$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144619.roa File: AS144619.roa (raw, json) Hash identifier: 3/ZCzkq78QQkAxPHnjSRkNV6HpZoTSnD0y0h5Fgih8Q= Subject key identifier: 2C:C3:E8:CA:98:1F:F6:A0:88:99:4E:CE:B8:87:4F:C7:71:11:C8:63 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4E480CE03DAA2C1E11A12C5B55CAC1D53E3CE418 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144619.roa Signing time: Wed 04 Mar 2026 06:22:05 +0000 ROA not before: Wed 04 Mar 2026 06:17:05 +0000 ROA not after: Wed 03 Mar 2027 06:22:05 +0000 asID: 144619 IP address blocks: 240a:a7b1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:48:0c:e0:3d:aa:2c:1e:11:a1:2c:5b:55:ca:c1:d5:3e:3c:e4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:05 2026 GMT Not After : Mar 3 06:22:05 2027 GMT Subject: CN=2CC3E8CA981FF6A088994ECEB8874FC77111C863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:ec:f2:ac:90:63:fe:8a:75:7e:09:ed:35: 79:ce:c2:d4:2f:e7:cb:c5:f9:00:08:1f:ed:26:cb: ad:18:d7:4e:01:52:78:10:87:9a:b6:e2:cb:c7:02: 42:d8:c8:97:c5:fd:00:59:18:2f:59:0c:f3:74:6a: 24:08:30:a9:b2:c7:12:43:97:ff:7e:01:3e:78:46: 57:dc:ec:02:7c:24:c9:3d:3c:f4:eb:6b:67:46:7c: 04:8a:aa:90:30:83:ea:e5:98:c3:1e:a4:6a:c9:03: 7e:19:db:c2:ff:39:09:c8:9e:69:ec:70:3f:42:f8: d5:d3:bc:67:4a:b8:4b:4e:7c:4f:78:d8:a4:f1:ec: e1:61:44:1d:44:b4:ad:f4:25:1f:0f:58:83:a2:5d: 62:df:75:dc:67:6f:50:d2:00:06:33:b3:36:c4:a9: ad:2e:bb:35:d4:0c:35:4c:ce:3e:13:89:21:fd:e6: 51:f8:c9:98:00:d2:26:b3:de:55:d4:60:f1:7a:a9: e1:5d:67:ee:a5:43:c9:e4:7e:8c:11:64:14:ab:f8: 46:cb:ed:92:66:65:00:b9:f9:23:7a:c1:5b:86:3d: c1:1b:06:38:07:26:5b:f6:d0:f3:be:69:39:46:bc: 55:0e:e9:06:3f:45:20:36:7a:37:f9:52:21:e6:e5: 91:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C3:E8:CA:98:1F:F6:A0:88:99:4E:CE:B8:87:4F:C7:71:11:C8:63 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144619.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7b1::/32 Signature Algorithm: sha256WithRSAEncryption a0:1c:05:07:72:e0:f2:04:ca:14:34:e5:9e:dd:39:b5:77:78: cd:78:97:f9:91:df:2d:25:5a:76:d8:59:96:63:0f:6b:2d:e2: 0c:1c:fe:87:8e:41:ab:77:02:02:91:0b:cc:ff:f9:55:dd:ce: 72:3f:29:85:56:7b:1d:15:d2:d4:3c:62:95:de:84:5e:36:a9: 3b:00:f3:34:19:cf:b0:41:51:4c:23:fe:e7:26:9e:9b:af:d5: 5a:e1:5e:90:be:a5:08:c8:1a:ef:ef:99:02:94:32:b9:d5:fd: cf:6e:6d:9b:c1:63:82:4d:48:30:3e:50:c8:49:5d:36:44:81: 2a:7b:02:1d:5f:76:3e:21:9c:1c:b8:af:a4:2d:9c:da:2a:6d: 8d:30:3b:6a:11:79:72:a2:90:e3:bf:61:cb:00:22:40:0a:53: 28:bc:4a:aa:0a:6c:05:a6:b5:63:fa:32:5b:77:70:cb:0c:5a: b6:f7:2e:ff:bc:8d:66:01:17:75:e9:55:18:fe:80:d3:64:83: ab:b5:09:dd:cc:a5:9f:e2:1f:ed:46:4b:90:5d:7d:8f:9f:01: 37:38:a5:27:a4:b8:9b:28:b9:6c:1b:60:28:d4:68:df:91:ef: 1c:2e:4d:27:ea:e9:1f:4b:7e:ca:7f:b3:87:57:19:ee:ed:85: ca:e4:61:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTkgM4D2qLB4RoSxbVcrB1T485BgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNVoX DTI3MDMwMzA2MjIwNVowMzExMC8GA1UEAxMoMkNDM0U4Q0E5ODFGRjZBMDg4OTk0 RUNFQjg4NzRGQzc3MTExQzg2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1i7PKskGP+inV+Ce01ec7C1C/ny8X5AAgf7SbLrRjXTgFSeBCHmrbiy8cC QtjIl8X9AFkYL1kM83RqJAgwqbLHEkOX/34BPnhGV9zsAnwkyT089OtrZ0Z8BIqq kDCD6uWYwx6kaskDfhnbwv85CcieaexwP0L41dO8Z0q4S058T3jYpPHs4WFEHUS0 rfQlHw9Yg6JdYt913GdvUNIABjOzNsSprS67NdQMNUzOPhOJIf3mUfjJmADSJrPe VdRg8Xqp4V1n7qVDyeR+jBFkFKv4RsvtkmZlALn5I3rBW4Y9wRsGOAcmW/bQ875p OUa8VQ7pBj9FIDZ6N/lSIeblkbkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQsw+jK mB/2oIiZTs64h0/HcRHIYzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p7EwDQYJKoZIhvcNAQELBQADggEBAKAcBQdy4PIEyhQ05Z7dObV3eM14l/mR3y0l WnbYWZZjD2st4gwc/oeOQat3AgKRC8z/+VXdznI/KYVWex0V0tQ8YpXehF42qTsA 8zQZz7BBUUwj/ucmnpuv1VrhXpC+pQjIGu/vmQKUMrnV/c9ubZvBY4JNSDA+UMhJ XTZEgSp7Ah1fdj4hnBy4r6QtnNoqbY0wO2oReXKikOO/YcsAIkAKUyi8SqoKbAWm tWP6Mlt3cMsMWrb3Lv+8jWYBF3XpVRj+gNNkg6u1Cd3MpZ/iH+1GS5BdfY+fATc4 pSekuJsouWwbYCjUaN+R7xwuTSfq6R9Lfsp/s4dXGe7thcrkYVM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:17 2026 by rpki-client