$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144918.roa File: AS144918.roa (raw, json) Hash identifier: mynMRnIYyXAvCC0G4XGTRNZEi+255iY6yfEQ1j/zQYs= Subject key identifier: 9C:D3:4E:D4:50:BE:84:F5:BA:4E:42:E5:C4:D1:8C:6D:6B:6D:C1:24 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7608BCA286B41FA24FEC6331DFBCBC14433B4356 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144918.roa Signing time: Wed 04 Mar 2026 06:19:29 +0000 ROA not before: Wed 04 Mar 2026 06:14:29 +0000 ROA not after: Wed 03 Mar 2027 06:19:29 +0000 asID: 144918 IP address blocks: 240a:a8dc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:08:bc:a2:86:b4:1f:a2:4f:ec:63:31:df:bc:bc:14:43:3b:43:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:29 2026 GMT Not After : Mar 3 06:19:29 2027 GMT Subject: CN=9CD34ED450BE84F5BA4E42E5C4D18C6D6B6DC124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:88:fa:f4:75:17:c4:d5:62:08:4a:9d:8b: d7:f8:34:cf:ab:5a:71:16:17:96:07:c0:ba:ad:1a: a3:aa:ef:13:ed:f9:b8:9a:b2:98:d2:44:70:9f:3b: ca:b8:5f:68:71:24:a6:62:e9:74:65:f7:7b:d7:10: 3f:90:d1:96:aa:e2:09:86:3a:3b:8f:70:99:4c:7f: 26:5b:91:12:10:b3:47:7c:51:2d:1b:2f:5e:b1:b4: 98:2f:77:38:d1:03:2c:45:cd:10:cd:8e:66:72:c2: c7:99:ea:0f:44:22:8a:1a:4b:80:a8:e4:cf:9b:0d: 0e:b7:ee:48:18:63:5f:a7:be:33:0d:52:d5:88:5b: 4f:65:cf:cf:7a:5b:6d:32:bc:78:25:15:4e:6c:4a: a4:e7:41:6b:77:1a:2e:ef:7b:67:f6:9d:a7:ff:88: 4a:31:94:f8:be:da:be:80:e3:9e:fc:42:09:9f:83: e3:29:83:ac:8e:22:4c:57:7c:7d:cb:64:b5:63:4e: 02:32:ab:dc:e1:d4:d5:85:5d:35:50:14:36:a7:58: 56:2d:df:2d:a4:bb:b8:52:7f:91:a4:97:e3:6c:a0: 8f:9f:6d:67:ff:f7:bd:03:df:b1:9a:88:b9:c7:65: 77:59:8f:e0:87:79:5d:91:79:71:1a:a4:2b:d1:d1: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D3:4E:D4:50:BE:84:F5:BA:4E:42:E5:C4:D1:8C:6D:6B:6D:C1:24 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144918.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8dc::/32 Signature Algorithm: sha256WithRSAEncryption be:28:89:0f:31:05:2b:71:54:d4:f7:23:0f:54:00:bb:0a:78: 7c:2f:f9:a8:fe:98:de:75:67:88:7e:d4:3b:1b:01:96:a6:75: e2:24:ad:d6:c3:c3:81:f8:68:a7:15:f0:dc:4f:27:e0:32:71: e3:f9:2b:03:7c:cb:fd:b4:4c:00:85:fa:c5:6b:a1:5c:c8:fe: d8:35:fa:99:e8:84:62:2b:dc:4b:eb:d6:7d:03:53:84:87:ec: 89:ed:cf:ed:78:20:8b:62:e4:79:d0:c5:93:d4:3a:cf:aa:40: 98:6b:a1:79:a5:00:b1:8d:22:3b:d2:81:1e:b2:cf:c4:d1:56: 15:85:59:ec:5b:02:2a:b2:aa:20:f8:5e:58:7c:26:7f:69:1f: 69:7d:7d:70:67:bc:29:f6:2e:34:3d:f2:56:e7:10:d0:90:c5: a6:76:9f:30:65:a2:07:95:7e:ae:a3:08:3e:d3:0d:bf:b9:fd: 37:f3:4f:8f:6c:5f:88:49:34:d9:27:6a:8e:9f:60:c2:07:13: b5:96:33:80:97:32:12:d7:74:ef:f5:d2:67:00:a5:43:7d:ce: ff:73:22:3c:3b:e0:0c:12:89:d9:0b:87:0a:e6:fe:7f:dd:98: 97:4b:c2:aa:60:a9:10:e2:b7:fe:f9:01:d4:37:63:c7:89:4a: 76:39:d0:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdgi8ooa0H6JP7GMx37y8FEM7Q1YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyOVoX DTI3MDMwMzA2MTkyOVowMzExMC8GA1UEAxMoOUNEMzRFRDQ1MEJFODRGNUJBNEU0 MkU1QzREMThDNkQ2QjZEQzEyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAmiPr0dRfE1WIISp2L1/g0z6tacRYXlgfAuq0ao6rvE+35uJqymNJEcJ87 yrhfaHEkpmLpdGX3e9cQP5DRlqriCYY6O49wmUx/JluREhCzR3xRLRsvXrG0mC93 ONEDLEXNEM2OZnLCx5nqD0QiihpLgKjkz5sNDrfuSBhjX6e+Mw1S1YhbT2XPz3pb bTK8eCUVTmxKpOdBa3caLu97Z/adp/+ISjGU+L7avoDjnvxCCZ+D4ymDrI4iTFd8 fctktWNOAjKr3OHU1YVdNVAUNqdYVi3fLaS7uFJ/kaSX42ygj59tZ//3vQPfsZqI ucdld1mP4Id5XZF5cRqkK9HRL60CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSc007U UL6E9bpOQuXE0Yxta23BJDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qNwwDQYJKoZIhvcNAQELBQADggEBAL4oiQ8xBStxVNT3Iw9UALsKeHwv+aj+mN51 Z4h+1DsbAZamdeIkrdbDw4H4aKcV8NxPJ+AyceP5KwN8y/20TACF+sVroVzI/tg1 +pnohGIr3Evr1n0DU4SH7Intz+14IIti5HnQxZPUOs+qQJhroXmlALGNIjvSgR6y z8TRVhWFWexbAiqyqiD4Xlh8Jn9pH2l9fXBnvCn2LjQ98lbnENCQxaZ2nzBlogeV fq6jCD7TDb+5/TfzT49sX4hJNNknao6fYMIHE7WWM4CXMhLXdO/10mcApUN9zv9z Ijw74AwSidkLhwrm/n/dmJdLwqpgqRDit/75AdQ3Y8eJSnY50As= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:20 2026 by rpki-client