$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144591.roa File: AS144591.roa (raw, json) Hash identifier: cD82wefP+Bitkmwvu7n1AtvT8ftiXfW6Gf55O1J+QUE= Subject key identifier: FA:F4:F4:50:4D:57:4A:5C:EC:6D:FC:6F:35:E7:1B:E3:AE:5F:55:34 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3E62FF83BB17DE0EEFCCE7B552975F7D9F74CF62 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144591.roa Signing time: Wed 04 Mar 2026 06:22:06 +0000 ROA not before: Wed 04 Mar 2026 06:17:06 +0000 ROA not after: Wed 03 Mar 2027 06:22:06 +0000 asID: 144591 IP address blocks: 240a:a795::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:62:ff:83:bb:17:de:0e:ef:cc:e7:b5:52:97:5f:7d:9f:74:cf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:06 2026 GMT Not After : Mar 3 06:22:06 2027 GMT Subject: CN=FAF4F4504D574A5CEC6DFC6F35E71BE3AE5F5534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:c3:54:72:63:56:02:2b:67:eb:29:d7:fd: 06:ed:b9:ef:20:97:1b:85:88:a3:93:d9:3c:da:e7: 63:d7:b9:7d:5a:55:8d:19:08:8c:da:37:08:d0:68: e6:fb:88:67:4b:88:ff:ce:97:b2:4b:c3:1e:71:b7: 55:cf:e2:af:c3:e0:f4:74:a9:23:b3:c1:95:02:ee: 65:cf:06:a5:76:3b:d5:89:37:4f:74:f8:07:8c:ac: bc:be:6e:9c:ba:25:bc:53:d2:dc:d3:e4:ab:37:dd: 41:38:ee:91:14:fc:72:e2:a7:8b:f7:5c:d4:73:72: 4b:34:b2:7b:37:ce:dc:9c:f1:0e:65:fc:fc:f3:f2: c1:0b:60:9b:fe:d1:57:d5:f3:e4:a5:e2:04:0e:dc: 4f:14:78:52:f5:95:6e:fb:67:fb:6c:76:7e:d2:1d: 9b:5c:ce:d1:c2:48:4e:0d:80:fa:7c:a0:2c:29:aa: 7e:d3:3e:08:12:2b:0d:a9:e8:97:36:bc:ca:cd:3f: 9a:71:bd:6d:9e:71:83:4d:79:b1:ef:fe:a2:6f:a4: b4:88:62:80:12:c3:ae:f9:b4:e4:ec:63:26:e4:6a: 25:5b:2f:e1:e5:93:52:5e:77:11:e6:82:ce:b6:2b: a5:46:13:35:67:1a:27:2c:f8:be:8b:c8:04:27:a9: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F4:F4:50:4D:57:4A:5C:EC:6D:FC:6F:35:E7:1B:E3:AE:5F:55:34 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144591.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a795::/32 Signature Algorithm: sha256WithRSAEncryption 7b:52:b8:fd:9c:34:38:89:6c:14:c3:f1:20:83:b7:ec:41:d8: cd:f7:d1:46:a3:c6:55:2a:1f:79:59:21:d5:23:1e:b1:00:e0: b6:78:a6:87:71:99:53:a5:bf:94:59:c9:fa:2d:3a:74:57:65: 9c:33:5e:38:73:e6:e7:6b:ce:d0:72:81:f2:3e:27:23:6d:c0: f1:07:8b:4d:19:10:db:bc:05:fd:32:18:18:96:a5:9d:94:d4: 04:d6:ee:f0:6f:f8:63:5f:c0:8a:39:56:8a:65:64:cc:9e:c8: c6:95:91:0d:87:d1:f0:2e:89:4c:b4:c8:13:fe:92:30:b6:89: 78:b1:f8:6b:11:7e:4c:43:9e:15:22:28:d2:7b:67:f6:53:08: 98:af:f1:c6:2f:89:86:5c:f6:a0:a5:39:b2:d2:19:11:24:a4: 6f:1e:06:8f:0b:e6:6f:e9:cf:d9:ac:17:0d:de:67:70:38:da: 3e:a4:4e:98:6f:7a:46:1d:e9:2d:cf:24:dc:b3:b1:68:ff:67: ec:5d:c1:08:ef:ea:e4:b2:d0:37:ed:48:10:2b:b4:84:18:c4: d5:6b:e0:43:9b:be:8a:e2:3a:5e:b3:ee:c5:61:3e:3a:10:f1: ee:1e:89:61:e9:b4:1d:1e:63:87:5e:cf:13:ef:11:eb:27:a8: 24:f6:84:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPmL/g7sX3g7vzOe1UpdffZ90z2IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNloX DTI3MDMwMzA2MjIwNlowMzExMC8GA1UEAxMoRkFGNEY0NTA0RDU3NEE1Q0VDNkRG QzZGMzVFNzFCRTNBRTVGNTUzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyIw1RyY1YCK2frKdf9Bu257yCXG4WIo5PZPNrnY9e5fVpVjRkIjNo3CNBo 5vuIZ0uI/86XskvDHnG3Vc/ir8Pg9HSpI7PBlQLuZc8GpXY71Yk3T3T4B4ysvL5u nLolvFPS3NPkqzfdQTjukRT8cuKni/dc1HNySzSyezfO3JzxDmX8/PPywQtgm/7R V9Xz5KXiBA7cTxR4UvWVbvtn+2x2ftIdm1zO0cJITg2A+nygLCmqftM+CBIrDano lza8ys0/mnG9bZ5xg015se/+om+ktIhigBLDrvm05OxjJuRqJVsv4eWTUl53EeaC zrYrpUYTNWcaJyz4vovIBCepAS8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT69PRQ TVdKXOxt/G815xvjrl9VNDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p5UwDQYJKoZIhvcNAQELBQADggEBAHtSuP2cNDiJbBTD8SCDt+xB2M330UajxlUq H3lZIdUjHrEA4LZ4podxmVOlv5RZyfotOnRXZZwzXjhz5udrztBygfI+JyNtwPEH i00ZENu8Bf0yGBiWpZ2U1ATW7vBv+GNfwIo5VoplZMyeyMaVkQ2H0fAuiUy0yBP+ kjC2iXix+GsRfkxDnhUiKNJ7Z/ZTCJiv8cYviYZc9qClObLSGREkpG8eBo8L5m/p z9msFw3eZ3A42j6kTphvekYd6S3PJNyzsWj/Z+xdwQjv6uSy0DftSBArtIQYxNVr 4EObvoriOl6z7sVhPjoQ8e4eiWHptB0eY4dezxPvEesnqCT2hKU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:11 2026 by rpki-client