$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144639.roa File: AS144639.roa (raw, json) Hash identifier: U+bCZ57hSbnpCFetgIRABJKuTPOV2bcDvMoAKGtjeZM= Subject key identifier: DF:A5:6E:C8:AA:62:93:30:0A:CC:E5:DB:36:0D:55:F4:07:58:E0:8B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1BDE541E3DD20D26FAFF5FE610BDFDB8578BC152 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144639.roa Signing time: Wed 04 Mar 2026 06:21:07 +0000 ROA not before: Wed 04 Mar 2026 06:16:07 +0000 ROA not after: Wed 03 Mar 2027 06:21:07 +0000 asID: 144639 IP address blocks: 240a:a7c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:de:54:1e:3d:d2:0d:26:fa:ff:5f:e6:10:bd:fd:b8:57:8b:c1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:07 2026 GMT Not After : Mar 3 06:21:07 2027 GMT Subject: CN=DFA56EC8AA6293300ACCE5DB360D55F40758E08B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ad:a8:bd:3f:a5:82:25:90:bd:cc:20:06:2f: da:11:0b:5c:91:46:3c:c3:85:97:0a:ad:3c:71:e9: 12:5b:db:b1:b8:67:c5:9a:cf:ba:75:9a:1d:db:a0: 4e:c5:05:63:19:7a:cf:3d:9e:8a:ad:ad:ba:d8:06: 85:42:2d:c3:c6:12:13:32:37:54:61:87:df:92:25: db:b3:b2:1b:d2:27:0b:f8:97:e9:79:ae:99:a0:f5: 9c:f2:15:c4:99:b0:65:8c:ba:47:a9:42:99:48:d6: 13:f6:74:f4:86:f0:bb:97:15:a3:07:c9:25:7e:ac: 7a:3d:09:fa:99:13:5c:d4:d4:c0:7b:98:19:b4:76: d0:e1:b4:65:c8:ad:68:5c:4d:b6:a2:a3:f5:ff:25: 72:c5:5d:81:e0:8b:bf:05:6a:b0:3e:71:2e:0a:76: fa:6f:d5:48:b2:e8:91:34:61:0b:8b:7a:05:f1:b2: 63:28:f4:9f:da:38:84:ea:6e:83:4b:f1:2e:78:5c: 91:f2:f5:f2:51:89:3e:7b:9a:a3:c9:97:06:98:15: ce:76:b7:e5:29:a2:6f:e2:8f:8f:2f:01:a8:f1:d0: 14:8d:a9:75:26:d9:eb:bf:f5:55:e1:2c:2b:7b:cb: 3a:9b:4a:51:01:ce:50:e5:a2:b6:ae:55:cf:6d:aa: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A5:6E:C8:AA:62:93:30:0A:CC:E5:DB:36:0D:55:F4:07:58:E0:8B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7c5::/32 Signature Algorithm: sha256WithRSAEncryption 0b:ee:82:85:26:69:b6:77:45:c4:42:8a:3d:6e:76:b8:c2:4a: cb:a3:4e:c1:db:6f:0c:59:27:f2:1f:32:25:23:9c:ee:2c:80: 5d:64:3d:81:4a:b6:d5:e6:1a:d5:3b:50:fe:5e:a7:68:a9:9a: 50:ef:74:8a:5c:9e:09:74:7c:bf:84:e7:55:8d:63:f3:8c:39: b8:28:6d:66:46:7c:91:a6:ed:86:c8:32:e4:a6:94:54:b7:00: 3b:18:9d:af:fb:22:65:04:d5:82:94:a3:b0:39:07:df:b9:42: 7a:29:d3:fc:23:6d:3e:49:18:8f:87:8d:7f:a9:3e:db:37:8d: 02:a1:67:0b:bb:6e:79:ef:9d:1e:4b:c7:5f:e0:7f:d4:1f:3d: 3e:0a:ca:55:e8:71:d8:2b:18:c1:af:ac:b0:69:6b:d6:5d:bb: 94:33:5b:e7:8d:f5:6b:be:3c:6f:9b:8d:2f:0a:e7:e7:bb:13: fa:c9:fd:f6:d8:85:d2:c2:1e:14:0e:b5:9d:37:ac:94:93:d1: 72:18:22:11:52:b7:89:d2:d7:1a:05:66:3d:03:15:c0:5a:5a: de:9a:5e:3c:af:e6:46:71:4c:f5:33:a5:19:8a:53:87:92:63: a6:ff:b3:64:c2:2e:34:af:e8:c3:a1:b9:a0:a9:cd:c6:41:18: ac:8c:d3:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG95UHj3SDSb6/1/mEL39uFeLwVIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwN1oX DTI3MDMwMzA2MjEwN1owMzExMC8GA1UEAxMoREZBNTZFQzhBQTYyOTMzMDBBQ0NF NURCMzYwRDU1RjQwNzU4RTA4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALatqL0/pYIlkL3MIAYv2hELXJFGPMOFlwqtPHHpElvbsbhnxZrPunWaHdug TsUFYxl6zz2eiq2tutgGhUItw8YSEzI3VGGH35Il27OyG9InC/iX6XmumaD1nPIV xJmwZYy6R6lCmUjWE/Z09Ibwu5cVowfJJX6sej0J+pkTXNTUwHuYGbR20OG0Zcit aFxNtqKj9f8lcsVdgeCLvwVqsD5xLgp2+m/VSLLokTRhC4t6BfGyYyj0n9o4hOpu g0vxLnhckfL18lGJPnuao8mXBpgVzna35Smib+KPjy8BqPHQFI2pdSbZ67/1VeEs K3vLOptKUQHOUOWitq5Vz22qkg0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTfpW7I qmKTMArM5ds2DVX0B1jgizAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p8UwDQYJKoZIhvcNAQELBQADggEBAAvugoUmabZ3RcRCij1udrjCSsujTsHbbwxZ J/IfMiUjnO4sgF1kPYFKttXmGtU7UP5ep2ipmlDvdIpcngl0fL+E51WNY/OMObgo bWZGfJGm7YbIMuSmlFS3ADsYna/7ImUE1YKUo7A5B9+5Qnop0/wjbT5JGI+HjX+p Pts3jQKhZwu7bnnvnR5Lx1/gf9QfPT4KylXocdgrGMGvrLBpa9Zdu5QzW+eN9Wu+ PG+bjS8K5+e7E/rJ/fbYhdLCHhQOtZ03rJST0XIYIhFSt4nS1xoFZj0DFcBaWt6a Xjyv5kZxTPUzpRmKU4eSY6b/s2TCLjSv6MOhuaCpzcZBGKyM0+A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:30 2026 by rpki-client