$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144792.roa File: AS144792.roa (raw, json) Hash identifier: EhN3WSial98U91LUKgx9vOZwSiIvSXk83pX9rkolwHY= Subject key identifier: 2B:DF:C4:C4:16:82:3D:EA:24:69:11:14:AD:11:18:9B:26:0A:B2:7A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2F42805F4AE46057D698C6DA7B4FDCE965723413 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144792.roa Signing time: Wed 04 Mar 2026 06:20:21 +0000 ROA not before: Wed 04 Mar 2026 06:15:21 +0000 ROA not after: Wed 03 Mar 2027 06:20:21 +0000 asID: 144792 IP address blocks: 240a:a85e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:42:80:5f:4a:e4:60:57:d6:98:c6:da:7b:4f:dc:e9:65:72:34:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:21 2026 GMT Not After : Mar 3 06:20:21 2027 GMT Subject: CN=2BDFC4C416823DEA24691114AD11189B260AB27A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:80:ab:be:cf:3d:40:0f:99:c0:17:96:ff: 10:18:47:1b:02:e2:58:20:e8:a7:42:30:87:ae:36: 75:76:4d:9e:a7:5b:43:87:14:ee:f9:94:ac:8b:d3: 54:30:86:37:6a:38:50:cd:ad:25:51:43:97:e0:18: e4:9e:18:4f:da:60:dc:e9:d1:ab:39:b4:f8:72:01: d1:cc:4c:06:80:77:00:b4:d5:90:be:ad:96:33:b5: 49:e7:29:8f:e4:b9:23:02:fe:24:ce:17:86:6c:99: 72:a2:54:98:3c:ab:37:5c:d0:70:d7:ca:e0:3e:59: 61:4e:b8:12:87:7b:bf:7f:d2:d5:c4:9c:8b:5d:ec: 95:d2:c8:15:58:c3:54:1e:ab:5f:8f:9d:3c:c1:3d: 17:a3:c1:24:43:9b:7f:02:2e:1c:f1:f9:f3:83:19: a6:ce:e0:48:40:b8:b9:b9:b2:71:04:f9:b2:72:e2: 3a:59:ed:8d:1d:ab:c6:2d:c5:80:87:5d:1a:07:38: 25:1e:d2:25:4d:7e:f4:f1:73:fb:73:7e:45:13:4d: 98:22:a5:c3:d1:91:af:55:dd:82:25:fa:76:82:5a: f9:ae:ff:7b:4f:6d:01:d0:3a:69:0e:ef:52:6a:40: 9d:01:17:14:75:86:fa:4b:df:e6:8d:1d:61:87:0f: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DF:C4:C4:16:82:3D:EA:24:69:11:14:AD:11:18:9B:26:0A:B2:7A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144792.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a85e::/32 Signature Algorithm: sha256WithRSAEncryption 78:ca:86:0f:1b:68:a8:6a:bf:99:a4:2c:e7:fa:80:86:6f:50: 96:7c:18:22:a3:dd:60:c1:36:b6:0b:6b:ba:3d:f5:d7:fa:ff: 02:93:51:f4:25:16:f4:37:3a:a2:29:4c:5d:65:cc:01:c3:96: db:6d:60:2e:82:e0:5f:d7:91:d6:79:7c:55:88:fb:c5:8a:13: e8:04:72:6b:df:25:86:ab:b8:0d:f5:eb:14:3a:81:05:0d:a2: c8:5d:b6:67:7b:f0:cd:1e:ea:d8:da:69:10:35:69:54:47:48: 55:f1:56:58:c3:b0:5b:c1:96:3a:0a:ae:79:f9:b7:07:f1:cc: a5:bf:93:6f:96:0c:b2:aa:8e:12:8b:a6:a4:e7:3f:8d:9c:86: 6b:89:ea:92:3d:1a:ac:3a:64:d0:70:b3:f4:ad:be:bd:0e:5d: 71:6c:2d:b5:ff:0a:1e:f7:bd:26:ea:76:c0:c4:eb:25:a4:82: 6e:e3:e6:2d:9c:b6:02:45:27:96:0e:f7:06:1d:95:58:0f:18: 4f:5e:58:38:df:d1:20:61:21:34:99:dc:a0:87:3a:ff:c9:b0: 3b:35:40:1f:21:09:94:b3:f1:0a:ee:fa:7b:50:5b:77:41:cf: b6:c4:51:78:5a:e1:1f:1c:25:f6:39:88:77:b4:01:bf:28:7c: ad:26:01:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUL0KAX0rkYFfWmMbae0/c6WVyNBMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyMVoX DTI3MDMwMzA2MjAyMVowMzExMC8GA1UEAxMoMkJERkM0QzQxNjgyM0RFQTI0Njkx MTE0QUQxMTE4OUIyNjBBQjI3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJBgKu+zz1AD5nAF5b/EBhHGwLiWCDop0Iwh642dXZNnqdbQ4cU7vmUrIvT VDCGN2o4UM2tJVFDl+AY5J4YT9pg3OnRqzm0+HIB0cxMBoB3ALTVkL6tljO1Secp j+S5IwL+JM4XhmyZcqJUmDyrN1zQcNfK4D5ZYU64Eod7v3/S1cSci13sldLIFVjD VB6rX4+dPME9F6PBJEObfwIuHPH584MZps7gSEC4ubmycQT5snLiOlntjR2rxi3F gIddGgc4JR7SJU1+9PFz+3N+RRNNmCKlw9GRr1XdgiX6doJa+a7/e09tAdA6aQ7v UmpAnQEXFHWG+kvf5o0dYYcPrukCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQr38TE FoI96iRpERStERibJgqyejAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qF4wDQYJKoZIhvcNAQELBQADggEBAHjKhg8baKhqv5mkLOf6gIZvUJZ8GCKj3WDB NrYLa7o99df6/wKTUfQlFvQ3OqIpTF1lzAHDltttYC6C4F/XkdZ5fFWI+8WKE+gE cmvfJYaruA316xQ6gQUNoshdtmd78M0e6tjaaRA1aVRHSFXxVljDsFvBljoKrnn5 twfxzKW/k2+WDLKqjhKLpqTnP42chmuJ6pI9Gqw6ZNBws/Stvr0OXXFsLbX/Ch73 vSbqdsDE6yWkgm7j5i2ctgJFJ5YO9wYdlVgPGE9eWDjf0SBhITSZ3KCHOv/JsDs1 QB8hCZSz8Qru+ntQW3dBz7bEUXha4R8cJfY5iHe0Ab8ofK0mAR0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:11 2026 by rpki-client