$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144926.roa File: AS144926.roa (raw, json) Hash identifier: YTGqJsQCYgYJ38LIcb3PmfCr/zk837LxlTNJmIpYrAE= Subject key identifier: 9A:5C:A8:5A:7B:5F:40:50:A3:15:B6:1B:71:CA:52:8A:BF:67:65:F4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0F9A7D52B63EC6EAA40C305A904D84CFF81E1BF5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144926.roa Signing time: Wed 04 Mar 2026 06:22:25 +0000 ROA not before: Wed 04 Mar 2026 06:17:25 +0000 ROA not after: Wed 03 Mar 2027 06:22:25 +0000 asID: 144926 IP address blocks: 240a:a8e4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9a:7d:52:b6:3e:c6:ea:a4:0c:30:5a:90:4d:84:cf:f8:1e:1b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:25 2026 GMT Not After : Mar 3 06:22:25 2027 GMT Subject: CN=9A5CA85A7B5F4050A315B61B71CA528ABF6765F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:15:2d:dd:5b:e5:65:ad:18:52:45:c8:63: 1c:4a:6d:08:d7:77:a1:0a:ba:ec:02:fd:af:6c:da: 28:1d:bf:24:3f:12:5c:0b:44:97:d4:54:fd:d9:7e: 09:56:9e:92:36:b1:9e:64:91:3b:23:6f:68:77:27: eb:e0:c6:68:9a:c5:03:eb:47:5a:02:92:91:65:17: 35:c9:76:5a:c1:ff:34:0b:9c:2e:f3:05:a9:a1:79: bd:fd:98:99:ca:a0:92:03:08:1f:97:e3:3e:31:f4: 42:80:a6:a1:1e:f0:1a:4d:d1:40:61:0b:b1:23:84: 5d:58:cc:cb:00:1b:7b:1e:0f:b8:9f:b0:5a:5e:18: 16:f5:f4:e6:54:e3:a1:24:0e:58:ca:f0:2b:5c:42: 10:e3:7c:30:c9:c1:29:e0:1d:1b:dc:bd:19:37:3d: c1:a2:28:b7:41:19:c6:61:74:73:c8:e0:4c:00:f4: 3b:1a:ea:ce:12:96:6c:6f:cd:b5:76:6f:21:a7:f6: 0d:00:89:16:cf:ad:2d:29:dd:f9:2d:52:89:05:5f: 79:ac:e0:1a:1a:19:98:ff:28:9d:30:8c:da:90:8b: fd:4a:ca:79:75:ea:50:b1:3b:f6:ac:b2:66:5c:5c: 3d:25:5e:af:37:0b:8e:71:5d:a8:30:52:fe:f8:8e: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5C:A8:5A:7B:5F:40:50:A3:15:B6:1B:71:CA:52:8A:BF:67:65:F4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144926.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8e4::/32 Signature Algorithm: sha256WithRSAEncryption 3b:8b:a9:8d:d1:1e:dc:19:07:8c:c8:c3:64:e6:ef:52:f5:56: 58:77:96:7d:da:ad:89:71:f8:e2:8a:67:08:b6:75:ce:4e:62: d6:b8:3b:7f:d9:14:77:9c:2a:0f:1b:a3:b9:e7:fc:ed:01:68: b8:73:fc:57:f6:ac:ef:a7:72:02:2f:07:df:e5:b6:bd:c7:eb: f4:95:83:bf:b0:dd:cf:88:20:42:58:a6:24:ed:ab:8b:39:2e: 7b:37:be:7f:e7:7e:a6:9a:d2:cf:83:4a:49:e2:43:fd:f2:0e: 5a:48:1c:cc:da:50:3c:b9:45:a6:37:a3:9f:68:7a:c3:d8:6d: 8f:c2:f3:86:31:60:c3:75:a3:aa:10:2a:2b:54:1a:d8:da:17: 27:48:d2:e8:e8:46:4f:2d:d7:20:b7:e9:bc:aa:8e:a3:19:7b: 6e:c1:99:58:d0:87:02:6c:72:e8:09:0d:6c:0a:45:48:f1:0b: 5f:46:01:41:52:dd:2d:d1:58:3c:c5:88:e4:6f:40:e3:19:75: c5:8d:25:38:58:6a:64:e8:1a:73:fa:a8:e1:ec:7c:af:22:73: 47:3c:67:86:bb:94:bc:34:fa:78:4c:19:c7:34:1e:02:fb:43: c2:83:73:3e:9a:0c:eb:78:60:80:6a:98:fa:eb:ee:86:f3:5c: 98:61:35:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUD5p9UrY+xuqkDDBakE2Ez/geG/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyNVoX DTI3MDMwMzA2MjIyNVowMzExMC8GA1UEAxMoOUE1Q0E4NUE3QjVGNDA1MEEzMTVC NjFCNzFDQTUyOEFCRjY3NjVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEgFS3dW+VlrRhSRchjHEptCNd3oQq67AL9r2zaKB2/JD8SXAtEl9RU/dl+ CVaekjaxnmSROyNvaHcn6+DGaJrFA+tHWgKSkWUXNcl2WsH/NAucLvMFqaF5vf2Y mcqgkgMIH5fjPjH0QoCmoR7wGk3RQGELsSOEXVjMywAbex4PuJ+wWl4YFvX05lTj oSQOWMrwK1xCEON8MMnBKeAdG9y9GTc9waIot0EZxmF0c8jgTAD0OxrqzhKWbG/N tXZvIaf2DQCJFs+tLSnd+S1SiQVfeazgGhoZmP8onTCM2pCL/UrKeXXqULE79qyy ZlxcPSVerzcLjnFdqDBS/viOTI0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSaXKha e19AUKMVthtxylKKv2dl9DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qOQwDQYJKoZIhvcNAQELBQADggEBADuLqY3RHtwZB4zIw2Tm71L1Vlh3ln3arYlx +OKKZwi2dc5OYta4O3/ZFHecKg8bo7nn/O0BaLhz/Ff2rO+ncgIvB9/ltr3H6/SV g7+w3c+IIEJYpiTtq4s5Lns3vn/nfqaa0s+DSkniQ/3yDlpIHMzaUDy5RaY3o59o esPYbY/C84YxYMN1o6oQKitUGtjaFydI0ujoRk8t1yC36byqjqMZe27BmVjQhwJs cugJDWwKRUjxC19GAUFS3S3RWDzFiORvQOMZdcWNJThYamToGnP6qOHsfK8ic0c8 Z4a7lLw0+nhMGcc0HgL7Q8KDcz6aDOt4YIBqmPrr7obzXJhhNQE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:06 2026 by rpki-client