$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144741.roa File: AS144741.roa (raw, json) Hash identifier: 4X10v6bK14kLLATsHSX3rTCeKf48oVyuTIA6z4VeGXU= Subject key identifier: 35:4F:A4:20:F6:95:E5:3D:04:97:9D:5B:5A:38:9E:49:F0:F2:4A:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 244AB87F47D4A9933DEE785AFE62B020ED1A3154 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144741.roa Signing time: Wed 04 Mar 2026 06:21:43 +0000 ROA not before: Wed 04 Mar 2026 06:16:43 +0000 ROA not after: Wed 03 Mar 2027 06:21:43 +0000 asID: 144741 IP address blocks: 240a:a82b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4a:b8:7f:47:d4:a9:93:3d:ee:78:5a:fe:62:b0:20:ed:1a:31:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:43 2026 GMT Not After : Mar 3 06:21:43 2027 GMT Subject: CN=354FA420F695E53D04979D5B5A389E49F0F24A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:24:91:a0:67:aa:de:26:ed:c9:a6:1b:78: cc:19:44:7c:3b:b0:84:4c:b1:ee:25:de:f1:25:6b: de:ad:34:4e:ed:a0:fa:2b:4b:cb:2f:d3:ef:5c:eb: 70:e0:17:0e:13:3d:f0:b8:31:be:37:57:cd:a4:d3: 0b:c1:bf:a3:e8:b5:53:b9:b7:07:4c:29:6d:0b:71: b3:2d:dc:fd:60:a3:4e:63:4c:69:ba:c7:5f:89:06: 19:24:6f:50:dc:df:36:bd:c6:72:27:99:32:cf:91: b4:20:1b:96:e2:52:71:8b:fc:31:02:42:54:29:1c: 00:34:59:e9:e1:ec:f7:f9:9f:5a:4f:8e:62:c1:0f: 06:b5:ed:69:6d:bf:8a:6a:07:b0:7d:28:13:d2:15: 60:a9:9f:62:f9:d4:bb:20:d3:da:33:d4:27:64:42: 7f:0e:bd:3d:26:86:d1:b6:29:52:dd:da:fc:12:e6: 18:14:29:90:8c:5a:ed:a4:27:96:18:83:bb:ba:bf: 11:1f:48:cc:d5:53:7e:f2:11:49:d7:83:85:3f:84: 72:de:62:5e:60:55:1e:1f:8a:28:e3:e9:87:9c:f8: 1d:45:04:1b:a9:74:44:37:f9:1a:be:97:a2:af:67: 7e:38:a9:e4:47:f5:5a:0f:c2:0f:c7:1d:7e:04:1a: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4F:A4:20:F6:95:E5:3D:04:97:9D:5B:5A:38:9E:49:F0:F2:4A:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144741.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a82b::/32 Signature Algorithm: sha256WithRSAEncryption 56:b9:62:7a:47:c7:6f:14:f7:3e:db:52:41:d5:20:3c:a2:d4: 00:58:7c:93:69:06:92:4b:93:be:0c:13:b9:f9:b3:2e:99:aa: 58:b0:ee:01:86:a0:13:6c:ac:aa:3f:9b:e0:60:3e:d8:79:96: 50:d1:19:b2:ef:92:c3:2d:d7:c6:ba:16:d4:30:11:d0:bb:7c: 54:0e:78:b6:78:9c:5d:c1:39:8b:29:0d:99:85:f0:21:97:83: ad:db:8f:95:2b:1b:3a:bf:b6:5c:82:f4:f7:bc:a6:cc:2f:2a: 32:90:f8:49:bb:09:80:dd:0e:73:d0:3c:95:8d:24:99:ce:48: 8d:c1:1a:e3:8e:48:b7:ae:fb:06:eb:92:40:f0:66:b5:1d:ea: 36:16:2a:b7:40:6c:20:9a:3d:73:fa:e1:67:a4:53:ea:9a:19: 0d:ab:af:84:7d:b8:71:57:11:28:58:4e:fe:7d:8d:52:cd:8b: a4:cc:e9:d9:e1:18:9a:47:c7:a9:9b:a0:8f:cb:a8:97:3a:b9: 49:13:77:33:5d:70:a6:ba:a0:ee:a8:ac:ac:14:3d:9a:2f:ff: e0:9b:01:ec:44:7b:16:1c:cd:63:f2:0d:9e:e7:23:56:59:55: a6:86:14:14:39:a4:70:61:2c:ef:e6:b6:73:2d:98:3a:5e:3f: 3d:c7:5e:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJEq4f0fUqZM97nha/mKwIO0aMVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0M1oX DTI3MDMwMzA2MjE0M1owMzExMC8GA1UEAxMoMzU0RkE0MjBGNjk1RTUzRDA0OTc5 RDVCNUEzODlFNDlGMEYyNEE0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPJJJGgZ6reJu3Jpht4zBlEfDuwhEyx7iXe8SVr3q00Tu2g+itLyy/T71zr cOAXDhM98LgxvjdXzaTTC8G/o+i1U7m3B0wpbQtxsy3c/WCjTmNMabrHX4kGGSRv UNzfNr3GcieZMs+RtCAbluJScYv8MQJCVCkcADRZ6eHs9/mfWk+OYsEPBrXtaW2/ imoHsH0oE9IVYKmfYvnUuyDT2jPUJ2RCfw69PSaG0bYpUt3a/BLmGBQpkIxa7aQn lhiDu7q/ER9IzNVTfvIRSdeDhT+Ect5iXmBVHh+KKOPph5z4HUUEG6l0RDf5Gr6X oq9nfjip5Ef1Wg/CD8cdfgQaRWUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ1T6Qg 9pXlPQSXnVtaOJ5J8PJKSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qCswDQYJKoZIhvcNAQELBQADggEBAFa5YnpHx28U9z7bUkHVIDyi1ABYfJNpBpJL k74ME7n5sy6Zqliw7gGGoBNsrKo/m+BgPth5llDRGbLvksMt18a6FtQwEdC7fFQO eLZ4nF3BOYspDZmF8CGXg63bj5UrGzq/tlyC9Pe8pswvKjKQ+Em7CYDdDnPQPJWN JJnOSI3BGuOOSLeu+wbrkkDwZrUd6jYWKrdAbCCaPXP64WekU+qaGQ2rr4R9uHFX EShYTv59jVLNi6TM6dnhGJpHx6mboI/LqJc6uUkTdzNdcKa6oO6orKwUPZov/+Cb AexEexYczWPyDZ7nI1ZZVaaGFBQ5pHBhLO/mtnMtmDpePz3HXpQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:00 2026 by rpki-client