:5f:d5:2e:e8:bb:9e:a4: 1f:8c:6f:f4:10:4b:e0:89:16:44:3f:23:92:cb:38:56:50:9b: 5a:23:4c:09:1b:f1:a8:f3:b6:15:44:ce:62:38:e0:e1:6d:5d: 7f:41:bf:1b:aa:51:e5:20:b8:47:51:f3:26:e3:ba:f8:f6:27: db:2b:9e:fc:72:44:8a:b5:94:e5:9f:07:4c:ed:57:99:e2:b5: 39:48:a6:c0:da:e6:94:7d:01:1d:a0:3f:d9:67:9e:46:8c:89: dc:45:b2:95:d0:88:c5:d2:a4:08:e4:b5:0b:64:b8:f2:7c:7c: 42:fa:f3:c7:f6:51:77:b3:52:e1:a7:44:5d:9b:f6:fd:86:8e: a9:f3:71:bb:78:b6:0f:67:a9:51:af:cf:37:5d:1c:c1:97:37: 9c:a8:2f:9a:3e:90:fa:52:4b:2a:53:82:fe:7d:a6:84:f7:72: 47:6e:57:8d:ac:6f:f3:6e:c0:fc:b7:c2:a4:d4:21:b5:a2:44: 20:3a:d0:8f:b1:89:8e:6d:3d:a5:71:c3:ff:b7:3d:2e:a4:b8: a7:c7:13:03:59:33:82:0b:9a:2a:43:4b:c5:b1:f9:ac:6a:22: 11:a2:81:de:95:4a:83:ee:bc:4f:97:48:5a:33:e4:0a:3d:b6: b9:ac:e1:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJmUhrimAzm6nZzYreFz9mFLTHEgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyMFoX DTI3MDMwMzA2MTUyMFowMzExMC8GA1UEAxMoNjcwQTIwM0QzMDJGNTczNUIwQjY3 N0Y4QjVFMEI2NEJDRkRFNTg5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWkXxnBMartgamt6qPyZCHYYifrrHQXOaOuvspzFbJRlT8zdGLTYtec81cV PUZmuaBNHeQw5COqqsjgJqlpo5YM8Mo2JR1wAYYANm5ObImVUo/vI47X8qfQydhE OQ4Cxuo07mWbpeh0OpjXG/B8NsJlc5uJr+B4DxwPox/RwoNY/KuhQAtzODV748OG uP93/sO7sz2v0YgtXysLoE0vYfQmYsXTIg/wwObAVgV+xC2oMoMMrv4d2jMG3X42 E3eOoXjNQtwx+wEFP0E6lcB4WgIMVyJzD/6zrHBNZqzRdqIvXnyCdYnadPcNbU0y +TNTiTCL0TSF1MNKptChPVPjcAMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRnCiA9 MC9XNbC2d/i14LZLz95YljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ptkwDQYJKoZIhvcNAQELBQADggEBAJ/vTbQ3tn16QBJ4X9Uu6LuepB+Mb/QQS+CJ FkQ/I5LLOFZQm1ojTAkb8ajzthVEzmI44OFtXX9BvxuqUeUguEdR8ybjuvj2J9sr nvxyRIq1lOWfB0ztV5nitTlIpsDa5pR9AR2gP9lnnkaMidxFspXQiMXSpAjktQtk uPJ8fEL688f2UXezUuGnRF2b9v2Gjqnzcbt4tg9nqVGvzzddHMGXN5yoL5o+kPpS SypTgv59poT3ckduV42sb/NuwPy3wqTUIbWiRCA60I+xiY5tPaVxw/+3PS6kuKfH EwNZM4ILmipDS8Wx+axqIhGigd6VSoPuvE+XSFoz5Ao9trms4dE= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:26 2026 by rpki-client