$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144716.roa File: AS144716.roa (raw, json) Hash identifier: 50rGlc4+oKuC3G7UPDdx0iDQhX0a7IIJ41MmNSxJ6os= Subject key identifier: F0:E0:82:87:37:EA:79:FE:EF:CE:31:17:AD:67:8F:C1:5E:C0:EF:F8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4655281BFE95E041AF77D548AEBDA342C0989021 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144716.roa Signing time: Wed 04 Mar 2026 06:22:24 +0000 ROA not before: Wed 04 Mar 2026 06:17:24 +0000 ROA not after: Wed 03 Mar 2027 06:22:24 +0000 asID: 144716 IP address blocks: 240a:a812::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:55:28:1b:fe:95:e0:41:af:77:d5:48:ae:bd:a3:42:c0:98:90:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:24 2026 GMT Not After : Mar 3 06:22:24 2027 GMT Subject: CN=F0E0828737EA79FEEFCE3117AD678FC15EC0EFF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:11:98:49:2d:68:b9:fe:9c:bf:ec:01:16: 28:4d:81:30:65:39:f0:64:97:25:ad:31:67:02:25: af:8d:f1:11:e0:e7:82:71:32:5c:09:1a:2a:16:c8: 26:90:3a:05:09:cb:c6:45:fe:53:bb:b1:87:83:92: e1:44:b6:30:4b:ff:d6:b9:b1:68:f5:55:af:42:d9: 80:66:f6:48:cb:c8:88:10:12:c3:ef:5c:6a:d7:c6: d8:99:9e:83:38:72:d0:23:21:c4:c3:d2:dd:a7:8c: 01:36:27:b4:50:6a:38:0a:eb:b7:16:25:46:96:98: 43:45:63:36:84:82:a9:e7:08:c9:6c:43:47:4b:93: 62:17:e9:fe:bc:59:24:65:ff:f9:eb:7b:2e:76:b2: 33:42:8f:90:03:9b:03:05:e9:58:14:49:54:8f:fb: 29:28:59:c0:38:67:bc:a2:43:74:4d:3a:77:50:91: 43:6d:33:31:48:76:61:8b:15:cb:e5:b0:b0:2f:22: f6:67:f9:30:90:b1:c2:67:79:eb:5c:62:e2:bd:be: 00:36:5f:59:63:46:d9:28:b5:96:bc:8c:84:3b:09: ae:11:4e:de:a6:09:ae:11:e2:2a:f9:a6:7d:bc:d6: 29:74:92:0a:66:0f:7f:ec:04:9c:e3:5b:5b:10:da: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E0:82:87:37:EA:79:FE:EF:CE:31:17:AD:67:8F:C1:5E:C0:EF:F8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144716.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a812::/32 Signature Algorithm: sha256WithRSAEncryption 33:2c:89:dd:55:41:e3:4f:3c:85:4b:d7:34:53:89:4d:28:16: c3:98:ba:b0:37:66:8a:b0:4c:c7:e7:38:31:86:b0:b7:ee:01: 02:0a:a6:0d:b6:fe:19:c3:23:55:5b:e6:a5:79:23:98:74:39: 85:a9:af:ac:6d:0b:f2:97:b1:18:20:db:4e:48:ad:36:69:a0: 95:72:03:3b:a5:26:17:6d:e3:27:56:35:b8:b1:a0:9f:07:00: 63:24:43:65:9c:c4:0b:e2:56:23:2d:63:7a:e5:cb:df:89:1f: ca:b2:b1:75:71:c3:5b:27:72:bf:05:af:53:7e:48:ce:4f:86: af:9d:71:c0:3e:70:ed:eb:e3:f7:0f:fe:fe:0b:3d:5a:ca:fe: cc:ad:af:0a:af:53:7c:b3:e5:c5:6e:6d:55:f4:aa:e1:c9:b7: 5b:c8:d4:01:a0:ad:07:e5:5a:10:24:40:25:2e:ed:4b:28:6d: 18:66:95:db:dc:50:4d:6e:2b:58:b3:67:b6:82:28:a2:ce:3c: fe:c6:a3:77:6c:79:7e:e1:f0:35:fe:c8:b0:40:89:ce:d6:95: cf:8d:71:ff:8c:c2:d5:56:69:34:27:95:9c:b3:16:f9:ce:0c: 31:33:9f:f2:7f:00:34:26:67:50:03:ef:5a:80:bf:05:9e:f4: 58:0b:83:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURlUoG/6V4EGvd9VIrr2jQsCYkCEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyNFoX DTI3MDMwMzA2MjIyNFowMzExMC8GA1UEAxMoRjBFMDgyODczN0VBNzlGRUVGQ0Uz MTE3QUQ2NzhGQzE1RUMwRUZGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFZEZhJLWi5/py/7AEWKE2BMGU58GSXJa0xZwIlr43xEeDngnEyXAkaKhbI JpA6BQnLxkX+U7uxh4OS4US2MEv/1rmxaPVVr0LZgGb2SMvIiBASw+9catfG2Jme gzhy0CMhxMPS3aeMATYntFBqOArrtxYlRpaYQ0VjNoSCqecIyWxDR0uTYhfp/rxZ JGX/+et7LnayM0KPkAObAwXpWBRJVI/7KShZwDhnvKJDdE06d1CRQ20zMUh2YYsV y+WwsC8i9mf5MJCxwmd561xi4r2+ADZfWWNG2Si1lryMhDsJrhFO3qYJrhHiKvmm fbzWKXSSCmYPf+wEnONbWxDaHUcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTw4IKH N+p5/u/OMRetZ4/BXsDv+DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qBIwDQYJKoZIhvcNAQELBQADggEBADMsid1VQeNPPIVL1zRTiU0oFsOYurA3Zoqw TMfnODGGsLfuAQIKpg22/hnDI1Vb5qV5I5h0OYWpr6xtC/KXsRgg205IrTZpoJVy AzulJhdt4ydWNbixoJ8HAGMkQ2WcxAviViMtY3rly9+JH8qysXVxw1sncr8Fr1N+ SM5Phq+dccA+cO3r4/cP/v4LPVrK/sytrwqvU3yz5cVubVX0quHJt1vI1AGgrQfl WhAkQCUu7UsobRhmldvcUE1uK1izZ7aCKKLOPP7Go3dseX7h8DX+yLBAic7Wlc+N cf+MwtVWaTQnlZyzFvnODDEzn/J/ADQmZ1AD71qAvwWe9FgLg5g= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:03 2026 by rpki-client