$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144856.roa File: AS144856.roa (raw, json) Hash identifier: 0SXc0bYKnwJZLHWYFBSUsuvKI0NKgyJ1cO22mtqm8F4= Subject key identifier: 0F:2C:76:E4:8F:EA:EE:42:EF:1F:74:09:26:73:E7:83:E7:B6:63:D7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6078FE974A79E1C6492DCAB6D45F36BF5A3A5209 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144856.roa Signing time: Wed 04 Mar 2026 06:21:56 +0000 ROA not before: Wed 04 Mar 2026 06:16:56 +0000 ROA not after: Wed 03 Mar 2027 06:21:56 +0000 asID: 144856 IP address blocks: 240a:a89e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:78:fe:97:4a:79:e1:c6:49:2d:ca:b6:d4:5f:36:bf:5a:3a:52:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:56 2026 GMT Not After : Mar 3 06:21:56 2027 GMT Subject: CN=0F2C76E48FEAEE42EF1F74092673E783E7B663D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:8e:f1:c2:8c:eb:01:fe:05:f6:2a:40:cf: d7:eb:5b:c2:40:03:6a:a3:67:a4:5b:ef:82:de:1c: 2f:a9:11:10:bc:b9:97:12:6a:2a:a6:12:c0:3a:99: 1d:ff:c1:00:b2:a8:a7:7c:2e:86:97:3c:6e:26:60: 1c:6c:f0:75:a2:28:d2:bf:e9:19:08:d0:74:ce:8c: 5e:1d:70:ed:ec:82:4a:67:d3:44:be:b3:8a:05:c4: 04:3a:ce:66:15:95:cb:24:98:2c:98:c8:62:7a:2d: 5e:88:f1:b8:6a:45:66:08:c6:e6:6f:d6:51:d7:11: d9:d1:59:6f:dc:ed:f7:3b:6a:4b:24:01:a5:24:53: 90:21:90:05:6e:14:b7:dc:b4:6c:11:c1:23:08:a7: 3e:8e:b9:dc:05:7c:6c:b1:d8:bd:ed:8a:41:38:65: e7:fe:92:c1:58:a5:6f:00:75:19:46:1b:f8:9b:cf: 70:56:b8:1f:fe:34:52:38:f8:2b:be:9f:8b:06:33: 01:16:7a:0c:8e:95:53:a7:71:c3:92:f7:ca:e0:83: fe:c0:99:31:25:76:72:c6:9a:e3:d5:4d:fa:86:70: 8d:ea:0b:7f:a7:ac:ff:9f:ce:db:2e:dc:1b:98:fb: ce:57:ff:23:9e:5b:f6:c1:3f:60:8b:07:8e:83:f4: 53:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2C:76:E4:8F:EA:EE:42:EF:1F:74:09:26:73:E7:83:E7:B6:63:D7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144856.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a89e::/32 Signature Algorithm: sha256WithRSAEncryption 71:94:67:6b:a4:be:c2:a0:8a:b4:b0:20:5b:c8:59:30:78:a2: d0:10:34:28:a3:6f:be:6e:6d:f3:9e:c6:60:37:74:99:7f:99: 04:ba:fc:87:e0:19:2b:cf:f0:00:64:b6:12:b3:34:3b:9b:9e: b3:6d:73:df:46:62:f7:b1:8e:0d:98:ef:2b:0a:80:77:75:68: 1c:96:b3:65:4b:a2:49:5a:29:16:f0:1b:16:36:3c:7d:7d:97: a2:4d:99:3e:82:32:24:d5:32:38:0c:b9:77:6d:f1:f2:06:b4: 61:d0:1e:40:b8:eb:3a:8f:5d:37:6a:f5:7b:c9:4e:0d:86:bf: 3b:2b:83:5f:27:97:b8:41:28:2d:88:9a:d2:c8:7a:20:3c:b0: 2e:f2:67:b1:d3:42:8f:76:1c:78:0d:43:15:cf:7a:c7:d1:2f: d2:14:cf:d5:fc:0e:91:57:1a:99:0c:d8:ad:dc:26:dd:ea:6c: d0:43:3c:ba:0d:5a:df:d5:18:4e:b1:49:0f:c9:d4:d8:1d:4c: d4:04:77:57:29:80:95:9b:06:38:15:b4:0d:81:de:f4:4f:85: 91:8d:77:58:68:34:ab:42:11:ca:78:73:39:59:22:a4:8a:e9: 7c:da:16:46:cc:59:44:68:e8:24:05:32:19:0c:f3:cd:e8:7c: e8:b1:5b:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYHj+l0p54cZJLcq21F82v1o6UgkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1NloX DTI3MDMwMzA2MjE1NlowMzExMC8GA1UEAxMoMEYyQzc2RTQ4RkVBRUU0MkVGMUY3 NDA5MjY3M0U3ODNFN0I2NjNENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOonjvHCjOsB/gX2KkDP1+tbwkADaqNnpFvvgt4cL6kRELy5lxJqKqYSwDqZ Hf/BALKop3wuhpc8biZgHGzwdaIo0r/pGQjQdM6MXh1w7eyCSmfTRL6zigXEBDrO ZhWVyySYLJjIYnotXojxuGpFZgjG5m/WUdcR2dFZb9zt9ztqSyQBpSRTkCGQBW4U t9y0bBHBIwinPo653AV8bLHYve2KQThl5/6SwVilbwB1GUYb+JvPcFa4H/40Ujj4 K76fiwYzARZ6DI6VU6dxw5L3yuCD/sCZMSV2csaa49VN+oZwjeoLf6es/5/O2y7c G5j7zlf/I55b9sE/YIsHjoP0U8cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQPLHbk j+ruQu8fdAkmc+eD57Zj1zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qJ4wDQYJKoZIhvcNAQELBQADggEBAHGUZ2ukvsKgirSwIFvIWTB4otAQNCijb75u bfOexmA3dJl/mQS6/IfgGSvP8ABkthKzNDubnrNtc99GYvexjg2Y7ysKgHd1aByW s2VLoklaKRbwGxY2PH19l6JNmT6CMiTVMjgMuXdt8fIGtGHQHkC46zqPXTdq9XvJ Tg2Gvzsrg18nl7hBKC2ImtLIeiA8sC7yZ7HTQo92HHgNQxXPesfRL9IUz9X8DpFX GpkM2K3cJt3qbNBDPLoNWt/VGE6xSQ/J1NgdTNQEd1cpgJWbBjgVtA2B3vRPhZGN d1hoNKtCEcp4czlZIqSK6XzaFkbMWURo6CQFMhkM883ofOixW/A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:57 2026 by rpki-client