$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144406.roa File: AS144406.roa (raw, json) Hash identifier: 7RQ0yJg5TWRxHmtcy/ULnp8Y1QbBwAzjUJ8MwAC1vgM= Subject key identifier: 31:EC:F2:90:D4:02:01:78:7E:A1:7C:73:62:6E:2E:90:37:68:43:68 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2A1F58F1C00DCF1B4A83BE1F0A51984B011080B4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144406.roa Signing time: Wed 04 Mar 2026 06:13:47 +0000 ROA not before: Wed 04 Mar 2026 06:08:47 +0000 ROA not after: Wed 03 Mar 2027 06:13:47 +0000 asID: 144406 IP address blocks: 240a:a6dc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1f:58:f1:c0:0d:cf:1b:4a:83:be:1f:0a:51:98:4b:01:10:80:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:47 2026 GMT Not After : Mar 3 06:13:47 2027 GMT Subject: CN=31ECF290D40201787EA17C73626E2E9037684368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:42:fb:79:ef:f5:b4:8f:0e:fe:42:12:ff:ff: a0:5d:4c:21:ee:6a:46:6b:38:d9:d4:d1:84:30:37: 17:72:5e:ff:8c:cf:4e:1d:a2:48:92:96:11:82:ed: 2e:5d:57:1f:e5:9a:6b:ab:8a:9a:6c:51:fb:a7:d4: 93:f7:a8:25:48:4f:f5:5c:f5:52:c2:c3:f0:88:18: 60:df:90:11:2b:8e:02:b7:15:3b:1f:68:f1:96:4b: 4f:65:7d:1d:a1:80:4d:4d:ad:53:d2:09:85:df:8b: 56:ce:e2:a5:c6:c0:f6:36:58:50:6e:2c:56:7e:96: 34:cc:82:25:c0:a4:05:7c:bb:73:10:0b:ea:a2:5a: dd:5d:ff:e8:7f:bf:61:51:76:4d:b4:3d:ee:a0:17: 9e:0c:4c:2d:bd:24:af:15:5e:d5:9a:40:68:e5:9b: e7:b0:bb:0f:49:6b:f8:c3:80:93:c7:7e:1b:39:ba: c3:45:fb:e7:ba:5a:0c:fc:34:66:e8:4e:06:f9:ce: 49:ff:dc:3d:50:e4:e3:eb:ab:17:f5:69:e1:27:75: 25:12:1b:d8:6b:5a:98:2d:09:3c:89:8e:f3:44:a3: 49:78:99:15:d1:67:7f:2e:5c:2d:cf:46:77:24:5b: a1:e2:30:12:fb:01:5c:9f:fb:2c:45:0d:f9:be:b4: d3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EC:F2:90:D4:02:01:78:7E:A1:7C:73:62:6E:2E:90:37:68:43:68 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144406.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6dc::/32 Signature Algorithm: sha256WithRSAEncryption b5:52:a3:e6:7d:8d:3e:9b:39:43:60:ca:bb:2a:83:f5:56:3f: 3d:d4:c3:46:d9:e0:98:b0:dc:0a:39:4d:8e:ef:38:b3:2a:39: 56:e1:30:0f:b1:30:9e:fc:04:d3:12:f1:03:b0:bf:56:5c:15: 4b:9a:6a:a0:be:32:4b:5f:dc:88:39:61:c4:63:3f:79:2b:ea: 32:1d:db:2a:77:66:56:32:d9:ac:32:81:ac:b0:78:d8:3a:0e: 51:24:58:a9:f0:0b:7c:2e:df:2c:c0:13:8e:9b:cb:27:1b:e1: c6:93:db:57:52:5c:fa:f0:8b:0a:96:86:87:14:2f:43:c6:a6: 52:bc:da:e2:8d:ca:e2:a0:70:8c:ce:4b:a8:47:6e:e6:11:ee: bd:45:7f:8c:39:59:63:da:d6:ea:38:97:ab:6b:9a:c2:9d:5d: 76:51:2b:05:8c:c3:e3:07:11:46:dd:33:cd:84:c6:31:37:ff: 12:85:20:63:6a:1e:64:7a:18:46:c7:52:57:6e:49:22:87:bd: 36:17:b3:40:42:b4:30:c4:b3:4c:2e:fc:c3:83:2a:49:fa:8b: e6:2b:6a:f1:31:94:d3:9c:28:eb:04:75:90:82:4e:c7:e0:f4: e0:82:d3:cc:53:82:8d:b9:38:8e:db:fa:dc:13:e4:1e:b8:8d: 1f:f4:2e:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKh9Y8cANzxtKg74fClGYSwEQgLQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0N1oX DTI3MDMwMzA2MTM0N1owMzExMC8GA1UEAxMoMzFFQ0YyOTBENDAyMDE3ODdFQTE3 QzczNjI2RTJFOTAzNzY4NDM2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlC+3nv9bSPDv5CEv//oF1MIe5qRms42dTRhDA3F3Je/4zPTh2iSJKWEYLt Ll1XH+Waa6uKmmxR+6fUk/eoJUhP9Vz1UsLD8IgYYN+QESuOArcVOx9o8ZZLT2V9 HaGATU2tU9IJhd+LVs7ipcbA9jZYUG4sVn6WNMyCJcCkBXy7cxAL6qJa3V3/6H+/ YVF2TbQ97qAXngxMLb0krxVe1ZpAaOWb57C7D0lr+MOAk8d+Gzm6w0X757paDPw0 ZuhOBvnOSf/cPVDk4+urF/Vp4Sd1JRIb2GtamC0JPImO80SjSXiZFdFnfy5cLc9G dyRboeIwEvsBXJ/7LEUN+b6007ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQx7PKQ 1AIBeH6hfHNibi6QN2hDaDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ptwwDQYJKoZIhvcNAQELBQADggEBALVSo+Z9jT6bOUNgyrsqg/VWPz3Uw0bZ4Jiw 3Ao5TY7vOLMqOVbhMA+xMJ78BNMS8QOwv1ZcFUuaaqC+Mktf3Ig5YcRjP3kr6jId 2yp3ZlYy2awygayweNg6DlEkWKnwC3wu3yzAE46byycb4caT21dSXPrwiwqWhocU L0PGplK82uKNyuKgcIzOS6hHbuYR7r1Ff4w5WWPa1uo4l6trmsKdXXZRKwWMw+MH EUbdM82ExjE3/xKFIGNqHmR6GEbHUlduSSKHvTYXs0BCtDDEs0wu/MODKkn6i+Yr avExlNOcKOsEdZCCTsfg9OCC08xTgo25OI7b+twT5B64jR/0LlM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:41 2026 by rpki-client