$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144712.roa File: AS144712.roa (raw, json) Hash identifier: A4UFpsmSe3pTRrT1ysL1Z/h2j01dHo43Uc0CEfbH2l4= Subject key identifier: 29:26:ED:FE:E7:27:59:A2:23:AB:36:46:91:4C:8B:D4:94:3C:79:97 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 19A918EDE3363CABC7E839877F028FFAE9E09C0B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144712.roa Signing time: Wed 04 Mar 2026 06:20:48 +0000 ROA not before: Wed 04 Mar 2026 06:15:48 +0000 ROA not after: Wed 03 Mar 2027 06:20:48 +0000 asID: 144712 IP address blocks: 240a:a80e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a9:18:ed:e3:36:3c:ab:c7:e8:39:87:7f:02:8f:fa:e9:e0:9c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:48 2026 GMT Not After : Mar 3 06:20:48 2027 GMT Subject: CN=2926EDFEE72759A223AB3646914C8BD4943C7997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:ca:91:e8:eb:83:34:4e:10:e8:f9:45:0c: f4:37:8a:d8:90:ed:2d:11:d0:7c:6b:1f:df:b1:21: f0:07:aa:26:75:1a:a7:b3:cc:9a:b8:8f:5f:ef:d4: 30:4f:9e:52:eb:51:e5:cb:4c:cf:7a:f3:bb:46:3a: 37:bc:6f:8b:88:b1:f2:3b:0e:e1:23:6b:e8:2a:d9: b8:71:dc:5a:66:05:20:29:50:7b:3c:d5:cb:4e:63: a6:87:d4:3b:e9:d2:60:a0:87:91:76:93:ce:4a:fc: da:d6:fc:75:98:48:9f:00:4a:c2:2b:10:29:aa:c1: ca:4f:b5:88:e4:90:dc:66:3b:3b:5c:47:07:d7:d4: 46:62:ed:70:77:89:f7:88:f7:c5:f6:9c:b9:c8:87: cf:6c:a9:85:c9:3f:63:8c:9f:3b:30:10:14:2d:d5: f6:fe:ea:30:0a:2a:8c:fc:7b:22:30:fb:30:f8:b0: 9f:5e:97:c1:84:dd:5d:40:34:4e:3e:3e:78:86:42: 62:85:47:e0:ca:de:70:47:e6:a2:b0:8f:dc:f8:49: 9c:2f:f9:b5:2c:b9:c3:3d:2f:d1:3d:d3:e5:59:5f: 8e:e4:da:d4:f4:74:ad:aa:a6:82:75:c4:bb:6e:e1: 0c:b5:b9:70:fd:bb:23:ba:95:91:26:60:92:4a:ba: a2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:26:ED:FE:E7:27:59:A2:23:AB:36:46:91:4C:8B:D4:94:3C:79:97 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144712.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a80e::/32 Signature Algorithm: sha256WithRSAEncryption a5:c3:03:7b:d4:43:a9:86:b4:93:6c:45:be:60:0f:62:42:e3: 12:04:20:e0:b5:30:60:ac:2c:43:b0:e6:47:d3:c7:24:f2:23: 55:87:7d:5b:0b:25:71:87:e6:57:f2:4f:89:1a:6d:68:db:ad: 46:4a:b0:f8:4d:63:d9:1d:d4:e9:fc:05:e3:7b:a9:06:3b:07: d3:23:26:6a:3b:db:d9:9b:9f:84:c3:dd:51:b5:c2:ce:fa:b1: 38:16:33:1f:3d:68:00:e8:73:31:bb:fa:15:0d:93:f9:40:8b: d3:d2:37:b5:d4:e9:bf:c2:00:0a:ae:e1:89:6f:c4:54:b6:20: 0d:7d:6c:f3:ce:a0:a0:f8:a6:08:3c:f1:f1:97:50:cf:4f:f3: d9:34:9a:dc:c7:e2:da:56:fb:f9:a0:65:2b:32:19:51:d9:ab: 2e:f1:a4:53:4a:95:03:72:66:dc:69:1d:b8:e7:3f:d3:cc:f3: 48:12:7c:f8:ad:1c:13:db:10:5d:40:88:f0:50:65:03:30:2d: b3:9a:60:80:5e:7b:cd:f6:64:de:04:3d:30:05:81:3e:22:88: 6c:d2:06:d2:a0:e1:0f:ef:e3:d2:0d:4c:2b:2a:75:99:82:19: 41:49:35:3d:e2:75:db:03:d8:28:c5:b4:16:31:48:fd:9f:2a: 2d:48:c9:17 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGakY7eM2PKvH6DmHfwKP+ungnAswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0OFoX DTI3MDMwMzA2MjA0OFowMzExMC8GA1UEAxMoMjkyNkVERkVFNzI3NTlBMjIzQUIz NjQ2OTE0QzhCRDQ5NDNDNzk5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ93ypHo64M0ThDo+UUM9DeK2JDtLRHQfGsf37Eh8AeqJnUap7PMmriPX+/U ME+eUutR5ctMz3rzu0Y6N7xvi4ix8jsO4SNr6CrZuHHcWmYFIClQezzVy05jpofU O+nSYKCHkXaTzkr82tb8dZhInwBKwisQKarByk+1iOSQ3GY7O1xHB9fURmLtcHeJ 94j3xfacuciHz2yphck/Y4yfOzAQFC3V9v7qMAoqjPx7IjD7MPiwn16XwYTdXUA0 Tj4+eIZCYoVH4MrecEfmorCP3PhJnC/5tSy5wz0v0T3T5VlfjuTa1PR0raqmgnXE u27hDLW5cP27I7qVkSZgkkq6ohECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQpJu3+ 5ydZoiOrNkaRTIvUlDx5lzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qA4wDQYJKoZIhvcNAQELBQADggEBAKXDA3vUQ6mGtJNsRb5gD2JC4xIEIOC1MGCs LEOw5kfTxyTyI1WHfVsLJXGH5lfyT4kabWjbrUZKsPhNY9kd1On8BeN7qQY7B9Mj Jmo729mbn4TD3VG1ws76sTgWMx89aADoczG7+hUNk/lAi9PSN7XU6b/CAAqu4Ylv xFS2IA19bPPOoKD4pgg88fGXUM9P89k0mtzH4tpW+/mgZSsyGVHZqy7xpFNKlQNy ZtxpHbjnP9PM80gSfPitHBPbEF1AiPBQZQMwLbOaYIBee832ZN4EPTAFgT4iiGzS BtKg4Q/v49INTCsqdZmCGUFJNT3iddsD2CjFtBYxSP2fKi1IyRc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:01 2026 by rpki-client