$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144690.roa File: AS144690.roa (raw, json) Hash identifier: x4bfwCH1qPNuRNulSRARVepvSkZR59ZxbtLjUpPYIpo= Subject key identifier: 99:29:3B:14:DA:3A:03:CE:61:0A:14:72:CD:00:F4:48:F7:65:1A:5C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5291E92DDEF4C6DF0D3E00347F5FAF4CDFDB452E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144690.roa Signing time: Wed 04 Mar 2026 06:21:15 +0000 ROA not before: Wed 04 Mar 2026 06:16:15 +0000 ROA not after: Wed 03 Mar 2027 06:21:15 +0000 asID: 144690 IP address blocks: 240a:a7f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:91:e9:2d:de:f4:c6:df:0d:3e:00:34:7f:5f:af:4c:df:db:45:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:15 2026 GMT Not After : Mar 3 06:21:15 2027 GMT Subject: CN=99293B14DA3A03CE610A1472CD00F448F7651A5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:de:fc:67:a8:67:83:a4:20:99:c2:e2:8c: 80:16:ac:20:08:a4:cd:c1:ce:f0:5f:f1:37:96:59: 24:c4:20:fb:fc:75:6c:26:4b:f6:2f:30:b9:24:d7: 0c:a9:95:72:2e:23:c9:a0:78:7b:d0:73:58:12:08: 94:f0:18:63:af:a1:52:85:fc:54:92:2d:fd:0c:f1: cb:04:47:60:bd:65:27:35:e6:1a:98:cf:31:1c:a2: a1:17:2b:03:b5:6c:eb:d4:b5:2e:7f:5b:d3:ef:a9: 19:96:81:6f:1b:de:2b:8b:59:b3:57:8e:78:71:73: a7:eb:77:a1:8f:03:97:df:69:bf:89:2f:2e:36:84: 8f:d8:f3:54:60:53:81:31:ca:d5:90:1e:96:67:c5: 26:54:cd:3c:a5:ff:58:b4:66:ab:a8:d7:c9:17:ff: 61:f0:cc:15:f4:5c:7a:39:87:0a:ec:46:ec:90:dc: 71:9b:62:be:2f:e4:b2:03:6d:54:e3:53:7b:aa:bd: c6:72:5f:ba:8e:37:b8:3c:fc:8e:bc:78:ef:93:f6: b7:74:7d:cf:32:fd:f0:77:6a:14:d9:d2:8e:96:44: 84:3b:fc:9d:9c:f9:4e:3f:21:84:a7:b7:27:62:d8: e3:09:42:00:8f:03:2a:ff:10:46:4b:13:12:f7:32: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:29:3B:14:DA:3A:03:CE:61:0A:14:72:CD:00:F4:48:F7:65:1A:5C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7f8::/32 Signature Algorithm: sha256WithRSAEncryption 8a:32:4c:d8:71:3c:39:a6:3a:6e:53:53:6d:2b:ac:9b:9d:9d: 49:24:17:27:de:dc:56:b7:63:fe:10:67:8a:6b:08:d1:68:75: 8c:93:ef:08:b4:b0:33:bd:f4:73:25:a2:42:b4:a7:57:4d:5a: 8b:80:69:af:24:dd:fc:cf:8f:01:56:7f:43:f5:e6:3e:62:f3: 34:92:4e:af:54:ce:18:14:4b:44:67:79:85:ad:cc:21:a2:c1: 5a:16:49:2b:e5:a4:64:4c:a6:64:ea:89:42:73:fc:54:25:a4: 94:ba:19:85:62:28:a4:26:81:7e:12:28:34:b2:13:79:7d:c0: 6f:ca:9e:ad:b0:a4:36:92:d9:36:6d:a0:75:43:55:ae:85:1b: b1:53:be:cc:b3:ac:0a:49:f4:3c:37:e5:ab:a5:25:58:4f:81: c0:64:30:08:63:98:f7:6f:d4:19:b2:38:1a:2e:68:33:61:f5: dc:5a:5e:47:94:a9:70:7b:71:9a:0a:44:32:43:0f:b7:79:8f: 46:50:55:56:7c:a1:38:7b:91:06:ed:c0:8f:2d:08:3b:49:13: 79:a5:e8:cf:4b:e7:1d:6c:98:74:0a:b1:6d:0e:e4:17:88:4b: 64:ed:07:27:42:bb:2d:bc:7b:96:f9:38:a5:11:ef:a0:cd:88: 33:cb:a0:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUpHpLd70xt8NPgA0f1+vTN/bRS4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxNVoX DTI3MDMwMzA2MjExNVowMzExMC8GA1UEAxMoOTkyOTNCMTREQTNBMDNDRTYxMEEx NDcyQ0QwMEY0NDhGNzY1MUE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANuH3vxnqGeDpCCZwuKMgBasIAikzcHO8F/xN5ZZJMQg+/x1bCZL9i8wuSTX DKmVci4jyaB4e9BzWBIIlPAYY6+hUoX8VJIt/QzxywRHYL1lJzXmGpjPMRyioRcr A7Vs69S1Ln9b0++pGZaBbxveK4tZs1eOeHFzp+t3oY8Dl99pv4kvLjaEj9jzVGBT gTHK1ZAelmfFJlTNPKX/WLRmq6jXyRf/YfDMFfRcejmHCuxG7JDccZtivi/ksgNt VONTe6q9xnJfuo43uDz8jrx475P2t3R9zzL98HdqFNnSjpZEhDv8nZz5Tj8hhKe3 J2LY4wlCAI8DKv8QRksTEvcyFokCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSZKTsU 2joDzmEKFHLNAPRI92UaXDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p/gwDQYJKoZIhvcNAQELBQADggEBAIoyTNhxPDmmOm5TU20rrJudnUkkFyfe3Fa3 Y/4QZ4prCNFodYyT7wi0sDO99HMlokK0p1dNWouAaa8k3fzPjwFWf0P15j5i8zSS Tq9UzhgUS0RneYWtzCGiwVoWSSvlpGRMpmTqiUJz/FQlpJS6GYViKKQmgX4SKDSy E3l9wG/Knq2wpDaS2TZtoHVDVa6FG7FTvsyzrApJ9Dw35aulJVhPgcBkMAhjmPdv 1BmyOBouaDNh9dxaXkeUqXB7cZoKRDJDD7d5j0ZQVVZ8oTh7kQbtwI8tCDtJE3ml 6M9L5x1smHQKsW0O5BeIS2TtBydCuy28e5b5OKUR76DNiDPLoHg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:14 2026 by rpki-client