$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144912.roa File: AS144912.roa (raw, json) Hash identifier: F1Xje4TUUn2SwddGCidKJx7VgHmp05P1yK1u9uP1e6Y= Subject key identifier: 1C:53:EB:4E:AB:C1:A3:2F:7D:57:5D:8D:95:03:4F:D7:4D:77:C1:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4B4F7806A5F3B8EAA125E7FD668E46B252D80793 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144912.roa Signing time: Wed 04 Mar 2026 06:20:00 +0000 ROA not before: Wed 04 Mar 2026 06:15:00 +0000 ROA not after: Wed 03 Mar 2027 06:20:00 +0000 asID: 144912 IP address blocks: 240a:a8d6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4f:78:06:a5:f3:b8:ea:a1:25:e7:fd:66:8e:46:b2:52:d8:07:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:00 2026 GMT Not After : Mar 3 06:20:00 2027 GMT Subject: CN=1C53EB4EABC1A32F7D575D8D95034FD74D77C112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:34:80:da:f2:cd:69:78:2d:0a:fc:8c:2e:cf: 29:41:5f:71:79:97:52:54:a0:52:db:56:e6:5b:e8: b2:84:12:dd:f6:1c:97:10:7c:42:84:3b:5d:70:85: 5b:37:c5:a9:48:71:fd:77:c7:28:02:31:2a:9f:a0: b8:b0:22:d5:7c:2b:b7:c1:91:49:c0:43:ff:3b:f2: c4:57:ee:e6:3f:e2:ed:c0:5a:c9:3c:7a:a8:76:26: 13:6c:00:0d:16:ea:18:77:18:dd:09:4f:36:48:91: fc:0e:17:f6:85:e8:7f:d0:e3:c9:5d:b0:1d:ed:02: 66:23:5a:f2:9b:70:7f:3b:2e:88:cd:e8:3a:1d:6c: 11:2a:e4:1a:b5:3d:28:20:3d:f9:b8:c6:50:45:93: 60:4f:4c:52:54:9e:f0:b5:3d:40:bb:99:4d:56:6f: c2:f7:fa:6a:cc:1a:ba:f8:25:46:c9:a1:75:4f:d0: 17:8a:0b:7e:3b:a7:ba:1e:a7:89:4f:ba:5a:77:5d: b0:76:77:03:3b:25:ca:9e:99:60:52:68:1c:83:f3: 8b:a3:ae:3f:b9:c6:7e:67:ae:8b:1f:c6:9e:c6:b7: 3a:8b:9f:c1:6b:02:0b:3e:02:55:00:57:0e:6b:ff: 3d:fa:01:11:f7:85:e6:dc:4b:8e:14:e7:14:ae:6f: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:53:EB:4E:AB:C1:A3:2F:7D:57:5D:8D:95:03:4F:D7:4D:77:C1:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144912.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8d6::/32 Signature Algorithm: sha256WithRSAEncryption a3:bb:35:28:07:07:e6:81:0d:ca:69:c0:65:2c:36:cb:47:d3: d7:6a:87:c0:a4:35:cf:ec:91:eb:e8:26:30:f4:fc:c6:36:f3: 4a:21:61:f6:fe:9c:5a:62:dd:65:ed:1c:52:43:03:35:87:f5: a4:55:6d:76:07:98:b3:db:93:50:74:d1:3b:ff:a4:1e:03:66: 12:8e:11:4d:fc:29:f6:53:eb:0a:81:4b:5a:25:9c:81:3f:23: 18:10:59:db:7f:47:54:2a:e0:ec:dd:32:c3:08:47:52:66:16: f2:49:6b:65:7b:0c:99:c8:e6:aa:da:16:56:b9:c3:1e:b2:84: 7b:26:12:4d:47:55:d4:5a:76:8e:8f:61:2a:ad:e0:4b:07:23: c8:b5:c5:19:d5:3b:97:9c:22:4e:62:08:4c:7a:d2:37:8f:4f: 57:c1:ab:1b:7c:f5:da:5a:83:42:a0:75:8b:a7:3c:48:5f:57: 2b:c3:df:7b:f4:1a:3b:17:ce:85:0b:48:e8:94:c1:11:d2:78: 7e:f5:69:04:85:fd:44:0f:1a:26:57:79:05:38:fb:9d:fd:d6: 53:e2:4e:63:10:52:be:1d:38:8c:ac:4b:b1:f1:99:41:6c:eb: d6:05:dc:0b:4a:ca:2b:fb:09:67:9e:53:3f:02:f9:9e:5e:76: 94:6c:a7:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS094BqXzuOqhJef9Zo5GslLYB5MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwMFoX DTI3MDMwMzA2MjAwMFowMzExMC8GA1UEAxMoMUM1M0VCNEVBQkMxQTMyRjdENTc1 RDhEOTUwMzRGRDc0RDc3QzExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQ0gNryzWl4LQr8jC7PKUFfcXmXUlSgUttW5lvosoQS3fYclxB8QoQ7XXCF WzfFqUhx/XfHKAIxKp+guLAi1Xwrt8GRScBD/zvyxFfu5j/i7cBayTx6qHYmE2wA DRbqGHcY3QlPNkiR/A4X9oXof9DjyV2wHe0CZiNa8ptwfzsuiM3oOh1sESrkGrU9 KCA9+bjGUEWTYE9MUlSe8LU9QLuZTVZvwvf6aswauvglRsmhdU/QF4oLfjunuh6n iU+6WnddsHZ3Azslyp6ZYFJoHIPzi6OuP7nGfmeuix/Gnsa3OoufwWsCCz4CVQBX Dmv/PfoBEfeF5txLjhTnFK5v/bcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQcU+tO q8GjL31XXY2VA0/XTXfBEjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qNYwDQYJKoZIhvcNAQELBQADggEBAKO7NSgHB+aBDcppwGUsNstH09dqh8CkNc/s kevoJjD0/MY280ohYfb+nFpi3WXtHFJDAzWH9aRVbXYHmLPbk1B00Tv/pB4DZhKO EU38KfZT6wqBS1olnIE/IxgQWdt/R1Qq4OzdMsMIR1JmFvJJa2V7DJnI5qraFla5 wx6yhHsmEk1HVdRado6PYSqt4EsHI8i1xRnVO5ecIk5iCEx60jePT1fBqxt89dpa g0KgdYunPEhfVyvD33v0GjsXzoULSOiUwRHSeH71aQSF/UQPGiZXeQU4+5391lPi TmMQUr4dOIysS7HxmUFs69YF3AtKyiv7CWeeUz8C+Z5edpRspwo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:06 2026 by rpki-client