$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144786.roa File: AS144786.roa (raw, json) Hash identifier: yTwCoBny+rasx4Ag4v4pI+/alA7YhIW/VAGJxWicHXU= Subject key identifier: 41:D7:67:9A:18:5F:C0:C0:C1:F2:0F:42:7E:AD:69:C5:B2:B7:C5:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 57094897024CC0937B11A7F99AD4530352C1E873 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144786.roa Signing time: Wed 04 Mar 2026 06:19:39 +0000 ROA not before: Wed 04 Mar 2026 06:14:39 +0000 ROA not after: Wed 03 Mar 2027 06:19:39 +0000 asID: 144786 IP address blocks: 240a:a858::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:09:48:97:02:4c:c0:93:7b:11:a7:f9:9a:d4:53:03:52:c1:e8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:39 2026 GMT Not After : Mar 3 06:19:39 2027 GMT Subject: CN=41D7679A185FC0C0C1F20F427EAD69C5B2B7C531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:46:e4:72:fa:f1:ab:82:50:59:bd:8a:05: 1f:d0:85:e2:65:39:1d:bc:79:8f:a5:4e:44:c1:88: 27:28:b2:5b:2c:e8:c1:07:60:94:26:ec:1b:c5:93: 52:99:84:78:c5:2d:57:92:3c:02:1b:0c:49:9f:c5: f3:30:cd:12:bc:a7:ea:ce:a9:3a:80:0a:70:45:65: 9f:07:cc:82:cb:bb:d9:f7:c0:c7:a5:e8:04:5a:1c: c9:12:1b:4a:4e:d7:ae:3c:76:b7:51:d4:89:92:01: 51:7b:0c:f6:ce:10:5a:c2:66:a7:d1:27:6f:bd:46: 0d:ea:dc:25:70:9c:94:4e:d7:c4:16:23:9b:1e:0b: 95:e2:98:a3:69:00:a0:46:ae:2b:a3:7d:91:bb:8a: 72:e7:37:36:c9:dd:af:64:ff:91:aa:a9:3a:33:89: b2:61:37:52:04:72:29:86:01:20:f4:9b:c4:59:2f: ad:ff:da:32:90:cb:9b:ff:0e:b3:eb:7c:92:7d:d7: 2a:47:76:6e:a6:06:d5:10:c1:f4:c0:32:9c:0e:8f: ca:44:20:1b:77:0c:67:c2:e0:18:36:85:b1:fc:46: 1b:0c:20:e9:e5:e1:dd:8b:b0:63:e0:53:29:bd:0d: ac:56:df:5f:d4:76:9e:df:06:5c:fe:3f:7d:d4:80: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D7:67:9A:18:5F:C0:C0:C1:F2:0F:42:7E:AD:69:C5:B2:B7:C5:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144786.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a858::/32 Signature Algorithm: sha256WithRSAEncryption 18:75:ec:76:3e:01:38:f2:ce:c8:37:f3:f7:3b:dc:86:a6:90: c4:f8:20:0e:b4:55:42:03:d6:fa:fd:83:f7:1c:92:7d:f4:84: 77:e8:af:64:d0:f1:eb:1a:c8:db:ca:69:1b:23:c1:b2:44:66: 43:b0:11:0d:29:96:2a:88:c1:f9:53:ea:b3:d8:03:84:53:14: 77:03:35:cd:eb:f5:11:4c:2f:a7:f2:d6:44:0a:88:fb:f4:9d: 6c:99:87:e8:0e:d6:ff:0c:3d:bd:37:82:9f:87:03:14:67:7a: 1a:07:fa:5e:b2:f4:a4:af:22:8a:2d:71:60:f9:98:ba:9e:1c: f4:ea:56:3d:ef:f3:0e:a3:8a:6e:6e:88:00:37:84:ee:4f:f5: a8:1d:7a:6d:21:78:b9:50:94:6a:4e:3c:05:f7:67:cc:5e:c8: 94:41:ac:60:9e:41:31:4e:8c:fa:b3:b7:2d:37:14:c4:1e:55: 4a:71:0e:17:dc:c3:66:75:5d:26:35:4c:22:5d:d6:f4:be:1e: 6f:9a:84:d7:3a:7a:a9:e6:1d:fd:91:d6:33:b0:a1:49:97:c1: f9:d0:b5:9c:b6:8d:ef:79:6b:91:a4:a6:14:39:74:69:ac:c6: 99:d1:bf:47:0c:fb:1e:93:b6:1b:4b:d1:72:88:05:9b:9c:0d: 7c:b5:80:c3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVwlIlwJMwJN7Eaf5mtRTA1LB6HMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzOVoX DTI3MDMwMzA2MTkzOVowMzExMC8GA1UEAxMoNDFENzY3OUExODVGQzBDMEMxRjIw RjQyN0VBRDY5QzVCMkI3QzUzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtiRuRy+vGrglBZvYoFH9CF4mU5Hbx5j6VORMGIJyiyWyzowQdglCbsG8WT UpmEeMUtV5I8AhsMSZ/F8zDNEryn6s6pOoAKcEVlnwfMgsu72ffAx6XoBFocyRIb Sk7Xrjx2t1HUiZIBUXsM9s4QWsJmp9Enb71GDercJXCclE7XxBYjmx4LleKYo2kA oEauK6N9kbuKcuc3Nsndr2T/kaqpOjOJsmE3UgRyKYYBIPSbxFkvrf/aMpDLm/8O s+t8kn3XKkd2bqYG1RDB9MAynA6PykQgG3cMZ8LgGDaFsfxGGwwg6eXh3YuwY+BT Kb0NrFbfX9R2nt8GXP4/fdSAv7ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRB12ea GF/AwMHyD0J+rWnFsrfFMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qFgwDQYJKoZIhvcNAQELBQADggEBABh17HY+ATjyzsg38/c73IamkMT4IA60VUID 1vr9g/cckn30hHfor2TQ8esayNvKaRsjwbJEZkOwEQ0pliqIwflT6rPYA4RTFHcD Nc3r9RFML6fy1kQKiPv0nWyZh+gO1v8MPb03gp+HAxRnehoH+l6y9KSvIootcWD5 mLqeHPTqVj3v8w6jim5uiAA3hO5P9agdem0heLlQlGpOPAX3Z8xeyJRBrGCeQTFO jPqzty03FMQeVUpxDhfcw2Z1XSY1TCJd1vS+Hm+ahNc6eqnmHf2R1jOwoUmXwfnQ tZy2je95a5GkphQ5dGmsxpnRv0cM+x6TthtL0XKIBZucDXy1gMM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:47 2026 by rpki-client