$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144424.roa File: AS144424.roa (raw, json) Hash identifier: rIp7mrU0pnbf4UnTk/AWn0+lZRAIJsmzx1zCbgDvWjs= Subject key identifier: 91:FA:B1:6A:41:7D:FB:8B:B3:AD:6F:6B:4D:9B:48:0F:50:CB:01:DC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5142891B1F0B9CA5E8C3EECCA8C2999A0F9C5B72 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144424.roa Signing time: Wed 04 Mar 2026 06:14:41 +0000 ROA not before: Wed 04 Mar 2026 06:09:41 +0000 ROA not after: Wed 03 Mar 2027 06:14:41 +0000 asID: 144424 IP address blocks: 240a:a6ee::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:42:89:1b:1f:0b:9c:a5:e8:c3:ee:cc:a8:c2:99:9a:0f:9c:5b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:41 2026 GMT Not After : Mar 3 06:14:41 2027 GMT Subject: CN=91FAB16A417DFB8BB3AD6F6B4D9B480F50CB01DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1b:e8:16:a5:7f:a7:3e:51:df:9e:ee:73:41: 60:cb:4d:55:cf:77:a1:16:86:6b:b8:88:ec:37:c6: 12:a1:6b:14:ea:1f:fc:75:bb:63:eb:d7:94:87:11: c6:2f:4d:95:57:b5:29:68:82:5c:d5:53:47:14:bc: e3:57:f8:9a:85:95:f4:cc:73:24:90:e8:52:ce:8e: 79:1f:9d:c2:57:ba:54:1e:dd:8d:0a:19:c3:5a:0f: 4c:92:13:aa:74:e2:eb:d4:06:c9:40:6b:71:3e:96: d7:92:e6:b8:4b:3b:8d:18:ed:06:4b:8e:ee:ac:88: 08:a3:48:d2:40:17:39:de:c1:8c:b1:40:aa:db:28: 44:ec:20:cd:41:f2:cb:c4:50:69:25:f3:ce:59:1e: 1b:52:a6:63:6b:89:28:16:90:6b:b2:4d:29:af:65: 0e:d9:d9:b0:47:dc:61:6e:2c:e9:33:de:f9:72:74: 2a:26:80:89:b2:21:90:41:da:a1:58:94:72:2d:25: ba:16:ce:52:d1:a9:01:a3:cb:c5:03:56:45:8f:65: 90:fb:20:4c:5d:d5:74:dc:13:c4:ce:57:c1:25:ae: af:c4:8d:78:8a:e1:8c:af:b8:cd:b6:c0:8f:54:ef: b3:d9:fb:9e:d2:92:5a:1d:a9:d6:32:2b:51:4d:e5: 87:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FA:B1:6A:41:7D:FB:8B:B3:AD:6F:6B:4D:9B:48:0F:50:CB:01:DC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144424.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6ee::/32 Signature Algorithm: sha256WithRSAEncryption 6a:39:a7:c6:b3:8b:d7:2e:21:63:14:d4:78:c1:b8:98:52:48: b5:2e:25:ae:89:b5:35:ca:51:9d:86:04:f7:74:ef:6c:e6:6f: a0:44:3c:cc:d0:b5:ed:37:32:19:e2:d3:58:ee:95:dc:28:b0: 42:06:6a:99:fd:3f:72:84:02:7e:d6:32:26:2e:2e:9e:ee:45: 24:6a:33:83:83:57:a5:b0:ea:fa:cb:83:16:05:6d:2a:cb:87: 92:b1:b0:4c:42:6d:91:07:da:3c:5a:cc:d2:9f:40:42:92:e7: a8:57:22:bf:82:48:57:6b:a8:eb:4a:dc:76:f0:14:5e:bc:c7: a3:14:e1:9f:9d:f4:f5:c7:27:e3:7a:67:c8:97:33:b7:2a:a2: e0:81:fb:0b:36:73:93:a4:84:bb:d2:f1:8d:11:76:8e:70:30: 9d:e2:d0:81:92:6a:1d:64:d4:41:ca:5d:92:87:f8:22:22:e8: bc:3b:9a:a7:59:96:a2:ae:8c:aa:cf:78:2a:bb:81:59:32:31: c0:8d:94:35:e6:39:92:28:43:6e:e6:73:c9:b1:59:cf:cf:27: 93:83:7f:ac:b2:c1:50:47:4f:9c:bb:45:62:bb:c0:0d:a9:ad: e7:b5:0e:0a:b6:67:07:56:50:4a:e4:ae:73:be:40:41:1c:1d: 99:a4:08:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUUKJGx8LnKXow+7MqMKZmg+cW3IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0MVoX DTI3MDMwMzA2MTQ0MVowMzExMC8GA1UEAxMoOTFGQUIxNkE0MTdERkI4QkIzQUQ2 RjZCNEQ5QjQ4MEY1MENCMDFEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOUb6Balf6c+Ud+e7nNBYMtNVc93oRaGa7iI7DfGEqFrFOof/HW7Y+vXlIcR xi9NlVe1KWiCXNVTRxS841f4moWV9MxzJJDoUs6OeR+dwle6VB7djQoZw1oPTJIT qnTi69QGyUBrcT6W15LmuEs7jRjtBkuO7qyICKNI0kAXOd7BjLFAqtsoROwgzUHy y8RQaSXzzlkeG1KmY2uJKBaQa7JNKa9lDtnZsEfcYW4s6TPe+XJ0KiaAibIhkEHa oViUci0luhbOUtGpAaPLxQNWRY9lkPsgTF3VdNwTxM5XwSWur8SNeIrhjK+4zbbA j1Tvs9n7ntKSWh2p1jIrUU3lhy0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSR+rFq QX37i7Otb2tNm0gPUMsB3DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pu4wDQYJKoZIhvcNAQELBQADggEBAGo5p8azi9cuIWMU1HjBuJhSSLUuJa6JtTXK UZ2GBPd072zmb6BEPMzQte03Mhni01juldwosEIGapn9P3KEAn7WMiYuLp7uRSRq M4ODV6Ww6vrLgxYFbSrLh5KxsExCbZEH2jxazNKfQEKS56hXIr+CSFdrqOtK3Hbw FF68x6MU4Z+d9PXHJ+N6Z8iXM7cqouCB+ws2c5OkhLvS8Y0Rdo5wMJ3i0IGSah1k 1EHKXZKH+CIi6Lw7mqdZlqKujKrPeCq7gVkyMcCNlDXmOZIoQ27mc8mxWc/PJ5OD f6yywVBHT5y7RWK7wA2pree1Dgq2ZwdWUErkrnO+QEEcHZmkCGI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:03 2026 by rpki-client