$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144796.roa File: AS144796.roa (raw, json) Hash identifier: +jfnWczBjJjX8d0FMqAexbp2N5erVt6X+XWgJ+Jk0LA= Subject key identifier: 60:CC:19:B9:50:BC:E7:14:88:F7:2C:E4:3E:DC:71:F8:54:DF:A0:D4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4745C178554C19D1813DADA7B5404F5349B3EDBC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144796.roa Signing time: Wed 04 Mar 2026 06:21:29 +0000 ROA not before: Wed 04 Mar 2026 06:16:29 +0000 ROA not after: Wed 03 Mar 2027 06:21:29 +0000 asID: 144796 IP address blocks: 240a:a862::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:45:c1:78:55:4c:19:d1:81:3d:ad:a7:b5:40:4f:53:49:b3:ed:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:29 2026 GMT Not After : Mar 3 06:21:29 2027 GMT Subject: CN=60CC19B950BCE71488F72CE43EDC71F854DFA0D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:14:f1:18:5b:69:5d:80:97:d2:80:94:fd:60: e3:38:a8:66:c8:a4:41:d4:3b:fa:da:94:6e:e7:a5: 10:37:b6:4d:80:8d:38:44:bf:e0:40:21:b6:56:3e: 4c:bd:82:78:a3:aa:df:84:49:62:43:73:d5:47:a0: 68:ae:ac:d8:57:b1:10:84:b1:93:c2:4a:cd:fa:e8: e2:f1:e8:09:f0:44:5a:5f:d3:44:56:35:7f:d0:79: aa:cb:3a:99:84:0e:36:5b:ab:c1:e9:e5:b2:60:86: d4:35:f7:90:f9:9e:c9:95:a6:22:36:d5:03:93:85: b1:57:24:e1:b3:1b:5a:81:f1:b8:fb:1d:d5:8a:b0: 46:29:33:a9:6f:62:01:ed:22:43:84:c6:34:8a:17: 50:e8:94:f8:08:1b:d3:83:7b:78:4e:91:d9:9f:3d: 3a:26:ac:1f:4c:33:65:f9:b1:b3:26:0d:ea:75:c9: ec:52:24:ea:b8:0f:13:09:47:30:ca:b6:69:18:35: 11:4e:ff:6d:5e:88:cb:8f:aa:bd:6a:2b:78:2d:a2: 49:79:87:a5:f5:fe:1c:04:20:7a:bc:ec:1d:fb:62: 3b:7b:8f:1d:e8:67:1c:67:81:4f:e7:cd:10:a4:af: 34:23:b1:0a:0f:33:4d:3e:b8:61:39:e1:0d:b6:08: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CC:19:B9:50:BC:E7:14:88:F7:2C:E4:3E:DC:71:F8:54:DF:A0:D4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144796.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a862::/32 Signature Algorithm: sha256WithRSAEncryption 5b:a8:c0:6f:38:70:19:01:a1:41:1d:70:db:fe:6a:0e:6d:37: 67:b9:43:5b:d7:47:55:08:19:0f:0f:c2:d8:8a:c5:5d:ca:f0: d9:29:3c:97:16:bd:a1:ad:ea:1d:27:89:98:0e:58:ff:49:44: fb:f8:93:b7:f7:4c:3a:76:a8:68:88:ee:2c:19:0d:ab:05:09: 2e:d8:af:54:c7:ab:f9:38:6b:12:c4:db:5f:0f:8d:24:75:cd: 5a:a1:c0:f0:e9:28:48:f8:c4:5c:2d:23:aa:7a:37:6b:f6:04: 63:5e:b5:37:2e:3e:ff:2a:d0:4a:3a:67:aa:ba:60:ae:c6:d6: 9f:57:31:23:65:46:98:40:70:fa:5a:c1:64:26:e3:26:61:1b: 58:d0:d2:c5:00:c3:16:1f:dd:5c:38:89:b6:05:9f:7b:45:09: 45:85:d6:22:97:dd:e9:00:f6:61:40:9c:f8:93:98:fb:e4:5e: 01:69:23:35:8f:e6:77:fe:48:26:8d:b5:1f:a4:ef:61:19:36: ca:57:dd:69:5b:b6:3f:03:72:d6:7a:0b:84:b5:97:64:04:c8: fc:62:a3:fe:7e:98:cd:f2:f4:f4:11:9f:6b:e0:37:47:85:16: 13:f6:a6:58:92:f1:82:4a:ee:90:71:78:11:9d:6a:c7:d9:bd: bf:6e:8f:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR0XBeFVMGdGBPa2ntUBPU0mz7bwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyOVoX DTI3MDMwMzA2MjEyOVowMzExMC8GA1UEAxMoNjBDQzE5Qjk1MEJDRTcxNDg4Rjcy Q0U0M0VEQzcxRjg1NERGQTBENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQU8RhbaV2Al9KAlP1g4zioZsikQdQ7+tqUbuelEDe2TYCNOES/4EAhtlY+ TL2CeKOq34RJYkNz1UegaK6s2FexEISxk8JKzfro4vHoCfBEWl/TRFY1f9B5qss6 mYQONlurwenlsmCG1DX3kPmeyZWmIjbVA5OFsVck4bMbWoHxuPsd1YqwRikzqW9i Ae0iQ4TGNIoXUOiU+Agb04N7eE6R2Z89OiasH0wzZfmxsyYN6nXJ7FIk6rgPEwlH MMq2aRg1EU7/bV6Iy4+qvWoreC2iSXmHpfX+HAQgerzsHftiO3uPHehnHGeBT+fN EKSvNCOxCg8zTT64YTnhDbYItikCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRgzBm5 ULznFIj3LOQ+3HH4VN+g1DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qGIwDQYJKoZIhvcNAQELBQADggEBAFuowG84cBkBoUEdcNv+ag5tN2e5Q1vXR1UI GQ8PwtiKxV3K8NkpPJcWvaGt6h0niZgOWP9JRPv4k7f3TDp2qGiI7iwZDasFCS7Y r1THq/k4axLE218PjSR1zVqhwPDpKEj4xFwtI6p6N2v2BGNetTcuPv8q0Eo6Z6q6 YK7G1p9XMSNlRphAcPpawWQm4yZhG1jQ0sUAwxYf3Vw4ibYFn3tFCUWF1iKX3ekA 9mFAnPiTmPvkXgFpIzWP5nf+SCaNtR+k72EZNspX3Wlbtj8DctZ6C4S1l2QEyPxi o/5+mM3y9PQRn2vgN0eFFhP2pliS8YJK7pBxeBGdasfZvb9uj4g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:24 2026 by rpki-client