$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144620.roa File: AS144620.roa (raw, json) Hash identifier: 71gF0Gr3jSD6PxAhgYuT8d/dhZZ5GAYpp1CcYk3uB8M= Subject key identifier: 04:95:DA:C2:F9:93:CC:9D:0A:5E:BA:E1:B4:CE:90:47:50:55:9B:EB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 47F238F5C80F0D7FB02ED1E7B3BAEE0CEBEE5328 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144620.roa Signing time: Wed 04 Mar 2026 06:20:26 +0000 ROA not before: Wed 04 Mar 2026 06:15:26 +0000 ROA not after: Wed 03 Mar 2027 06:20:26 +0000 asID: 144620 IP address blocks: 240a:a7b2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f2:38:f5:c8:0f:0d:7f:b0:2e:d1:e7:b3:ba:ee:0c:eb:ee:53:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:26 2026 GMT Not After : Mar 3 06:20:26 2027 GMT Subject: CN=0495DAC2F993CC9D0A5EBAE1B4CE904750559BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:1a:8d:25:c0:7b:2c:c4:67:1b:75:dc:3b: 88:54:65:24:96:08:15:15:f6:74:d8:16:cb:8b:f1: 5c:ce:d7:8b:e7:fc:7b:a8:e1:7f:2b:3c:46:73:b9: 6a:31:9e:41:32:7e:6b:02:3a:f6:39:25:29:89:89: 6e:a9:99:b0:54:14:8f:02:5d:72:b2:c7:a4:b8:82: 67:f7:51:18:2f:9c:3a:b6:62:18:ca:b8:65:cd:c0: ee:d9:8b:9b:f3:f4:c5:4b:e1:73:96:34:ea:01:1b: fb:e0:98:58:b1:df:f2:80:06:d6:12:63:50:7b:7e: 96:93:8c:b4:96:c8:3c:0e:b2:b4:e9:47:01:41:3d: 9f:84:67:d5:7b:b4:50:1f:63:4c:a8:99:c6:49:58: 2c:d7:24:8f:f1:6b:34:23:38:6f:94:3d:fd:3d:0f: ed:b4:f4:73:84:ce:6c:54:2c:f5:d0:ae:6a:f5:5e: 2f:88:23:3b:fc:1e:b1:86:81:e2:f8:f5:e8:67:49: fe:fe:1e:09:10:af:a7:81:1e:a2:a8:c3:19:32:1f: 21:93:ff:3d:f9:ce:d5:13:19:a7:41:2f:c0:46:17: 29:70:8d:03:81:74:70:52:e5:28:ed:07:ef:8c:34: b5:ac:27:9f:a9:8d:c1:1b:87:a2:70:94:ab:74:27: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:95:DA:C2:F9:93:CC:9D:0A:5E:BA:E1:B4:CE:90:47:50:55:9B:EB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144620.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7b2::/32 Signature Algorithm: sha256WithRSAEncryption 4c:c5:2b:51:10:0a:b3:52:fe:0f:91:a9:c8:9b:b1:12:bc:3b: 04:51:68:9a:ac:4b:a0:22:7d:b4:79:b4:e8:6c:72:e2:6b:d4: 87:aa:4d:34:b5:3c:8c:db:e6:e0:d5:01:a2:ee:65:cb:f1:e1: 67:58:e8:37:90:14:69:15:75:44:63:56:64:20:f1:11:8f:92: 91:19:91:6b:2e:cc:24:ad:61:bf:20:3b:59:28:fd:28:6b:1d: 41:7b:b4:50:3d:9d:75:98:2f:13:a9:38:d9:0f:1c:46:6e:d2: 52:94:ff:3d:36:76:be:8c:96:e1:4f:16:fa:64:ee:2f:9b:91: 89:86:0f:a9:ff:2f:41:df:2c:e5:57:b9:a2:2d:1d:e5:9f:c4: a9:f4:81:05:2c:02:98:18:46:3f:84:6b:20:1f:06:a3:85:12: 55:0e:4d:41:d3:d6:e1:b2:14:ab:17:90:cf:65:50:91:f2:f5: 3e:3b:aa:c1:d8:3a:5f:15:9b:86:0b:b2:6c:46:d7:1e:08:e3: b0:aa:1a:58:a9:34:39:c6:b0:5a:3f:49:a9:1f:3d:77:3f:5e: 8e:81:75:e4:bb:ce:43:95:a0:97:31:94:44:5a:a7:24:0b:3b: 9e:d5:7c:5d:e7:04:44:a9:95:ea:18:03:e8:40:ff:72:f8:23: bc:0d:93:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR/I49cgPDX+wLtHns7ruDOvuUygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyNloX DTI3MDMwMzA2MjAyNlowMzExMC8GA1UEAxMoMDQ5NURBQzJGOTkzQ0M5RDBBNUVC QUUxQjRDRTkwNDc1MDU1OUJFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwqGo0lwHssxGcbddw7iFRlJJYIFRX2dNgWy4vxXM7Xi+f8e6jhfys8RnO5 ajGeQTJ+awI69jklKYmJbqmZsFQUjwJdcrLHpLiCZ/dRGC+cOrZiGMq4Zc3A7tmL m/P0xUvhc5Y06gEb++CYWLHf8oAG1hJjUHt+lpOMtJbIPA6ytOlHAUE9n4Rn1Xu0 UB9jTKiZxklYLNckj/FrNCM4b5Q9/T0P7bT0c4TObFQs9dCuavVeL4gjO/wesYaB 4vj16GdJ/v4eCRCvp4EeoqjDGTIfIZP/PfnO1RMZp0EvwEYXKXCNA4F0cFLlKO0H 74w0tawnn6mNwRuHonCUq3Qnqt0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQEldrC +ZPMnQpeuuG0zpBHUFWb6zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p7IwDQYJKoZIhvcNAQELBQADggEBAEzFK1EQCrNS/g+RqcibsRK8OwRRaJqsS6Ai fbR5tOhscuJr1IeqTTS1PIzb5uDVAaLuZcvx4WdY6DeQFGkVdURjVmQg8RGPkpEZ kWsuzCStYb8gO1ko/ShrHUF7tFA9nXWYLxOpONkPHEZu0lKU/z02dr6MluFPFvpk 7i+bkYmGD6n/L0HfLOVXuaItHeWfxKn0gQUsApgYRj+EayAfBqOFElUOTUHT1uGy FKsXkM9lUJHy9T47qsHYOl8Vm4YLsmxG1x4I47CqGlipNDnGsFo/SakfPXc/Xo6B deS7zkOVoJcxlERapyQLO57VfF3nBESpleoYA+hA/3L4I7wNk4w= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:17 2026 by rpki-client