$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144666.roa File: AS144666.roa (raw, json) Hash identifier: QC5iBjM+zFZwUJpcWGuNf2Z8TswMkGTf7dt06p6gC7Y= Subject key identifier: 94:06:55:52:B9:B7:09:B1:3E:83:A5:75:49:28:E9:63:4C:29:CD:EB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 430717AF525AC6B50AB2E2990A52CDD789E8D7C3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144666.roa Signing time: Wed 04 Mar 2026 06:21:52 +0000 ROA not before: Wed 04 Mar 2026 06:16:52 +0000 ROA not after: Wed 03 Mar 2027 06:21:52 +0000 asID: 144666 IP address blocks: 240a:a7e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:07:17:af:52:5a:c6:b5:0a:b2:e2:99:0a:52:cd:d7:89:e8:d7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:52 2026 GMT Not After : Mar 3 06:21:52 2027 GMT Subject: CN=94065552B9B709B13E83A5754928E9634C29CDEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:a2:0a:30:13:39:3c:24:93:cf:69:64:c6: a6:b6:4f:5e:47:7e:7d:f0:c3:35:bc:fe:78:70:cf: 22:03:72:9b:2e:0c:e7:0d:a4:61:1a:39:9a:ee:67: df:6b:c5:c7:4e:ea:1b:1d:b3:be:79:87:53:ad:40: 4c:cb:be:45:da:c4:f2:7b:5e:57:fc:1c:a1:c7:44: 7c:ff:74:6e:d1:2e:97:9f:b6:56:b4:2d:ec:d9:89: 9f:86:cc:9f:9b:6c:5b:d3:d9:81:fd:e8:64:c0:4c: b5:81:31:21:ea:b3:62:3d:a1:ed:3b:6e:1d:9f:62: c1:43:24:90:e8:09:58:ad:5f:74:d4:cf:1a:2e:25: dd:76:21:ce:52:25:6e:07:c4:d4:5a:0b:5e:5e:3e: 2b:2b:6d:a5:1b:bc:9a:cc:67:19:cf:d8:c1:ba:e8: f2:b3:28:8b:f5:f6:27:4b:c9:f0:b3:af:18:d2:81: db:57:86:41:db:44:df:3a:f7:dd:1d:cf:fa:af:3f: a4:51:ed:9a:9e:a9:c3:b9:bf:39:d1:51:ca:8f:27: 8a:0a:f7:03:16:78:9a:85:3d:80:ac:18:f7:fc:c3: 16:ad:76:f5:0b:f0:2c:1d:ac:d5:41:7a:e6:14:f2: c3:ec:9d:7f:d7:36:bf:30:e1:f3:4f:e8:b8:77:e5: f2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:06:55:52:B9:B7:09:B1:3E:83:A5:75:49:28:E9:63:4C:29:CD:EB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144666.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7e0::/32 Signature Algorithm: sha256WithRSAEncryption 8c:25:04:7c:be:cc:e9:fa:3d:63:18:bc:cd:a9:46:cb:e9:b3: 69:fa:4d:f1:17:22:3f:9a:10:2f:ea:25:ad:00:8b:e4:28:f8: 80:68:e8:f6:0d:88:d7:53:b0:b2:47:9f:ea:13:ec:04:e8:fa: 41:43:f1:95:e5:dd:75:f6:f4:7b:c6:15:eb:e6:26:5f:9a:cf: f2:9a:ef:e6:5a:ff:f5:da:51:8a:f1:aa:f3:03:dc:6f:db:33: ce:2f:d5:d0:39:78:a9:1c:ce:4f:de:c0:c3:4c:44:a8:a2:60: 9c:5e:cf:6a:b4:97:53:11:32:86:98:18:3a:eb:8f:2a:af:35: 46:c2:99:ea:2e:b3:74:8f:40:48:86:74:ac:94:a2:ed:24:f3: d0:1c:5a:82:c6:5c:38:90:9c:0c:78:2e:41:24:34:f5:e4:d1: ce:2c:8d:92:9b:fb:4c:44:20:62:35:44:25:66:d1:53:ce:c0: 30:ce:05:56:46:a6:d3:08:5a:a2:7b:93:13:4c:fa:cf:59:ee: ab:00:c6:17:1a:2a:b3:d2:36:c0:a2:98:3d:3a:c9:e1:b2:dd: 7d:bb:d7:f2:2c:e3:76:4f:34:07:cd:01:18:4a:5a:33:74:4d: 84:9d:44:4f:66:e6:ce:8e:46:d4:74:34:ae:0c:ef:4b:e6:1b: 68:f4:78:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQwcXr1JaxrUKsuKZClLN14no18MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1MloX DTI3MDMwMzA2MjE1MlowMzExMC8GA1UEAxMoOTQwNjU1NTJCOUI3MDlCMTNFODNB NTc1NDkyOEU5NjM0QzI5Q0RFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIzlogowEzk8JJPPaWTGprZPXkd+ffDDNbz+eHDPIgNymy4M5w2kYRo5mu5n 32vFx07qGx2zvnmHU61ATMu+RdrE8nteV/wcocdEfP90btEul5+2VrQt7NmJn4bM n5tsW9PZgf3oZMBMtYExIeqzYj2h7TtuHZ9iwUMkkOgJWK1fdNTPGi4l3XYhzlIl bgfE1FoLXl4+KyttpRu8msxnGc/Ywbro8rMoi/X2J0vJ8LOvGNKB21eGQdtE3zr3 3R3P+q8/pFHtmp6pw7m/OdFRyo8nigr3AxZ4moU9gKwY9/zDFq129QvwLB2s1UF6 5hTyw+ydf9c2vzDh80/ouHfl8kECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSUBlVS ubcJsT6DpXVJKOljTCnN6zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p+AwDQYJKoZIhvcNAQELBQADggEBAIwlBHy+zOn6PWMYvM2pRsvps2n6TfEXIj+a EC/qJa0Ai+Qo+IBo6PYNiNdTsLJHn+oT7ATo+kFD8ZXl3XX29HvGFevmJl+az/Ka 7+Za//XaUYrxqvMD3G/bM84v1dA5eKkczk/ewMNMRKiiYJxez2q0l1MRMoaYGDrr jyqvNUbCmeous3SPQEiGdKyUou0k89AcWoLGXDiQnAx4LkEkNPXk0c4sjZKb+0xE IGI1RCVm0VPOwDDOBVZGptMIWqJ7kxNM+s9Z7qsAxhcaKrPSNsCimD06yeGy3X27 1/Is43ZPNAfNARhKWjN0TYSdRE9m5s6ORtR0NK4M70vmG2j0eJU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:20 2026 by rpki-client