$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144647.roa File: AS144647.roa (raw, json) Hash identifier: z9puAClp/nPcuWjbMYravXCMzdZRcaD5xj9xrNjx3zQ= Subject key identifier: CB:BB:93:E9:83:A5:38:E0:85:F6:D7:96:02:ED:B4:D2:6C:E3:45:B6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2C6E86DF0EC6C6E52E715108EE91F5A5F5B50C3F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144647.roa Signing time: Wed 04 Mar 2026 06:20:57 +0000 ROA not before: Wed 04 Mar 2026 06:15:57 +0000 ROA not after: Wed 03 Mar 2027 06:20:57 +0000 asID: 144647 IP address blocks: 240a:a7cd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6e:86:df:0e:c6:c6:e5:2e:71:51:08:ee:91:f5:a5:f5:b5:0c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:57 2026 GMT Not After : Mar 3 06:20:57 2027 GMT Subject: CN=CBBB93E983A538E085F6D79602EDB4D26CE345B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:98:be:a3:a6:d5:44:2c:d7:f9:74:86:2c: 6e:7f:ce:28:a8:be:93:d0:59:6a:40:d2:63:5b:a3: 9a:46:29:52:7d:a4:42:0f:73:8b:99:66:c7:70:35: 16:7c:3f:e8:c4:8f:8a:f0:77:5b:3a:3b:64:01:80: 49:39:46:c9:2c:e8:7f:ef:7c:71:79:ad:1d:7b:e7: 78:d2:2c:b5:81:ed:d1:e0:b1:66:4a:5e:16:ca:a9: e0:95:0d:f7:af:6b:c8:f6:94:6c:8b:09:6d:10:40: 27:37:b0:5c:31:f8:67:25:c8:c6:df:69:ca:8d:fd: ff:13:13:0d:e8:5f:b6:6c:86:db:8a:68:29:a0:4c: 30:fc:26:98:c2:c3:20:3c:09:ac:2a:3e:7f:f9:0f: 3e:e1:a8:2a:cd:a0:c8:68:c4:d5:29:ac:ea:66:c0: 57:b0:b8:71:ae:8d:21:39:c6:da:03:44:93:3d:bd: 43:ab:76:c4:f7:ab:c1:a1:fc:18:93:32:a8:f4:56: 75:3f:34:a2:5e:d7:fd:0a:23:59:0c:70:b2:ff:cd: af:24:ac:e9:49:c3:64:a4:21:37:0a:18:24:c5:1f: 90:a3:b7:a2:82:95:1a:6d:83:df:21:45:5b:7a:12: bf:f7:00:e1:cc:5f:7d:59:7a:ca:1f:07:75:3e:dc: 20:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BB:93:E9:83:A5:38:E0:85:F6:D7:96:02:ED:B4:D2:6C:E3:45:B6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144647.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7cd::/32 Signature Algorithm: sha256WithRSAEncryption 13:cb:ad:ed:d5:51:49:39:3c:36:81:59:c9:5f:14:46:28:1e: 2e:39:93:41:25:17:ed:59:45:93:7b:d3:35:c0:4f:50:9f:88: e9:9e:18:ec:4e:cf:0b:d3:0e:a8:8b:2f:52:32:3d:54:eb:39: 98:57:7a:cd:8a:4b:8c:8f:a9:bd:22:a1:ec:92:99:70:97:d3: 66:2c:a6:4c:ff:2b:db:27:68:c1:66:04:d7:ba:de:9f:a1:03: 9d:80:57:2a:b0:ed:23:47:86:3c:43:b1:42:cb:3b:1c:f2:a6: 59:2d:b0:7a:2b:79:0b:4c:cd:62:dd:ae:51:59:a6:17:18:d5: 72:76:36:a2:c1:4f:11:91:0e:7c:94:d7:2b:52:2a:e5:51:81: 44:e8:95:8b:d6:5d:2a:f8:25:5f:1b:e4:8f:74:b2:98:38:91: 96:e1:39:fc:17:bf:b6:de:51:32:42:3c:d2:f0:ca:41:89:63: 01:f6:33:5f:6c:a4:e4:8b:ff:0a:f3:19:9b:51:5a:7f:10:fd: d2:4e:59:ca:6c:e3:83:95:15:bd:b5:a8:8e:e9:e8:56:42:e0: 8b:12:cb:a7:f4:2d:cd:2d:eb:3c:5a:9b:a4:a8:52:9e:51:da: 93:2c:0d:8c:e3:43:d9:4e:98:ea:40:71:ec:87:27:af:df:24: c5:80:52:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULG6G3w7GxuUucVEI7pH1pfW1DD8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1N1oX DTI3MDMwMzA2MjA1N1owMzExMC8GA1UEAxMoQ0JCQjkzRTk4M0E1MzhFMDg1RjZE Nzk2MDJFREI0RDI2Q0UzNDVCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwwmL6jptVELNf5dIYsbn/OKKi+k9BZakDSY1ujmkYpUn2kQg9zi5lmx3A1 Fnw/6MSPivB3Wzo7ZAGASTlGySzof+98cXmtHXvneNIstYHt0eCxZkpeFsqp4JUN 969ryPaUbIsJbRBAJzewXDH4ZyXIxt9pyo39/xMTDehftmyG24poKaBMMPwmmMLD IDwJrCo+f/kPPuGoKs2gyGjE1Sms6mbAV7C4ca6NITnG2gNEkz29Q6t2xPerwaH8 GJMyqPRWdT80ol7X/QojWQxwsv/NrySs6UnDZKQhNwoYJMUfkKO3ooKVGm2D3yFF W3oSv/cA4cxffVl6yh8HdT7cIJUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTLu5Pp g6U44IX215YC7bTSbONFtjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p80wDQYJKoZIhvcNAQELBQADggEBABPLre3VUUk5PDaBWclfFEYoHi45k0ElF+1Z RZN70zXAT1CfiOmeGOxOzwvTDqiLL1IyPVTrOZhXes2KS4yPqb0ioeySmXCX02Ys pkz/K9snaMFmBNe63p+hA52AVyqw7SNHhjxDsULLOxzyplktsHoreQtMzWLdrlFZ phcY1XJ2NqLBTxGRDnyU1ytSKuVRgUTolYvWXSr4JV8b5I90spg4kZbhOfwXv7be UTJCPNLwykGJYwH2M19spOSL/wrzGZtRWn8Q/dJOWcps44OVFb21qI7p6FZC4IsS y6f0Lc0t6zxam6SoUp5R2pMsDYzjQ9lOmOpAceyHJ6/fJMWAUrc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:53 2026 by rpki-client