$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144727.roa File: AS144727.roa (raw, json) Hash identifier: js8Uyn8WeRcHsjaA/B11lKjJRjJn6Nl+xoF/5rAwSrE= Subject key identifier: 9E:EA:5E:71:FF:E2:6B:F5:08:05:2F:3B:C3:31:D0:62:58:EE:B4:47 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7FE90A08F27BA6592C700806733E88F04BF45449 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144727.roa Signing time: Wed 04 Mar 2026 06:21:24 +0000 ROA not before: Wed 04 Mar 2026 06:16:24 +0000 ROA not after: Wed 03 Mar 2027 06:21:24 +0000 asID: 144727 IP address blocks: 240a:a81d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e9:0a:08:f2:7b:a6:59:2c:70:08:06:73:3e:88:f0:4b:f4:54:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:24 2026 GMT Not After : Mar 3 06:21:24 2027 GMT Subject: CN=9EEA5E71FFE26BF508052F3BC331D06258EEB447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:39:2b:01:53:2c:97:29:4c:dc:8c:c8:d7: ff:d9:f7:18:78:77:6d:81:17:65:dd:42:0e:df:11: 8e:3e:53:30:26:19:22:7a:a3:19:be:3d:98:3d:87: 6d:7c:24:0d:94:5b:83:1f:68:72:9c:96:51:d6:eb: 5c:8e:8c:27:46:f2:e6:a5:32:54:69:86:60:05:f9: ca:b7:84:b8:3d:41:30:6a:4a:cd:c7:12:44:b7:41: 00:d7:ba:48:6a:34:21:c7:39:2e:e9:13:1a:4b:bf: 30:84:85:85:b7:3d:21:05:2a:37:dd:a7:b8:30:8c: 74:33:78:b2:93:d7:f1:5b:26:01:cc:43:e4:ed:f6: a9:a1:0d:9e:bc:00:50:a3:ff:16:55:c3:49:fd:74: 95:38:88:5a:2c:1e:fd:01:49:b3:1d:3a:06:d4:50: b1:3e:8a:a5:88:09:d0:34:13:83:e8:75:6d:63:f9: 26:78:1d:55:86:6c:10:8c:86:c9:86:8e:8a:ce:fe: 75:a5:40:12:45:e2:e3:ca:38:44:b4:65:25:69:77: d7:fe:89:25:83:89:2c:8a:a2:9f:c3:3f:ef:50:15: 83:f3:2e:31:1b:ad:35:ad:31:8a:f0:17:0f:28:8c: 19:b7:4d:ca:5f:1c:96:4a:6b:ea:07:0b:72:2e:ca: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EA:5E:71:FF:E2:6B:F5:08:05:2F:3B:C3:31:D0:62:58:EE:B4:47 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144727.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a81d::/32 Signature Algorithm: sha256WithRSAEncryption 8c:d6:8e:2b:18:1c:99:7e:0d:dd:aa:3a:3f:f2:31:7c:58:e7: 80:91:62:58:98:8f:43:7c:cf:7c:57:97:8d:bc:d1:45:76:0d: 23:e3:84:89:8f:af:60:3b:14:93:78:fc:0a:99:3d:e5:d3:5c: 58:56:56:b1:96:10:45:35:36:e2:f3:c6:af:c4:10:59:08:d4: bd:91:7c:a4:75:22:72:88:e8:ac:6f:6d:85:18:bf:1c:08:0c: fe:70:10:1d:ed:dc:ae:64:b3:8d:58:d9:78:04:0d:00:86:42: f6:f0:ef:5a:1a:a7:f2:0d:42:7b:ec:b3:6f:86:4b:3a:fa:4c: 52:6e:9e:d6:8c:fd:04:d3:3e:82:27:b0:d7:bc:38:84:b5:72: 2c:a7:76:f9:9c:31:0d:39:e9:09:ac:7b:a0:1c:4c:84:e8:33: cf:5a:3b:0a:de:dc:30:57:0d:da:b6:68:d0:0a:f1:cb:92:20: c7:6c:bf:57:18:b4:98:9f:81:85:4a:00:a4:4b:03:c1:1a:75: 67:90:c9:d4:06:16:ab:ab:8a:82:23:ce:28:9c:01:05:1c:e8: 45:03:fb:f5:99:db:50:5a:38:d2:fd:05:e6:c0:7f:e7:d7:69: aa:7a:78:84:a6:74:07:a0:e3:66:04:9f:9b:ea:7e:a3:dc:d5: ad:e7:40:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf+kKCPJ7plkscAgGcz6I8Ev0VEkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyNFoX DTI3MDMwMzA2MjEyNFowMzExMC8GA1UEAxMoOUVFQTVFNzFGRkUyNkJGNTA4MDUy RjNCQzMzMUQwNjI1OEVFQjQ0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKq8OSsBUyyXKUzcjMjX/9n3GHh3bYEXZd1CDt8Rjj5TMCYZInqjGb49mD2H bXwkDZRbgx9ocpyWUdbrXI6MJ0by5qUyVGmGYAX5yreEuD1BMGpKzccSRLdBANe6 SGo0Icc5LukTGku/MISFhbc9IQUqN92nuDCMdDN4spPX8VsmAcxD5O32qaENnrwA UKP/FlXDSf10lTiIWiwe/QFJsx06BtRQsT6KpYgJ0DQTg+h1bWP5JngdVYZsEIyG yYaOis7+daVAEkXi48o4RLRlJWl31/6JJYOJLIqin8M/71AVg/MuMRutNa0xivAX DyiMGbdNyl8clkpr6gcLci7KSCECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSe6l5x /+Jr9QgFLzvDMdBiWO60RzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcyNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qB0wDQYJKoZIhvcNAQELBQADggEBAIzWjisYHJl+Dd2qOj/yMXxY54CRYliYj0N8 z3xXl4280UV2DSPjhImPr2A7FJN4/AqZPeXTXFhWVrGWEEU1NuLzxq/EEFkI1L2R fKR1InKI6KxvbYUYvxwIDP5wEB3t3K5ks41Y2XgEDQCGQvbw71oap/INQnvss2+G Szr6TFJuntaM/QTTPoInsNe8OIS1ciyndvmcMQ056Qmse6AcTIToM89aOwre3DBX Ddq2aNAK8cuSIMdsv1cYtJifgYVKAKRLA8EadWeQydQGFqurioIjziicAQUc6EUD +/WZ21BaONL9BebAf+fXaap6eISmdAeg42YEn5vqfqPc1a3nQHQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:18 2026 by rpki-client