$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144934.roa File: AS144934.roa (raw, json) Hash identifier: 5+0Mt5358uazBSEnidwkw8PmOv4pqQ5IBUwrvF/zRcE= Subject key identifier: FF:42:2A:45:8A:07:CE:72:D8:6C:45:F0:C8:D7:1D:5E:BD:8B:D2:5A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 553C21012E4DD475629A3BEFF2BB15AC927788DC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144934.roa Signing time: Wed 04 Mar 2026 06:21:55 +0000 ROA not before: Wed 04 Mar 2026 06:16:55 +0000 ROA not after: Wed 03 Mar 2027 06:21:55 +0000 asID: 144934 IP address blocks: 240a:a8ec::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3c:21:01:2e:4d:d4:75:62:9a:3b:ef:f2:bb:15:ac:92:77:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:55 2026 GMT Not After : Mar 3 06:21:55 2027 GMT Subject: CN=FF422A458A07CE72D86C45F0C8D71D5EBD8BD25A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:bd:9f:76:ef:61:06:f3:d3:68:37:1e:e7: a9:0c:e1:99:28:8c:26:0f:48:c3:11:f3:3f:b2:d6: 62:05:63:41:c1:f6:92:8f:61:bf:e9:aa:05:14:73: b6:d5:52:7b:5e:94:9c:12:e3:3b:ea:fd:48:2e:c7: 90:7d:2e:0d:71:ac:9a:46:cd:06:82:9f:91:d9:9e: 33:43:35:df:0a:d5:7e:16:01:5b:89:f2:83:18:cd: ed:19:1d:c6:19:57:3b:4c:e7:21:e8:ee:fb:a8:8b: c2:f3:38:a2:b5:5b:ee:10:a9:cb:38:be:38:79:59: b2:45:dc:12:bc:af:a1:43:7c:dd:0a:5f:24:96:6e: cb:71:30:e5:82:d1:ce:08:79:d4:78:da:07:5a:ba: c0:6b:2b:77:dc:b2:34:a3:30:44:ed:0f:b6:cf:82: 52:76:fb:fb:9b:d8:57:d7:54:c9:c1:83:fc:40:76: 27:bd:e7:d6:c6:f9:59:58:4f:fe:51:ee:39:cf:50: 6a:76:ec:87:cb:19:2c:70:16:70:f0:9a:c5:cb:d3: b2:ee:8a:30:69:fe:c0:a8:70:c0:b3:bf:b4:b1:1d: f9:a3:31:4d:53:b1:a2:99:2b:c0:b6:bc:5f:3f:93: 87:97:1f:d9:a8:15:5a:40:8c:54:6f:1b:6f:42:17: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:42:2A:45:8A:07:CE:72:D8:6C:45:F0:C8:D7:1D:5E:BD:8B:D2:5A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8ec::/32 Signature Algorithm: sha256WithRSAEncryption 7e:9d:d5:1d:5b:fa:c8:69:6d:b5:17:7a:a5:d9:41:4b:51:d8: 10:84:9d:e2:f5:ba:75:ce:6a:94:a7:09:83:89:e4:28:49:f9: 72:0c:50:97:08:1c:ba:96:b1:4e:96:cf:31:36:3d:88:2e:e9: 0d:e1:55:ed:eb:10:fc:bf:d1:60:81:58:2f:05:c1:35:b7:1a: 56:6c:97:71:b1:ba:14:86:21:61:04:16:95:a8:c7:8a:2f:5f: 7c:6b:4b:37:93:f5:4a:d3:6b:5a:67:40:fd:68:91:b8:73:ba: 30:af:2e:ae:a8:f0:67:04:05:a6:10:57:70:e7:ef:f0:93:66: 71:83:57:93:41:7e:0f:f2:b9:fa:26:52:ae:c4:39:31:0c:54: 72:45:bf:77:bf:4a:51:6b:db:29:37:3e:b3:08:c6:bb:29:cc: 10:81:ba:a3:75:f1:df:b1:85:04:b3:58:ff:e6:fd:fb:3a:d9: 89:b7:1b:f9:59:47:d6:18:09:a1:38:a9:41:21:05:cb:f7:ff: d8:8d:a6:4f:7b:3d:fa:13:54:88:57:7f:0e:b0:4a:0a:07:e5: 48:b2:83:ea:03:0c:dc:fb:8c:f0:37:68:74:60:48:99:28:85: 84:1b:52:9f:b0:a9:6e:23:1c:4e:20:2e:e4:af:4e:08:5f:2c: 3c:53:9f:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVTwhAS5N1HVimjvv8rsVrJJ3iNwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1NVoX DTI3MDMwMzA2MjE1NVowMzExMC8GA1UEAxMoRkY0MjJBNDU4QTA3Q0U3MkQ4NkM0 NUYwQzhENzFENUVCRDhCRDI1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZyvZ9272EG89NoNx7nqQzhmSiMJg9IwxHzP7LWYgVjQcH2ko9hv+mqBRRz ttVSe16UnBLjO+r9SC7HkH0uDXGsmkbNBoKfkdmeM0M13wrVfhYBW4nygxjN7Rkd xhlXO0znIeju+6iLwvM4orVb7hCpyzi+OHlZskXcEryvoUN83QpfJJZuy3Ew5YLR zgh51HjaB1q6wGsrd9yyNKMwRO0Pts+CUnb7+5vYV9dUycGD/EB2J73n1sb5WVhP /lHuOc9Qanbsh8sZLHAWcPCaxcvTsu6KMGn+wKhwwLO/tLEd+aMxTVOxopkrwLa8 Xz+Th5cf2agVWkCMVG8bb0IX1L0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT/QipF igfOcthsRfDI1x1evYvSWjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qOwwDQYJKoZIhvcNAQELBQADggEBAH6d1R1b+shpbbUXeqXZQUtR2BCEneL1unXO apSnCYOJ5ChJ+XIMUJcIHLqWsU6WzzE2PYgu6Q3hVe3rEPy/0WCBWC8FwTW3GlZs l3GxuhSGIWEEFpWox4ovX3xrSzeT9UrTa1pnQP1okbhzujCvLq6o8GcEBaYQV3Dn 7/CTZnGDV5NBfg/yufomUq7EOTEMVHJFv3e/SlFr2yk3PrMIxrspzBCBuqN18d+x hQSzWP/m/fs62Ym3G/lZR9YYCaE4qUEhBcv3/9iNpk97PfoTVIhXfw6wSgoH5Uiy g+oDDNz7jPA3aHRgSJkohYQbUp+wqW4jHE4gLuSvTghfLDxTn3s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:49 2026 by rpki-client