$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144812.roa File: AS144812.roa (raw, json) Hash identifier: bnh/z/WUkPsN/NWqA5s7P39iPKtm8sl8OE/cLyB+EU0= Subject key identifier: B2:03:C1:42:C6:5E:70:71:A1:5B:0F:E4:1A:4D:E9:03:2B:FA:B1:70 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 75D127722FC4A70E40B0843DF9077B2C65B27DEB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144812.roa Signing time: Wed 04 Mar 2026 06:21:33 +0000 ROA not before: Wed 04 Mar 2026 06:16:33 +0000 ROA not after: Wed 03 Mar 2027 06:21:33 +0000 asID: 144812 IP address blocks: 240a:a872::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d1:27:72:2f:c4:a7:0e:40:b0:84:3d:f9:07:7b:2c:65:b2:7d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:33 2026 GMT Not After : Mar 3 06:21:33 2027 GMT Subject: CN=B203C142C65E7071A15B0FE41A4DE9032BFAB170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:79:05:37:a4:9c:db:d6:51:0e:11:03:41: f7:5d:cb:1d:34:08:0d:20:64:a3:9f:44:3f:39:e4: d8:64:fc:ae:b3:4e:ad:bb:80:69:ea:d5:b4:61:e9: 3c:be:da:62:4e:50:82:28:87:bf:0a:35:67:d7:74: 1c:1e:f6:98:6b:dc:7b:a7:d6:5b:9d:13:e9:2a:d8: 9d:3a:fb:36:51:d8:64:fa:92:96:4d:96:b6:5f:af: 73:94:56:0f:c1:e2:4c:fd:9d:3a:92:9e:f0:0a:32: e5:87:c7:e8:fd:5d:ea:0c:cb:0b:96:17:d0:88:c7: 92:6f:73:a9:38:03:e8:1c:fa:12:90:08:9e:a5:8a: 62:d6:ba:12:d3:e2:eb:e3:2d:55:5d:50:6c:44:81: 4a:d2:b8:c3:62:85:bb:0e:c0:b5:dc:28:e6:78:bc: d1:29:b9:87:5b:90:2c:11:cd:0e:c0:47:4a:d8:c2: ea:39:47:5f:6c:cf:09:0a:ea:39:c5:15:78:eb:8e: 76:9a:b3:ef:4b:cc:42:dc:55:4c:92:14:3e:74:20: 38:6f:3c:6d:cb:8f:fc:c7:03:79:fb:14:02:51:28: 3a:bf:8f:8a:65:d3:74:a8:e8:35:e8:31:fc:72:9a: 61:27:c1:f6:9a:c7:c6:48:ce:cc:82:6e:b6:c6:07: ce:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:03:C1:42:C6:5E:70:71:A1:5B:0F:E4:1A:4D:E9:03:2B:FA:B1:70 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144812.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a872::/32 Signature Algorithm: sha256WithRSAEncryption 6a:8a:e2:8b:7f:c8:94:56:a0:d1:c9:66:3e:31:d7:2c:03:e1: 28:0b:ba:4d:11:a7:29:5a:ca:d8:ee:d6:67:37:3c:25:fe:e5: 85:e7:01:ae:ce:b7:72:5e:f1:97:5d:5b:bc:56:6d:1d:d5:81: ce:24:c5:d5:52:4f:9d:af:e3:92:ca:86:f4:5c:50:53:a7:15: f3:4f:48:22:00:17:b6:13:f2:cc:5a:b2:48:1f:b8:3e:2e:53: 87:d5:e8:5e:0e:f4:4b:08:9f:6d:7e:bc:aa:0e:1c:10:f6:48: 88:36:dd:f5:a4:47:d7:33:c4:67:bd:a6:1a:23:48:f7:8e:b1: 9d:5a:83:72:cc:1d:d1:9b:54:ca:87:9b:f1:3d:47:1c:5b:23: 85:62:de:ba:f8:69:87:26:c4:97:2f:77:dc:d6:96:7a:dc:fc: 31:d8:81:e7:51:2e:dc:80:e3:cc:c0:04:6d:56:7c:c9:26:a9: 59:4c:eb:09:f6:69:9f:89:c0:56:d5:c5:24:b6:dc:87:db:e7: d4:d5:20:2d:b9:02:13:bd:6d:89:55:47:51:44:3a:ac:b9:a4: 4c:09:43:f3:48:d7:24:cd:51:c3:a2:66:b3:87:06:76:9f:7f: c7:ee:18:78:6a:df:de:7b:76:fc:41:17:df:0e:e9:54:46:8d: d3:47:e8:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUddEnci/Epw5AsIQ9+Qd7LGWyfeswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzM1oX DTI3MDMwMzA2MjEzM1owMzExMC8GA1UEAxMoQjIwM0MxNDJDNjVFNzA3MUExNUIw RkU0MUE0REU5MDMyQkZBQjE3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3SeQU3pJzb1lEOEQNB913LHTQIDSBko59EPznk2GT8rrNOrbuAaerVtGHp PL7aYk5QgiiHvwo1Z9d0HB72mGvce6fWW50T6SrYnTr7NlHYZPqSlk2Wtl+vc5RW D8HiTP2dOpKe8Aoy5YfH6P1d6gzLC5YX0IjHkm9zqTgD6Bz6EpAInqWKYta6EtPi 6+MtVV1QbESBStK4w2KFuw7Atdwo5ni80Sm5h1uQLBHNDsBHStjC6jlHX2zPCQrq OcUVeOuOdpqz70vMQtxVTJIUPnQgOG88bcuP/McDefsUAlEoOr+PimXTdKjoNegx /HKaYSfB9prHxkjOzIJutsYHzjMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSyA8FC xl5wcaFbD+QaTekDK/qxcDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qHIwDQYJKoZIhvcNAQELBQADggEBAGqK4ot/yJRWoNHJZj4x1ywD4SgLuk0Rpyla ytju1mc3PCX+5YXnAa7Ot3Je8ZddW7xWbR3Vgc4kxdVST52v45LKhvRcUFOnFfNP SCIAF7YT8sxaskgfuD4uU4fV6F4O9EsIn21+vKoOHBD2SIg23fWkR9czxGe9phoj SPeOsZ1ag3LMHdGbVMqHm/E9RxxbI4Vi3rr4aYcmxJcvd9zWlnrc/DHYgedRLtyA 48zABG1WfMkmqVlM6wn2aZ+JwFbVxSS23Ifb59TVIC25AhO9bYlVR1FEOqy5pEwJ Q/NI1yTNUcOiZrOHBnaff8fuGHhq3957dvxBF98O6VRGjdNH6Pg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:22 2026 by rpki-client