$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144729.roa File: AS144729.roa (raw, json) Hash identifier: PLi9jrl397EuZCB7dtsIJ5nOMnlTtOP1kAOznE0OIXE= Subject key identifier: A6:61:61:C4:15:7C:EC:94:D2:AB:58:A2:48:D3:B6:20:0D:DA:83:94 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3792E4E60AC71902ABA181363FA9B589E539D14C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144729.roa Signing time: Wed 04 Mar 2026 06:21:21 +0000 ROA not before: Wed 04 Mar 2026 06:16:21 +0000 ROA not after: Wed 03 Mar 2027 06:21:21 +0000 asID: 144729 IP address blocks: 240a:a81f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:92:e4:e6:0a:c7:19:02:ab:a1:81:36:3f:a9:b5:89:e5:39:d1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:21 2026 GMT Not After : Mar 3 06:21:21 2027 GMT Subject: CN=A66161C4157CEC94D2AB58A248D3B6200DDA8394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:b0:57:98:5d:73:d3:00:e6:89:18:64:f1: df:e8:4e:3d:4e:37:da:a3:c9:81:bf:c9:e8:63:ef: 9b:21:67:f3:79:d3:80:b8:32:db:fb:1f:14:9c:7c: 9d:13:85:d7:db:e4:d7:66:06:c1:ca:ad:02:31:d3: 99:af:a6:46:29:0b:53:0b:1b:e7:ea:fc:4e:53:0e: 52:91:dc:21:5a:ad:8a:85:13:4a:bc:a2:9b:25:82: 98:40:0f:0e:54:91:4e:c6:51:ac:16:00:4d:00:f4: 36:6e:a3:11:5b:8d:52:94:82:d5:a0:05:e7:e8:ad: d7:5c:f6:c0:f6:67:d4:95:b3:e6:00:3a:93:8b:8b: 13:ad:e6:f5:95:f7:5c:d5:45:77:b6:0c:1d:63:20: 80:2e:15:5e:26:6c:b5:2b:44:3e:b2:1b:6f:77:78: 8c:10:10:2a:cd:2e:cf:44:ea:72:91:39:b1:d4:a1: 40:c5:d8:38:fe:ef:95:6a:7e:35:31:8d:d8:6a:fc: 9e:97:0e:88:22:99:cb:25:c9:40:ee:64:d4:59:8b: af:34:21:1f:dd:3a:c5:aa:c9:00:03:88:e3:43:eb: af:29:d2:dc:02:0f:ea:57:69:ab:ad:4d:bf:18:b9: 89:89:ac:83:b1:0c:f2:b3:5f:2a:5a:73:d4:d6:a7: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:61:61:C4:15:7C:EC:94:D2:AB:58:A2:48:D3:B6:20:0D:DA:83:94 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144729.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a81f::/32 Signature Algorithm: sha256WithRSAEncryption 5b:2f:bd:f3:fe:0c:f4:4a:f4:e6:b2:fc:f2:f1:54:b5:f1:51: 9d:6d:71:ed:ae:7c:54:39:69:78:12:f1:fc:c7:60:ac:53:35: e4:a7:03:70:9c:18:f7:37:83:31:ef:fc:20:23:0a:9e:a7:a1: 9d:ce:a0:70:c7:42:56:7a:ae:8e:93:ff:fd:e5:67:b8:30:6a: 85:1a:7a:6e:9a:0a:75:a3:e2:96:84:a4:f8:09:4e:9c:9a:d7: eb:5a:1d:ee:41:c7:9a:a7:c4:67:59:d4:0c:36:22:b3:7b:aa: 48:c1:4f:ed:db:f4:4c:d8:6b:04:ba:cf:eb:2c:06:d7:fd:79: 7c:4e:41:1b:68:84:80:82:5a:6a:85:10:ca:50:0b:13:99:5e: 35:fc:a7:66:fe:74:1f:f2:b2:7c:40:0b:a8:db:bd:79:c1:fa: d2:bd:9d:5d:14:24:67:ed:c5:99:9a:d4:cb:8a:40:0e:a6:36: 05:23:86:08:39:80:99:ae:f7:d7:fc:bc:a0:3b:b6:eb:8b:13: 34:48:7e:b5:e3:63:57:2e:fb:d7:90:7a:f6:49:ed:87:f5:e4: 5c:04:b2:c5:0f:56:54:77:b9:99:b8:c7:de:88:a4:d6:a9:06: 6d:57:4d:a6:9e:bf:1b:87:38:5a:79:87:8d:cd:33:88:c5:2b: 4e:3d:14:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN5Lk5grHGQKroYE2P6m1ieU50UwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyMVoX DTI3MDMwMzA2MjEyMVowMzExMC8GA1UEAxMoQTY2MTYxQzQxNTdDRUM5NEQyQUI1 OEEyNDhEM0I2MjAwRERBODM5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKONsFeYXXPTAOaJGGTx3+hOPU432qPJgb/J6GPvmyFn83nTgLgy2/sfFJx8 nROF19vk12YGwcqtAjHTma+mRikLUwsb5+r8TlMOUpHcIVqtioUTSryimyWCmEAP DlSRTsZRrBYATQD0Nm6jEVuNUpSC1aAF5+it11z2wPZn1JWz5gA6k4uLE63m9ZX3 XNVFd7YMHWMggC4VXiZstStEPrIbb3d4jBAQKs0uz0TqcpE5sdShQMXYOP7vlWp+ NTGN2Gr8npcOiCKZyyXJQO5k1FmLrzQhH906xarJAAOI40PrrynS3AIP6ldpq61N vxi5iYmsg7EM8rNfKlpz1Nanhl8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSmYWHE FXzslNKrWKJI07YgDdqDlDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qB8wDQYJKoZIhvcNAQELBQADggEBAFsvvfP+DPRK9Oay/PLxVLXxUZ1tce2ufFQ5 aXgS8fzHYKxTNeSnA3CcGPc3gzHv/CAjCp6noZ3OoHDHQlZ6ro6T//3lZ7gwaoUa em6aCnWj4paEpPgJTpya1+taHe5Bx5qnxGdZ1Aw2IrN7qkjBT+3b9EzYawS6z+ss Btf9eXxOQRtohICCWmqFEMpQCxOZXjX8p2b+dB/ysnxAC6jbvXnB+tK9nV0UJGft xZma1MuKQA6mNgUjhgg5gJmu99f8vKA7tuuLEzRIfrXjY1cu+9eQevZJ7Yf15FwE ssUPVlR3uZm4x96IpNapBm1XTaaevxuHOFp5h43NM4jFK049FIc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:27 2026 by rpki-client