$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144459.roa File: AS144459.roa (raw, json) Hash identifier: K/ncEWoeJEjhhPvceG/JkpUHE/s7CxgcHNU8QlNs2qY= Subject key identifier: D7:4A:87:75:FE:96:53:3F:BA:DA:52:23:C4:DD:95:20:D2:DC:F1:F3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 20F066FBD803E7FB0680D65493ECCBEA0EB851A6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144459.roa Signing time: Wed 04 Mar 2026 06:13:05 +0000 ROA not before: Wed 04 Mar 2026 06:08:05 +0000 ROA not after: Wed 03 Mar 2027 06:13:05 +0000 asID: 144459 IP address blocks: 240a:a711::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f0:66:fb:d8:03:e7:fb:06:80:d6:54:93:ec:cb:ea:0e:b8:51:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:05 2026 GMT Not After : Mar 3 06:13:05 2027 GMT Subject: CN=D74A8775FE96533FBADA5223C4DD9520D2DCF1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:b9:c1:aa:09:fb:fb:11:d3:70:81:81:2c: 5f:7e:12:23:eb:06:08:c0:28:34:cd:9f:58:9e:eb: 89:0f:30:fa:91:c1:ac:fd:9f:5f:d3:e5:11:e9:65: 28:70:a8:6b:c8:a2:cb:24:78:03:ad:2d:af:25:d2: 8a:ef:d8:a5:01:98:88:7d:38:69:f2:8b:de:ae:bd: 71:3c:21:27:2f:1d:b2:64:dd:08:aa:1c:a2:d4:f1: 04:9a:a7:f6:ae:7a:21:f8:fe:05:c1:c1:5b:5b:c0: aa:3c:4a:35:e9:f4:22:cd:d4:80:81:0c:66:52:01: 93:42:62:33:a2:a9:21:50:e4:3d:07:e6:3a:36:13: 8d:dc:cf:06:a9:c8:2b:1a:55:31:6f:62:fb:b1:bd: f1:31:5b:09:e9:5e:56:59:d9:c0:40:ff:85:d2:72: 3f:07:a2:c5:ff:6e:3b:43:4b:87:b9:2e:73:cf:1e: f5:92:a8:60:fb:10:2e:80:cb:cf:2d:b1:5b:d6:71: f2:36:5a:51:82:48:4b:bc:80:81:f2:ad:8a:b8:dc: ed:4a:29:a3:ea:7d:9d:e5:93:9c:cc:03:85:fe:9e: 90:66:9a:7f:8f:6a:23:a8:25:66:b2:a5:07:93:01: da:8e:28:8f:bd:47:1f:3b:af:bd:05:87:61:af:fb: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4A:87:75:FE:96:53:3F:BA:DA:52:23:C4:DD:95:20:D2:DC:F1:F3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144459.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a711::/32 Signature Algorithm: sha256WithRSAEncryption 35:7f:f1:1d:a5:87:4c:27:85:c4:a4:43:57:a2:d0:e9:5a:56: c4:25:7d:fc:8e:b6:84:13:24:46:c2:a8:80:35:ba:a8:4f:c7: 47:f0:d4:34:d2:a7:f5:9e:67:cf:48:54:10:b8:50:78:9f:75: f3:11:bf:e2:79:fc:37:1f:a1:f4:5f:45:88:40:87:83:01:5d: 79:c9:88:4f:5e:79:34:87:07:2b:c5:f7:db:9f:ed:fb:d4:53: 4c:c1:41:21:4d:e4:7a:5c:57:41:32:a5:9c:e0:05:d6:76:22: 41:51:9d:c0:e8:d1:ea:17:48:47:00:36:1e:13:5a:cc:bf:6e: 75:5a:35:31:88:04:20:91:8b:b3:bc:8d:e6:e6:fc:a2:bf:2a: bd:2a:c3:8c:77:ab:34:6b:a5:7b:5f:d1:ef:6e:f1:84:81:5e: c9:d8:18:b4:83:76:b7:84:67:d3:05:1b:4a:13:15:30:2d:f6: 4f:5a:86:45:8b:e9:17:1d:46:59:96:68:24:5b:4d:63:e6:3a: c1:94:df:3a:01:15:0b:44:fe:c6:28:55:16:88:ea:87:97:21: 01:8e:44:02:ef:2a:71:a4:3c:41:74:18:8e:36:c5:f7:27:39: 66:3d:ab:1b:2f:6e:f2:3f:0c:d8:0c:5d:1d:8c:9d:37:d3:23: 40:30:40:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIPBm+9gD5/sGgNZUk+zL6g64UaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwNVoX DTI3MDMwMzA2MTMwNVowMzExMC8GA1UEAxMoRDc0QTg3NzVGRTk2NTMzRkJBREE1 MjIzQzRERDk1MjBEMkRDRjFGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOW8ucGqCfv7EdNwgYEsX34SI+sGCMAoNM2fWJ7riQ8w+pHBrP2fX9PlEell KHCoa8iiyyR4A60tryXSiu/YpQGYiH04afKL3q69cTwhJy8dsmTdCKocotTxBJqn 9q56Ifj+BcHBW1vAqjxKNen0Is3UgIEMZlIBk0JiM6KpIVDkPQfmOjYTjdzPBqnI KxpVMW9i+7G98TFbCeleVlnZwED/hdJyPweixf9uO0NLh7kuc88e9ZKoYPsQLoDL zy2xW9Zx8jZaUYJIS7yAgfKtirjc7Uopo+p9neWTnMwDhf6ekGaaf49qI6glZrKl B5MB2o4oj71HHzuvvQWHYa/7Pq0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTXSod1 /pZTP7raUiPE3ZUg0tzx8zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pxEwDQYJKoZIhvcNAQELBQADggEBADV/8R2lh0wnhcSkQ1ei0OlaVsQlffyOtoQT JEbCqIA1uqhPx0fw1DTSp/WeZ89IVBC4UHifdfMRv+J5/DcfofRfRYhAh4MBXXnJ iE9eeTSHByvF99uf7fvUU0zBQSFN5HpcV0EypZzgBdZ2IkFRncDo0eoXSEcANh4T Wsy/bnVaNTGIBCCRi7O8jebm/KK/Kr0qw4x3qzRrpXtf0e9u8YSBXsnYGLSDdreE Z9MFG0oTFTAt9k9ahkWL6RcdRlmWaCRbTWPmOsGU3zoBFQtE/sYoVRaI6oeXIQGO RALvKnGkPEF0GI42xfcnOWY9qxsvbvI/DNgMXR2MnTfTI0AwQKk= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:04 2026 by rpki-client