$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144439.roa File: AS144439.roa (raw, json) Hash identifier: W8+MWn3Z+Xf8TMgxLMmkHeE1mTPOdPZ9l58magPilAA= Subject key identifier: EF:2A:B3:F9:70:F8:34:EE:6D:95:74:4A:BE:18:B6:2A:72:2A:BE:84 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 35B91EB8889C80D1A3AEB2B7CD1C059C62289A73 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144439.roa Signing time: Wed 04 Mar 2026 06:14:09 +0000 ROA not before: Wed 04 Mar 2026 06:09:09 +0000 ROA not after: Wed 03 Mar 2027 06:14:09 +0000 asID: 144439 IP address blocks: 240a:a6fd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b9:1e:b8:88:9c:80:d1:a3:ae:b2:b7:cd:1c:05:9c:62:28:9a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:09 2026 GMT Not After : Mar 3 06:14:09 2027 GMT Subject: CN=EF2AB3F970F834EE6D95744ABE18B62A722ABE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:83:13:e4:02:20:f2:61:96:bd:cc:a3:0f: 68:51:e6:98:31:d1:f8:ac:a3:b1:fc:a8:1f:1b:17: 0d:e3:85:0a:a3:f7:71:54:f0:1f:01:ac:23:6a:4f: dc:a7:9a:4e:0a:4d:8f:ef:d1:9e:72:a5:5d:5d:d6: db:3b:6f:7f:79:9b:e4:da:bf:a6:69:5d:ef:5f:e3: 39:77:2d:8c:1c:3a:dc:69:98:88:fe:fe:4d:5d:10: 90:f9:cf:7b:53:c8:e6:fa:29:3b:90:82:2a:f0:97: 8e:9a:38:14:09:12:97:60:8c:5c:0a:4c:00:1c:9a: 18:a8:54:e8:5d:cb:74:73:ea:8a:33:b5:a9:ca:90: 7a:22:8f:a4:91:20:e0:b8:27:6a:05:50:7e:30:f4: 5c:68:96:dc:08:f5:b6:ca:28:14:2b:d2:45:80:e8: 6a:4e:40:49:22:7a:b4:f9:f3:26:82:60:c6:61:5b: eb:11:8d:88:d3:8b:a8:47:eb:86:63:4b:82:6c:6a: 24:51:bb:dc:b2:62:e9:06:c6:17:8c:3c:de:c8:ce: 98:40:0e:67:09:88:ce:58:37:5c:5e:a4:04:11:34: bd:50:ab:ec:ad:a7:ad:4a:06:51:27:21:51:80:2a: a1:80:da:b9:06:ca:04:8c:84:b3:ad:b6:a6:e0:ad: c5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2A:B3:F9:70:F8:34:EE:6D:95:74:4A:BE:18:B6:2A:72:2A:BE:84 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6fd::/32 Signature Algorithm: sha256WithRSAEncryption 43:54:1f:26:1e:3a:7d:40:7e:2c:24:2c:71:a6:ea:bc:0a:f5: 2f:05:db:aa:32:7a:b8:b1:89:24:1e:98:ee:09:7e:66:30:56: 47:e6:ea:62:44:71:c1:b9:ff:da:11:4b:0b:0d:6c:dd:9b:1f: d6:ed:b1:9b:62:a4:82:24:4b:b8:08:3c:8e:12:d2:02:d0:22: 36:f9:ad:bc:78:ba:7a:82:fd:78:a5:7c:ff:8b:79:00:cf:ba: 18:00:e0:b7:ea:bb:0e:3e:97:13:15:bb:4c:be:c5:53:1e:9a: 74:cc:3e:80:61:e5:21:9e:14:1c:1d:1f:28:60:76:b8:69:88: 74:1d:67:85:ec:0b:7c:a0:d7:90:0a:6b:79:4e:60:64:ce:bf: 35:dc:7f:23:70:8f:ee:eb:eb:30:39:29:fe:22:49:de:5e:61: 40:48:07:0b:23:33:31:ee:0d:2a:80:87:60:b9:c9:3a:81:46: 82:df:6e:b5:50:21:fa:48:b1:5f:4a:fe:f9:a8:e2:29:10:7b: b7:b7:88:5b:4f:9f:a9:ca:a3:cc:70:0e:58:33:03:20:cc:56: 28:b0:39:c4:d5:dd:19:60:fc:aa:1d:2f:bc:15:02:be:9f:28: 2b:c2:0d:b9:ed:b8:07:b8:db:5f:cd:0b:3f:d7:bb:d8:23:41: 13:85:b3:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNbkeuIicgNGjrrK3zRwFnGIomnMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwOVoX DTI3MDMwMzA2MTQwOVowMzExMC8GA1UEAxMoRUYyQUIzRjk3MEY4MzRFRTZEOTU3 NDRBQkUxOEI2MkE3MjJBQkU4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyagxPkAiDyYZa9zKMPaFHmmDHR+KyjsfyoHxsXDeOFCqP3cVTwHwGsI2pP 3KeaTgpNj+/RnnKlXV3W2ztvf3mb5Nq/pmld71/jOXctjBw63GmYiP7+TV0QkPnP e1PI5vopO5CCKvCXjpo4FAkSl2CMXApMAByaGKhU6F3LdHPqijO1qcqQeiKPpJEg 4LgnagVQfjD0XGiW3Aj1tsooFCvSRYDoak5ASSJ6tPnzJoJgxmFb6xGNiNOLqEfr hmNLgmxqJFG73LJi6QbGF4w83sjOmEAOZwmIzlg3XF6kBBE0vVCr7K2nrUoGUSch UYAqoYDauQbKBIyEs622puCtxW0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTvKrP5 cPg07m2VdEq+GLYqciq+hDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pv0wDQYJKoZIhvcNAQELBQADggEBAENUHyYeOn1AfiwkLHGm6rwK9S8F26oyerix iSQemO4JfmYwVkfm6mJEccG5/9oRSwsNbN2bH9btsZtipIIkS7gIPI4S0gLQIjb5 rbx4unqC/XilfP+LeQDPuhgA4Lfquw4+lxMVu0y+xVMemnTMPoBh5SGeFBwdHyhg drhpiHQdZ4XsC3yg15AKa3lOYGTOvzXcfyNwj+7r6zA5Kf4iSd5eYUBIBwsjMzHu DSqAh2C5yTqBRoLfbrVQIfpIsV9K/vmo4ikQe7e3iFtPn6nKo8xwDlgzAyDMViiw OcTV3Rlg/KodL7wVAr6fKCvCDbntuAe421/NCz/Xu9gjQROFs6E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:29 2026 by rpki-client