$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144901.roa File: AS144901.roa (raw, json) Hash identifier: qwlmHw6TtpwMRA24rGF9eje0ShsrA5kCvB/Da9SIn0g= Subject key identifier: 7C:16:0C:EC:20:DA:3C:12:1C:39:8C:1A:D0:D8:2C:30:BF:74:42:A0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 56CE206C1F7E907645C3E9A50AF70DBAF2EADA28 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144901.roa Signing time: Wed 04 Mar 2026 06:21:26 +0000 ROA not before: Wed 04 Mar 2026 06:16:26 +0000 ROA not after: Wed 03 Mar 2027 06:21:26 +0000 asID: 144901 IP address blocks: 240a:a8cb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ce:20:6c:1f:7e:90:76:45:c3:e9:a5:0a:f7:0d:ba:f2:ea:da:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:26 2026 GMT Not After : Mar 3 06:21:26 2027 GMT Subject: CN=7C160CEC20DA3C121C398C1AD0D82C30BF7442A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:09:d8:44:b7:51:14:ad:fe:02:c6:ce:fd: 68:5f:8f:1a:e1:7d:11:2c:1a:7e:7e:31:5d:bd:e0: a6:3f:e6:85:d0:5b:f6:e7:4a:a6:2e:e7:7b:49:14: 8b:01:3d:72:bb:16:39:82:ee:c6:40:5b:88:5c:63: 79:c7:d1:0b:a5:be:04:1e:82:46:7a:4e:26:02:7e: 51:91:47:c9:3b:c7:35:1f:20:e1:3a:56:22:73:13: de:a3:50:40:d5:52:58:ee:49:8f:3a:46:65:07:31: 48:c1:de:f0:35:b0:bd:eb:1e:c7:8e:b6:76:91:12: cc:d6:bb:86:59:9b:59:9f:ac:00:8a:f7:e5:b6:25: 02:fa:1f:17:84:1e:58:54:53:6d:8e:96:3b:8c:47: b3:93:7b:c1:f3:fc:1d:95:0c:0d:cc:93:17:72:57: 0a:43:1d:04:9b:50:b3:1a:4c:5a:cc:6f:78:eb:b1: f2:15:bb:84:cd:ba:06:cd:74:be:b7:ca:43:5b:27: 90:50:c1:60:71:86:27:6d:3d:1b:77:fb:de:a0:5f: 50:d0:a7:81:b9:dc:11:41:cc:03:da:ca:4d:c3:e2: 83:c3:ca:2e:90:f7:af:69:1c:74:26:c4:2a:a5:15: dc:65:d0:1f:2d:ba:a1:c0:9e:38:8a:b6:c4:7b:38: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:16:0C:EC:20:DA:3C:12:1C:39:8C:1A:D0:D8:2C:30:BF:74:42:A0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144901.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8cb::/32 Signature Algorithm: sha256WithRSAEncryption a6:8d:c3:7c:35:db:91:1d:f5:b3:fb:c0:5d:52:31:d7:b7:b0: 4d:b5:0c:10:76:38:36:cd:9c:95:83:db:7f:5e:19:cb:42:b9: 6c:f1:55:47:74:e8:72:1f:3d:9f:6c:b4:cd:69:33:95:26:32: d1:5e:af:36:93:71:6d:5b:ef:c7:73:88:52:f9:47:cc:c1:e3: 46:1d:e3:dd:d3:0b:d3:de:90:53:dc:8b:2a:83:76:8e:01:6d: 4f:a0:5c:64:1a:0a:c5:ba:1e:06:91:1f:a7:c8:11:0b:3b:4c: dc:49:dd:34:9c:c7:fc:d5:4b:23:24:f2:da:b8:45:71:cc:60: 16:ec:cb:27:74:fc:ed:b8:e0:c9:74:58:2c:ab:5b:08:34:60: 68:eb:cd:38:ed:d3:f4:a0:4c:a8:2a:1d:a8:d0:c3:df:c1:81: f6:49:f8:8c:50:0b:10:60:ed:bc:2b:43:2b:2e:61:f8:32:30: 32:25:d6:d8:2f:34:47:46:70:c4:50:90:1f:9c:54:fc:76:88: 4a:90:32:84:d5:60:4a:85:eb:18:48:bb:59:b5:4a:e3:de:c1: d0:db:ae:94:a8:6b:69:2d:15:9a:3f:ae:11:ed:c6:e0:e0:bd: f9:7e:04:95:d7:78:8f:c2:d4:96:02:2f:5e:96:31:fe:3c:94: 1d:2e:86:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVs4gbB9+kHZFw+mlCvcNuvLq2igwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyNloX DTI3MDMwMzA2MjEyNlowMzExMC8GA1UEAxMoN0MxNjBDRUMyMERBM0MxMjFDMzk4 QzFBRDBEODJDMzBCRjc0NDJBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyvCdhEt1EUrf4Cxs79aF+PGuF9ESwafn4xXb3gpj/mhdBb9udKpi7ne0kU iwE9crsWOYLuxkBbiFxjecfRC6W+BB6CRnpOJgJ+UZFHyTvHNR8g4TpWInMT3qNQ QNVSWO5JjzpGZQcxSMHe8DWwvesex462dpESzNa7hlmbWZ+sAIr35bYlAvofF4Qe WFRTbY6WO4xHs5N7wfP8HZUMDcyTF3JXCkMdBJtQsxpMWsxveOux8hW7hM26Bs10 vrfKQ1snkFDBYHGGJ209G3f73qBfUNCngbncEUHMA9rKTcPig8PKLpD3r2kcdCbE KqUV3GXQHy26ocCeOIq2xHs4c0ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR8Fgzs INo8Ehw5jBrQ2Cwwv3RCoDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qMswDQYJKoZIhvcNAQELBQADggEBAKaNw3w125Ed9bP7wF1SMde3sE21DBB2ODbN nJWD239eGctCuWzxVUd06HIfPZ9stM1pM5UmMtFerzaTcW1b78dziFL5R8zB40Yd 493TC9PekFPciyqDdo4BbU+gXGQaCsW6HgaRH6fIEQs7TNxJ3TScx/zVSyMk8tq4 RXHMYBbsyyd0/O244Ml0WCyrWwg0YGjrzTjt0/SgTKgqHajQw9/BgfZJ+IxQCxBg 7bwrQysuYfgyMDIl1tgvNEdGcMRQkB+cVPx2iEqQMoTVYEqF6xhIu1m1SuPewdDb rpSoa2ktFZo/rhHtxuDgvfl+BJXXeI/C1JYCL16WMf48lB0uhlQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:05 2026 by rpki-client