$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144444.roa File: AS144444.roa (raw, json) Hash identifier: HKSei3ojfK1TO9yaE65l0q03Dn9NRzfHQ5Pmw7R/S5E= Subject key identifier: 0B:92:8C:B1:05:E4:24:3D:E7:FD:EA:FA:FA:DD:54:B4:DA:ED:3B:3E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64AE8718E13B26E0378D33C81B6EF3484D92D2D6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144444.roa Signing time: Wed 04 Mar 2026 06:13:03 +0000 ROA not before: Wed 04 Mar 2026 06:08:03 +0000 ROA not after: Wed 03 Mar 2027 06:13:03 +0000 asID: 144444 IP address blocks: 240a:a702::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ae:87:18:e1:3b:26:e0:37:8d:33:c8:1b:6e:f3:48:4d:92:d2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:03 2026 GMT Not After : Mar 3 06:13:03 2027 GMT Subject: CN=0B928CB105E4243DE7FDEAFAFADD54B4DAED3B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:7b:65:91:8d:b0:b3:0e:75:d7:8d:e1:3c: 69:ff:1b:22:46:bf:a9:33:96:f5:81:b8:ae:80:55: 0c:bd:b9:c8:f1:81:87:24:be:6e:ad:f5:e6:46:0a: 87:8a:2b:ac:9d:44:0c:de:c5:03:38:4a:09:fc:6c: 11:03:16:a3:93:2c:68:94:6d:6b:72:a6:d6:82:1d: e8:4a:21:03:7b:0a:ef:4e:ef:fb:1e:bd:04:3e:f6: 89:f2:55:1e:39:f0:f8:e5:4d:7a:73:42:ee:04:02: d7:5e:56:79:bf:ef:40:b8:5b:84:dc:c7:20:e6:48: 2e:60:74:29:7a:78:c5:d9:f5:0e:9d:f1:cb:46:c5: 93:7e:d2:20:f8:85:f3:51:30:ac:7a:b3:4c:cc:50: f1:1f:9a:91:b9:1c:6c:53:08:f2:d8:0f:d5:a8:a0: 19:50:25:39:58:a0:a2:c6:85:56:21:56:cb:7c:32: 75:20:ef:94:05:5c:1b:4b:4e:27:91:c6:3c:c5:0f: 56:7f:e6:1f:2c:15:e9:c7:c4:03:44:dc:90:7a:99: 49:9d:cd:04:e6:ed:66:3f:28:c5:25:3d:ca:b7:d2: f4:25:15:97:42:bd:13:38:49:2d:20:d6:4b:08:60: c5:fc:80:31:c3:6d:02:6d:9e:7f:8d:0e:28:d7:e5: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:92:8C:B1:05:E4:24:3D:E7:FD:EA:FA:FA:DD:54:B4:DA:ED:3B:3E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144444.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a702::/32 Signature Algorithm: sha256WithRSAEncryption af:ce:c8:f3:8b:16:d0:fa:50:75:df:86:5a:2b:9b:e5:a1:c0: b1:96:d3:5c:bc:b9:d4:c9:a4:c9:4b:ae:32:7d:08:40:b7:de: 28:ea:29:a3:ed:7a:e0:cd:7d:27:cb:9b:ad:58:7d:67:c2:88: 39:8d:a7:33:29:b5:ee:b9:6f:18:06:21:89:f0:f3:9e:e1:f1: f3:7a:c7:71:fd:ff:2a:04:f6:ef:fe:67:5a:a6:66:fe:1c:6b: 98:ca:55:e7:40:be:0b:68:e6:99:f8:7a:07:c8:d1:0a:8b:ae: 1c:85:cc:76:a9:7f:af:3b:f3:ee:20:21:31:cf:58:e1:6c:45: b4:a2:62:a7:cd:88:6b:14:cb:3c:05:c2:a3:7f:5d:03:e7:82: 7d:2b:c9:93:5b:50:03:1b:56:8d:16:79:8f:64:f2:f4:45:8c: 1c:40:54:9e:68:5e:7b:c0:fb:d6:6c:63:4c:36:fd:39:32:e5: 12:70:ce:f7:e6:6c:0b:85:44:ea:ff:64:61:4b:2e:0c:07:b7: 03:94:6d:06:00:c6:13:96:92:69:d8:20:75:60:c2:19:20:a0: 67:cb:bd:39:ca:e4:52:ba:47:79:30:5f:df:a3:51:f3:96:ab: ff:8f:83:c2:27:f2:06:3d:6f:9f:6d:8f:34:f6:58:73:ab:08: 6d:c1:f0:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZK6HGOE7JuA3jTPIG27zSE2S0tYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwM1oX DTI3MDMwMzA2MTMwM1owMzExMC8GA1UEAxMoMEI5MjhDQjEwNUU0MjQzREU3RkRF QUZBRkFERDU0QjREQUVEM0IzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJT+e2WRjbCzDnXXjeE8af8bIka/qTOW9YG4roBVDL25yPGBhyS+bq315kYK h4orrJ1EDN7FAzhKCfxsEQMWo5MsaJRta3Km1oId6EohA3sK707v+x69BD72ifJV Hjnw+OVNenNC7gQC115Web/vQLhbhNzHIOZILmB0KXp4xdn1Dp3xy0bFk37SIPiF 81EwrHqzTMxQ8R+akbkcbFMI8tgP1aigGVAlOVigosaFViFWy3wydSDvlAVcG0tO J5HGPMUPVn/mHywV6cfEA0TckHqZSZ3NBObtZj8oxSU9yrfS9CUVl0K9EzhJLSDW SwhgxfyAMcNtAm2ef40OKNflivkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQLkoyx BeQkPef96vr63VS02u07PjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pwIwDQYJKoZIhvcNAQELBQADggEBAK/OyPOLFtD6UHXfhlorm+WhwLGW01y8udTJ pMlLrjJ9CEC33ijqKaPteuDNfSfLm61YfWfCiDmNpzMpte65bxgGIYnw857h8fN6 x3H9/yoE9u/+Z1qmZv4ca5jKVedAvgto5pn4egfI0QqLrhyFzHapf6878+4gITHP WOFsRbSiYqfNiGsUyzwFwqN/XQPngn0ryZNbUAMbVo0WeY9k8vRFjBxAVJ5oXnvA +9ZsY0w2/Tky5RJwzvfmbAuFROr/ZGFLLgwHtwOUbQYAxhOWkmnYIHVgwhkgoGfL vTnK5FK6R3kwX9+jUfOWq/+Pg8In8gY9b59tjzT2WHOrCG3B8KU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:19 2026 by rpki-client