$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144797.roa File: AS144797.roa (raw, json) Hash identifier: UEIC+dvPcVYM+3PKr/o/SAXNBS+nL4tcAW2+Knxa3q4= Subject key identifier: 38:9D:F6:BC:97:BB:33:9A:CA:54:18:E1:ED:45:D3:D0:27:E8:A5:8B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 23FB927DFF7268FCE6E8BA4C536B42C6C98F76A0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144797.roa Signing time: Wed 04 Mar 2026 06:20:27 +0000 ROA not before: Wed 04 Mar 2026 06:15:27 +0000 ROA not after: Wed 03 Mar 2027 06:20:27 +0000 asID: 144797 IP address blocks: 240a:a863::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:fb:92:7d:ff:72:68:fc:e6:e8:ba:4c:53:6b:42:c6:c9:8f:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:27 2026 GMT Not After : Mar 3 06:20:27 2027 GMT Subject: CN=389DF6BC97BB339ACA5418E1ED45D3D027E8A58B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:a3:39:45:9f:b4:f6:8b:d1:58:d9:92:24: 8c:7d:1a:ad:12:29:fe:36:0a:1a:5e:08:38:f9:9c: 5f:c2:29:fb:5b:1d:e7:c5:c7:5f:d5:75:94:3d:38: e6:6c:c8:bd:d1:54:1a:0a:1e:98:d4:6b:c6:cb:8b: 4c:37:69:05:00:98:ca:e0:b5:32:ef:23:65:2a:ab: 94:0b:a5:cb:6a:aa:3e:ee:db:b6:e9:53:37:75:74: 4f:8d:22:f0:c1:ce:3d:33:42:b9:3b:9f:e6:33:b4: c2:cd:f4:2d:79:31:20:14:1b:d3:e0:9a:b8:3b:98: 01:a9:e8:94:c5:45:79:12:04:13:29:58:7c:ec:25: 04:c0:d5:8c:03:f1:e3:ad:ae:e4:2d:3a:50:03:85: c1:48:ad:f9:92:96:f2:5a:d8:d3:af:a1:c6:a3:94: 9a:fc:b3:d7:ae:91:2c:92:18:ba:a7:c7:ae:48:54: 91:14:97:30:06:81:25:73:cb:f9:78:57:14:82:f5: f0:f4:b0:37:21:be:06:a2:d3:76:76:19:d3:fb:55: c2:1b:43:55:99:ba:a0:fb:21:0e:7f:f6:a2:4c:64: 3a:4b:d4:76:71:25:b8:8b:04:a4:57:6e:66:cd:19: d2:64:a6:e1:0a:3a:ba:f3:81:f2:c2:44:bb:20:e3: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9D:F6:BC:97:BB:33:9A:CA:54:18:E1:ED:45:D3:D0:27:E8:A5:8B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144797.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a863::/32 Signature Algorithm: sha256WithRSAEncryption 5d:9d:7e:d1:04:fb:52:b5:e5:11:7e:ec:8e:e2:4d:b9:36:b1: c0:65:55:4c:c5:d0:eb:43:c6:59:f1:68:24:41:56:00:2d:92: af:93:3d:3c:c7:d7:88:fd:2d:60:5e:01:62:99:26:25:80:5b: c8:d6:c2:bf:a5:3e:a0:ef:d2:c0:3a:b6:b5:96:2a:84:e8:6b: ff:0d:8d:d4:58:0c:5d:85:7a:dd:12:2f:f6:e8:47:72:65:7a: 52:1a:e4:b8:85:7f:0c:66:bd:60:b5:1a:cf:40:95:2b:3e:33: 0f:f4:34:32:42:78:00:78:60:8d:79:37:a0:38:60:3c:bc:2c: eb:3f:48:bc:78:1d:a4:19:19:3e:89:8b:36:86:0f:e2:93:d3: 1f:3f:57:54:95:50:15:58:48:1f:2e:4a:bf:5d:39:d5:47:43: 77:5e:36:7f:45:a7:d1:7c:31:8d:c6:67:78:3b:15:ff:4b:c2: 49:9b:c6:03:1c:53:6c:07:26:50:6d:03:1b:3b:11:22:57:b5: 44:50:82:ca:7c:d8:10:b9:b3:48:08:47:5d:ad:89:fa:0d:28: 9b:bc:22:02:e4:67:17:db:85:c0:c1:72:a2:6c:b2:7c:1a:85: 99:9b:2f:6f:fe:03:94:01:fc:42:46:06:1c:5d:b0:1b:04:f0: 9b:6d:fe:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUI/uSff9yaPzm6LpMU2tCxsmPdqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyN1oX DTI3MDMwMzA2MjAyN1owMzExMC8GA1UEAxMoMzg5REY2QkM5N0JCMzM5QUNBNTQx OEUxRUQ0NUQzRDAyN0U4QTU4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfBozlFn7T2i9FY2ZIkjH0arRIp/jYKGl4IOPmcX8Ip+1sd58XHX9V1lD04 5mzIvdFUGgoemNRrxsuLTDdpBQCYyuC1Mu8jZSqrlAuly2qqPu7btulTN3V0T40i 8MHOPTNCuTuf5jO0ws30LXkxIBQb0+CauDuYAanolMVFeRIEEylYfOwlBMDVjAPx 462u5C06UAOFwUit+ZKW8lrY06+hxqOUmvyz166RLJIYuqfHrkhUkRSXMAaBJXPL +XhXFIL18PSwNyG+BqLTdnYZ0/tVwhtDVZm6oPshDn/2okxkOkvUdnEluIsEpFdu Zs0Z0mSm4Qo6uvOB8sJEuyDjyL8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ4nfa8 l7szmspUGOHtRdPQJ+ilizAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qGMwDQYJKoZIhvcNAQELBQADggEBAF2dftEE+1K15RF+7I7iTbk2scBlVUzF0OtD xlnxaCRBVgAtkq+TPTzH14j9LWBeAWKZJiWAW8jWwr+lPqDv0sA6trWWKoToa/8N jdRYDF2Fet0SL/boR3JlelIa5LiFfwxmvWC1Gs9AlSs+Mw/0NDJCeAB4YI15N6A4 YDy8LOs/SLx4HaQZGT6JizaGD+KT0x8/V1SVUBVYSB8uSr9dOdVHQ3deNn9Fp9F8 MY3GZ3g7Ff9LwkmbxgMcU2wHJlBtAxs7ESJXtURQgsp82BC5s0gIR12tifoNKJu8 IgLkZxfbhcDBcqJssnwahZmbL2/+A5QB/EJGBhxdsBsE8Jtt/i0= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:35 2026 by rpki-client