$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144495.roa File: AS144495.roa (raw, json) Hash identifier: p/XMa3n6ROC9eQH09Gsw+O+8ERsH8TH72+lYCGfSxAg= Subject key identifier: 3B:23:53:20:D9:F1:9A:94:45:97:5B:96:57:7C:08:7A:70:5B:C4:EF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7EEA44B6C20EB2F3422480332F6C73FEC4E3EEB7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144495.roa Signing time: Wed 04 Mar 2026 06:14:59 +0000 ROA not before: Wed 04 Mar 2026 06:09:59 +0000 ROA not after: Wed 03 Mar 2027 06:14:59 +0000 asID: 144495 IP address blocks: 240a:a735::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ea:44:b6:c2:0e:b2:f3:42:24:80:33:2f:6c:73:fe:c4:e3:ee:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:59 2026 GMT Not After : Mar 3 06:14:59 2027 GMT Subject: CN=3B235320D9F19A9445975B96577C087A705BC4EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:28:28:2a:55:91:05:e1:84:6b:66:9c:6e: a3:c5:ac:25:85:15:12:a9:19:60:6e:ed:5e:61:1a: a4:b8:18:3b:da:6b:f8:b3:05:31:9e:14:6e:3a:ad: b5:58:4d:4d:a3:77:d9:db:eb:c2:a8:a6:a2:02:f7: a7:d7:e3:46:57:f0:2f:de:87:68:bc:a7:ea:09:ce: 03:83:6f:aa:ae:9e:a3:9b:73:89:c2:a2:31:5c:ed: b8:2b:0e:20:be:b4:cb:1d:cf:e9:a6:c2:f1:e0:9d: 6c:b8:7e:fd:a5:2f:e7:01:0a:d6:de:91:a1:33:18: ed:e7:00:af:b5:57:b3:cd:ed:da:b9:e9:8b:96:74: 7e:50:3d:5d:69:0a:fe:3f:46:07:f3:9a:cc:ff:14: 2a:4d:4a:b8:e5:36:b6:be:2b:47:5f:5a:d6:c7:fc: 89:3e:df:d8:3a:cd:c2:b0:56:0a:aa:98:fb:f4:f5: c0:27:94:27:21:49:35:e7:31:ba:84:ee:a3:34:90: d7:82:4f:aa:b3:41:17:15:36:09:37:66:a5:11:0a: ec:79:a4:91:59:41:c9:92:1e:1c:08:29:ab:e9:ed: 5e:f2:fc:ef:52:05:1e:bd:89:54:53:9a:e3:0d:36: 6c:0d:de:6d:48:9a:a5:5d:fa:f6:8a:be:9f:8e:74: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:23:53:20:D9:F1:9A:94:45:97:5B:96:57:7C:08:7A:70:5B:C4:EF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144495.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a735::/32 Signature Algorithm: sha256WithRSAEncryption c8:b8:7e:1c:22:80:f5:60:e0:f5:cd:34:1d:a8:74:4d:a2:35: d1:e9:39:d2:c9:27:fc:6f:56:01:7c:62:cd:c7:1e:8e:4e:cf: 3d:5f:59:a3:5d:87:ee:5a:22:60:3b:38:bb:5a:48:7d:19:6b: b0:58:3c:03:1d:5c:17:f3:c0:e0:0f:21:33:5d:40:41:2f:ba: 67:03:0f:16:e4:21:1d:f9:55:15:39:6e:62:88:c0:bf:7e:99: 4d:86:d0:cc:e1:ae:09:26:1b:60:6f:47:c0:3d:e0:0a:a7:94: 90:ca:96:75:4e:56:a0:e3:ff:ac:1c:fa:69:61:69:c0:71:3b: df:a9:33:f1:bc:76:e3:11:00:1a:26:2e:24:bc:43:94:08:8f: 15:03:8e:20:8a:bf:23:ce:10:18:19:fc:a8:e6:8e:85:0b:5e: 8a:0a:f9:da:b3:72:d6:1e:a8:78:fc:df:bc:1d:18:1e:95:b7: b0:e5:2c:33:8d:b5:0e:7b:e5:5a:74:91:32:73:6d:53:98:0a: c7:f1:c9:e3:f7:71:ab:86:cd:c2:80:84:c3:cd:e2:16:ce:c5: d9:b9:7a:f3:fa:5e:fa:40:00:b9:71:48:6a:16:ad:ff:11:17: 7b:5f:10:57:d2:78:d3:ec:18:e0:4c:3e:e1:43:99:30:f9:a4: 38:f2:1d:09 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfupEtsIOsvNCJIAzL2xz/sTj7rcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1OVoX DTI3MDMwMzA2MTQ1OVowMzExMC8GA1UEAxMoM0IyMzUzMjBEOUYxOUE5NDQ1OTc1 Qjk2NTc3QzA4N0E3MDVCQzRFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXlKCgqVZEF4YRrZpxuo8WsJYUVEqkZYG7tXmEapLgYO9pr+LMFMZ4Ubjqt tVhNTaN32dvrwqimogL3p9fjRlfwL96HaLyn6gnOA4Nvqq6eo5tzicKiMVztuCsO IL60yx3P6abC8eCdbLh+/aUv5wEK1t6RoTMY7ecAr7VXs83t2rnpi5Z0flA9XWkK /j9GB/OazP8UKk1KuOU2tr4rR19a1sf8iT7f2DrNwrBWCqqY+/T1wCeUJyFJNecx uoTuozSQ14JPqrNBFxU2CTdmpREK7HmkkVlByZIeHAgpq+ntXvL871IFHr2JVFOa 4w02bA3ebUiapV369oq+n4504c8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ7I1Mg 2fGalEWXW5ZXfAh6cFvE7zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pzUwDQYJKoZIhvcNAQELBQADggEBAMi4fhwigPVg4PXNNB2odE2iNdHpOdLJJ/xv VgF8Ys3HHo5Ozz1fWaNdh+5aImA7OLtaSH0Za7BYPAMdXBfzwOAPITNdQEEvumcD DxbkIR35VRU5bmKIwL9+mU2G0MzhrgkmG2BvR8A94AqnlJDKlnVOVqDj/6wc+mlh acBxO9+pM/G8duMRABomLiS8Q5QIjxUDjiCKvyPOEBgZ/KjmjoULXooK+dqzctYe qHj837wdGB6Vt7DlLDONtQ575Vp0kTJzbVOYCsfxyeP3cauGzcKAhMPN4hbOxdm5 evP6XvpAALlxSGoWrf8RF3tfEFfSeNPsGOBMPuFDmTD5pDjyHQk= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:35 2026 by rpki-client