$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144411.roa File: AS144411.roa (raw, json) Hash identifier: lGFHoPFwSv4b+6ed0xOzSaj+6WVgD/JvUYL5YGsnIrc= Subject key identifier: B4:6C:17:21:01:5B:1C:BE:46:26:83:EC:0C:21:B8:27:09:42:26:2A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 35078448A06BC1FA14A35E4BB63EAAE242011C4C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144411.roa Signing time: Wed 04 Mar 2026 06:14:02 +0000 ROA not before: Wed 04 Mar 2026 06:09:02 +0000 ROA not after: Wed 03 Mar 2027 06:14:02 +0000 asID: 144411 IP address blocks: 240a:a6e1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:07:84:48:a0:6b:c1:fa:14:a3:5e:4b:b6:3e:aa:e2:42:01:1c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:02 2026 GMT Not After : Mar 3 06:14:02 2027 GMT Subject: CN=B46C1721015B1CBE462683EC0C21B8270942262A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:29:3b:f4:b7:da:20:23:cd:5d:84:3c:21: 2a:f7:52:95:40:bf:ef:86:4a:09:06:c5:16:36:c4: 49:18:7b:37:f0:b5:21:f1:3b:3b:d7:88:30:cb:07: 5a:3d:b3:04:50:5f:e0:19:05:b5:e8:ae:8d:d9:e9: cf:d5:4c:89:79:e8:1e:16:47:8c:16:10:ec:6f:db: f7:c5:c2:5b:85:95:26:2f:e1:b3:11:f9:b0:f8:fa: af:7d:a4:55:62:df:9b:b1:a1:9d:1c:e0:02:3d:2b: 41:f6:21:9a:31:0b:4b:20:31:2e:7d:02:f3:fb:c7: 17:8c:0b:b6:46:74:70:89:46:e3:e6:50:5c:8a:08: 4a:14:43:dd:72:ce:de:00:24:60:f6:2f:ee:26:c6: a2:38:81:84:23:7b:61:37:98:0c:3a:9f:60:50:ec: 01:77:95:99:af:bf:80:0d:fd:61:a2:30:bb:fd:c9: 79:a9:53:62:e8:4d:31:f7:04:3a:aa:88:05:b3:f2: 3c:57:21:99:f6:70:16:51:12:48:b9:0b:c0:c8:ef: 71:ab:42:63:0f:46:5f:96:86:f1:ed:19:b4:bb:80: 46:8d:fd:b0:48:ba:82:00:db:0b:ad:93:d7:ef:5c: 1f:bc:7d:11:90:ed:8f:96:6f:2c:72:23:d5:19:5f: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6C:17:21:01:5B:1C:BE:46:26:83:EC:0C:21:B8:27:09:42:26:2A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144411.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6e1::/32 Signature Algorithm: sha256WithRSAEncryption 06:1c:e2:cc:55:82:1b:5c:ec:7a:b3:96:44:6a:05:4b:fa:62: 6f:94:e3:d0:03:34:df:48:56:b6:8e:9b:10:e6:92:f5:d2:de: 00:9f:ed:92:dd:6f:71:14:e3:a1:4e:6a:60:64:d1:bd:5f:19: 25:1b:fe:69:4c:92:72:df:8b:59:fc:f3:0c:16:ee:e3:89:5f: 5e:a9:b1:36:ce:50:c9:2d:56:b4:94:6c:b1:cd:94:5f:76:14: 03:c9:e2:66:0f:db:4a:89:fa:0d:2d:50:d5:33:1a:58:10:a5: 4c:1d:da:11:6c:87:5c:ea:18:d5:cc:73:a2:b1:94:db:36:6f: 3a:99:ab:b5:40:d0:45:9d:6b:b7:c8:e0:ce:c8:15:6a:09:65: 02:dc:c8:f5:60:04:11:d1:33:23:5f:b6:61:17:ef:a2:49:b4: 78:6d:43:10:1b:68:47:eb:12:54:0a:9e:f0:34:aa:43:66:3d: ba:5c:0d:fe:36:a7:c6:4a:72:3e:ba:06:30:d7:7e:33:70:d7: df:93:fd:8d:85:60:6c:84:ba:b5:05:63:b7:1c:e2:aa:73:74: b5:cf:c8:18:8c:f2:64:e9:e4:a5:2e:6d:2b:3a:35:90:54:26: 1e:c9:85:be:7c:4a:99:59:08:00:bd:32:b2:bb:9b:0b:9f:2c: b5:6d:d5:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNQeESKBrwfoUo15Ltj6q4kIBHEwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwMloX DTI3MDMwMzA2MTQwMlowMzExMC8GA1UEAxMoQjQ2QzE3MjEwMTVCMUNCRTQ2MjY4 M0VDMEMyMUI4MjcwOTQyMjYyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhvKTv0t9ogI81dhDwhKvdSlUC/74ZKCQbFFjbESRh7N/C1IfE7O9eIMMsH Wj2zBFBf4BkFteiujdnpz9VMiXnoHhZHjBYQ7G/b98XCW4WVJi/hsxH5sPj6r32k VWLfm7GhnRzgAj0rQfYhmjELSyAxLn0C8/vHF4wLtkZ0cIlG4+ZQXIoIShRD3XLO 3gAkYPYv7ibGojiBhCN7YTeYDDqfYFDsAXeVma+/gA39YaIwu/3JealTYuhNMfcE OqqIBbPyPFchmfZwFlESSLkLwMjvcatCYw9GX5aG8e0ZtLuARo39sEi6ggDbC62T 1+9cH7x9EZDtj5ZvLHIj1Rlf0dcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS0bBch AVscvkYmg+wMIbgnCUImKjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK puEwDQYJKoZIhvcNAQELBQADggEBAAYc4sxVghtc7HqzlkRqBUv6Ym+U49ADNN9I VraOmxDmkvXS3gCf7ZLdb3EU46FOamBk0b1fGSUb/mlMknLfi1n88wwW7uOJX16p sTbOUMktVrSUbLHNlF92FAPJ4mYP20qJ+g0tUNUzGlgQpUwd2hFsh1zqGNXMc6Kx lNs2bzqZq7VA0EWda7fI4M7IFWoJZQLcyPVgBBHRMyNftmEX76JJtHhtQxAbaEfr ElQKnvA0qkNmPbpcDf42p8ZKcj66BjDXfjNw19+T/Y2FYGyEurUFY7cc4qpzdLXP yBiM8mTp5KUubSs6NZBUJh7Jhb58SplZCAC9MrK7mwufLLVt1RA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:36 2026 by rpki-client