$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144609.roa File: AS144609.roa (raw, json) Hash identifier: YCmEM6t9FJTYk6N+ZyZy8uDuwjRVcMueIy4FpLyFNWI= Subject key identifier: 66:CF:74:15:90:C5:A4:5F:CD:37:72:70:F0:51:A6:78:F0:57:C8:E2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1AD2C8B3D8BCBF2DA5EF09E4046822AA020161AD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144609.roa Signing time: Wed 04 Mar 2026 06:20:17 +0000 ROA not before: Wed 04 Mar 2026 06:15:17 +0000 ROA not after: Wed 03 Mar 2027 06:20:17 +0000 asID: 144609 IP address blocks: 240a:a7a7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d2:c8:b3:d8:bc:bf:2d:a5:ef:09:e4:04:68:22:aa:02:01:61:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:17 2026 GMT Not After : Mar 3 06:20:17 2027 GMT Subject: CN=66CF741590C5A45FCD377270F051A678F057C8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:8c:e8:d5:ad:2f:22:70:7a:3d:18:25:10: 45:72:18:06:0b:17:62:1d:f3:72:28:58:90:65:48: cf:0c:4f:e9:0f:97:52:4e:1c:f5:2d:1b:8a:92:c4: da:a2:37:36:df:ac:92:3c:03:70:66:dc:0e:72:ee: 70:88:a1:80:4a:2f:6a:53:9f:4b:e0:7b:1d:71:25: b5:c7:30:9d:ad:b7:aa:11:27:d9:b7:83:12:58:09: f9:d7:fe:c8:4f:56:2f:0e:45:57:a6:25:29:f5:fa: 57:81:57:d2:40:74:90:8d:27:61:b6:d2:63:a3:08: 44:18:d7:74:68:37:c1:b0:b6:7c:ac:a2:f6:11:78: 0a:d2:53:2f:49:d2:b4:91:ba:cd:95:74:2a:e9:6f: 3f:6a:9d:00:f9:22:9a:90:36:a0:2b:c7:96:6e:81: bc:ca:ba:c9:89:f1:98:6f:94:69:96:bd:5f:5f:bf: 30:d0:31:cb:f9:a0:ef:8d:89:f2:a4:f2:69:6e:29: ba:c6:f1:5f:e0:19:02:0e:a7:c6:5d:34:50:73:8d: a6:db:2c:d7:85:79:33:fa:0c:ed:99:0e:44:8d:c3: 9a:f8:d5:8d:96:d5:52:d4:f3:59:de:e9:fa:de:76: c3:f0:4b:ee:75:ec:9c:b3:f8:e2:1b:2d:bd:d3:f8: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CF:74:15:90:C5:A4:5F:CD:37:72:70:F0:51:A6:78:F0:57:C8:E2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144609.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7a7::/32 Signature Algorithm: sha256WithRSAEncryption b0:86:d4:9d:1b:e4:1a:f8:4c:27:53:49:1b:3a:19:44:c5:c5: 37:5b:6b:bd:bb:32:10:98:60:ad:ca:18:e8:9f:26:81:c4:52: 3b:9f:c5:d5:78:0c:21:7a:79:81:80:cb:06:cb:ab:de:6c:52: 36:1f:8f:28:cb:5b:5a:63:5f:33:4a:aa:62:07:52:e9:91:26: fa:59:70:8b:06:ff:fb:b9:de:d2:a0:37:c6:e0:3b:54:97:8d: dc:ac:d1:fa:4e:5f:ac:ea:8d:f0:e1:95:06:44:ff:05:5a:5a: ce:1c:6a:2d:3e:e9:36:63:02:5b:2d:6c:07:f5:f0:e3:5d:86: 62:9e:f4:31:63:b9:6d:36:d9:15:83:3e:f0:63:10:02:1b:df: 89:1e:75:13:9d:8c:78:a7:9b:1e:1f:c1:f6:d3:e8:8f:c8:d6: f2:da:b7:3f:f1:b7:e0:9b:c1:cd:bf:4c:a6:9b:a1:30:34:99: 40:da:ce:47:7a:82:5f:01:18:6a:ce:31:ea:ea:d7:9c:d1:0b: 78:81:74:e4:eb:10:66:af:25:a6:f0:98:d4:3f:c0:28:9e:95: 63:d1:bc:67:f9:d8:5f:8c:40:6f:ea:57:e2:80:84:07:77:09: 21:cf:0a:91:12:de:12:63:81:e4:72:05:57:ef:bd:46:a1:2b: c0:b7:65:8f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGtLIs9i8vy2l7wnkBGgiqgIBYa0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxN1oX DTI3MDMwMzA2MjAxN1owMzExMC8GA1UEAxMoNjZDRjc0MTU5MEM1QTQ1RkNEMzc3 MjcwRjA1MUE2NzhGMDU3QzhFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIGjOjVrS8icHo9GCUQRXIYBgsXYh3zcihYkGVIzwxP6Q+XUk4c9S0bipLE 2qI3Nt+skjwDcGbcDnLucIihgEovalOfS+B7HXEltccwna23qhEn2beDElgJ+df+ yE9WLw5FV6YlKfX6V4FX0kB0kI0nYbbSY6MIRBjXdGg3wbC2fKyi9hF4CtJTL0nS tJG6zZV0KulvP2qdAPkimpA2oCvHlm6BvMq6yYnxmG+UaZa9X1+/MNAxy/mg742J 8qTyaW4pusbxX+AZAg6nxl00UHONptss14V5M/oM7ZkORI3DmvjVjZbVUtTzWd7p +t52w/BL7nXsnLP44hstvdP4PKMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRmz3QV kMWkX803cnDwUaZ48FfI4jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p6cwDQYJKoZIhvcNAQELBQADggEBALCG1J0b5Br4TCdTSRs6GUTFxTdba727MhCY YK3KGOifJoHEUjufxdV4DCF6eYGAywbLq95sUjYfjyjLW1pjXzNKqmIHUumRJvpZ cIsG//u53tKgN8bgO1SXjdys0fpOX6zqjfDhlQZE/wVaWs4cai0+6TZjAlstbAf1 8ONdhmKe9DFjuW022RWDPvBjEAIb34kedROdjHinmx4fwfbT6I/I1vLatz/xt+Cb wc2/TKaboTA0mUDazkd6gl8BGGrOMerq15zRC3iBdOTrEGavJabwmNQ/wCielWPR vGf52F+MQG/qV+KAhAd3CSHPCpES3hJjgeRyBVfvvUahK8C3ZY8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:42 2026 by rpki-client