$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144448.roa File: AS144448.roa (raw, json) Hash identifier: o+f275hCr7O/iYbkZseY+eqr71lrx/0PkN2vnZ6PZw0= Subject key identifier: 43:08:31:91:C9:A3:97:5F:97:A4:77:62:D0:F7:AB:41:7B:DF:DD:8C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C3F4EEA9133EEAFB07D9D5753745FCFD2F20B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144448.roa Signing time: Wed 04 Mar 2026 06:13:40 +0000 ROA not before: Wed 04 Mar 2026 06:08:40 +0000 ROA not after: Wed 03 Mar 2027 06:13:40 +0000 asID: 144448 IP address blocks: 240a:a706::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3f:4e:ea:91:33:ee:af:b0:7d:9d:57:53:74:5f:cf:d2:f2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:40 2026 GMT Not After : Mar 3 06:13:40 2027 GMT Subject: CN=43083191C9A3975F97A47762D0F7AB417BDFDD8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:eb:9c:03:93:fb:df:2c:98:c5:6b:c4:79: a2:09:fc:eb:0a:a7:2d:89:06:7d:ee:23:6e:08:4c: 49:e4:21:51:3c:af:5b:54:9b:56:dd:70:da:70:0a: 47:6b:f9:36:6d:e7:20:27:89:b2:d3:46:ac:25:af: 69:64:1e:21:12:ab:f6:d0:00:ea:65:14:20:8d:49: 13:8c:ba:b3:65:e5:80:b5:9d:f0:6c:61:ed:dc:3e: 8b:10:b2:1b:cd:0d:4e:56:87:b3:42:68:f1:1f:b0: f9:7e:f9:42:18:64:71:f1:95:0e:15:9f:2b:8f:1e: 43:18:ad:b2:3b:0a:ba:13:c1:43:87:44:31:fd:4a: f1:c3:49:1a:e8:06:42:4b:be:cd:f9:b8:0d:18:93: 1f:1f:04:81:3f:d7:53:ed:e3:58:67:f4:b0:b2:94: 25:9b:56:75:67:86:05:de:8a:99:39:81:5d:2d:09: c5:f0:b8:d6:a3:91:4c:17:26:4f:5b:29:bb:41:e5: 10:94:c6:fe:60:98:a8:55:c1:43:8f:a9:c4:c9:17: cb:73:35:41:58:5e:55:69:1e:e1:0c:9a:9d:dc:27: 83:c8:03:82:f8:71:06:d6:07:aa:28:c5:c5:41:72: 2a:13:3a:ab:4d:8c:4f:ea:74:59:c0:1e:56:96:30: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:31:91:C9:A3:97:5F:97:A4:77:62:D0:F7:AB:41:7B:DF:DD:8C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144448.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a706::/32 Signature Algorithm: sha256WithRSAEncryption d1:04:fb:0b:f7:ff:0d:79:b8:2e:e2:ab:d5:c9:c8:c0:de:a0: 4c:58:e2:04:73:bb:08:f5:f4:47:d2:8e:96:85:a6:e9:0a:a2: b3:da:5f:f4:f9:47:48:47:ba:f6:c9:b0:00:e6:05:da:e1:ee: 0a:a9:b9:5c:6b:3c:a4:61:f4:42:b9:42:30:fe:d0:6c:4f:df: a2:29:74:ee:93:12:ef:f8:3a:2d:ee:9a:af:9f:ba:1b:0a:77: 7e:94:05:98:fe:e7:99:c4:af:8a:eb:70:85:06:b6:3f:a3:ed: 19:7d:e5:50:5d:b1:2d:4c:39:bd:a8:32:d8:06:41:17:eb:ce: ff:64:18:f3:00:7c:cd:bd:94:c3:7e:3f:2e:49:bc:16:2a:6e: f6:e1:23:83:65:38:f3:4d:15:25:45:2a:f5:29:c7:eb:03:7a: 42:ec:91:49:20:1e:d9:6b:d9:66:42:75:1a:1b:7a:25:87:a8: 44:eb:0a:5b:6c:d0:1a:53:60:c3:56:d6:a9:ba:8e:b2:28:c6: 1d:9d:e3:a3:62:12:97:19:c0:15:d2:37:53:78:8a:22:d0:94: 02:0e:24:e6:46:20:e8:5a:2d:64:bb:2d:e2:fc:e4:77:5b:99: 4f:f4:be:57:14:b8:c7:a0:6b:77:6c:ce:6d:44:35:97:96:f2: b3:9d:27:0a -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgITfD9O6pEz7q+wfZ1XU3Rfz9LyCzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDDAxBOTFFNUQ2MTAwMDExMTAvBgNVBAUTKDA1RkM5QzVCODg1 MDZGN0MwRDNGODYyQzg4OTVCRUQ2N0U5RjhFQkEwHhcNMjYwMzA0MDYwODQwWhcN MjcwMzAzMDYxMzQwWjAzMTEwLwYDVQQDEyg0MzA4MzE5MUM5QTM5NzVGOTdBNDc3 NjJEMEY3QUI0MTdCREZERDhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7LrnAOT+98smMVrxHmiCfzrCqctiQZ97iNuCExJ5CFRPK9bVJtW3XDacApH a/k2becgJ4my00asJa9pZB4hEqv20ADqZRQgjUkTjLqzZeWAtZ3wbGHt3D6LELIb zQ1OVoezQmjxH7D5fvlCGGRx8ZUOFZ8rjx5DGK2yOwq6E8FDh0Qx/Urxw0ka6AZC S77N+bgNGJMfHwSBP9dT7eNYZ/SwspQlm1Z1Z4YF3oqZOYFdLQnF8LjWo5FMFyZP Wym7QeUQlMb+YJioVcFDj6nEyRfLczVBWF5VaR7hDJqd3CeDyAOC+HEG1geqKMXF QXIqEzqrTYxP6nRZwB5WljBWWwIDAQABo4IBxTCCAcEwHQYDVR0OBBYEFEMIMZHJ o5dfl6R3YtD3q0F7392MMB8GA1UdIwQYMBaAFAX8nFuIUG98DT+GLIiVvtZ+n466 MA4GA1UdDwEB/wQEAwIHgDBjBgNVHR8EXDBaMFigVqBUhlJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wLzA1RkM5QzVCODg1MDZGN0MwRDNGODYy Qzg4OTVCRUQ2N0U5RjhFQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcw AoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0JmeWNXNGhRYjN3TlA0WXNpSlctMW42Zmpy by5jZXIwTgYIKwYBBQUHAQsEQjBAMD4GCCsGAQUFBzALhjJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTQ0NDQ4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAqn BjANBgkqhkiG9w0BAQsFAAOCAQEA0QT7C/f/DXm4LuKr1cnIwN6gTFjiBHO7CPX0 R9KOloWm6Qqis9pf9PlHSEe69smwAOYF2uHuCqm5XGs8pGH0QrlCMP7QbE/foil0 7pMS7/g6Le6ar5+6Gwp3fpQFmP7nmcSviutwhQa2P6PtGX3lUF2xLUw5vagy2AZB F+vO/2QY8wB8zb2Uw34/Lkm8Fipu9uEjg2U4800VJUUq9SnH6wN6QuyRSSAe2WvZ ZkJ1Ght6JYeoROsKW2zQGlNgw1bWqbqOsijGHZ3jo2ISlxnAFdI3U3iKItCUAg4k 5kYg6FotZLst4vzkd1uZT/S+VxS4x6Brd2zObUQ1l5bys50nCg== -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:36 2026 by rpki-client