$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144486.roa File: AS144486.roa (raw, json) Hash identifier: xSMpc6JSPfFROYVZ3MeR7TxRnmaKSK8pEQx9Xyu2h0k= Subject key identifier: 74:D6:1F:C5:B1:60:4F:67:10:04:F1:FD:2D:B9:9D:6B:51:4A:D6:95 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 59DE47468995B9F98AD45EE2BA1E208FBA632F07 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144486.roa Signing time: Wed 04 Mar 2026 06:15:17 +0000 ROA not before: Wed 04 Mar 2026 06:10:17 +0000 ROA not after: Wed 03 Mar 2027 06:15:17 +0000 asID: 144486 IP address blocks: 240a:a72c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:de:47:46:89:95:b9:f9:8a:d4:5e:e2:ba:1e:20:8f:ba:63:2f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:17 2026 GMT Not After : Mar 3 06:15:17 2027 GMT Subject: CN=74D61FC5B1604F671004F1FD2DB99D6B514AD695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:7b:84:25:1f:4e:d5:a9:13:86:df:c2:95: 85:70:c0:61:20:81:65:4b:b1:e6:11:e9:1e:b9:69: 0c:9d:15:b4:f9:35:45:1b:92:ae:f3:49:61:9b:85: a6:c3:b3:2d:c5:00:b6:7d:19:a8:67:3f:fc:bd:85: 57:9d:aa:cc:63:d2:4f:fb:c3:f3:fb:e0:28:28:90: 6f:8a:df:7a:8c:d0:42:94:8f:d8:e6:9d:03:ca:5a: 1e:08:f1:ea:c6:78:d1:79:ba:6c:ff:a1:fa:92:47: 9d:da:c9:77:5f:c3:ce:a5:26:6b:f1:d1:29:61:c8: 90:19:35:1f:25:a9:df:02:6f:be:b5:63:cb:51:14: 5c:4f:d5:2a:90:af:4e:ab:dd:ce:05:ba:3f:b9:d9: 1a:66:61:9d:9d:fb:32:18:5f:a3:dd:6a:49:a5:90: a1:43:16:2f:40:f0:59:aa:9e:f3:45:16:09:a4:b5: 80:67:fe:57:91:1b:02:c4:70:71:19:4a:4d:74:bf: 22:88:0c:13:28:eb:0a:91:71:aa:3f:81:9a:3c:82: 44:ce:80:73:c5:51:4d:3b:9b:f6:65:40:da:63:1a: 25:b0:ee:b8:9c:d6:d7:50:15:39:f7:f1:ce:55:9f: f6:f8:c6:a1:97:1a:5a:60:40:e9:bc:f9:ac:ad:d2: a0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D6:1F:C5:B1:60:4F:67:10:04:F1:FD:2D:B9:9D:6B:51:4A:D6:95 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144486.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a72c::/32 Signature Algorithm: sha256WithRSAEncryption a3:40:fa:2b:ae:0f:27:65:9b:1b:ac:da:46:f3:37:79:3f:97: 6b:85:74:f0:18:d1:f1:d7:bb:2a:19:a7:6f:3e:5c:52:3d:b6: 68:6d:7c:ab:ff:d2:56:3b:a2:f0:d0:ad:62:02:69:f3:95:ce: 51:c6:2a:9d:c2:4c:71:86:d5:25:31:92:dc:da:da:b1:ac:83: f5:c0:a5:67:a1:b0:3d:41:bc:c2:8f:63:b9:99:a8:ce:e7:c1: 4f:9b:db:0e:59:f2:34:e4:ed:03:79:5b:00:c1:48:a0:70:2f: e4:e1:f5:06:b9:fd:77:22:64:f7:6f:79:d1:aa:bc:01:a2:13: b7:a7:1a:08:c8:ad:f5:1d:18:1d:44:a3:7a:a0:f1:32:65:07: c6:45:1e:27:8d:61:77:77:ff:d8:d9:2e:bc:a5:b7:fe:6a:62: 96:d2:5a:4c:bd:be:5a:64:6e:19:dd:4b:27:5c:c8:01:3d:e9: fa:32:d0:08:57:85:5d:b0:d3:c9:f1:74:95:04:53:f4:1e:ed: 45:f8:a4:f8:48:8c:48:c3:f0:e0:1e:f0:3f:21:78:ae:c0:70: 3e:80:50:02:50:9b:e7:79:a0:d8:12:58:2e:eb:df:f9:3f:4d: e0:36:3c:bd:0c:8b:36:53:b3:1f:b3:7b:e6:fe:5b:23:6c:c9: cf:b4:fb:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWd5HRomVufmK1F7iuh4gj7pjLwcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxN1oX DTI3MDMwMzA2MTUxN1owMzExMC8GA1UEAxMoNzRENjFGQzVCMTYwNEY2NzEwMDRG MUZEMkRCOTlENkI1MTRBRDY5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmne4QlH07VqROG38KVhXDAYSCBZUux5hHpHrlpDJ0VtPk1RRuSrvNJYZuF psOzLcUAtn0ZqGc//L2FV52qzGPST/vD8/vgKCiQb4rfeozQQpSP2OadA8paHgjx 6sZ40Xm6bP+h+pJHndrJd1/DzqUma/HRKWHIkBk1HyWp3wJvvrVjy1EUXE/VKpCv TqvdzgW6P7nZGmZhnZ37Mhhfo91qSaWQoUMWL0DwWaqe80UWCaS1gGf+V5EbAsRw cRlKTXS/IogMEyjrCpFxqj+BmjyCRM6Ac8VRTTub9mVA2mMaJbDuuJzW11AVOffx zlWf9vjGoZcaWmBA6bz5rK3SoL8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR01h/F sWBPZxAE8f0tuZ1rUUrWlTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pywwDQYJKoZIhvcNAQELBQADggEBAKNA+iuuDydlmxus2kbzN3k/l2uFdPAY0fHX uyoZp28+XFI9tmhtfKv/0lY7ovDQrWICafOVzlHGKp3CTHGG1SUxktza2rGsg/XA pWehsD1BvMKPY7mZqM7nwU+b2w5Z8jTk7QN5WwDBSKBwL+Th9Qa5/XciZPdvedGq vAGiE7enGgjIrfUdGB1Eo3qg8TJlB8ZFHieNYXd3/9jZLrylt/5qYpbSWky9vlpk bhndSydcyAE96foy0AhXhV2w08nxdJUEU/Qe7UX4pPhIjEjD8OAe8D8heK7AcD6A UAJQm+d5oNgSWC7r3/k/TeA2PL0MizZTsx+ze+b+WyNsyc+0+/0= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:06 2026 by rpki-client