$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144916.roa File: AS144916.roa (raw, json) Hash identifier: jJ9Yvf3poiVVQTjsevfeVNNs6Z5cM4A0YfJ3/170tFQ= Subject key identifier: 7C:CB:6D:41:6D:8C:DD:1C:59:D8:01:4C:D0:76:1D:40:4E:AB:BB:A7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 22539D776BE428C1B04BF9D7FFDDE4FDB6F44CE3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144916.roa Signing time: Wed 04 Mar 2026 06:20:33 +0000 ROA not before: Wed 04 Mar 2026 06:15:33 +0000 ROA not after: Wed 03 Mar 2027 06:20:33 +0000 asID: 144916 IP address blocks: 240a:a8da::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:53:9d:77:6b:e4:28:c1:b0:4b:f9:d7:ff:dd:e4:fd:b6:f4:4c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:33 2026 GMT Not After : Mar 3 06:20:33 2027 GMT Subject: CN=7CCB6D416D8CDD1C59D8014CD0761D404EABBBA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:2b:32:00:fd:b0:67:31:a8:96:3f:15:a8: a8:b8:78:3c:a6:02:92:2d:39:1f:98:44:5c:2c:a4: 06:c2:9c:ea:83:dd:48:93:4f:5a:29:ee:e7:4c:c3: 5c:9d:c1:8a:09:11:78:6d:f6:56:80:8c:91:d8:cc: 89:4a:96:f9:71:b9:4a:09:0d:41:da:2f:f7:d5:33: 7f:c8:db:c3:47:69:8b:10:4c:e0:8a:7e:e9:49:99: 48:15:40:5c:1e:27:97:37:16:12:4c:10:68:ab:59: 0c:02:b6:1c:b5:0c:b8:bf:47:06:e3:9b:4f:1a:8b: c5:c5:7b:b7:19:f8:9e:f4:d8:4b:c7:57:c6:7e:59: ec:db:7b:a6:56:0d:f2:ed:43:db:d5:ce:a5:45:ab: 66:1e:60:56:8a:04:2e:a7:46:19:3f:32:03:f5:a9: 0d:52:ce:27:7d:45:39:2b:c1:89:f5:df:34:43:bb: 46:5e:57:f3:a9:29:d1:11:62:2a:3d:49:54:e2:7a: 82:69:ed:5b:a5:74:b2:42:a2:fb:e3:6e:cc:1c:61: eb:66:10:b4:1d:6f:21:36:34:4d:15:c9:ee:be:31: 7e:b1:c1:ff:2b:78:44:9c:c7:b2:d7:eb:e9:ac:17: 85:77:eb:45:9b:22:cb:77:8d:28:1b:a0:b0:1d:5d: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CB:6D:41:6D:8C:DD:1C:59:D8:01:4C:D0:76:1D:40:4E:AB:BB:A7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144916.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8da::/32 Signature Algorithm: sha256WithRSAEncryption 75:50:bf:62:41:d5:98:2c:9a:24:eb:05:c3:99:e1:fc:22:fe: 8b:b3:b1:dc:ae:1f:33:08:d9:a7:09:e2:ba:43:60:1b:c0:75: a1:b0:9a:35:7d:3f:bf:11:33:2a:1c:92:1c:ac:f7:54:f3:4d: eb:1a:23:85:a9:b7:dc:66:ab:00:bd:17:af:5a:2c:41:a8:83: 2f:10:ea:8e:dd:e2:d0:df:40:75:55:79:fa:12:13:b8:91:0c: 97:5a:a3:95:e2:1a:e2:fc:a1:9b:17:61:e6:71:01:b3:79:7a: db:9d:98:84:da:e7:dc:62:df:2a:48:1c:0f:34:9b:f7:02:65: fb:ba:46:5c:b9:de:be:20:34:54:97:fa:40:0f:03:dc:6d:36: 0e:8d:05:49:00:23:0e:2f:57:25:b5:f7:42:94:bf:1f:92:22: 3d:20:9a:9e:88:af:88:a7:ec:ec:05:4b:c9:b9:5e:e8:bd:6f: 3f:dd:42:02:81:38:c7:0b:ba:95:ff:b2:3b:43:d6:df:73:75: b9:df:68:c4:ac:a2:8e:ad:89:08:21:ab:cf:46:5b:4d:41:99: 18:d6:81:3f:6c:fd:69:9d:eb:8c:b2:26:b0:f5:d1:d5:44:06: e8:9b:c6:b8:cd:a3:c4:b4:d1:ed:d0:15:86:72:e9:32:9e:b3: fc:3a:bb:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIlOdd2vkKMGwS/nX/93k/bb0TOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzM1oX DTI3MDMwMzA2MjAzM1owMzExMC8GA1UEAxMoN0NDQjZENDE2RDhDREQxQzU5RDgw MTRDRDA3NjFENDA0RUFCQkJBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL81KzIA/bBnMaiWPxWoqLh4PKYCki05H5hEXCykBsKc6oPdSJNPWinu50zD XJ3BigkReG32VoCMkdjMiUqW+XG5SgkNQdov99Uzf8jbw0dpixBM4Ip+6UmZSBVA XB4nlzcWEkwQaKtZDAK2HLUMuL9HBuObTxqLxcV7txn4nvTYS8dXxn5Z7Nt7plYN 8u1D29XOpUWrZh5gVooELqdGGT8yA/WpDVLOJ31FOSvBifXfNEO7Rl5X86kp0RFi Kj1JVOJ6gmntW6V0skKi++NuzBxh62YQtB1vITY0TRXJ7r4xfrHB/yt4RJzHstfr 6awXhXfrRZsiy3eNKBugsB1dJp0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR8y21B bYzdHFnYAUzQdh1ATqu7pzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qNowDQYJKoZIhvcNAQELBQADggEBAHVQv2JB1ZgsmiTrBcOZ4fwi/ouzsdyuHzMI 2acJ4rpDYBvAdaGwmjV9P78RMyockhys91TzTesaI4Wpt9xmqwC9F69aLEGogy8Q 6o7d4tDfQHVVefoSE7iRDJdao5XiGuL8oZsXYeZxAbN5etudmITa59xi3ypIHA80 m/cCZfu6Rly53r4gNFSX+kAPA9xtNg6NBUkAIw4vVyW190KUvx+SIj0gmp6Ir4in 7OwFS8m5Xui9bz/dQgKBOMcLupX/sjtD1t9zdbnfaMSsoo6tiQghq89GW01BmRjW gT9s/Wmd64yyJrD10dVEBuibxrjNo8S00e3QFYZy6TKes/w6u8U= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:59 2026 by rpki-client