$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144496.roa File: AS144496.roa (raw, json) Hash identifier: rYFCHcRoHclMBlI746fMCLFkF1vOWLHMJE655oUYyLc= Subject key identifier: E2:08:5F:CD:19:AA:AD:98:ED:B0:42:73:85:A5:E0:3B:F5:D3:A0:98 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F2FACFF9B402F28FF655FE3F1FEA077B378C5BD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144496.roa Signing time: Wed 04 Mar 2026 06:14:46 +0000 ROA not before: Wed 04 Mar 2026 06:09:46 +0000 ROA not after: Wed 03 Mar 2027 06:14:46 +0000 asID: 144496 IP address blocks: 240a:a736::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2f:ac:ff:9b:40:2f:28:ff:65:5f:e3:f1:fe:a0:77:b3:78:c5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:46 2026 GMT Not After : Mar 3 06:14:46 2027 GMT Subject: CN=E2085FCD19AAAD98EDB0427385A5E03BF5D3A098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:ac:86:4c:bc:35:70:c2:6d:0c:7d:0f:a7: 28:2c:bb:8d:91:f7:c2:a3:99:e3:35:99:19:c6:d1: 82:28:0e:f4:08:fa:f4:74:be:04:c8:8a:6f:28:a5: e5:65:87:48:8e:7d:31:3d:7f:2c:3c:f3:e7:35:f1: c2:c8:99:e4:8d:7f:a6:6a:1e:b3:99:ba:c4:90:78: 1e:1c:df:6c:33:e5:d2:84:2b:1b:3d:db:bd:ed:22: cc:0d:56:25:cb:91:f7:44:ae:d4:4b:b6:f1:11:93: 17:9d:47:5b:c7:2c:39:b7:74:83:e6:49:99:7b:24: b4:78:29:34:6c:f7:f1:31:bc:85:1f:fe:55:d3:bc: 6e:ec:59:3c:6d:17:41:3b:db:39:c0:2a:e0:ab:9a: 68:f0:27:b0:3f:7a:32:44:7a:2e:93:f9:97:23:66: 65:a1:41:eb:ac:51:22:f6:d8:a5:96:6a:20:e1:91: 14:8d:2c:56:62:c3:c5:6a:c5:b5:47:f4:40:db:c3: c8:d3:fd:c6:95:e2:bf:2c:b6:71:2d:cb:2e:6e:81: 25:00:db:3c:d5:90:fe:dc:39:21:4c:aa:c1:93:f9: 11:2c:03:52:b4:a6:8f:c3:61:86:4d:7c:34:cc:10: da:11:65:68:b9:da:d3:1c:d6:f3:45:5a:aa:e4:4b: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:08:5F:CD:19:AA:AD:98:ED:B0:42:73:85:A5:E0:3B:F5:D3:A0:98 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144496.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a736::/32 Signature Algorithm: sha256WithRSAEncryption d9:03:94:78:d0:03:a3:26:7a:f8:31:26:98:39:6e:c8:bc:a2: d6:49:f6:ed:78:6b:d3:bf:2c:b3:59:6a:f8:66:1a:a6:80:b3: 90:a4:4f:8f:97:94:ab:ba:bb:35:f3:0d:31:88:ea:23:d0:d7: 4f:fc:bd:70:3a:e1:ec:f6:ba:75:70:a1:30:5b:3e:4c:fc:f4: bb:ff:dc:99:c0:58:2b:5f:ca:c4:88:ce:35:aa:87:fb:c7:0c: 8c:4f:d5:2d:15:90:b5:b3:69:76:60:66:4d:16:63:85:44:f9: 8b:55:8f:51:03:a9:ce:cb:b9:8f:b4:e9:51:fa:a7:d7:91:87: 37:d0:29:00:89:26:b2:85:aa:0a:06:f5:70:a9:8c:fd:d4:26: ea:9a:40:a9:3c:85:07:e6:ca:0d:ca:0d:5a:ea:d9:af:fe:3d: d3:8c:a7:c6:1c:60:41:99:57:f7:34:f9:69:d0:fd:31:a0:18: b5:ce:92:31:39:30:a4:8e:6e:9f:b9:51:aa:44:10:4a:77:ca: 1b:a4:4a:2a:0b:d8:8d:63:18:7f:c0:fa:e7:91:80:5e:ad:8d: 6b:f5:37:2d:4d:90:c5:cd:8e:09:00:e6:85:c5:3f:d8:ff:28: 7d:b3:1d:ac:88:47:87:47:49:1e:97:99:49:f7:ee:60:52:6c: 96:99:61:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXy+s/5tALyj/ZV/j8f6gd7N4xb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0NloX DTI3MDMwMzA2MTQ0NlowMzExMC8GA1UEAxMoRTIwODVGQ0QxOUFBQUQ5OEVEQjA0 MjczODVBNUUwM0JGNUQzQTA5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQdrIZMvDVwwm0MfQ+nKCy7jZH3wqOZ4zWZGcbRgigO9Aj69HS+BMiKbyil 5WWHSI59MT1/LDzz5zXxwsiZ5I1/pmoes5m6xJB4HhzfbDPl0oQrGz3bve0izA1W JcuR90Su1Eu28RGTF51HW8csObd0g+ZJmXsktHgpNGz38TG8hR/+VdO8buxZPG0X QTvbOcAq4KuaaPAnsD96MkR6LpP5lyNmZaFB66xRIvbYpZZqIOGRFI0sVmLDxWrF tUf0QNvDyNP9xpXivyy2cS3LLm6BJQDbPNWQ/tw5IUyqwZP5ESwDUrSmj8Nhhk18 NMwQ2hFlaLna0xzW80VaquRLNs8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTiCF/N GaqtmO2wQnOFpeA79dOgmDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pzYwDQYJKoZIhvcNAQELBQADggEBANkDlHjQA6MmevgxJpg5bsi8otZJ9u14a9O/ LLNZavhmGqaAs5CkT4+XlKu6uzXzDTGI6iPQ10/8vXA64ez2unVwoTBbPkz89Lv/ 3JnAWCtfysSIzjWqh/vHDIxP1S0VkLWzaXZgZk0WY4VE+YtVj1EDqc7LuY+06VH6 p9eRhzfQKQCJJrKFqgoG9XCpjP3UJuqaQKk8hQfmyg3KDVrq2a/+PdOMp8YcYEGZ V/c0+WnQ/TGgGLXOkjE5MKSObp+5UapEEEp3yhukSioL2I1jGH/A+ueRgF6tjWv1 Ny1NkMXNjgkA5oXFP9j/KH2zHayIR4dHSR6XmUn37mBSbJaZYTY= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:46 2026 by rpki-client