$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144896.roa File: AS144896.roa (raw, json) Hash identifier: jgP1UXG5YGqYLaa0MWRX7mlZylvwdD2K3btXJyttjMY= Subject key identifier: 15:0C:C5:FC:A8:B8:EB:A5:27:3B:28:30:3F:5C:9B:9A:B8:DE:C2:ED Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4D5AA80AD19F19B1E24424C98C0F1F5D5CDCF9D5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144896.roa Signing time: Wed 04 Mar 2026 06:20:39 +0000 ROA not before: Wed 04 Mar 2026 06:15:39 +0000 ROA not after: Wed 03 Mar 2027 06:20:39 +0000 asID: 144896 IP address blocks: 240a:a8c6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5a:a8:0a:d1:9f:19:b1:e2:44:24:c9:8c:0f:1f:5d:5c:dc:f9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:39 2026 GMT Not After : Mar 3 06:20:39 2027 GMT Subject: CN=150CC5FCA8B8EBA5273B28303F5C9B9AB8DEC2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:5b:77:4a:9e:20:59:30:3c:b2:25:f1:7a: 29:39:41:b0:df:d2:1d:39:9a:6b:be:fb:dc:d9:2c: 24:6e:7f:b8:69:fb:4e:95:cb:a7:de:bd:e2:c8:bc: 92:2e:83:02:cc:58:f7:77:20:87:13:b3:09:f1:93: c8:ef:4f:9a:59:00:53:47:22:99:45:fb:5a:28:32: cc:42:57:79:eb:48:e8:4b:dd:d2:c2:d7:c7:be:9e: e9:9d:f4:5b:9f:58:d9:2a:85:27:91:ec:c0:e0:09: 9b:4c:08:8c:5a:27:fd:aa:d3:82:3e:64:a2:fd:76: 1e:b6:3d:4a:2b:03:ba:74:76:0c:e9:7a:c0:c8:26: eb:1a:09:f5:ca:25:65:6e:c3:d7:93:cc:6e:66:ab: d5:b5:20:6d:fc:c1:35:71:5d:df:21:8a:cb:a0:e6: fd:a7:43:c3:72:d5:6d:36:74:b8:38:24:1f:85:c5: f8:de:37:b2:1a:fe:7b:62:6a:a6:e6:0d:37:b8:5c: bd:08:87:9a:35:4d:8e:7e:c0:89:fa:72:cf:2c:cd: 47:98:ec:0f:ab:ad:7c:03:71:e5:c0:69:e5:24:2d: 7e:2e:56:a2:91:43:59:9c:b8:88:a0:b1:9e:b0:13: 0c:26:07:16:71:ca:68:b1:6a:21:33:19:9b:4c:df: ef:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0C:C5:FC:A8:B8:EB:A5:27:3B:28:30:3F:5C:9B:9A:B8:DE:C2:ED X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144896.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8c6::/32 Signature Algorithm: sha256WithRSAEncryption 06:19:ef:ab:e0:8d:bc:5c:4c:33:d5:61:18:cf:db:67:99:61: de:8d:66:9b:4e:07:98:a7:66:29:fb:8b:ff:4a:37:eb:28:14: d9:cb:aa:e5:44:c3:cd:0c:9a:43:13:cf:c1:b1:e1:38:11:f8: fd:90:84:30:c8:9f:84:67:2d:e7:bf:4d:3d:82:3b:3d:7c:9e: d0:73:87:12:51:fd:29:23:0a:cc:f3:48:4d:7c:73:2c:97:96: 5d:97:9b:25:34:1a:ac:bf:09:b1:22:e0:4d:2f:21:ea:e5:ff: 70:ab:50:e9:b8:cd:75:50:50:63:f0:dd:ff:76:3b:1e:52:89: 27:57:73:a1:d5:61:88:28:77:21:ba:96:fe:3c:40:9e:cf:47: 54:8b:b3:74:b4:85:1d:80:3b:ad:9a:a2:93:b5:e3:7e:2e:89: 7b:e1:79:7d:2a:ed:a7:79:18:fe:e9:12:e9:30:6a:30:63:42: 20:a8:fb:39:08:cb:3f:9d:61:c2:06:60:7e:46:25:73:c2:82: b4:96:c0:22:bb:3f:80:80:8c:b1:de:22:7c:b5:a6:e6:60:33: e1:fd:5b:25:f7:a2:a7:43:02:09:2e:6e:c0:96:ea:0a:93:c1: ee:84:ae:c3:47:9a:5a:8c:4e:4f:19:ba:6e:b9:45:ec:75:93: c8:ad:98:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTVqoCtGfGbHiRCTJjA8fXVzc+dUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzOVoX DTI3MDMwMzA2MjAzOVowMzExMC8GA1UEAxMoMTUwQ0M1RkNBOEI4RUJBNTI3M0Iy ODMwM0Y1QzlCOUFCOERFQzJFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3EW3dKniBZMDyyJfF6KTlBsN/SHTmaa7773NksJG5/uGn7TpXLp9694si8 ki6DAsxY93cghxOzCfGTyO9PmlkAU0cimUX7WigyzEJXeetI6Evd0sLXx76e6Z30 W59Y2SqFJ5HswOAJm0wIjFon/arTgj5kov12HrY9SisDunR2DOl6wMgm6xoJ9col ZW7D15PMbmar1bUgbfzBNXFd3yGKy6Dm/adDw3LVbTZ0uDgkH4XF+N43shr+e2Jq puYNN7hcvQiHmjVNjn7AifpyzyzNR5jsD6utfANx5cBp5SQtfi5WopFDWZy4iKCx nrATDCYHFnHKaLFqITMZm0zf72kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQVDMX8 qLjrpSc7KDA/XJuauN7C7TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qMYwDQYJKoZIhvcNAQELBQADggEBAAYZ76vgjbxcTDPVYRjP22eZYd6NZptOB5in Zin7i/9KN+soFNnLquVEw80MmkMTz8Gx4TgR+P2QhDDIn4RnLee/TT2COz18ntBz hxJR/SkjCszzSE18cyyXll2XmyU0Gqy/CbEi4E0vIerl/3CrUOm4zXVQUGPw3f92 Ox5SiSdXc6HVYYgodyG6lv48QJ7PR1SLs3S0hR2AO62aopO1434uiXvheX0q7ad5 GP7pEukwajBjQiCo+zkIyz+dYcIGYH5GJXPCgrSWwCK7P4CAjLHeIny1puZgM+H9 WyX3oqdDAgkubsCW6gqTwe6ErsNHmlqMTk8Zum65Rex1k8itmFg= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:42 2026 by rpki-client