$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144771.roa File: AS144771.roa (raw, json) Hash identifier: D2VnQsSzN3zPRm2FgrOWsP3IlIrdhDXedJ1QHqpU3A8= Subject key identifier: C9:7C:15:31:26:E7:7F:F1:57:30:5C:C2:04:5D:C5:9E:3D:93:80:E5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 074F479B19A8E10427B622AEE86056F20597EBA4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144771.roa Signing time: Wed 04 Mar 2026 06:21:26 +0000 ROA not before: Wed 04 Mar 2026 06:16:26 +0000 ROA not after: Wed 03 Mar 2027 06:21:26 +0000 asID: 144771 IP address blocks: 240a:a849::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4f:47:9b:19:a8:e1:04:27:b6:22:ae:e8:60:56:f2:05:97:eb:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:26 2026 GMT Not After : Mar 3 06:21:26 2027 GMT Subject: CN=C97C153126E77FF157305CC2045DC59E3D9380E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4c:22:2c:81:dd:e3:67:b5:cb:6c:af:49:9b: 22:82:ae:a2:53:69:82:1f:fa:2a:f4:2a:87:e8:98: 39:a2:0b:a9:5c:81:84:d6:75:f7:bc:92:62:d2:49: c0:d9:c5:d2:28:95:6c:29:72:49:18:35:30:0d:74: 39:12:32:ec:f4:0d:93:87:fe:5b:c6:09:61:b7:2f: 87:f3:21:d5:6c:c1:0a:57:5c:dc:df:0e:cb:3d:bd: 4d:18:e3:6c:b0:0a:c7:99:84:41:1e:f3:c0:34:63: 92:db:dc:4c:fa:6f:d2:33:f8:09:b3:6d:52:73:e3: a1:6c:52:37:c3:11:89:3a:8d:cc:16:e7:f7:f1:67: 02:ce:fa:73:3c:0f:a6:4f:02:52:19:94:25:eb:3d: 4e:1b:47:b9:90:5f:c7:08:04:41:9b:a4:07:1b:6c: d6:d4:f0:7c:5c:2f:ba:52:23:76:d9:94:23:98:bf: aa:17:e8:aa:30:b0:7e:82:4f:ef:c9:65:d1:6f:a5: c2:30:11:cf:36:02:a7:e6:5d:3a:e4:cd:80:c2:23: af:d6:13:73:59:27:64:a5:35:42:cf:30:d4:00:0b: 98:df:6f:c2:5e:4f:78:87:03:3f:8f:76:7c:9b:f3: de:0d:f1:3e:43:0c:16:ca:9b:31:5f:5a:6a:d6:6e: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:15:31:26:E7:7F:F1:57:30:5C:C2:04:5D:C5:9E:3D:93:80:E5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144771.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a849::/32 Signature Algorithm: sha256WithRSAEncryption b6:f0:19:e6:a1:24:6b:07:c6:c6:f7:a2:bd:de:d7:8e:6d:33: 9f:ae:36:10:68:1c:d2:c6:f6:10:55:68:be:2f:be:67:e6:bc: 40:c9:99:af:bd:8a:1e:da:5f:e6:71:23:df:c1:38:c7:8e:b9: ee:e7:61:64:48:02:d9:16:4a:dd:34:5b:ee:39:5a:2c:77:d2: 7d:08:3b:a7:a0:23:7d:d7:6a:69:94:1c:80:72:e5:db:96:99: 69:7a:75:69:bc:1d:60:00:d3:e4:ec:9b:5a:15:00:c3:64:de: 3c:41:ee:af:97:00:5e:b2:31:af:5a:f4:34:70:8f:a2:c5:fe: ba:46:75:65:26:36:1b:84:59:f6:54:be:ad:a1:e4:e1:f9:7c: 9e:64:2e:ea:57:b6:c5:a0:81:c5:9e:d8:70:77:3f:2f:5c:d5: 35:24:b4:08:0d:57:66:25:58:a7:31:c9:95:fc:81:fd:20:5e: 23:ae:2c:9e:74:8a:c0:75:7b:0b:48:b1:b8:4c:ee:16:ac:33: 7d:3b:01:9b:a2:33:b5:8c:38:4a:d3:dc:fa:84:f3:09:b8:83: 4d:84:df:0f:1b:90:f8:fe:3e:9b:8a:70:8e:70:46:12:7b:b0: b4:d3:a9:50:c6:f8:bf:b5:41:19:a9:a8:06:ac:82:12:15:9d: 81:d4:67:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB09Hmxmo4QQntiKu6GBW8gWX66QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyNloX DTI3MDMwMzA2MjEyNlowMzExMC8GA1UEAxMoQzk3QzE1MzEyNkU3N0ZGMTU3MzA1 Q0MyMDQ1REM1OUUzRDkzODBFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVMIiyB3eNntctsr0mbIoKuolNpgh/6KvQqh+iYOaILqVyBhNZ197ySYtJJ wNnF0iiVbClySRg1MA10ORIy7PQNk4f+W8YJYbcvh/Mh1WzBCldc3N8Oyz29TRjj bLAKx5mEQR7zwDRjktvcTPpv0jP4CbNtUnPjoWxSN8MRiTqNzBbn9/FnAs76czwP pk8CUhmUJes9ThtHuZBfxwgEQZukBxts1tTwfFwvulIjdtmUI5i/qhfoqjCwfoJP 78ll0W+lwjARzzYCp+ZdOuTNgMIjr9YTc1knZKU1Qs8w1AALmN9vwl5PeIcDP492 fJvz3g3xPkMMFsqbMV9aatZu1hUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTJfBUx Jud/8VcwXMIEXcWePZOA5TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qEkwDQYJKoZIhvcNAQELBQADggEBALbwGeahJGsHxsb3or3e145tM5+uNhBoHNLG 9hBVaL4vvmfmvEDJma+9ih7aX+ZxI9/BOMeOue7nYWRIAtkWSt00W+45Wix30n0I O6egI33XammUHIBy5duWmWl6dWm8HWAA0+Tsm1oVAMNk3jxB7q+XAF6yMa9a9DRw j6LF/rpGdWUmNhuEWfZUvq2h5OH5fJ5kLupXtsWggcWe2HB3Py9c1TUktAgNV2Yl WKcxyZX8gf0gXiOuLJ50isB1ewtIsbhM7hasM307AZuiM7WMOErT3PqE8wm4g02E 3w8bkPj+PpuKcI5wRhJ7sLTTqVDG+L+1QRmpqAasghIVnYHUZ6Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:39 2026 by rpki-client