$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144520.roa File: AS144520.roa (raw, json) Hash identifier: yAWDDGLCGLnXRRBR6d6kglLSDUhEsh0yXmkyT90Mf2M= Subject key identifier: 5F:B6:70:9F:E3:D5:D4:DB:18:B9:7B:EC:B2:7D:1C:E0:6A:55:03:5B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 25BF3C74E57BFEA5F006261CA2787262572AAFB0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144520.roa Signing time: Wed 04 Mar 2026 06:20:32 +0000 ROA not before: Wed 04 Mar 2026 06:15:32 +0000 ROA not after: Wed 03 Mar 2027 06:20:32 +0000 asID: 144520 IP address blocks: 240a:a74e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bf:3c:74:e5:7b:fe:a5:f0:06:26:1c:a2:78:72:62:57:2a:af:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:32 2026 GMT Not After : Mar 3 06:20:32 2027 GMT Subject: CN=5FB6709FE3D5D4DB18B97BECB27D1CE06A55035B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:47:43:9a:e4:13:60:cd:76:ae:c6:0d:a4: 64:b3:f3:4b:63:83:11:3b:75:55:d9:22:cd:84:c7: da:e7:7d:66:f8:95:35:ee:e9:b6:7b:a7:27:4d:a8: d1:f3:9e:7c:cf:cf:dc:32:81:d1:a3:73:04:51:8b: 49:3e:e0:d6:d3:85:34:7c:e9:42:b3:58:db:0e:03: 80:d3:2c:ef:83:b7:9d:a8:cd:c7:03:89:c2:b6:b6: bb:19:d6:5a:80:c2:11:24:09:f3:b5:f9:b3:e6:bc: ac:61:7d:bd:77:b8:db:f4:0a:3f:20:de:13:3f:29: 41:29:a5:5c:1b:1c:3d:37:04:c3:93:70:dc:0b:b5: de:93:df:77:c5:a6:fe:f4:36:b8:f1:d9:1e:ed:c4: 14:75:20:07:ad:6e:f3:fc:53:dd:4d:aa:45:87:34: b3:e0:d2:c6:56:36:03:f4:69:a7:03:78:0a:c4:7e: 09:a9:b5:a2:98:c7:26:ef:73:d0:77:0a:2e:b3:ea: eb:d5:6a:5b:0d:30:b5:bc:6a:d5:8e:f4:4b:c2:8c: f7:06:28:8e:c1:35:dc:e8:04:b7:9a:31:69:72:1b: 95:98:6c:c8:ff:f4:9f:47:3b:a1:8b:00:22:5b:58: 62:db:c6:c6:23:07:eb:08:de:c3:15:23:32:c9:fe: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B6:70:9F:E3:D5:D4:DB:18:B9:7B:EC:B2:7D:1C:E0:6A:55:03:5B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144520.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a74e::/32 Signature Algorithm: sha256WithRSAEncryption 2f:73:56:3c:e6:f1:b0:bf:be:44:75:b3:a1:6f:a2:2c:e3:db: 19:01:df:15:55:2b:c0:f9:75:e9:c5:a7:74:1a:90:e5:11:9b: ce:26:fb:aa:aa:2b:d8:0c:32:73:7f:85:c0:fd:c3:36:61:26: d3:a5:d2:32:42:be:dc:e1:8c:34:90:65:10:32:7d:c4:12:21: e4:c7:38:65:af:2b:99:78:ad:d4:40:0d:15:2f:21:12:ea:37: 07:56:a8:0c:3f:eb:01:4b:c7:f2:c0:b3:54:e0:83:8f:c7:34: 96:24:45:57:05:a6:d1:48:70:04:d7:c9:31:c5:8d:90:41:8b: a2:6e:4f:7b:dd:4d:78:d5:cd:3b:14:18:4f:ca:cd:33:a4:64: a4:dc:53:b4:d1:40:76:2e:b8:ea:97:d1:35:00:10:56:79:02: 59:6f:11:a8:ef:52:61:cc:fa:bd:44:35:f9:3b:ca:9f:2f:12: 63:4c:cd:12:01:46:a5:33:a0:b1:78:49:20:b5:6e:da:e3:35: 7d:12:be:4c:a6:fe:8a:90:de:3f:cc:28:de:1e:42:6d:ca:3d: 56:c5:1e:3e:49:a1:95:3a:27:77:3f:a6:86:78:4c:2a:6c:b1: 40:75:fd:52:29:8d:0d:47:6b:f3:e7:c7:d9:df:47:6f:45:e3: 55:77:08:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJb88dOV7/qXwBiYconhyYlcqr7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzMloX DTI3MDMwMzA2MjAzMlowMzExMC8GA1UEAxMoNUZCNjcwOUZFM0Q1RDREQjE4Qjk3 QkVDQjI3RDFDRTA2QTU1MDM1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZzR0Oa5BNgzXauxg2kZLPzS2ODETt1VdkizYTH2ud9ZviVNe7ptnunJ02o 0fOefM/P3DKB0aNzBFGLST7g1tOFNHzpQrNY2w4DgNMs74O3najNxwOJwra2uxnW WoDCESQJ87X5s+a8rGF9vXe42/QKPyDeEz8pQSmlXBscPTcEw5Nw3Au13pPfd8Wm /vQ2uPHZHu3EFHUgB61u8/xT3U2qRYc0s+DSxlY2A/RppwN4CsR+Cam1opjHJu9z 0HcKLrPq69VqWw0wtbxq1Y70S8KM9wYojsE13OgEt5oxaXIblZhsyP/0n0c7oYsA IltYYtvGxiMH6wjewxUjMsn+6Z8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRftnCf 49XU2xi5e+yyfRzgalUDWzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p04wDQYJKoZIhvcNAQELBQADggEBAC9zVjzm8bC/vkR1s6Fvoizj2xkB3xVVK8D5 denFp3QakOURm84m+6qqK9gMMnN/hcD9wzZhJtOl0jJCvtzhjDSQZRAyfcQSIeTH OGWvK5l4rdRADRUvIRLqNwdWqAw/6wFLx/LAs1Tgg4/HNJYkRVcFptFIcATXyTHF jZBBi6JuT3vdTXjVzTsUGE/KzTOkZKTcU7TRQHYuuOqX0TUAEFZ5AllvEajvUmHM +r1ENfk7yp8vEmNMzRIBRqUzoLF4SSC1btrjNX0Svkym/oqQ3j/MKN4eQm3KPVbF Hj5JoZU6J3c/poZ4TCpssUB1/VIpjQ1Ha/Pnx9nfR29F41V3CFM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:55 2026 by rpki-client