$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144567.roa File: AS144567.roa (raw, json) Hash identifier: 8aq3b/Mtxl8lb7WKJPAbe7PoqpuDcb4tsUb6Ca7jAH0= Subject key identifier: C4:1C:BF:6F:C1:6A:E2:81:6E:76:7F:0C:54:28:5D:0B:8F:2C:70:0D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64D9227DBF83CD5D14C033647E5DE4BC88DECC5A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144567.roa Signing time: Wed 04 Mar 2026 06:19:39 +0000 ROA not before: Wed 04 Mar 2026 06:14:39 +0000 ROA not after: Wed 03 Mar 2027 06:19:39 +0000 asID: 144567 IP address blocks: 240a:a77d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d9:22:7d:bf:83:cd:5d:14:c0:33:64:7e:5d:e4:bc:88:de:cc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:39 2026 GMT Not After : Mar 3 06:19:39 2027 GMT Subject: CN=C41CBF6FC16AE2816E767F0C54285D0B8F2C700D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4f:13:3b:b2:3e:97:b6:80:b8:b1:1f:d5:f4: 10:86:2d:19:62:9a:28:6a:a0:30:5c:d7:1f:39:f0: f5:63:25:5c:c7:6d:3c:f4:52:7a:6a:dc:89:26:0c: cb:cd:15:d9:ae:c8:13:35:a7:e7:78:ac:b0:f7:17: da:26:e2:6f:9e:84:cf:d8:8d:a1:f0:c7:02:59:4f: 79:b8:02:fe:8e:39:ae:a7:da:a1:47:e0:8e:2b:6f: 0b:d1:58:71:cb:f6:46:d8:f4:9f:94:45:df:fe:57: 87:18:6b:bb:70:5d:e5:4c:47:8a:35:26:f3:ee:c5: 24:b2:69:b7:74:34:3f:77:2b:25:3c:fc:95:ac:ae: 9b:80:70:f9:31:ff:e4:21:79:87:4a:15:02:85:36: b7:bb:9e:ca:3f:dc:8e:73:04:9f:a5:3f:aa:7a:60: a4:8f:9e:41:d5:f6:f6:d3:87:56:59:d6:45:df:98: cd:68:d2:fd:33:a0:e6:2e:d5:2a:d6:59:5d:53:1f: 18:38:f7:a2:22:ed:d6:cc:1e:a1:9e:9e:9e:68:d6: e5:9d:9f:42:03:05:5a:75:51:1a:2e:d1:8a:a1:f9: 19:3a:a4:a8:4a:65:e3:cc:cb:46:94:68:93:de:21: 4b:95:9f:05:8a:ef:40:40:97:4e:20:a3:b2:bb:2a: 1b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1C:BF:6F:C1:6A:E2:81:6E:76:7F:0C:54:28:5D:0B:8F:2C:70:0D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144567.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a77d::/32 Signature Algorithm: sha256WithRSAEncryption 4c:0d:70:47:ab:34:8e:15:50:9e:79:f1:3a:33:98:12:49:96: a4:24:1c:61:b0:45:e5:c0:1c:8e:2b:92:cf:18:6c:4f:59:3f: 24:10:3a:86:2e:0b:9e:8b:16:16:4b:e5:c4:42:9d:52:8c:4c: bb:17:94:69:20:fa:ac:a8:2a:3c:97:e9:f6:c8:d1:ad:c6:26: cf:35:51:01:09:d9:f4:cc:ad:40:57:79:63:a9:2d:19:4b:e1: 70:fa:2c:5b:a9:00:92:b0:6e:de:e4:19:d2:5b:fb:20:c2:70: 44:6c:e4:68:8d:e2:84:ae:a8:25:b8:29:94:b0:fa:20:2c:28: 1e:b6:28:90:4b:b0:72:01:6f:2a:42:07:e6:78:47:4a:b8:1c: e7:e8:91:45:a9:45:ac:1e:ae:e4:4b:f5:cc:6a:c3:e8:5b:90: 91:ad:68:bd:62:7a:6c:34:8f:e9:17:96:4b:ac:5e:cb:b0:7f: 30:76:ce:97:47:7a:2c:97:b1:0d:08:9c:c7:f8:de:09:45:10: a7:6e:4e:72:d2:7d:32:c0:be:d0:da:3c:88:34:a8:02:ed:5d: 83:33:94:e0:31:78:93:33:36:4b:cd:f3:5c:e4:2f:64:49:0d: 6d:78:b3:f0:e7:a1:78:79:57:1c:66:a8:6f:98:48:aa:fc:f4: a5:73:8b:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZNkifb+DzV0UwDNkfl3kvIjezFowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzOVoX DTI3MDMwMzA2MTkzOVowMzExMC8GA1UEAxMoQzQxQ0JGNkZDMTZBRTI4MTZFNzY3 RjBDNTQyODVEMEI4RjJDNzAwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhPEzuyPpe2gLixH9X0EIYtGWKaKGqgMFzXHznw9WMlXMdtPPRSemrciSYM y80V2a7IEzWn53issPcX2ibib56Ez9iNofDHAllPebgC/o45rqfaoUfgjitvC9FY ccv2Rtj0n5RF3/5Xhxhru3Bd5UxHijUm8+7FJLJpt3Q0P3crJTz8layum4Bw+TH/ 5CF5h0oVAoU2t7ueyj/cjnMEn6U/qnpgpI+eQdX29tOHVlnWRd+YzWjS/TOg5i7V KtZZXVMfGDj3oiLt1sweoZ6enmjW5Z2fQgMFWnVRGi7RiqH5GTqkqEpl48zLRpRo k94hS5WfBYrvQECXTiCjsrsqG1sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTEHL9v wWrigW52fwxUKF0LjyxwDTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p30wDQYJKoZIhvcNAQELBQADggEBAEwNcEerNI4VUJ558TozmBJJlqQkHGGwReXA HI4rks8YbE9ZPyQQOoYuC56LFhZL5cRCnVKMTLsXlGkg+qyoKjyX6fbI0a3GJs81 UQEJ2fTMrUBXeWOpLRlL4XD6LFupAJKwbt7kGdJb+yDCcERs5GiN4oSuqCW4KZSw +iAsKB62KJBLsHIBbypCB+Z4R0q4HOfokUWpRaweruRL9cxqw+hbkJGtaL1iemw0 j+kXlkusXsuwfzB2zpdHeiyXsQ0InMf43glFEKduTnLSfTLAvtDaPIg0qALtXYMz lOAxeJMzNkvN81zkL2RJDW14s/DnoXh5VxxmqG+YSKr89KVzizU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:56 2026 by rpki-client