$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144667.roa File: AS144667.roa (raw, json) Hash identifier: 8VMxR3UxpWafj0i1EN0cl9A36uqaWdviyTll0B/5H1M= Subject key identifier: 99:21:E6:64:30:5C:45:26:68:B5:63:44:28:DE:D9:35:C6:B2:9F:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6661F90EB6456EB1B351182B33FAA356C2FAD63A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144667.roa Signing time: Wed 04 Mar 2026 06:22:27 +0000 ROA not before: Wed 04 Mar 2026 06:17:27 +0000 ROA not after: Wed 03 Mar 2027 06:22:27 +0000 asID: 144667 IP address blocks: 240a:a7e1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:61:f9:0e:b6:45:6e:b1:b3:51:18:2b:33:fa:a3:56:c2:fa:d6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:27 2026 GMT Not After : Mar 3 06:22:27 2027 GMT Subject: CN=9921E664305C452668B5634428DED935C6B29FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:e4:fd:b2:c1:f5:5c:88:06:86:51:a7:39: ae:e5:09:06:7c:f0:cf:13:3e:b4:32:c7:64:a2:a8: ca:39:f0:49:35:21:23:4a:bd:42:78:e8:55:75:16: 1f:23:d9:66:44:af:bf:01:4f:da:96:35:6b:d5:46: e6:a3:c9:ed:1d:73:dd:04:de:14:eb:67:57:d6:12: 18:2d:4e:b5:f6:5a:5c:de:58:b8:ca:9d:04:89:1d: cc:68:85:a8:91:f1:25:fd:c9:66:a4:74:99:50:0f: 52:d3:00:84:ff:3e:5c:bd:cf:dc:17:02:45:79:8c: 69:3b:e1:fb:49:d0:41:5c:6b:27:f2:b6:08:8c:8f: dd:29:70:b7:85:d2:a7:7a:a2:2b:6d:37:44:7c:80: 59:0a:e1:78:10:78:d7:08:db:9f:3e:7e:9e:6f:d0: 8f:80:71:47:38:9d:2a:ec:46:93:99:ef:56:3e:0b: 52:90:46:9b:86:17:72:34:45:bf:a9:c5:19:3f:f8: c2:97:76:69:3b:1d:99:fa:72:39:d8:60:7c:da:c9: 44:0b:f5:3e:93:2f:e2:11:c0:42:ee:4e:ad:f0:1b: 73:18:29:5a:5a:7d:38:79:c0:18:aa:28:ca:ef:2a: b4:c1:8e:33:ad:fd:c0:b1:a3:92:30:88:8d:21:88: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:21:E6:64:30:5C:45:26:68:B5:63:44:28:DE:D9:35:C6:B2:9F:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7e1::/32 Signature Algorithm: sha256WithRSAEncryption 15:b1:e1:2a:59:b2:d1:1c:46:83:fb:cf:ab:f9:e4:5e:4f:4c: 2b:dd:69:16:24:37:17:a8:7e:46:d2:ec:98:c3:98:7f:9d:0d: 7e:29:a5:63:92:ac:d5:2a:6e:17:0b:d5:4d:a0:44:ef:13:ed: b3:0f:1f:d1:5d:43:42:5a:b9:76:8b:25:13:14:b3:1d:28:80: df:2e:e8:86:00:e2:fb:07:3b:92:2b:63:2c:67:09:a7:82:e6: 8b:e4:3f:48:d0:3a:73:34:2b:3f:58:1b:0f:21:71:3a:ce:74: 7f:b5:d0:23:4f:37:ee:0d:97:41:4d:13:0e:d0:f2:ce:23:d0: a1:27:f8:53:71:ca:7a:e9:5e:d4:2a:ae:77:86:ff:b5:cd:3a: f4:ee:bd:13:ba:e0:33:f8:2d:d3:91:c3:ce:cc:da:fa:a8:d5: 8f:b4:70:4d:48:f9:ee:b6:e6:5b:30:40:50:68:8f:4b:43:be: 8b:c5:b5:a8:17:80:06:e2:7c:ef:86:bd:28:c8:dd:d6:55:de: 9d:d9:d4:7b:05:f9:4c:f9:f1:46:4c:87:c2:5e:d7:41:83:af: 95:b3:46:91:3f:fa:73:86:da:a4:be:2f:ef:fe:8c:74:03:04: 4f:0f:13:9c:86:cf:0a:a2:72:5f:41:ec:d6:0e:45:95:fe:0e: b7:ab:cd:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZmH5DrZFbrGzURgrM/qjVsL61jowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyN1oX DTI3MDMwMzA2MjIyN1owMzExMC8GA1UEAxMoOTkyMUU2NjQzMDVDNDUyNjY4QjU2 MzQ0MjhERUQ5MzVDNkIyOUZCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFC5P2ywfVciAaGUac5ruUJBnzwzxM+tDLHZKKoyjnwSTUhI0q9QnjoVXUW HyPZZkSvvwFP2pY1a9VG5qPJ7R1z3QTeFOtnV9YSGC1OtfZaXN5YuMqdBIkdzGiF qJHxJf3JZqR0mVAPUtMAhP8+XL3P3BcCRXmMaTvh+0nQQVxrJ/K2CIyP3Slwt4XS p3qiK203RHyAWQrheBB41wjbnz5+nm/Qj4BxRzidKuxGk5nvVj4LUpBGm4YXcjRF v6nFGT/4wpd2aTsdmfpyOdhgfNrJRAv1PpMv4hHAQu5OrfAbcxgpWlp9OHnAGKoo yu8qtMGOM639wLGjkjCIjSGIo2UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSZIeZk MFxFJmi1Y0Qo3tk1xrKftDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p+EwDQYJKoZIhvcNAQELBQADggEBABWx4SpZstEcRoP7z6v55F5PTCvdaRYkNxeo fkbS7JjDmH+dDX4ppWOSrNUqbhcL1U2gRO8T7bMPH9FdQ0JauXaLJRMUsx0ogN8u 6IYA4vsHO5IrYyxnCaeC5ovkP0jQOnM0Kz9YGw8hcTrOdH+10CNPN+4Nl0FNEw7Q 8s4j0KEn+FNxynrpXtQqrneG/7XNOvTuvRO64DP4LdORw87M2vqo1Y+0cE1I+e62 5lswQFBoj0tDvovFtagXgAbifO+GvSjI3dZV3p3Z1HsF+Uz58UZMh8Je10GDr5Wz RpE/+nOG2qS+L+/+jHQDBE8PE5yGzwqicl9B7NYORZX+DrerzY0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:13 2026 by rpki-client