$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144660.roa File: AS144660.roa (raw, json) Hash identifier: zvMmtzWq7gV7r8ug+RP4LdZwi15cKMo/qkOw1AXV7ak= Subject key identifier: 33:BE:43:B8:57:97:A7:E5:54:1D:4F:8F:1F:2B:56:E1:A1:22:6F:8B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 770DA7C15C7CAB9C461D71D17FC86174EFAFFCC7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144660.roa Signing time: Wed 04 Mar 2026 06:20:32 +0000 ROA not before: Wed 04 Mar 2026 06:15:32 +0000 ROA not after: Wed 03 Mar 2027 06:20:32 +0000 asID: 144660 IP address blocks: 240a:a7da::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0d:a7:c1:5c:7c:ab:9c:46:1d:71:d1:7f:c8:61:74:ef:af:fc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:32 2026 GMT Not After : Mar 3 06:20:32 2027 GMT Subject: CN=33BE43B85797A7E5541D4F8F1F2B56E1A1226F8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:37:a8:9c:28:2c:03:70:c2:09:af:aa:d8: 08:9b:98:e0:34:15:aa:01:f7:29:11:bc:2b:64:af: 36:bd:3f:28:c0:9f:8c:0f:b8:b5:6e:17:84:a9:a2: a2:e6:60:f7:3c:df:a4:64:1c:0e:0f:68:54:b2:40: 3c:67:01:91:0c:61:31:90:09:57:99:65:f0:5b:61: c0:ee:ca:c2:f2:8b:95:66:83:cd:4e:ee:10:0a:1c: 8c:1a:58:09:21:9f:a7:54:3c:36:0e:81:7e:56:72: 54:8c:69:5e:66:b4:f8:d9:b2:cb:b9:8e:19:78:4f: 40:4b:e3:78:f0:12:0a:47:05:97:a0:69:da:0a:95: 67:87:b6:a8:07:e8:61:a0:da:43:04:2b:72:91:0e: 4a:9a:a3:43:cc:89:8c:cf:f3:8f:bc:89:87:df:3c: bf:30:15:0b:de:3f:ec:73:42:8c:d0:e3:57:4d:5a: cd:0f:a4:fc:db:2e:36:fd:91:c2:14:ad:b3:24:b0: 63:7d:d1:53:bd:7d:14:0d:a8:de:c0:af:e5:99:e5: b4:aa:f1:ac:cb:b1:6b:11:3a:07:8e:25:d7:d3:a3: 39:94:fa:1d:18:2e:a5:50:85:c4:07:f3:c2:18:75: 13:90:47:83:8a:59:a9:ea:b7:79:b0:53:c1:bb:a3: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BE:43:B8:57:97:A7:E5:54:1D:4F:8F:1F:2B:56:E1:A1:22:6F:8B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144660.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7da::/32 Signature Algorithm: sha256WithRSAEncryption 1f:99:6d:9a:30:cb:75:c2:00:91:a5:ca:c6:7e:18:9a:8e:0c: 89:e3:d9:ca:e7:ae:f3:d1:36:ae:41:4b:e9:d8:db:57:f4:d1: 6c:29:e2:69:b2:f2:7f:91:d5:0a:66:f0:5f:8f:aa:8f:0d:80: 5d:73:d9:de:44:7e:be:3a:62:71:63:39:fc:7b:97:63:c2:65: 1f:2c:f2:33:d0:bb:09:93:af:da:72:3c:1c:17:ab:5b:85:44: af:78:ce:c1:a9:ab:66:60:67:e6:04:fa:81:20:48:ef:00:98: 1f:20:a5:33:bc:81:b4:66:bc:0f:57:32:0f:c1:f7:ea:86:ab: 23:a0:d3:b3:54:08:ea:cb:59:3a:b5:12:e1:88:e0:38:6b:16: 00:cf:7a:62:e2:06:ff:6f:20:a9:e3:c8:a1:43:1e:41:37:1c: 33:da:cc:ce:1f:9f:02:98:9c:2a:62:3b:ac:ca:0c:22:1a:66: 15:fd:3d:eb:4a:3f:8f:d3:cb:6d:cd:cb:c2:62:62:f1:e1:cf: 2f:09:bb:cf:58:a6:bc:90:d1:59:6d:53:f0:d3:8f:8d:14:ba: bf:76:a9:85:47:41:21:3f:83:1e:3d:d3:7f:b1:8d:cb:46:2b: f2:4f:0d:1c:a4:f2:a4:2c:04:89:56:40:89:d6:4a:b9:16:5c: ad:89:42:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdw2nwVx8q5xGHXHRf8hhdO+v/McwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzMloX DTI3MDMwMzA2MjAzMlowMzExMC8GA1UEAxMoMzNCRTQzQjg1Nzk3QTdFNTU0MUQ0 RjhGMUYyQjU2RTFBMTIyNkY4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUmN6icKCwDcMIJr6rYCJuY4DQVqgH3KRG8K2SvNr0/KMCfjA+4tW4XhKmi ouZg9zzfpGQcDg9oVLJAPGcBkQxhMZAJV5ll8FthwO7KwvKLlWaDzU7uEAocjBpY CSGfp1Q8Ng6BflZyVIxpXma0+Nmyy7mOGXhPQEvjePASCkcFl6Bp2gqVZ4e2qAfo YaDaQwQrcpEOSpqjQ8yJjM/zj7yJh988vzAVC94/7HNCjNDjV01azQ+k/NsuNv2R whStsySwY33RU719FA2o3sCv5ZnltKrxrMuxaxE6B44l19OjOZT6HRgupVCFxAfz whh1E5BHg4pZqeq3ebBTwbujox8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQzvkO4 V5en5VQdT48fK1bhoSJvizAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p9owDQYJKoZIhvcNAQELBQADggEBAB+ZbZowy3XCAJGlysZ+GJqODInj2crnrvPR Nq5BS+nY21f00Wwp4mmy8n+R1Qpm8F+Pqo8NgF1z2d5Efr46YnFjOfx7l2PCZR8s 8jPQuwmTr9pyPBwXq1uFRK94zsGpq2ZgZ+YE+oEgSO8AmB8gpTO8gbRmvA9XMg/B 9+qGqyOg07NUCOrLWTq1EuGI4DhrFgDPemLiBv9vIKnjyKFDHkE3HDPazM4fnwKY nCpiO6zKDCIaZhX9PetKP4/Ty23Ny8JiYvHhzy8Ju89YpryQ0VltU/DTj40Uur92 qYVHQSE/gx4903+xjctGK/JPDRyk8qQsBIlWQInWSrkWXK2JQk0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:10 2026 by rpki-client