$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144659.roa File: AS144659.roa (raw, json) Hash identifier: 5NheXQAQoX5fd0uj3ai8EyJIneKSDjJ5HqzWvvhd/mM= Subject key identifier: 52:FC:FD:3A:F0:00:E9:12:50:4C:D0:28:93:54:FB:04:E8:D6:EA:17 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 60DB8FFA19625541C0B42B1687D62A0EE9FD1C83 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144659.roa Signing time: Wed 04 Mar 2026 06:22:13 +0000 ROA not before: Wed 04 Mar 2026 06:17:13 +0000 ROA not after: Wed 03 Mar 2027 06:22:13 +0000 asID: 144659 IP address blocks: 240a:a7d9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:db:8f:fa:19:62:55:41:c0:b4:2b:16:87:d6:2a:0e:e9:fd:1c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:13 2026 GMT Not After : Mar 3 06:22:13 2027 GMT Subject: CN=52FCFD3AF000E912504CD0289354FB04E8D6EA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:42:32:31:31:14:c1:68:c2:13:92:4c:49: 55:d9:7b:a6:71:a4:4d:f1:b9:3a:7f:47:5f:0b:04: 80:34:8a:3b:d2:3d:d8:28:3a:b6:95:54:e9:cb:73: 52:30:3c:bb:7d:fd:85:9e:b0:ec:2b:48:3e:53:a0: dc:00:82:43:62:07:7c:fb:32:86:2c:e5:eb:df:05: 9d:97:d1:33:df:aa:7a:de:d9:09:6f:ba:7b:4b:95: 3d:9d:89:f8:d6:a1:7e:47:38:76:be:62:59:b4:68: 7f:0a:89:9a:22:fb:86:bd:1d:94:cd:49:ad:6d:d2: 0c:a6:da:ad:eb:22:9a:82:37:f2:59:e8:1b:c5:a7: 8a:ab:14:ed:61:d3:ab:0c:1f:e5:c9:88:83:6d:40: 04:ea:f0:98:97:59:c7:93:2c:e0:42:42:6a:a5:c9: 65:7f:f3:a7:40:81:ab:aa:e6:3b:ff:0d:43:e4:ba: ec:c1:29:64:41:a9:a8:50:da:55:c4:ba:7e:90:44: 5e:06:3d:48:13:e4:d4:0d:a0:cd:7e:07:50:47:a1: bc:5f:c0:20:83:0e:92:24:3b:6a:13:df:cf:e8:82: 34:d4:04:19:ee:c2:ac:12:9d:49:e9:3a:ed:27:96: f8:63:32:92:3c:61:c1:23:bb:10:c0:f6:09:45:5c: af:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FC:FD:3A:F0:00:E9:12:50:4C:D0:28:93:54:FB:04:E8:D6:EA:17 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144659.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7d9::/32 Signature Algorithm: sha256WithRSAEncryption 1b:ae:b5:e2:dc:32:81:96:8c:9e:fb:ca:be:03:db:89:20:b4: 1b:f4:74:b7:bd:cd:9e:c9:75:d6:09:69:74:13:b2:c5:fd:85: 43:6f:14:a3:ce:e9:ed:df:1a:cb:f2:5f:91:35:f4:e9:03:eb: be:7a:26:8a:59:2c:20:87:e0:73:13:fe:08:54:aa:dd:98:8d: 11:5a:2a:69:73:79:27:db:aa:f0:f8:21:82:d7:c5:f9:35:5f: 30:4c:21:c3:52:8f:d5:7c:1d:42:fa:8c:d0:14:17:c2:b9:60: 91:f5:bf:f1:b7:32:33:9f:04:f0:57:b0:fe:64:6f:3c:c3:b1: a0:a2:e9:70:e0:27:a2:9c:35:f4:1b:ec:28:74:54:63:1f:84: 19:7c:d1:61:d1:09:f4:c9:72:ef:84:be:7d:25:7c:a5:ae:dc: b3:21:78:1c:2c:cc:df:f4:dd:28:51:23:71:83:3e:04:66:1d: ef:0e:37:8e:2b:d5:ac:df:ee:7f:49:1e:93:00:53:27:17:03: ab:f5:6a:93:06:a1:aa:56:6b:52:1d:51:d6:ce:4d:d3:2e:e6: f1:76:17:cc:e2:49:cd:1a:b7:6b:22:f1:85:0b:41:67:20:f8: a0:10:87:1f:2f:0f:8e:3f:df:14:f7:1f:fd:12:7e:1d:0c:5a: 5b:c2:2e:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYNuP+hliVUHAtCsWh9YqDun9HIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxM1oX DTI3MDMwMzA2MjIxM1owMzExMC8GA1UEAxMoNTJGQ0ZEM0FGMDAwRTkxMjUwNENE MDI4OTM1NEZCMDRFOEQ2RUExNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIAQjIxMRTBaMITkkxJVdl7pnGkTfG5On9HXwsEgDSKO9I92Cg6tpVU6ctz UjA8u339hZ6w7CtIPlOg3ACCQ2IHfPsyhizl698FnZfRM9+qet7ZCW+6e0uVPZ2J +Nahfkc4dr5iWbRofwqJmiL7hr0dlM1JrW3SDKbaresimoI38lnoG8WniqsU7WHT qwwf5cmIg21ABOrwmJdZx5Ms4EJCaqXJZX/zp0CBq6rmO/8NQ+S67MEpZEGpqFDa VcS6fpBEXgY9SBPk1A2gzX4HUEehvF/AIIMOkiQ7ahPfz+iCNNQEGe7CrBKdSek6 7SeW+GMykjxhwSO7EMD2CUVcr+MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRS/P06 8ADpElBM0CiTVPsE6NbqFzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p9kwDQYJKoZIhvcNAQELBQADggEBABuuteLcMoGWjJ77yr4D24kgtBv0dLe9zZ7J ddYJaXQTssX9hUNvFKPO6e3fGsvyX5E19OkD6756JopZLCCH4HMT/ghUqt2YjRFa KmlzeSfbqvD4IYLXxfk1XzBMIcNSj9V8HUL6jNAUF8K5YJH1v/G3MjOfBPBXsP5k bzzDsaCi6XDgJ6KcNfQb7Ch0VGMfhBl80WHRCfTJcu+Evn0lfKWu3LMheBwszN/0 3ShRI3GDPgRmHe8ON44r1azf7n9JHpMAUycXA6v1apMGoapWa1IdUdbOTdMu5vF2 F8ziSc0at2si8YULQWcg+KAQhx8vD44/3xT3H/0Sfh0MWlvCLrc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:14 2026 by rpki-client