$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144904.roa File: AS144904.roa (raw, json) Hash identifier: XexAm0ziL9hcZQ3U9QfKPqXjvIlzU+BE36QiCm0A6KQ= Subject key identifier: E6:F2:F9:E7:E2:75:BC:8B:8F:2A:D1:C2:D8:1A:3D:36:EF:03:8D:91 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 61E525242F087B0FF5954278C6AF54EFB0F19A76 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144904.roa Signing time: Wed 04 Mar 2026 06:20:52 +0000 ROA not before: Wed 04 Mar 2026 06:15:52 +0000 ROA not after: Wed 03 Mar 2027 06:20:52 +0000 asID: 144904 IP address blocks: 240a:a8ce::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e5:25:24:2f:08:7b:0f:f5:95:42:78:c6:af:54:ef:b0:f1:9a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:52 2026 GMT Not After : Mar 3 06:20:52 2027 GMT Subject: CN=E6F2F9E7E275BC8B8F2AD1C2D81A3D36EF038D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:82:74:84:ac:74:50:81:d6:2a:e6:c0:31: b2:f9:c5:20:a8:dc:ea:53:df:dd:da:e7:0f:c7:5f: 5f:c9:5e:59:42:bc:84:32:ce:4e:5a:4b:53:95:0f: 60:59:3e:9f:05:10:29:5c:b4:fa:80:f0:6b:24:64: b3:88:88:6b:ce:28:43:bb:ee:4a:ef:99:1e:30:73: ba:46:fa:80:74:b1:f7:e2:54:22:90:60:f4:bc:d4: 9b:65:e0:9f:97:b4:2f:6a:9b:06:32:f9:0e:da:50: fb:b3:2b:f1:95:f8:e0:c0:fb:68:c4:4e:6c:75:90: 65:2a:1a:1c:e0:df:c0:71:c4:0f:65:b8:55:20:7e: ac:d7:bc:40:df:09:5d:78:c4:9f:20:12:e7:34:07: 26:2a:5c:7a:07:5b:b1:e3:d1:8e:95:81:42:94:01: f7:73:88:19:9b:9d:75:8e:8b:10:d4:3b:78:39:31: 43:66:fa:ed:a7:c9:e5:3d:0b:fe:72:f8:eb:c6:8c: ea:61:bc:fe:82:89:09:49:15:d9:49:e1:9b:a6:a1: 7c:98:c2:89:93:09:59:1e:f5:11:26:a2:48:c8:20: 1c:1a:2c:fa:83:68:3d:98:2d:dd:8f:6c:d5:d0:2d: cf:dd:9b:d4:39:46:47:85:c7:97:67:cb:90:35:b6: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F2:F9:E7:E2:75:BC:8B:8F:2A:D1:C2:D8:1A:3D:36:EF:03:8D:91 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144904.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8ce::/32 Signature Algorithm: sha256WithRSAEncryption 6a:10:45:23:52:b3:80:b3:1b:82:f9:33:9b:75:01:e5:df:9c: 28:76:13:e1:90:e4:63:18:ba:ed:94:0f:2a:5d:5f:24:97:cd: 26:5e:e4:a1:48:9a:b8:e6:ff:53:2d:5a:91:26:38:6e:e2:fd: cb:de:b2:00:e0:04:f4:5d:69:98:10:63:35:92:35:22:f1:3c: f1:5c:b1:fb:1f:04:51:71:81:2c:cb:85:8a:0a:d8:6b:9d:ee: 12:1c:77:f6:38:b9:a4:30:fd:05:39:01:46:07:e8:5a:df:c5: 26:41:cd:76:56:49:df:d8:ad:61:58:44:29:04:62:7e:b7:4c: 2b:ca:1d:b8:4e:a7:2f:5b:98:b2:8c:ff:53:70:a4:1b:e0:e9: 93:e5:23:78:76:4c:9d:b6:55:85:0f:06:87:d4:11:60:0d:c2: 6b:79:81:84:14:77:1c:43:94:4c:92:a0:f7:ef:db:cb:d6:85: 7e:b9:43:15:6a:12:b8:3b:c0:b5:5c:84:93:d5:c3:07:6a:85: d2:d0:2f:e9:d1:f3:47:6d:a5:a0:66:c7:00:2d:98:6b:e3:3d: 02:70:e5:82:43:f2:fa:ba:94:19:8d:81:40:1f:be:0d:32:86: d2:ce:8f:0e:5c:b8:87:be:f4:9f:d5:b4:ab:d1:7a:36:c4:6e: 0c:ff:32:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYeUlJC8Iew/1lUJ4xq9U77DxmnYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1MloX DTI3MDMwMzA2MjA1MlowMzExMC8GA1UEAxMoRTZGMkY5RTdFMjc1QkM4QjhGMkFE MUMyRDgxQTNEMzZFRjAzOEQ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMa0gnSErHRQgdYq5sAxsvnFIKjc6lPf3drnD8dfX8leWUK8hDLOTlpLU5UP YFk+nwUQKVy0+oDwayRks4iIa84oQ7vuSu+ZHjBzukb6gHSx9+JUIpBg9LzUm2Xg n5e0L2qbBjL5DtpQ+7Mr8ZX44MD7aMRObHWQZSoaHODfwHHED2W4VSB+rNe8QN8J XXjEnyAS5zQHJipcegdbsePRjpWBQpQB93OIGZuddY6LENQ7eDkxQ2b67afJ5T0L /nL468aM6mG8/oKJCUkV2Unhm6ahfJjCiZMJWR71ESaiSMggHBos+oNoPZgt3Y9s 1dAtz92b1DlGR4XHl2fLkDW2QNkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTm8vnn 4nW8i48q0cLYGj027wONkTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qM4wDQYJKoZIhvcNAQELBQADggEBAGoQRSNSs4CzG4L5M5t1AeXfnCh2E+GQ5GMY uu2UDypdXySXzSZe5KFImrjm/1MtWpEmOG7i/cvesgDgBPRdaZgQYzWSNSLxPPFc sfsfBFFxgSzLhYoK2Gud7hIcd/Y4uaQw/QU5AUYH6FrfxSZBzXZWSd/YrWFYRCkE Yn63TCvKHbhOpy9bmLKM/1NwpBvg6ZPlI3h2TJ22VYUPBofUEWANwmt5gYQUdxxD lEySoPfv28vWhX65QxVqErg7wLVchJPVwwdqhdLQL+nR80dtpaBmxwAtmGvjPQJw 5YJD8vq6lBmNgUAfvg0yhtLOjw5cuIe+9J/VtKvRejbEbgz/MqU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:41 2026 by rpki-client