$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144964.roa File: AS144964.roa (raw, json) Hash identifier: FPchS2DbhAJjjaeOfZYU1AGP1jy8SmC8Htqvx5Ab3Tw= Subject key identifier: 4D:6E:E7:EC:79:06:6D:C6:8C:D5:47:36:45:FF:8B:12:2B:97:45:E1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4AD1F3EC0ECD3438C9D6F9F973C10780F7670D5D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144964.roa Signing time: Wed 04 Mar 2026 06:19:20 +0000 ROA not before: Wed 04 Mar 2026 06:14:20 +0000 ROA not after: Wed 03 Mar 2027 06:19:20 +0000 asID: 144964 IP address blocks: 240a:a90a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d1:f3:ec:0e:cd:34:38:c9:d6:f9:f9:73:c1:07:80:f7:67:0d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:20 2026 GMT Not After : Mar 3 06:19:20 2027 GMT Subject: CN=4D6EE7EC79066DC68CD5473645FF8B122B9745E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:5c:14:f4:de:25:95:a5:33:dc:6c:f9:18: 47:2b:38:e0:1f:e2:5b:6f:5f:fb:d4:d3:48:80:8d: f3:58:32:1f:2e:3a:3c:cd:03:8b:62:e7:74:1a:2a: 8b:5d:00:9d:a6:48:b0:36:d7:41:33:c4:ea:d8:84: a2:17:38:dd:71:ae:ac:45:81:24:f9:05:25:3f:fe: 3c:c5:cc:02:d3:ff:94:0a:d4:02:f6:4e:67:10:a1: e6:4c:00:7f:5f:8f:f7:b2:c0:12:cc:b0:60:75:b1: da:0a:5e:d4:14:44:0e:95:05:f7:e8:d3:3b:80:62: 1d:de:c6:be:3c:c5:ff:86:2f:45:8e:9c:6f:88:0d: 9b:eb:f3:ee:84:ca:5f:51:db:91:a4:9e:81:f0:0e: 92:0e:8e:87:0e:ea:95:79:f5:07:6b:96:71:16:ea: 34:72:8e:2d:ce:8b:0e:34:ae:25:86:6c:f9:73:3c: 8b:a2:a9:77:18:2b:44:f2:e4:c4:bc:79:10:37:69: 32:2f:af:83:12:f5:9e:bc:d8:45:78:fa:6a:6d:44: d7:46:5c:52:6c:67:ce:b1:d1:be:db:93:95:30:58: 0b:21:ef:a9:1b:bf:e3:7b:c8:84:28:89:6e:22:ea: 30:9e:a0:5b:e0:c5:db:81:b1:6f:69:b5:8f:43:1d: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6E:E7:EC:79:06:6D:C6:8C:D5:47:36:45:FF:8B:12:2B:97:45:E1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144964.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a90a::/32 Signature Algorithm: sha256WithRSAEncryption d5:7c:68:ea:89:c0:20:1e:4e:ef:c7:b2:33:4d:2c:82:dd:9f: d8:ce:f3:d7:0b:6c:24:94:c1:af:73:e7:87:af:2a:e2:fa:02: be:ad:4a:b2:f3:07:c6:73:29:44:52:16:13:18:45:ae:f1:94: b6:0c:1e:a7:e7:6c:40:e2:f8:0d:31:1b:e1:ae:89:56:96:60: 20:ca:67:1a:2c:d8:e7:0d:5c:3a:56:7d:c4:35:f9:cd:19:1d: 28:d7:ba:cc:81:75:6f:23:60:3a:62:26:1e:ff:27:c0:37:fb: 9d:d0:5b:bb:cb:7e:99:60:bb:4b:0d:ef:e5:c4:9c:a9:3b:3c: 61:2b:74:bb:15:60:4e:66:9b:8b:6b:31:21:fe:61:e6:32:bc: ef:f3:31:29:0b:04:dc:d2:50:d2:db:b0:29:f8:e0:05:4f:6b: 47:4b:ba:9b:99:69:e0:8d:04:95:22:fe:0c:45:41:e9:10:66: 0d:5e:0c:c3:94:86:e2:09:4e:77:75:6e:51:19:d4:b9:b3:e1: bb:68:bd:e9:02:cc:4c:e0:cb:9e:d7:24:a0:ad:64:49:17:b4: a2:94:6c:45:fd:03:8b:52:fe:61:92:24:e2:4b:59:90:28:83: 5f:58:b8:b6:ff:24:cd:fd:15:6c:f4:00:b9:9f:e1:07:89:0c: ec:7d:64:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUStHz7A7NNDjJ1vn5c8EHgPdnDV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyMFoX DTI3MDMwMzA2MTkyMFowMzExMC8GA1UEAxMoNEQ2RUU3RUM3OTA2NkRDNjhDRDU0 NzM2NDVGRjhCMTIyQjk3NDVFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAiXBT03iWVpTPcbPkYRys44B/iW29f+9TTSICN81gyHy46PM0Di2LndBoq i10AnaZIsDbXQTPE6tiEohc43XGurEWBJPkFJT/+PMXMAtP/lArUAvZOZxCh5kwA f1+P97LAEsywYHWx2gpe1BREDpUF9+jTO4BiHd7GvjzF/4YvRY6cb4gNm+vz7oTK X1HbkaSegfAOkg6Ohw7qlXn1B2uWcRbqNHKOLc6LDjSuJYZs+XM8i6KpdxgrRPLk xLx5EDdpMi+vgxL1nrzYRXj6am1E10ZcUmxnzrHRvtuTlTBYCyHvqRu/43vIhCiJ biLqMJ6gW+DF24Gxb2m1j0MdloMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNbufs eQZtxozVRzZF/4sSK5dF4TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qQowDQYJKoZIhvcNAQELBQADggEBANV8aOqJwCAeTu/HsjNNLILdn9jO89cLbCSU wa9z54evKuL6Ar6tSrLzB8ZzKURSFhMYRa7xlLYMHqfnbEDi+A0xG+GuiVaWYCDK Zxos2OcNXDpWfcQ1+c0ZHSjXusyBdW8jYDpiJh7/J8A3+53QW7vLfplgu0sN7+XE nKk7PGErdLsVYE5mm4trMSH+YeYyvO/zMSkLBNzSUNLbsCn44AVPa0dLupuZaeCN BJUi/gxFQekQZg1eDMOUhuIJTnd1blEZ1Lmz4btovekCzEzgy57XJKCtZEkXtKKU bEX9A4tS/mGSJOJLWZAog19YuLb/JM39FWz0ALmf4QeJDOx9ZDM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:18 2026 by rpki-client