$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144671.roa File: AS144671.roa (raw, json) Hash identifier: q6PlsTsMkD7dQL0Aong8MjQS5YZ7yczrtJm3luJOqN8= Subject key identifier: 33:9F:90:FC:58:FA:8C:B6:8D:D1:05:B0:26:4E:A8:16:8E:31:73:5D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 46715B2EEA66BCBEDD7AC58C4745025A9B1C4338 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144671.roa Signing time: Wed 04 Mar 2026 06:21:03 +0000 ROA not before: Wed 04 Mar 2026 06:16:03 +0000 ROA not after: Wed 03 Mar 2027 06:21:03 +0000 asID: 144671 IP address blocks: 240a:a7e5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:71:5b:2e:ea:66:bc:be:dd:7a:c5:8c:47:45:02:5a:9b:1c:43:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:03 2026 GMT Not After : Mar 3 06:21:03 2027 GMT Subject: CN=339F90FC58FA8CB68DD105B0264EA8168E31735D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d8:5a:4c:b0:02:93:71:58:02:8f:70:a8:31: 3d:4c:05:aa:53:19:01:7d:19:c3:dd:78:83:8a:f6: a1:7f:75:bc:c3:5f:be:e8:22:14:86:74:0d:20:3f: 5a:3e:dd:c2:82:56:46:f0:11:b8:34:b4:a4:13:91: 37:70:97:55:4e:f1:7b:59:71:06:48:bc:c8:74:7f: 6c:c3:3a:1a:34:26:15:bf:bc:bc:fa:23:da:2a:f4: b1:c8:1e:f4:39:58:74:6e:75:2a:b8:8d:09:d4:f7: 6f:ce:56:0e:eb:01:79:4f:d2:3b:d8:a3:25:94:6e: 6c:1a:73:09:16:5f:6e:fb:44:76:e7:fd:b6:80:af: b7:e9:e6:aa:85:02:2b:24:9b:f5:a9:89:b1:27:f7: 8c:a8:c9:65:e5:b9:b8:69:86:32:4c:96:27:c7:42: fb:2b:1b:1a:17:da:05:55:71:e4:46:33:10:1f:14: 55:a6:d2:e5:43:50:60:70:1f:58:00:b3:ca:74:f5: ab:1f:86:11:25:d8:e3:6a:f2:5b:3f:14:b3:f4:14: ec:ec:08:f2:b2:aa:34:0c:84:d6:5a:ce:b4:fa:f6: 13:b9:f6:dd:86:19:70:d4:1f:63:af:f5:b3:06:af: be:d4:fc:48:c5:5e:9f:50:e3:f0:3e:a7:a6:3f:8f: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9F:90:FC:58:FA:8C:B6:8D:D1:05:B0:26:4E:A8:16:8E:31:73:5D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144671.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7e5::/32 Signature Algorithm: sha256WithRSAEncryption 0f:e9:62:29:32:70:4e:f2:9c:c9:19:8e:2f:8a:48:18:e1:64: 51:ef:32:34:4c:69:e8:b2:51:96:5c:62:f6:87:12:ca:76:92: f9:4e:dc:c7:63:33:a9:23:7e:fe:00:14:b8:6c:03:5d:12:10: 9c:bc:73:e7:62:b0:bd:77:3d:14:b4:9b:2d:56:02:2a:42:77: 07:1e:17:3d:53:91:ca:8d:2b:0c:68:fb:16:9f:be:c1:5b:e4: 7d:fd:e9:74:a3:29:16:04:a1:be:26:a0:f7:dd:29:ab:c7:58: 08:6d:ef:0f:90:d6:be:ed:3e:25:4c:a3:8f:ef:dc:de:88:e1: 98:a4:f7:84:38:a3:55:22:db:78:d5:bf:ec:0e:75:c0:a7:c2: 15:ef:4a:14:58:8a:08:9a:09:d9:dc:8a:ee:d2:fb:14:14:86: 23:94:b7:8d:57:da:d6:a1:00:63:9c:46:9d:88:aa:ee:8f:e1: 11:d7:1a:02:f2:32:8a:b2:56:df:c3:71:5d:3a:ac:7e:eb:92: c5:df:86:73:ac:45:be:68:2e:6a:f2:bd:5c:af:a9:59:a3:28: fd:6d:54:25:28:63:03:b7:9f:f8:1d:0e:f2:6a:ff:bf:35:db: f8:eb:df:7b:52:17:78:61:34:4f:23:71:b6:e5:aa:21:50:f7: df:c9:3d:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURnFbLupmvL7desWMR0UCWpscQzgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwM1oX DTI3MDMwMzA2MjEwM1owMzExMC8GA1UEAxMoMzM5RjkwRkM1OEZBOENCNjhERDEw NUIwMjY0RUE4MTY4RTMxNzM1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODYWkywApNxWAKPcKgxPUwFqlMZAX0Zw914g4r2oX91vMNfvugiFIZ0DSA/ Wj7dwoJWRvARuDS0pBORN3CXVU7xe1lxBki8yHR/bMM6GjQmFb+8vPoj2ir0scge 9DlYdG51KriNCdT3b85WDusBeU/SO9ijJZRubBpzCRZfbvtEduf9toCvt+nmqoUC KySb9amJsSf3jKjJZeW5uGmGMkyWJ8dC+ysbGhfaBVVx5EYzEB8UVabS5UNQYHAf WACzynT1qx+GESXY42ryWz8Us/QU7OwI8rKqNAyE1lrOtPr2E7n23YYZcNQfY6/1 swavvtT8SMVen1Dj8D6npj+PDPcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQzn5D8 WPqMto3RBbAmTqgWjjFzXTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p+UwDQYJKoZIhvcNAQELBQADggEBAA/pYikycE7ynMkZji+KSBjhZFHvMjRMaeiy UZZcYvaHEsp2kvlO3MdjM6kjfv4AFLhsA10SEJy8c+disL13PRS0my1WAipCdwce Fz1TkcqNKwxo+xafvsFb5H396XSjKRYEob4moPfdKavHWAht7w+Q1r7tPiVMo4/v 3N6I4Zik94Q4o1Ui23jVv+wOdcCnwhXvShRYigiaCdnciu7S+xQUhiOUt41X2tah AGOcRp2Iqu6P4RHXGgLyMoqyVt/DcV06rH7rksXfhnOsRb5oLmryvVyvqVmjKP1t VCUoYwO3n/gdDvJq/7812/jr33tSF3hhNE8jcbblqiFQ99/JPVs= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:41 2026 by rpki-client