$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144618.roa File: AS144618.roa (raw, json) Hash identifier: Jsju4dt7htJLUMi+MazcekX37PNRPHQjSWDQP838eaM= Subject key identifier: EE:5D:21:3A:CD:2B:BA:50:F7:EA:52:7B:4C:C2:ED:BD:C3:C5:9C:10 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1DEF09739AA3EBF7E9557B6C7C5659D48B8BFA15 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144618.roa Signing time: Wed 04 Mar 2026 06:19:36 +0000 ROA not before: Wed 04 Mar 2026 06:14:36 +0000 ROA not after: Wed 03 Mar 2027 06:19:36 +0000 asID: 144618 IP address blocks: 240a:a7b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ef:09:73:9a:a3:eb:f7:e9:55:7b:6c:7c:56:59:d4:8b:8b:fa:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:36 2026 GMT Not After : Mar 3 06:19:36 2027 GMT Subject: CN=EE5D213ACD2BBA50F7EA527B4CC2EDBDC3C59C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:45:c9:d0:85:83:f6:22:e9:7f:a2:51:33: f6:f1:19:12:2e:71:2f:b5:d9:ef:9a:8d:7a:02:2c: 93:65:60:20:71:61:c8:eb:dc:65:f2:a1:92:e1:0f: b0:d5:96:a8:26:2a:ea:87:02:c4:73:e0:33:7d:83: 73:f5:4a:52:ff:5b:6d:af:a6:c7:44:df:e0:0e:78: 04:8c:dc:e7:19:b3:ee:06:82:0a:d4:57:2f:83:a7: 5a:95:f1:68:49:ee:75:09:af:1d:63:e8:ae:04:69: 6b:e5:ad:34:fd:40:4d:02:f1:e3:30:19:57:78:4f: a7:9d:80:cf:c5:d0:a6:6f:6d:e9:ac:4e:b1:ce:3a: 51:14:32:58:1b:c4:cb:9c:d5:60:c4:44:e8:7d:ec: cf:b2:c5:13:54:d0:81:ca:dd:1b:28:31:3f:af:1b: 3b:9c:7d:fd:2b:87:f7:45:48:cb:35:24:b1:73:18: 98:a7:ef:b9:3d:90:cd:f4:fd:e4:f0:b4:45:c2:7a: 4a:33:22:a9:f7:c8:a5:c8:b9:ba:d7:46:50:dd:85: 44:87:eb:89:bc:c0:0e:6e:77:5c:9b:79:30:ac:61: 76:7b:65:e6:31:b0:42:71:71:e9:2d:56:c7:ab:64: 8d:a0:b8:66:5e:81:89:8f:0e:de:9f:27:13:4c:0a: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5D:21:3A:CD:2B:BA:50:F7:EA:52:7B:4C:C2:ED:BD:C3:C5:9C:10 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7b0::/32 Signature Algorithm: sha256WithRSAEncryption 14:1a:8b:93:fb:d5:2b:53:c6:28:ba:af:30:7d:cf:d7:df:b5: d4:90:9b:92:9f:c5:be:73:18:57:19:2e:9a:4f:9f:7d:87:33: d7:17:74:94:22:4e:d5:85:28:12:a6:f5:18:a6:aa:c0:66:1d: 63:99:fe:b8:fe:30:a8:03:59:75:52:13:60:02:a2:b3:94:0f: d5:79:20:12:66:54:cc:fe:a6:df:71:ec:a3:0f:9f:2e:42:d6: 73:67:62:b6:f0:2f:a8:69:a0:40:44:8a:f4:c3:55:8d:61:5a: 83:6d:a4:a3:5b:97:f4:69:f9:94:e7:3c:f4:e4:cb:0c:d8:75: 3d:66:66:4c:62:a9:2a:27:6f:8a:61:e3:17:e0:43:a4:bb:52: 0f:87:a0:e0:a9:48:c2:5c:9a:3c:ab:3b:1c:94:b8:ce:29:d1: e7:b0:58:56:54:e8:75:0a:94:b4:df:f7:e0:87:49:12:a9:a8: 9b:95:59:78:76:70:42:9b:28:dc:ca:79:7b:da:be:24:f2:22: c2:99:42:7f:cf:5d:77:db:bf:50:d2:ca:08:ac:1f:29:7c:26: 88:26:9c:82:df:82:c4:73:9a:da:f6:78:d8:a5:fa:e3:45:f8: aa:c9:9a:1c:7c:8b:a5:e2:bb:34:cf:ee:de:8f:cd:57:3f:2b: 17:8c:bc:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHe8Jc5qj6/fpVXtsfFZZ1IuL+hUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzNloX DTI3MDMwMzA2MTkzNlowMzExMC8GA1UEAxMoRUU1RDIxM0FDRDJCQkE1MEY3RUE1 MjdCNENDMkVEQkRDM0M1OUMxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyBRcnQhYP2Iul/olEz9vEZEi5xL7XZ75qNegIsk2VgIHFhyOvcZfKhkuEP sNWWqCYq6ocCxHPgM32Dc/VKUv9bba+mx0Tf4A54BIzc5xmz7gaCCtRXL4OnWpXx aEnudQmvHWPorgRpa+WtNP1ATQLx4zAZV3hPp52Az8XQpm9t6axOsc46URQyWBvE y5zVYMRE6H3sz7LFE1TQgcrdGygxP68bO5x9/SuH90VIyzUksXMYmKfvuT2QzfT9 5PC0RcJ6SjMiqffIpci5utdGUN2FRIfribzADm53XJt5MKxhdntl5jGwQnFx6S1W x6tkjaC4Zl6BiY8O3p8nE0wKiKUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTuXSE6 zSu6UPfqUntMwu29w8WcEDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p7AwDQYJKoZIhvcNAQELBQADggEBABQai5P71StTxii6rzB9z9fftdSQm5Kfxb5z GFcZLppPn32HM9cXdJQiTtWFKBKm9RimqsBmHWOZ/rj+MKgDWXVSE2ACorOUD9V5 IBJmVMz+pt9x7KMPny5C1nNnYrbwL6hpoEBEivTDVY1hWoNtpKNbl/Rp+ZTnPPTk ywzYdT1mZkxiqSonb4ph4xfgQ6S7Ug+HoOCpSMJcmjyrOxyUuM4p0eewWFZU6HUK lLTf9+CHSRKpqJuVWXh2cEKbKNzKeXvaviTyIsKZQn/PXXfbv1DSygisHyl8Jogm nILfgsRzmtr2eNil+uNF+KrJmhx8i6XiuzTP7t6PzVc/KxeMvCU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:08 2026 by rpki-client