$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144884.roa File: AS144884.roa (raw, json) Hash identifier: Z91Ldqk+rOy08is2gEtjjvDUAcELS6OTBHXrDQCHAYY= Subject key identifier: 5C:27:E8:FF:EB:26:DB:5A:31:63:47:A2:DF:6E:C7:A7:9E:4B:3C:E5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2840B83243AF63259F759AB35FDF5FC73DAEFF0E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144884.roa Signing time: Wed 04 Mar 2026 06:19:52 +0000 ROA not before: Wed 04 Mar 2026 06:14:52 +0000 ROA not after: Wed 03 Mar 2027 06:19:52 +0000 asID: 144884 IP address blocks: 240a:a8ba::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:40:b8:32:43:af:63:25:9f:75:9a:b3:5f:df:5f:c7:3d:ae:ff:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:52 2026 GMT Not After : Mar 3 06:19:52 2027 GMT Subject: CN=5C27E8FFEB26DB5A316347A2DF6EC7A79E4B3CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:8f:c3:8e:7c:12:aa:e0:ba:7d:c8:30:f3: 88:f1:af:5e:e8:ad:22:69:a0:12:e9:e5:1f:d9:3b: a6:66:78:69:86:d8:10:53:4e:ab:a9:c4:d8:24:c3: 7e:38:4a:bc:d2:14:8a:66:1f:b2:1b:54:bd:9c:de: f4:d8:d2:3a:6b:67:29:88:cb:ee:81:26:55:b3:3a: d6:3b:a1:aa:30:5e:3c:ad:41:80:ab:21:7e:25:cc: 0b:e2:3a:94:48:8e:ba:fa:ac:6e:f9:15:f2:41:18: f1:5e:9e:7c:8d:02:82:1e:6c:ae:c1:20:70:7c:5a: 8b:a2:ed:57:71:60:d2:c6:cd:c1:b1:86:33:5b:3d: 4e:a5:63:67:d3:3e:07:59:bc:31:16:32:ba:f7:9f: 80:e3:b2:5a:bd:6a:e8:bd:aa:5b:b1:23:d3:05:40: b5:7e:4b:ed:15:ad:aa:c3:e7:57:5f:8b:4f:88:c5: 69:32:41:ee:65:25:8d:84:b9:66:9c:95:f1:08:81: 5f:bb:e6:eb:90:a1:95:8b:10:e4:36:3e:23:17:28: 3f:ad:59:39:b6:7e:ce:c0:21:ee:cf:f0:37:dc:38: 42:35:7f:e6:da:e2:32:e1:60:70:8a:c1:d9:b8:ae: 19:68:ba:ba:84:3f:e8:d0:41:da:19:a9:19:da:0a: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:27:E8:FF:EB:26:DB:5A:31:63:47:A2:DF:6E:C7:A7:9E:4B:3C:E5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144884.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8ba::/32 Signature Algorithm: sha256WithRSAEncryption 3e:05:f1:b1:19:f2:c3:5f:61:56:a5:79:f2:96:8e:a4:be:1e: f4:78:ea:87:41:b2:e4:21:d6:9f:db:46:1d:94:d1:e7:0a:0a: 8e:da:77:32:24:5f:64:ee:9c:38:b4:dd:e2:0d:c6:0c:99:69: 9e:9a:cd:b6:b7:76:c0:6c:14:c7:73:3e:87:f9:4b:14:bb:e6: f0:59:08:14:f3:ee:a4:73:b9:89:57:05:1e:2d:55:15:bb:ae: bb:f5:b2:e8:13:42:bd:11:97:14:59:e5:4c:0c:d1:ca:a1:82: e5:d0:36:8f:d6:49:a6:4d:54:25:e8:88:a0:1e:7e:1b:3e:2a: 12:83:8c:e0:69:e2:31:f8:87:78:69:f5:cd:42:85:ef:af:82: 11:c5:5c:a0:1e:df:2c:3d:23:99:b4:80:fb:9e:84:0a:a1:1a: b5:48:db:3d:ac:a1:fd:22:ba:64:aa:c8:2c:d0:e3:09:39:ec: c8:1f:b4:a1:5c:36:ca:f1:a9:c0:af:c1:03:27:03:ce:bb:dc: 9d:84:23:9e:78:b3:4a:9e:ee:ca:f1:50:66:dc:f9:c6:f2:f3: 21:4d:cb:5a:70:71:70:fd:85:af:04:b7:c7:37:0c:f4:c2:ec: fa:a7:9c:44:4d:39:a2:5f:3a:1c:41:f7:a0:d0:8f:ad:ec:aa: c0:04:1e:49 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKEC4MkOvYyWfdZqzX99fxz2u/w4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1MloX DTI3MDMwMzA2MTk1MlowMzExMC8GA1UEAxMoNUMyN0U4RkZFQjI2REI1QTMxNjM0 N0EyREY2RUM3QTc5RTRCM0NFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMi5j8OOfBKq4Lp9yDDziPGvXuitImmgEunlH9k7pmZ4aYbYEFNOq6nE2CTD fjhKvNIUimYfshtUvZze9NjSOmtnKYjL7oEmVbM61juhqjBePK1BgKshfiXMC+I6 lEiOuvqsbvkV8kEY8V6efI0Cgh5srsEgcHxai6LtV3Fg0sbNwbGGM1s9TqVjZ9M+ B1m8MRYyuvefgOOyWr1q6L2qW7Ej0wVAtX5L7RWtqsPnV1+LT4jFaTJB7mUljYS5 ZpyV8QiBX7vm65ChlYsQ5DY+IxcoP61ZObZ+zsAh7s/wN9w4QjV/5triMuFgcIrB 2biuGWi6uoQ/6NBB2hmpGdoKsP8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRcJ+j/ 6ybbWjFjR6Lfbsennks85TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qLowDQYJKoZIhvcNAQELBQADggEBAD4F8bEZ8sNfYValefKWjqS+HvR46odBsuQh 1p/bRh2U0ecKCo7adzIkX2TunDi03eINxgyZaZ6azba3dsBsFMdzPof5SxS75vBZ CBTz7qRzuYlXBR4tVRW7rrv1sugTQr0RlxRZ5UwM0cqhguXQNo/WSaZNVCXoiKAe fhs+KhKDjOBp4jH4h3hp9c1Che+vghHFXKAe3yw9I5m0gPuehAqhGrVI2z2sof0i umSqyCzQ4wk57MgftKFcNsrxqcCvwQMnA8673J2EI554s0qe7srxUGbc+cby8yFN y1pwcXD9ha8Et8c3DPTC7PqnnERNOaJfOhxB96DQj63sqsAEHkk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:21 2026 by rpki-client