$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144939.roa File: AS144939.roa (raw, json) Hash identifier: IYSyaW/sb6c+lhNdLpFgkpHOGgWUui+E8f4PIPA1lO0= Subject key identifier: 4D:D3:4C:19:AA:77:18:B9:E2:63:E2:48:52:E9:C3:11:44:F6:AE:C0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 44B99611FFA1A3B196B65ABE5A4EB3F58C7D93E6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144939.roa Signing time: Wed 04 Mar 2026 06:21:46 +0000 ROA not before: Wed 04 Mar 2026 06:16:46 +0000 ROA not after: Wed 03 Mar 2027 06:21:46 +0000 asID: 144939 IP address blocks: 240a:a8f1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b9:96:11:ff:a1:a3:b1:96:b6:5a:be:5a:4e:b3:f5:8c:7d:93:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:46 2026 GMT Not After : Mar 3 06:21:46 2027 GMT Subject: CN=4DD34C19AA7718B9E263E24852E9C31144F6AEC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:37:43:11:d7:87:ce:a4:6c:ca:74:4b:61:70: 0b:3e:0a:9f:fa:d0:80:9c:ea:70:52:84:3c:8c:db: c6:9e:4b:44:36:30:a7:03:93:85:3a:e9:36:7c:71: 3c:73:37:0c:1d:f5:a8:08:f4:f3:3c:cf:8a:f7:25: d9:27:50:bc:ed:46:24:66:f3:c6:82:37:b4:5b:84: 6e:60:aa:d2:1f:fe:cb:d3:4d:5e:dd:08:40:42:41: 67:50:e4:6d:6a:d0:15:4e:94:45:93:d9:9d:74:af: e8:d9:c8:5b:55:87:60:83:a7:da:d1:88:c7:10:82: 08:65:fc:9a:a5:fb:7c:53:ad:ed:fa:89:4a:78:a5: b9:75:78:5e:16:5f:21:34:28:20:9c:08:19:37:98: 5b:fa:30:55:e7:e4:41:85:fa:3a:64:f8:8c:5c:29: f7:13:d6:75:68:01:23:c9:cd:5c:d3:08:6a:db:ba: 68:a9:07:f0:5a:8e:12:39:b2:e0:dd:17:09:06:b8: 0d:38:89:73:6e:c8:ef:ce:46:d4:d9:38:78:9d:1d: 06:6d:bd:f2:50:d7:89:53:0e:06:f2:21:40:0e:0b: 9d:e0:c9:e4:a0:73:e0:50:e6:36:90:89:da:ea:02: d9:bc:94:3d:f9:91:7a:86:67:16:b4:1d:b7:15:b3: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:4C:19:AA:77:18:B9:E2:63:E2:48:52:E9:C3:11:44:F6:AE:C0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8f1::/32 Signature Algorithm: sha256WithRSAEncryption 1d:27:f4:62:57:9f:84:d3:59:35:e0:7c:d1:50:97:e9:65:19: c7:f4:fe:3f:b2:ce:d2:df:96:f1:2b:ca:3a:e7:0e:09:3d:ed: 76:ab:03:6b:12:bb:65:fe:00:ba:58:82:44:f2:e4:61:b3:79: 6e:a4:5f:e5:cd:bf:e2:c9:ce:99:4c:9b:f0:7a:46:6b:ac:91: d7:aa:3c:80:fa:71:08:23:bb:8b:af:16:b9:f0:a9:2a:f0:67: c7:e6:af:2e:01:c4:b7:8e:39:e4:7e:42:d6:ae:d9:0d:dd:24: ed:1f:74:09:5f:73:75:d0:3e:8f:ed:0d:5f:91:a6:15:ac:06: 54:e7:e9:bf:4a:44:ab:19:a6:a4:5d:77:88:a9:a3:53:54:7a: 87:e7:77:5c:8d:f6:13:de:07:45:0c:61:c2:0f:55:79:1c:3c: e4:a9:12:0f:a0:90:4a:39:6b:cc:3e:eb:96:a5:49:37:cf:6c: d0:7f:17:f3:0e:88:f8:ff:82:9d:73:2f:09:79:4f:a4:dd:f7: f1:0f:51:ae:44:6c:6b:8b:60:3b:36:9b:5c:55:a1:39:15:9d: f3:03:d1:31:d4:39:87:f2:d5:a7:57:3d:01:2e:b9:ac:02:b4: 21:c4:a6:42:0b:b7:87:e7:4c:27:5c:99:b6:85:6f:e4:b5:ef: f0:94:70:2f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURLmWEf+ho7GWtlq+Wk6z9Yx9k+YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0NloX DTI3MDMwMzA2MjE0NlowMzExMC8GA1UEAxMoNEREMzRDMTlBQTc3MThCOUUyNjNF MjQ4NTJFOUMzMTE0NEY2QUVDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO03QxHXh86kbMp0S2FwCz4Kn/rQgJzqcFKEPIzbxp5LRDYwpwOThTrpNnxx PHM3DB31qAj08zzPivcl2SdQvO1GJGbzxoI3tFuEbmCq0h/+y9NNXt0IQEJBZ1Dk bWrQFU6URZPZnXSv6NnIW1WHYIOn2tGIxxCCCGX8mqX7fFOt7fqJSniluXV4XhZf ITQoIJwIGTeYW/owVefkQYX6OmT4jFwp9xPWdWgBI8nNXNMIatu6aKkH8FqOEjmy 4N0XCQa4DTiJc27I785G1Nk4eJ0dBm298lDXiVMOBvIhQA4LneDJ5KBz4FDmNpCJ 2uoC2byUPfmReoZnFrQdtxWzf6cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRN00wZ qncYueJj4khS6cMRRPauwDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qPEwDQYJKoZIhvcNAQELBQADggEBAB0n9GJXn4TTWTXgfNFQl+llGcf0/j+yztLf lvEryjrnDgk97XarA2sSu2X+ALpYgkTy5GGzeW6kX+XNv+LJzplMm/B6Rmuskdeq PID6cQgju4uvFrnwqSrwZ8fmry4BxLeOOeR+Qtau2Q3dJO0fdAlfc3XQPo/tDV+R phWsBlTn6b9KRKsZpqRdd4ipo1NUeofnd1yN9hPeB0UMYcIPVXkcPOSpEg+gkEo5 a8w+65alSTfPbNB/F/MOiPj/gp1zLwl5T6Td9/EPUa5EbGuLYDs2m1xVoTkVnfMD 0THUOYfy1adXPQEuuawCtCHEpkILt4fnTCdcmbaFb+S17/CUcC8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:28 2026 by rpki-client