$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144777.roa File: AS144777.roa (raw, json) Hash identifier: kJf8RxX6jMq1iA5H4faAFdPdl8A/GLKg1a0YUzhWnY8= Subject key identifier: 72:1E:4C:42:C8:D9:F7:05:16:8E:EF:B5:D9:E9:7F:5E:D5:7C:08:05 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0A7DAABEBA08CB73C75377E0E61CF73C6F89D6AF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144777.roa Signing time: Wed 04 Mar 2026 06:21:32 +0000 ROA not before: Wed 04 Mar 2026 06:16:32 +0000 ROA not after: Wed 03 Mar 2027 06:21:32 +0000 asID: 144777 IP address blocks: 240a:a84f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7d:aa:be:ba:08:cb:73:c7:53:77:e0:e6:1c:f7:3c:6f:89:d6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:32 2026 GMT Not After : Mar 3 06:21:32 2027 GMT Subject: CN=721E4C42C8D9F705168EEFB5D9E97F5ED57C0805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:2b:23:02:c0:bf:c1:f7:e1:bb:91:06:ef: 67:e4:3b:b2:d1:64:53:69:a6:f9:79:a2:e8:c7:d3: f5:e9:5e:30:c3:ad:af:16:b4:5a:f8:45:ab:37:56: 8b:c0:1f:7d:ef:ad:8f:bd:a7:c9:82:b9:48:34:7b: 17:89:12:1b:e8:5a:36:d2:6a:d7:0b:a2:6c:24:60: d3:73:20:87:93:58:4a:b3:8e:cb:8c:71:2c:c4:60: fc:32:ab:30:44:f3:78:06:e9:49:0f:04:34:7e:5b: c1:03:2c:58:a2:f7:89:67:6b:8e:b7:32:be:eb:80: dc:11:1b:f4:ec:ff:fd:df:c5:b4:16:25:96:0e:45: f8:24:12:45:f0:91:ad:d3:85:44:27:06:d9:9b:b9: 63:65:13:e4:4a:70:3e:50:ff:8e:9e:6f:79:d9:db: c6:ef:45:24:bb:29:10:b1:5d:1a:b0:ab:4f:e4:94: 0d:36:a6:22:e2:ee:7e:27:a0:3c:85:8f:a8:41:b8: c8:4e:7d:1c:99:04:17:b0:2d:f6:fc:40:f5:11:33: a3:7e:f0:b6:3a:55:b4:40:af:0c:12:d4:43:a1:b6: ba:2d:fe:27:bc:b6:48:d2:ab:d2:27:70:81:f0:3a: 9d:eb:11:a9:7b:9d:57:db:97:b1:f6:f2:1c:0f:77: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1E:4C:42:C8:D9:F7:05:16:8E:EF:B5:D9:E9:7F:5E:D5:7C:08:05 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144777.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a84f::/32 Signature Algorithm: sha256WithRSAEncryption a3:dc:f5:25:ca:c1:9b:9d:97:16:8c:10:2f:ac:04:96:16:ba: 15:89:35:f3:2e:38:8a:ed:e3:1c:6f:1d:3a:5e:35:70:5a:ec: 09:28:54:9b:b2:c2:26:92:16:10:cd:3d:69:cd:28:ad:fd:d5: 59:a4:5c:ac:68:3f:c5:87:24:0d:f0:25:2d:77:db:41:76:c4: eb:94:f0:fa:2d:b3:14:64:0b:af:81:37:6e:b9:80:3d:13:de: ef:1f:09:bf:56:3e:84:c5:44:3a:b6:a3:7a:c2:18:f5:73:bc: df:81:ad:4c:dd:57:fd:e4:6c:18:22:13:0c:ab:8b:19:5a:07: 7f:76:c4:0e:cb:7a:aa:10:f6:f8:7d:78:43:34:f8:bb:21:b6: 61:f6:b1:1c:81:96:2a:8c:45:76:cd:8d:8c:80:44:c1:4c:35: f7:fe:40:8f:ea:52:db:4f:f4:fe:37:8b:ad:2b:5c:58:f8:34: 8d:f5:e7:a5:ea:6e:df:82:c0:a6:62:04:b0:67:3f:53:59:ea: 17:ee:ce:be:6c:7e:17:5c:61:f2:cf:3d:32:4e:50:64:34:86: 0b:26:33:2c:5a:45:d8:2a:99:31:d6:ba:39:f1:23:80:d3:47: cd:f3:d1:9c:7a:95:21:ff:6a:fe:11:51:fa:62:c1:86:c7:0d: 0b:dc:c0:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCn2qvroIy3PHU3fg5hz3PG+J1q8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzMloX DTI3MDMwMzA2MjEzMlowMzExMC8GA1UEAxMoNzIxRTRDNDJDOEQ5RjcwNTE2OEVF RkI1RDlFOTdGNUVENTdDMDgwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALR4KyMCwL/B9+G7kQbvZ+Q7stFkU2mm+Xmi6MfT9eleMMOtrxa0WvhFqzdW i8Affe+tj72nyYK5SDR7F4kSG+haNtJq1wuibCRg03Mgh5NYSrOOy4xxLMRg/DKr METzeAbpSQ8ENH5bwQMsWKL3iWdrjrcyvuuA3BEb9Oz//d/FtBYllg5F+CQSRfCR rdOFRCcG2Zu5Y2UT5EpwPlD/jp5vednbxu9FJLspELFdGrCrT+SUDTamIuLufieg PIWPqEG4yE59HJkEF7At9vxA9REzo37wtjpVtECvDBLUQ6G2ui3+J7y2SNKr0idw gfA6nesRqXudV9uXsfbyHA93ItUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRyHkxC yNn3BRaO77XZ6X9e1XwIBTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qE8wDQYJKoZIhvcNAQELBQADggEBAKPc9SXKwZudlxaMEC+sBJYWuhWJNfMuOIrt 4xxvHTpeNXBa7AkoVJuywiaSFhDNPWnNKK391VmkXKxoP8WHJA3wJS1320F2xOuU 8PotsxRkC6+BN265gD0T3u8fCb9WPoTFRDq2o3rCGPVzvN+BrUzdV/3kbBgiEwyr ixlaB392xA7LeqoQ9vh9eEM0+LshtmH2sRyBliqMRXbNjYyARMFMNff+QI/qUttP 9P43i60rXFj4NI3156Xqbt+CwKZiBLBnP1NZ6hfuzr5sfhdcYfLPPTJOUGQ0hgsm MyxaRdgqmTHWujnxI4DTR83z0Zx6lSH/av4RUfpiwYbHDQvcwKc= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:05 2026 by rpki-client