$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144644.roa File: AS144644.roa (raw, json) Hash identifier: I0WCeTw55AtF6bPwGk+VMF+1GRuki3HVt4uriC1jGcw= Subject key identifier: 99:BE:1E:5C:FD:5A:55:25:19:C3:52:F4:58:54:41:EC:4D:56:CD:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 131B95040CE67C916434380F4249B0C1101A4B38 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144644.roa Signing time: Wed 04 Mar 2026 06:22:20 +0000 ROA not before: Wed 04 Mar 2026 06:17:20 +0000 ROA not after: Wed 03 Mar 2027 06:22:20 +0000 asID: 144644 IP address blocks: 240a:a7ca::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1b:95:04:0c:e6:7c:91:64:34:38:0f:42:49:b0:c1:10:1a:4b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:20 2026 GMT Not After : Mar 3 06:22:20 2027 GMT Subject: CN=99BE1E5CFD5A552519C352F4585441EC4D56CD12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:03:39:85:53:4c:04:af:1a:87:3e:18:dc:92: c9:ae:93:87:7b:88:46:73:7c:c6:b7:8f:75:d1:f8: 78:d3:cc:04:e3:e3:fd:cf:3f:82:60:2e:57:dc:68: ae:4d:11:e4:aa:d7:38:58:1d:49:b7:cc:93:81:ee: 54:76:7d:d6:c7:35:cb:e6:5f:58:1c:49:29:ca:00: 8b:22:09:0d:97:9e:56:5d:bd:3f:d8:83:2a:19:9f: 00:45:39:31:26:ff:ad:85:cd:df:63:a2:63:07:0f: 01:73:e2:ad:8a:02:32:8b:7e:c8:5b:ab:23:fc:57: 65:35:c0:04:96:9b:c2:54:29:22:e3:14:3d:9e:db: 1c:bc:52:54:06:fe:3a:00:b8:98:17:66:33:c2:52: ec:73:ce:60:d1:55:44:74:99:3e:34:df:53:83:ea: 7a:b9:8d:3a:1b:2a:7e:c6:19:83:a3:ba:f4:77:ae: 0c:a9:98:7e:95:bc:ff:87:ec:43:4c:f2:c9:e2:4f: dd:06:cf:3c:66:be:db:dd:37:fc:83:7e:06:ea:d1: e8:6f:5d:66:7f:06:1a:20:68:11:60:48:ac:1a:fa: 81:16:f0:f7:22:35:fc:68:86:de:0d:72:17:5b:65: ec:ca:4c:3e:d8:c6:b2:54:af:ea:37:e9:4c:7a:26: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BE:1E:5C:FD:5A:55:25:19:C3:52:F4:58:54:41:EC:4D:56:CD:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144644.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7ca::/32 Signature Algorithm: sha256WithRSAEncryption 70:af:bd:b3:0f:cd:3a:5a:14:a8:a3:ec:1f:c8:a8:f5:13:4e: 95:37:ee:3d:86:38:4b:64:6a:4c:94:5b:ee:08:a5:5e:7b:b6: 82:56:a2:7e:4d:b9:0d:f4:f0:e1:c1:b8:81:d8:5a:ae:99:f8: 40:65:36:4f:ba:d8:61:40:c5:a2:30:45:7a:ce:ad:d9:7d:1d: 8c:ca:ec:08:fd:ae:e2:3f:13:ef:47:17:0e:33:8c:14:6f:fe: 15:44:7c:f0:09:f6:c4:c1:4e:5e:7c:45:0e:c0:40:92:eb:14: 64:09:13:04:4b:72:85:9d:e6:28:2d:9f:ea:38:d0:04:fb:bb: 92:22:4f:af:b5:9a:00:fe:12:40:af:5f:29:6d:fc:f9:4e:ff: 76:71:a8:0c:a3:a1:e7:75:f1:99:41:57:55:7d:60:58:78:40: f4:04:ba:e0:f1:78:0b:10:1d:04:27:06:27:5f:b4:84:93:7f: 2e:07:e8:a6:fa:99:59:c2:a0:99:cc:50:ce:6d:b8:27:20:ad: a9:71:18:4d:06:6c:a3:ef:bc:68:45:74:ed:f9:dc:32:40:03: ec:94:09:fd:95:45:33:b3:2a:93:53:75:a8:92:59:88:37:fd: 37:b7:9f:4e:29:a4:73:3a:a8:d9:08:e7:4b:20:d4:48:78:41: c2:65:7c:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUExuVBAzmfJFkNDgPQkmwwRAaSzgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyMFoX DTI3MDMwMzA2MjIyMFowMzExMC8GA1UEAxMoOTlCRTFFNUNGRDVBNTUyNTE5QzM1 MkY0NTg1NDQxRUM0RDU2Q0QxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcDOYVTTASvGoc+GNySya6Th3uIRnN8xrePddH4eNPMBOPj/c8/gmAuV9xo rk0R5KrXOFgdSbfMk4HuVHZ91sc1y+ZfWBxJKcoAiyIJDZeeVl29P9iDKhmfAEU5 MSb/rYXN32OiYwcPAXPirYoCMot+yFurI/xXZTXABJabwlQpIuMUPZ7bHLxSVAb+ OgC4mBdmM8JS7HPOYNFVRHSZPjTfU4PqermNOhsqfsYZg6O69HeuDKmYfpW8/4fs Q0zyyeJP3QbPPGa+2903/IN+BurR6G9dZn8GGiBoEWBIrBr6gRbw9yI1/GiG3g1y F1tl7MpMPtjGslSv6jfpTHomdOMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSZvh5c /VpVJRnDUvRYVEHsTVbNEjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p8owDQYJKoZIhvcNAQELBQADggEBAHCvvbMPzTpaFKij7B/IqPUTTpU37j2GOEtk akyUW+4IpV57toJWon5NuQ308OHBuIHYWq6Z+EBlNk+62GFAxaIwRXrOrdl9HYzK 7Aj9ruI/E+9HFw4zjBRv/hVEfPAJ9sTBTl58RQ7AQJLrFGQJEwRLcoWd5igtn+o4 0AT7u5IiT6+1mgD+EkCvXylt/PlO/3ZxqAyjoed18ZlBV1V9YFh4QPQEuuDxeAsQ HQQnBidftISTfy4H6Kb6mVnCoJnMUM5tuCcgralxGE0GbKPvvGhFdO353DJAA+yU Cf2VRTOzKpNTdaiSWYg3/Te3n04ppHM6qNkI50sg1Eh4QcJlfBY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:46 2026 by rpki-client