$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144861.roa File: AS144861.roa (raw, json) Hash identifier: r7GhD5UoIf7uTK6ntf4x01CWhMSF8r3wovqkBnxK9Ms= Subject key identifier: 02:AA:66:3A:A3:AD:67:E8:EE:9C:D4:BE:86:A0:47:AD:CD:39:AD:CD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 55D9CE345393531254A02953FCCA214E15C9E1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144861.roa Signing time: Wed 04 Mar 2026 06:20:06 +0000 ROA not before: Wed 04 Mar 2026 06:15:06 +0000 ROA not after: Wed 03 Mar 2027 06:20:06 +0000 asID: 144861 IP address blocks: 240a:a8a3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d9:ce:34:53:93:53:12:54:a0:29:53:fc:ca:21:4e:15:c9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:06 2026 GMT Not After : Mar 3 06:20:06 2027 GMT Subject: CN=02AA663AA3AD67E8EE9CD4BE86A047ADCD39ADCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:62:3a:59:50:f7:6f:ff:98:89:34:6f:8c: 7e:d8:29:d0:1a:7a:0e:9d:8a:86:2d:16:52:f3:f7: 9a:4c:51:e5:53:9c:ef:a6:26:11:ed:d0:fb:fe:f6: c0:97:47:97:a7:dd:34:5d:4e:a3:28:18:0f:8f:3f: 5e:11:fb:e7:78:6e:85:da:0f:cd:fc:96:af:0d:ce: 31:21:99:de:59:a2:a9:9e:94:da:1b:36:17:97:d0: 1c:1b:73:c2:d8:52:9f:89:b8:1e:e4:b6:32:3e:ab: 2b:61:66:75:cb:62:f7:bd:e8:35:73:76:33:03:13: b8:97:2e:9b:59:3e:d8:36:28:47:d0:34:cf:55:25: 72:0b:5a:f0:2f:98:64:a8:25:f9:53:be:1a:af:95: 2d:1d:47:d6:66:a8:c7:57:9c:b3:32:94:43:71:72: 74:f0:1f:05:73:ef:a8:c0:e0:aa:57:1d:75:1b:c1: ca:97:9d:29:a2:da:52:1c:dd:de:a8:25:98:27:cc: eb:ec:31:a2:ae:a8:4b:89:ef:77:c9:e9:3f:38:15: 44:56:56:5f:b4:1c:43:01:cf:cd:0f:1a:20:a9:b1: 39:65:38:92:9e:52:69:b1:e6:02:7d:43:26:72:4b: 00:23:4a:7b:d3:aa:2f:fa:06:c1:5c:d5:df:1b:a8: c4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AA:66:3A:A3:AD:67:E8:EE:9C:D4:BE:86:A0:47:AD:CD:39:AD:CD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144861.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8a3::/32 Signature Algorithm: sha256WithRSAEncryption cc:95:0b:1f:7b:e3:d4:2b:b9:39:04:41:20:c2:b4:b5:8a:09: 4d:35:08:9f:b6:db:83:95:14:d1:b6:10:c2:23:08:7c:3f:14: 79:8d:f0:7c:5e:8a:e9:9b:d1:99:8d:41:b6:e7:fe:a9:7d:9f: 54:a2:53:05:da:b7:16:55:06:ea:48:4d:f2:71:30:db:94:ab: 5d:9c:16:e8:05:b7:ce:68:18:23:ce:25:16:5e:f0:fe:16:8e: 32:ad:d6:53:3d:6c:7d:75:c7:a4:c1:0d:f6:2b:70:49:d2:64: 4a:38:d1:3f:92:a6:cd:05:80:95:05:3f:49:dd:ac:c1:fe:9a: de:f3:1a:de:3f:ca:dc:fd:e5:93:0e:37:1d:9b:d4:20:56:e0: 87:1d:c3:ff:42:f5:3b:7c:83:36:6e:df:b9:a7:09:e3:b9:91: f4:e8:b1:81:7a:9c:a9:46:52:16:c0:ec:f0:49:a8:36:a5:0d: ed:ff:7b:bf:a1:69:1d:4e:63:3b:39:79:00:63:3b:ed:d8:8e: e4:33:7b:04:cc:eb:92:4b:db:18:a9:f9:83:b4:f8:0b:37:f7: 1f:70:fa:37:a9:7f:ac:3f:51:af:3f:49:54:03:6e:0b:fe:f2: 0d:86:f7:44:e0:0e:b0:49:5c:e6:8d:c9:77:a7:24:3d:02:83: 46:6f:15:f2 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgITVdnONFOTUxJUoClT/MohThXJ4TANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDDAxBOTFFNUQ2MTAwMDExMTAvBgNVBAUTKDA1RkM5QzVCODg1 MDZGN0MwRDNGODYyQzg4OTVCRUQ2N0U5RjhFQkEwHhcNMjYwMzA0MDYxNTA2WhcN MjcwMzAzMDYyMDA2WjAzMTEwLwYDVQQDEygwMkFBNjYzQUEzQUQ2N0U4RUU5Q0Q0 QkU4NkEwNDdBRENEMzlBRENEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtERiOllQ92//mIk0b4x+2CnQGnoOnYqGLRZS8/eaTFHlU5zvpiYR7dD7/vbA l0eXp900XU6jKBgPjz9eEfvneG6F2g/N/JavDc4xIZneWaKpnpTaGzYXl9AcG3PC 2FKfibge5LYyPqsrYWZ1y2L3veg1c3YzAxO4ly6bWT7YNihH0DTPVSVyC1rwL5hk qCX5U74ar5UtHUfWZqjHV5yzMpRDcXJ08B8Fc++owOCqVx11G8HKl50potpSHN3e qCWYJ8zr7DGirqhLie93yek/OBVEVlZftBxDAc/NDxogqbE5ZTiSnlJpseYCfUMm cksAI0p706ov+gbBXNXfG6jEWwIDAQABo4IBxTCCAcEwHQYDVR0OBBYEFAKqZjqj rWfo7pzUvoagR63NOa3NMB8GA1UdIwQYMBaAFAX8nFuIUG98DT+GLIiVvtZ+n466 MA4GA1UdDwEB/wQEAwIHgDBjBgNVHR8EXDBaMFigVqBUhlJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wLzA1RkM5QzVCODg1MDZGN0MwRDNGODYy Qzg4OTVCRUQ2N0U5RjhFQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcw AoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0JmeWNXNGhRYjN3TlA0WXNpSlctMW42Zmpy by5jZXIwTgYIKwYBBQUHAQsEQjBAMD4GCCsGAQUFBzALhjJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTQ0ODYxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo ozANBgkqhkiG9w0BAQsFAAOCAQEAzJULH3vj1Cu5OQRBIMK0tYoJTTUIn7bbg5UU 0bYQwiMIfD8UeY3wfF6K6ZvRmY1Btuf+qX2fVKJTBdq3FlUG6khN8nEw25SrXZwW 6AW3zmgYI84lFl7w/haOMq3WUz1sfXXHpMEN9itwSdJkSjjRP5KmzQWAlQU/Sd2s wf6a3vMa3j/K3P3lkw43HZvUIFbghx3D/0L1O3yDNm7fuacJ47mR9OixgXqcqUZS FsDs8EmoNqUN7f97v6FpHU5jOzl5AGM77diO5DN7BMzrkkvbGKn5g7T4Czf3H3D6 N6l/rD9Rrz9JVANuC/7yDYb3ROAOsElc5o3Jd6ckPQKDRm8V8g== -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:59 2026 by rpki-client