$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144734.roa File: AS144734.roa (raw, json) Hash identifier: JhEzzZgRMJWdcKrI1ew21mcdKOi6nivuSHiNqlOxxfc= Subject key identifier: 3D:94:EA:37:11:96:7B:3C:4E:8B:1C:1E:8B:15:B1:EA:F9:32:3D:2A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51D9FE34D2521ECEFE5FD1EF69C1FAA8E575B945 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144734.roa Signing time: Wed 04 Mar 2026 06:20:12 +0000 ROA not before: Wed 04 Mar 2026 06:15:12 +0000 ROA not after: Wed 03 Mar 2027 06:20:12 +0000 asID: 144734 IP address blocks: 240a:a824::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d9:fe:34:d2:52:1e:ce:fe:5f:d1:ef:69:c1:fa:a8:e5:75:b9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:12 2026 GMT Not After : Mar 3 06:20:12 2027 GMT Subject: CN=3D94EA3711967B3C4E8B1C1E8B15B1EAF9323D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:a5:7d:14:08:6e:f1:12:6c:a8:1d:94:53: 7f:db:de:f3:7d:ea:84:12:02:e6:65:fa:32:f1:02: c4:8a:87:a9:28:b8:7f:7f:5a:bf:60:c6:4f:d6:3e: d0:16:29:00:d5:37:4a:57:0a:b8:b7:c1:24:e0:ba: 5c:cb:5b:2b:f2:f2:ed:a8:a3:cf:2e:c3:9a:c9:ed: f7:4b:be:4d:6d:45:25:b2:5c:ec:f6:61:f5:97:1b: 88:c0:b3:92:b8:0b:c1:29:1d:b2:d1:fd:50:24:c5: 4b:85:35:01:22:d7:10:8f:19:6c:8d:89:64:53:0c: ac:f4:a6:56:b8:75:88:f1:45:1e:83:ac:a4:6e:d2: a6:3f:57:69:2a:59:79:90:91:6c:97:a0:39:28:e9: 75:14:9f:01:1a:d0:84:8e:d7:e1:f5:f9:8b:63:45: c3:35:e6:cb:98:8d:53:2a:4a:a5:4d:12:a9:b8:d0: 66:fd:cd:e4:d9:21:bd:dc:5b:5e:b3:95:7d:69:30: 3a:e6:18:42:cc:7b:1d:d7:4d:f1:f0:7e:68:d5:e4: 2d:51:3a:08:9e:5d:b7:e8:b5:56:41:88:64:8f:5e: 5a:d7:4f:e5:bc:eb:4e:72:00:a3:4d:be:ac:9b:6f: dd:a7:98:34:40:ed:45:c2:4a:b5:f7:15:7d:91:7b: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:94:EA:37:11:96:7B:3C:4E:8B:1C:1E:8B:15:B1:EA:F9:32:3D:2A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a824::/32 Signature Algorithm: sha256WithRSAEncryption 26:96:c3:12:c8:0f:86:ad:7d:20:93:59:a1:00:a6:95:ba:83: 18:d5:6a:fc:56:ce:65:a4:e3:88:12:c5:43:c0:61:9b:26:77: e9:6f:cd:a2:ae:0c:d8:67:d1:5a:04:07:d7:e8:2b:2f:25:3b: a9:a1:a7:17:4e:2e:a0:81:a8:19:2d:77:da:a3:3e:6d:b0:2e: 9f:69:07:54:b9:39:85:fa:e0:62:ca:98:49:68:b0:1a:5d:5c: 44:03:a8:1a:11:3d:58:54:81:30:5d:91:e6:41:0d:ef:96:13: 0c:63:40:44:30:2a:97:db:60:9b:c7:f9:0b:13:ba:03:3d:a4: 64:fe:1e:a3:58:29:dd:d9:16:58:28:3e:5d:b5:30:01:b0:aa: aa:9a:e5:f1:b0:7b:6b:0e:9f:1d:1d:24:3b:9c:cb:9b:c4:2b: ff:94:3e:cc:b1:e8:55:62:bf:f8:81:18:f3:8c:a7:25:45:c6: 04:a3:a3:0d:7e:57:be:89:b9:bb:67:46:6e:7f:f8:c6:72:30: 52:1c:80:72:04:21:50:12:86:30:0d:f5:a5:f5:28:2d:16:81: e7:db:c6:b1:42:4c:27:23:06:d7:f7:ae:2b:81:a1:1d:25:06: 0e:27:20:b2:95:c5:3b:d8:74:b5:ce:f7:99:01:33:a9:fb:75: 92:3c:e7:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUdn+NNJSHs7+X9HvacH6qOV1uUUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxMloX DTI3MDMwMzA2MjAxMlowMzExMC8GA1UEAxMoM0Q5NEVBMzcxMTk2N0IzQzRFOEIx QzFFOEIxNUIxRUFGOTMyM0QyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMe9pX0UCG7xEmyoHZRTf9ve833qhBIC5mX6MvECxIqHqSi4f39av2DGT9Y+ 0BYpANU3SlcKuLfBJOC6XMtbK/Ly7aijzy7Dmsnt90u+TW1FJbJc7PZh9ZcbiMCz krgLwSkdstH9UCTFS4U1ASLXEI8ZbI2JZFMMrPSmVrh1iPFFHoOspG7Spj9XaSpZ eZCRbJegOSjpdRSfARrQhI7X4fX5i2NFwzXmy5iNUypKpU0SqbjQZv3N5Nkhvdxb XrOVfWkwOuYYQsx7HddN8fB+aNXkLVE6CJ5dt+i1VkGIZI9eWtdP5bzrTnIAo02+ rJtv3aeYNEDtRcJKtfcVfZF7C6kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ9lOo3 EZZ7PE6LHB6LFbHq+TI9KjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDczNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qCQwDQYJKoZIhvcNAQELBQADggEBACaWwxLID4atfSCTWaEAppW6gxjVavxWzmWk 44gSxUPAYZsmd+lvzaKuDNhn0VoEB9foKy8lO6mhpxdOLqCBqBktd9qjPm2wLp9p B1S5OYX64GLKmElosBpdXEQDqBoRPVhUgTBdkeZBDe+WEwxjQEQwKpfbYJvH+QsT ugM9pGT+HqNYKd3ZFlgoPl21MAGwqqqa5fGwe2sOnx0dJDucy5vEK/+UPsyx6FVi v/iBGPOMpyVFxgSjow1+V76JubtnRm5/+MZyMFIcgHIEIVAShjAN9aX1KC0Wgefb xrFCTCcjBtf3riuBoR0lBg4nILKVxTvYdLXO95kBM6n7dZI856Y= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:53 2026 by rpki-client