$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144415.roa File: AS144415.roa (raw, json) Hash identifier: dBKFG2y/zALMrv68I+YMlX21L5DrMWXxatpux/8HhBA= Subject key identifier: D1:42:6C:4E:EF:15:82:3D:DE:6D:07:46:61:BC:63:D8:C7:83:98:05 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1A5E7EEA7EC7CCC499AC6170B42D1FF5D1F8DE00 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144415.roa Signing time: Wed 04 Mar 2026 06:13:49 +0000 ROA not before: Wed 04 Mar 2026 06:08:49 +0000 ROA not after: Wed 03 Mar 2027 06:13:49 +0000 asID: 144415 IP address blocks: 240a:a6e5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5e:7e:ea:7e:c7:cc:c4:99:ac:61:70:b4:2d:1f:f5:d1:f8:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:49 2026 GMT Not After : Mar 3 06:13:49 2027 GMT Subject: CN=D1426C4EEF15823DDE6D074661BC63D8C7839805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:36:d3:2f:5c:d3:0d:62:45:7c:5e:6c:83: 6a:5d:1a:77:a8:e2:cd:1e:0d:fc:c9:84:e5:e3:b2: 1c:00:cb:30:dd:e3:58:57:e2:ea:d7:25:e0:e1:a7: 62:b0:c5:b3:7c:23:81:7b:f8:77:fe:ad:78:92:df: 51:56:ad:5a:62:29:20:64:23:b7:c6:54:ef:9a:91: cb:ab:74:42:80:7e:75:f8:84:4c:cb:3a:94:c3:4a: 1b:7a:73:40:09:8b:02:3f:13:6f:84:af:fc:69:ea: 5d:77:6e:ac:26:e3:46:4f:a1:05:e9:ae:a1:d2:3f: f2:dc:0a:54:a3:d4:00:52:69:8c:93:ee:cf:58:10: c7:33:79:15:b0:0a:9d:db:2b:9f:81:a3:05:cd:e3: 5d:eb:27:eb:03:87:4b:52:3e:e9:41:97:8c:be:01: a1:65:43:1e:a6:86:3c:2d:83:79:0e:8c:60:28:83: 07:6e:e7:c5:6c:ae:9d:26:c2:eb:a3:8e:82:94:4b: 6a:ba:65:3e:3f:68:ea:d5:f2:c6:5f:60:12:63:fb: 9c:32:d6:66:8d:92:46:28:13:06:ec:71:58:43:52: 0a:97:01:7f:77:29:bd:af:c5:38:21:6b:fd:00:98: 5e:d2:e9:1b:ff:31:8f:3e:50:a3:61:6c:aa:27:52: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:42:6C:4E:EF:15:82:3D:DE:6D:07:46:61:BC:63:D8:C7:83:98:05 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144415.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6e5::/32 Signature Algorithm: sha256WithRSAEncryption 8b:c1:63:21:a7:8a:67:10:02:b9:42:a8:e1:c0:42:71:a7:e3: d7:b4:3f:48:83:f3:b8:37:02:37:35:bf:7e:4f:a4:77:5a:82: 70:d9:bd:ab:25:58:e1:48:71:ac:12:11:12:a7:ad:6e:8e:0f: b1:b9:bf:2f:0f:1d:51:bc:c5:3e:8d:51:f8:85:46:ce:3d:8e: 5f:10:c9:4b:1c:9b:e3:42:e9:6c:c6:dd:57:fa:36:5b:d6:32: bb:f2:d5:63:34:bb:73:5b:0e:86:31:9c:56:00:2a:ff:b0:0c: 45:7a:78:4c:25:ce:e3:09:e4:c9:98:a7:a5:0f:b5:72:18:7c: ee:86:c2:23:74:69:ad:32:f6:5b:51:f3:76:2b:e9:34:b9:7f: f8:32:2e:38:ad:20:cc:fe:53:8b:af:bd:b2:7b:6a:b2:c8:16: cd:f7:b1:e0:fb:75:22:71:d5:b1:0e:81:54:0f:c8:af:a6:90: 84:bc:4c:8a:fc:d5:20:21:05:66:75:24:c9:66:e9:88:a8:64: b6:f7:16:80:7d:da:c0:8a:6e:ac:37:d0:9f:2c:e5:f7:67:15: 32:02:e3:f0:69:5d:38:fc:5c:e3:f7:be:38:95:b6:38:5d:07: 8f:18:7d:be:b2:ff:b2:9f:38:18:ba:94:bc:ca:84:4a:78:41: 3b:a0:64:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGl5+6n7HzMSZrGFwtC0f9dH43gAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0OVoX DTI3MDMwMzA2MTM0OVowMzExMC8GA1UEAxMoRDE0MjZDNEVFRjE1ODIzRERFNkQw NzQ2NjFCQzYzRDhDNzgzOTgwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALn2NtMvXNMNYkV8XmyDal0ad6jizR4N/MmE5eOyHADLMN3jWFfi6tcl4OGn YrDFs3wjgXv4d/6teJLfUVatWmIpIGQjt8ZU75qRy6t0QoB+dfiETMs6lMNKG3pz QAmLAj8Tb4Sv/GnqXXdurCbjRk+hBemuodI/8twKVKPUAFJpjJPuz1gQxzN5FbAK ndsrn4GjBc3jXesn6wOHS1I+6UGXjL4BoWVDHqaGPC2DeQ6MYCiDB27nxWyunSbC 66OOgpRLarplPj9o6tXyxl9gEmP7nDLWZo2SRigTBuxxWENSCpcBf3cpva/FOCFr /QCYXtLpG/8xjz5Qo2FsqidSOKcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTRQmxO 7xWCPd5tB0ZhvGPYx4OYBTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK puUwDQYJKoZIhvcNAQELBQADggEBAIvBYyGnimcQArlCqOHAQnGn49e0P0iD87g3 Ajc1v35PpHdagnDZvaslWOFIcawSERKnrW6OD7G5vy8PHVG8xT6NUfiFRs49jl8Q yUscm+NC6WzG3Vf6NlvWMrvy1WM0u3NbDoYxnFYAKv+wDEV6eEwlzuMJ5MmYp6UP tXIYfO6GwiN0aa0y9ltR83Yr6TS5f/gyLjitIMz+U4uvvbJ7arLIFs33seD7dSJx 1bEOgVQPyK+mkIS8TIr81SAhBWZ1JMlm6YioZLb3FoB92sCKbqw30J8s5fdnFTIC 4/BpXTj8XOP3vjiVtjhdB48Yfb6y/7KfOBi6lLzKhEp4QTugZAI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:06 2026 by rpki-client