$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144761.roa File: AS144761.roa (raw, json) Hash identifier: atyegfX9qr/SgIxIJpN9EWalW7zJGf3I9trWSiZNw6Q= Subject key identifier: B9:7C:0D:FC:60:19:59:46:3D:F8:45:6A:7C:B6:AA:26:E5:9A:50:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0BDCE62E53B54D2D970006149A9E034CBA35B1ED Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144761.roa Signing time: Wed 04 Mar 2026 06:21:37 +0000 ROA not before: Wed 04 Mar 2026 06:16:37 +0000 ROA not after: Wed 03 Mar 2027 06:21:37 +0000 asID: 144761 IP address blocks: 240a:a83f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:dc:e6:2e:53:b5:4d:2d:97:00:06:14:9a:9e:03:4c:ba:35:b1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:37 2026 GMT Not After : Mar 3 06:21:37 2027 GMT Subject: CN=B97C0DFC601959463DF8456A7CB6AA26E59A5027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:af:22:61:8c:73:0e:bc:65:41:67:1a:1a: 00:c0:5b:92:2f:50:84:f9:58:34:3f:67:0d:a3:ec: b1:e8:db:2b:42:53:a3:c0:c0:a4:2c:c2:e3:36:1c: ee:3f:3a:d5:e6:d7:a1:50:1d:88:ce:2d:c0:35:7a: 5e:80:b0:c5:fc:1c:16:43:30:3b:62:82:31:ee:bf: ac:a4:a5:3d:19:4b:ea:6c:2d:af:af:cd:25:4d:f5: ef:19:3d:06:b5:ea:36:6a:4a:1c:54:33:86:d9:9d: d3:e0:a4:f5:f5:53:66:31:cb:48:36:d9:a0:ce:96: 22:c8:ac:0d:a7:8a:eb:ce:f3:49:87:f0:7d:e3:42: c4:a8:d2:30:f9:73:61:43:d3:94:6d:e0:6a:40:c1: 1a:ca:dd:a0:2b:3b:09:0b:15:16:cb:26:a9:0d:5b: cf:4a:8e:d1:35:89:09:2c:c8:69:04:86:fb:39:a3: 45:e0:9e:19:13:29:25:38:60:9d:7c:e2:28:8b:e2: 68:6a:4f:e3:90:6e:f1:58:8b:a0:bb:df:82:d8:e4: 31:f8:f5:31:fe:d0:34:47:08:23:93:a6:89:ff:a2: 3b:ef:46:d6:f1:57:26:7b:f4:4f:90:9f:fd:7a:5c: 49:ac:2e:12:e3:82:99:31:e8:27:d3:06:47:42:c5: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7C:0D:FC:60:19:59:46:3D:F8:45:6A:7C:B6:AA:26:E5:9A:50:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144761.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a83f::/32 Signature Algorithm: sha256WithRSAEncryption d2:9b:13:a8:c7:b3:65:ba:92:9e:82:d8:17:92:82:02:b9:13: 6a:fb:0f:b1:41:74:35:09:cc:dd:8f:04:8d:f9:74:00:9f:9a: 7c:38:76:9c:e1:6b:db:5c:6a:76:71:e2:04:15:1c:2d:f7:82: 0e:75:e2:3b:3a:ad:c0:d4:64:62:e4:52:35:52:67:05:02:fd: b2:a8:00:38:cf:a6:7a:31:d8:32:7d:1d:6b:46:b6:5c:d8:31: f1:af:d1:f7:0e:c8:a6:55:9c:23:a7:a8:91:98:b0:08:e2:0a: 79:a5:b1:da:5a:90:e0:e7:93:70:b5:5a:aa:c9:77:9e:90:c5: 2d:cb:f7:45:5f:c5:bf:68:ea:78:a5:a9:24:e3:ba:9c:1e:54: c7:f8:74:f6:6e:ea:d4:f6:ac:fe:4f:e9:ee:16:e9:9a:c1:13: 67:18:97:03:fb:3c:e9:b4:e5:ff:dd:e0:7d:c4:45:ad:82:a4: ec:9a:27:1c:1e:1c:c4:a2:c2:a4:e2:cd:c8:1d:28:2b:73:5c: 44:9d:32:37:04:08:ae:a2:36:da:bc:46:47:ba:94:d2:e2:03: af:ce:84:d6:17:a8:37:e2:5d:be:54:87:c7:fe:2a:78:ae:0b: 0d:8d:bf:89:2f:30:9e:14:de:78:7d:dc:a6:0d:52:72:9e:f2: 1b:0b:e6:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC9zmLlO1TS2XAAYUmp4DTLo1se0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzN1oX DTI3MDMwMzA2MjEzN1owMzExMC8GA1UEAxMoQjk3QzBERkM2MDE5NTk0NjNERjg0 NTZBN0NCNkFBMjZFNTlBNTAyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgCryJhjHMOvGVBZxoaAMBbki9QhPlYND9nDaPssejbK0JTo8DApCzC4zYc 7j861ebXoVAdiM4twDV6XoCwxfwcFkMwO2KCMe6/rKSlPRlL6mwtr6/NJU317xk9 BrXqNmpKHFQzhtmd0+Ck9fVTZjHLSDbZoM6WIsisDaeK687zSYfwfeNCxKjSMPlz YUPTlG3gakDBGsrdoCs7CQsVFssmqQ1bz0qO0TWJCSzIaQSG+zmjReCeGRMpJThg nXziKIviaGpP45Bu8ViLoLvfgtjkMfj1Mf7QNEcII5Omif+iO+9G1vFXJnv0T5Cf /XpcSawuEuOCmTHoJ9MGR0LFzvcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS5fA38 YBlZRj34RWp8tqom5ZpQJzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qD8wDQYJKoZIhvcNAQELBQADggEBANKbE6jHs2W6kp6C2BeSggK5E2r7D7FBdDUJ zN2PBI35dACfmnw4dpzha9tcanZx4gQVHC33gg514js6rcDUZGLkUjVSZwUC/bKo ADjPpnox2DJ9HWtGtlzYMfGv0fcOyKZVnCOnqJGYsAjiCnmlsdpakODnk3C1WqrJ d56QxS3L90Vfxb9o6nilqSTjupweVMf4dPZu6tT2rP5P6e4W6ZrBE2cYlwP7POm0 5f/d4H3ERa2CpOyaJxweHMSiwqTizcgdKCtzXESdMjcECK6iNtq8Rke6lNLiA6/O hNYXqDfiXb5Uh8f+KniuCw2Nv4kvMJ4U3nh93KYNUnKe8hsL5i4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:58 2026 by rpki-client