$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144551.roa File: AS144551.roa (raw, json) Hash identifier: neQT5eaDN7g8zXJKTz7Uh0+Ph5kmj2bbCHS0H6PeR7g= Subject key identifier: 29:6C:52:50:82:FC:EF:A4:8F:A4:AD:76:D3:C5:7C:F1:1C:20:00:0D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 12B2C9C6D3C668D1EA7C44CA81685172714C267F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144551.roa Signing time: Wed 04 Mar 2026 06:21:54 +0000 ROA not before: Wed 04 Mar 2026 06:16:54 +0000 ROA not after: Wed 03 Mar 2027 06:21:54 +0000 asID: 144551 IP address blocks: 240a:a76d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b2:c9:c6:d3:c6:68:d1:ea:7c:44:ca:81:68:51:72:71:4c:26:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:54 2026 GMT Not After : Mar 3 06:21:54 2027 GMT Subject: CN=296C525082FCEFA48FA4AD76D3C57CF11C20000D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:57:de:18:47:94:57:35:d3:61:96:3f:6d:cb: e5:ff:c3:38:85:84:d9:7a:84:31:2f:94:3c:68:5f: 67:a0:80:ed:af:c4:b8:3a:ae:c5:41:27:e7:5c:e7: 37:c6:b8:1a:dc:85:57:5c:cd:0f:55:2d:39:f4:b8: bf:6e:27:56:87:f4:0d:78:24:1c:30:b0:51:0e:9b: b1:4e:d4:9b:d8:8c:f8:aa:ac:1c:16:15:85:77:71: 34:13:dd:9d:fc:70:3a:15:15:8b:3e:81:ea:bc:5e: 90:ab:ff:9a:1f:a0:11:49:b0:a3:fa:5e:34:c6:b2: ce:14:2c:46:bd:1c:32:cd:03:dd:1a:64:14:7e:7d: 2c:ae:27:30:2f:69:4c:3a:0a:15:75:64:ac:73:fe: 07:fe:a4:b4:fe:31:2e:42:d3:0c:ce:bb:36:2e:2e: 0e:62:1c:7d:ed:d3:bb:18:01:29:e7:3f:7f:ac:3e: 1f:a1:9f:a3:a8:72:71:55:53:c5:34:ef:fb:b9:a0: e3:64:5a:57:f9:7c:31:22:19:2b:93:ae:b2:a0:60: 35:59:e5:c3:80:22:d4:0f:14:9d:22:ea:ce:77:23: 30:0e:5c:3f:49:b4:56:da:9e:1e:27:2b:a1:f1:9a: fe:36:01:bb:aa:5f:fb:d6:10:36:23:af:8b:a5:37: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:52:50:82:FC:EF:A4:8F:A4:AD:76:D3:C5:7C:F1:1C:20:00:0D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144551.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a76d::/32 Signature Algorithm: sha256WithRSAEncryption a5:b5:77:d7:8e:7e:62:d2:26:52:d5:52:1a:7e:8e:9a:e6:26: 1c:18:a1:23:98:7a:a1:10:2c:91:00:a8:32:a1:de:20:8f:8a: e4:d3:b9:cc:6b:1b:58:53:e2:6f:a8:93:99:53:f4:87:d4:a4: df:99:32:20:0b:e9:6d:23:ba:e8:49:ff:b6:bd:b6:33:19:9b: 87:a3:ec:f4:93:7d:99:d2:19:cc:72:06:12:fa:78:a6:93:5d: e8:14:91:b4:47:31:84:79:2f:af:88:57:aa:aa:7e:2b:74:1d: 1b:64:8d:53:bb:a8:ad:d5:41:46:f3:67:e0:ee:95:09:61:38: 92:af:7e:0b:9a:e0:f0:78:23:50:4f:44:cb:26:a3:47:b6:51: 7e:11:82:07:bf:5a:48:60:c7:2b:27:91:8a:6a:77:c0:99:f7: 70:51:d0:77:7e:5d:97:d5:80:85:2e:e6:40:26:4b:94:a8:0e: 00:26:e4:5d:75:78:1a:8f:e8:a7:af:a4:6d:f3:6a:a2:6d:03: 29:3f:01:f6:37:10:5b:70:86:0a:a1:79:09:1f:d1:e8:f7:97: 58:f4:8c:14:1c:a4:cc:2c:77:57:cf:a4:fd:86:c3:70:00:38: 3b:90:cd:3e:4c:7a:fb:f9:ac:78:05:ec:d5:59:4f:2d:15:a4: 3a:4f:cc:e1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUErLJxtPGaNHqfETKgWhRcnFMJn8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1NFoX DTI3MDMwMzA2MjE1NFowMzExMC8GA1UEAxMoMjk2QzUyNTA4MkZDRUZBNDhGQTRB RDc2RDNDNTdDRjExQzIwMDAwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJJX3hhHlFc102GWP23L5f/DOIWE2XqEMS+UPGhfZ6CA7a/EuDquxUEn51zn N8a4GtyFV1zND1UtOfS4v24nVof0DXgkHDCwUQ6bsU7Um9iM+KqsHBYVhXdxNBPd nfxwOhUViz6B6rxekKv/mh+gEUmwo/peNMayzhQsRr0cMs0D3RpkFH59LK4nMC9p TDoKFXVkrHP+B/6ktP4xLkLTDM67Ni4uDmIcfe3TuxgBKec/f6w+H6Gfo6hycVVT xTTv+7mg42RaV/l8MSIZK5OusqBgNVnlw4Ai1A8UnSLqzncjMA5cP0m0VtqeHicr ofGa/jYBu6pf+9YQNiOvi6U3HPECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQpbFJQ gvzvpI+krXbTxXzxHCAADTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p20wDQYJKoZIhvcNAQELBQADggEBAKW1d9eOfmLSJlLVUhp+jprmJhwYoSOYeqEQ LJEAqDKh3iCPiuTTucxrG1hT4m+ok5lT9IfUpN+ZMiAL6W0juuhJ/7a9tjMZm4ej 7PSTfZnSGcxyBhL6eKaTXegUkbRHMYR5L6+IV6qqfit0HRtkjVO7qK3VQUbzZ+Du lQlhOJKvfgua4PB4I1BPRMsmo0e2UX4Rgge/WkhgxysnkYpqd8CZ93BR0Hd+XZfV gIUu5kAmS5SoDgAm5F11eBqP6KevpG3zaqJtAyk/AfY3EFtwhgqheQkf0ej3l1j0 jBQcpMwsd1fPpP2Gw3AAODuQzT5Mevv5rHgF7NVZTy0VpDpPzOE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:48 2026 by rpki-client