$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144864.roa File: AS144864.roa (raw, json) Hash identifier: 8IwhKdDvQXsYGr3JxED7ddxoM0w4M7t2FvJ1FHjCA7I= Subject key identifier: E5:D7:C4:7A:E1:57:EC:70:8A:C3:D7:0F:F0:DE:30:76:58:B2:03:8A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 67E8D6F34D3AA99A7D2ED9BA8DC4A79884BAEAB1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144864.roa Signing time: Wed 04 Mar 2026 06:22:00 +0000 ROA not before: Wed 04 Mar 2026 06:17:00 +0000 ROA not after: Wed 03 Mar 2027 06:22:00 +0000 asID: 144864 IP address blocks: 240a:a8a6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e8:d6:f3:4d:3a:a9:9a:7d:2e:d9:ba:8d:c4:a7:98:84:ba:ea:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:00 2026 GMT Not After : Mar 3 06:22:00 2027 GMT Subject: CN=E5D7C47AE157EC708AC3D70FF0DE307658B2038A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:a5:e9:92:fd:c4:e5:be:b5:93:d4:b3:90: ed:fb:13:9e:66:e0:2b:f6:67:b0:fc:d2:21:68:5a: ec:0b:d0:68:3d:53:c4:3d:ec:48:a5:c1:ff:43:12: b0:80:10:40:a5:5b:81:19:9b:d5:72:74:f7:12:cb: 69:d4:7c:3e:eb:2d:13:c4:f9:d0:44:04:59:48:84: 7b:93:a8:08:11:ce:ed:8e:6b:2a:95:3c:63:28:94: b6:23:ca:29:31:64:9a:a4:fd:70:72:87:78:97:5f: 58:68:b6:41:97:84:1e:cf:47:77:04:67:82:c1:f5: 01:c0:c3:77:7b:52:4b:84:e2:56:2d:6a:9f:e5:90: 43:4e:10:66:9a:16:1f:f7:f9:13:e4:0c:be:12:9b: 04:8e:78:73:89:da:d6:23:6c:ba:e4:ab:11:da:84: e2:a9:e2:cf:7d:1a:4a:f0:cd:6a:64:77:a0:5d:8c: 58:5b:c3:84:37:cc:59:50:15:0b:b6:c4:55:9f:77: 48:25:c3:bb:c4:e9:9d:0a:17:86:03:f0:e1:db:a1: 24:ba:79:40:d3:8d:6c:3a:e8:16:96:41:d6:f5:f6: f9:07:62:51:be:97:0e:f4:7e:2f:e5:1a:33:03:ff: 07:87:e7:37:b9:8b:9d:37:89:f3:cd:e1:5d:f3:96: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D7:C4:7A:E1:57:EC:70:8A:C3:D7:0F:F0:DE:30:76:58:B2:03:8A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144864.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8a6::/32 Signature Algorithm: sha256WithRSAEncryption 6d:a6:c3:a7:2f:65:49:6f:70:07:cb:50:74:7f:b4:cf:70:7d: de:e0:38:cf:52:75:36:eb:fc:ef:78:ad:66:a3:a7:61:1e:f4: c4:e5:04:a1:57:89:e8:10:18:6e:e5:c0:69:e8:f6:cf:af:da: 18:49:08:c4:fa:90:40:1b:6c:05:38:dd:73:c9:17:65:01:49: ad:ab:55:00:16:63:06:8d:b4:59:b0:c5:3c:7b:b6:1d:14:a9: f6:d2:3b:84:7f:ab:fd:fe:a1:b0:f4:9b:18:b2:01:85:43:d9: a7:b0:86:49:dd:9a:9f:4e:01:fc:2d:ca:63:ef:73:82:d2:69: ac:aa:35:26:bf:43:f6:5a:9c:20:86:81:96:53:30:27:3d:8f: be:4c:e6:d7:20:0b:4c:31:d1:ff:3b:8c:97:c3:a2:6e:26:b3: 5b:6e:5a:80:d9:27:f0:ac:8b:29:b4:f8:4d:02:d9:33:dc:3a: f0:5e:6d:af:a8:22:a3:61:0a:d1:9f:d7:bc:2f:07:54:74:12: 0f:87:44:ed:dc:3a:e0:b0:22:47:ca:92:3d:07:9f:82:75:4e: 9d:e1:8f:fd:67:60:66:b3:75:77:ce:f6:49:86:11:c6:f2:9f: a8:0f:52:85:3a:95:62:cb:ef:23:45:62:42:5c:65:ef:ec:56: 66:9f:3a:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZ+jW8006qZp9Ltm6jcSnmIS66rEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwMFoX DTI3MDMwMzA2MjIwMFowMzExMC8GA1UEAxMoRTVEN0M0N0FFMTU3RUM3MDhBQzNE NzBGRjBERTMwNzY1OEIyMDM4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsvpemS/cTlvrWT1LOQ7fsTnmbgK/ZnsPzSIWha7AvQaD1TxD3sSKXB/0MS sIAQQKVbgRmb1XJ09xLLadR8PustE8T50EQEWUiEe5OoCBHO7Y5rKpU8YyiUtiPK KTFkmqT9cHKHeJdfWGi2QZeEHs9HdwRngsH1AcDDd3tSS4TiVi1qn+WQQ04QZpoW H/f5E+QMvhKbBI54c4na1iNsuuSrEdqE4qniz30aSvDNamR3oF2MWFvDhDfMWVAV C7bEVZ93SCXDu8TpnQoXhgPw4duhJLp5QNONbDroFpZB1vX2+QdiUb6XDvR+L+Ua MwP/B4fnN7mLnTeJ883hXfOWNn0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTl18R6 4VfscIrD1w/w3jB2WLIDijAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qKYwDQYJKoZIhvcNAQELBQADggEBAG2mw6cvZUlvcAfLUHR/tM9wfd7gOM9SdTbr /O94rWajp2Ee9MTlBKFXiegQGG7lwGno9s+v2hhJCMT6kEAbbAU43XPJF2UBSa2r VQAWYwaNtFmwxTx7th0UqfbSO4R/q/3+obD0mxiyAYVD2aewhkndmp9OAfwtymPv c4LSaayqNSa/Q/ZanCCGgZZTMCc9j75M5tcgC0wx0f87jJfDom4ms1tuWoDZJ/Cs iym0+E0C2TPcOvBeba+oIqNhCtGf17wvB1R0Eg+HRO3cOuCwIkfKkj0Hn4J1Tp3h j/1nYGazdXfO9kmGEcbyn6gPUoU6lWLL7yNFYkJcZe/sVmafOlk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:50 2026 by rpki-client