$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144967.roa File: AS144967.roa (raw, json) Hash identifier: jn91NTVZiS3Xt/aAC5Y/3bWVa+0S7HUZosI68MJnmUU= Subject key identifier: AF:34:B5:C7:6B:87:59:F3:04:86:B5:1C:8D:7C:A1:FB:93:2A:6C:2F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3970E59632E653A18657CCDC3511957E8AF67263 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144967.roa Signing time: Wed 04 Mar 2026 06:21:54 +0000 ROA not before: Wed 04 Mar 2026 06:16:54 +0000 ROA not after: Wed 03 Mar 2027 06:21:54 +0000 asID: 144967 IP address blocks: 240a:a90d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:70:e5:96:32:e6:53:a1:86:57:cc:dc:35:11:95:7e:8a:f6:72:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:54 2026 GMT Not After : Mar 3 06:21:54 2027 GMT Subject: CN=AF34B5C76B8759F30486B51C8D7CA1FB932A6C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:ad:04:0c:21:5d:af:7a:fc:5f:60:a1:dd: e3:20:76:e6:7e:fb:69:29:c7:47:45:52:21:28:f1: 3b:a2:81:18:66:32:96:45:82:17:e3:2d:43:20:fd: 27:9c:d0:8f:6e:26:82:2f:97:a4:85:15:27:c9:cd: 21:fe:ed:dd:e8:2b:13:29:3e:6b:2a:b1:6c:5a:5d: 0a:aa:22:83:66:59:c6:50:22:e7:4d:38:de:63:cc: e2:75:f9:fd:ee:f7:46:31:f1:da:47:2e:dc:04:fc: 29:5c:9b:ea:f8:88:17:66:6f:5b:46:65:2c:83:d5: f9:90:a3:72:52:5b:77:f1:cf:44:b7:aa:24:93:b5: d0:e5:43:c3:b5:11:67:cc:e8:95:ec:6e:df:63:3f: 30:8b:77:b7:cc:93:73:ad:ee:09:4a:ca:5e:35:dc: 18:90:85:5b:fe:a6:69:99:e0:fa:11:ea:d6:34:ab: a5:55:2b:13:54:c7:f0:3b:a5:c3:4a:58:ee:ad:bb: 39:15:68:33:a5:3f:ce:4d:fb:6f:c8:20:cf:60:c7: 00:10:41:c9:02:de:c2:bd:36:f4:1e:d2:eb:66:0b: e0:42:a1:e7:80:d5:80:c7:e2:47:f8:d1:7c:af:79: 06:1a:af:e6:f7:87:a7:95:5d:25:ae:55:bd:60:88: 38:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:34:B5:C7:6B:87:59:F3:04:86:B5:1C:8D:7C:A1:FB:93:2A:6C:2F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a90d::/32 Signature Algorithm: sha256WithRSAEncryption 56:d3:9c:10:30:ef:60:4a:70:0a:cf:90:a8:63:3a:64:ad:ee: c8:bd:c1:4c:2b:44:a8:ad:9a:6d:80:39:b2:0e:e2:9c:53:44: 93:5b:94:c1:47:4a:22:c8:8d:06:3e:7c:52:7f:2f:13:96:19: 66:56:ea:6f:69:dc:05:04:56:a7:65:eb:8d:db:16:2e:b1:e2: be:b9:b0:76:41:ac:5a:19:05:10:6e:ee:a6:0a:c5:40:9b:bf: 8d:64:ca:57:67:02:e4:6d:0f:c6:83:78:6b:63:cf:51:70:cf: 49:f6:3d:97:bb:6d:49:f6:0d:a7:36:07:34:43:50:04:cf:60: 6d:f3:27:ef:97:46:ea:0d:59:07:7f:38:15:09:cf:96:b9:cc: 2f:38:27:1c:75:a1:9d:1f:44:3c:28:a2:0b:82:05:fd:ff:5a: 88:b2:75:68:83:15:a8:fd:bb:71:57:a7:06:06:ad:c6:5c:5e: e2:26:b6:58:ea:92:dd:3a:c9:10:8d:02:a2:ea:03:59:e9:f3: 18:d6:f3:5b:db:62:69:68:6f:5e:37:68:44:b0:5c:62:63:ac: bd:69:9d:17:34:6e:5b:26:54:18:3b:89:0c:bf:7e:ab:3d:90: 69:9c:a0:60:c3:86:a9:1c:b9:9d:20:07:5f:9b:df:79:ef:da: 9d:61:3f:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOXDlljLmU6GGV8zcNRGVfor2cmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1NFoX DTI3MDMwMzA2MjE1NFowMzExMC8GA1UEAxMoQUYzNEI1Qzc2Qjg3NTlGMzA0ODZC NTFDOEQ3Q0ExRkI5MzJBNkMyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYxrQQMIV2vevxfYKHd4yB25n77aSnHR0VSISjxO6KBGGYylkWCF+MtQyD9 J5zQj24mgi+XpIUVJ8nNIf7t3egrEyk+ayqxbFpdCqoig2ZZxlAi50043mPM4nX5 /e73RjHx2kcu3AT8KVyb6viIF2ZvW0ZlLIPV+ZCjclJbd/HPRLeqJJO10OVDw7UR Z8zolexu32M/MIt3t8yTc63uCUrKXjXcGJCFW/6maZng+hHq1jSrpVUrE1TH8Dul w0pY7q27ORVoM6U/zk37b8ggz2DHABBByQLewr029B7S62YL4EKh54DVgMfiR/jR fK95Bhqv5veHp5VdJa5VvWCIOPkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSvNLXH a4dZ8wSGtRyNfKH7kypsLzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qQ0wDQYJKoZIhvcNAQELBQADggEBAFbTnBAw72BKcArPkKhjOmSt7si9wUwrRKit mm2AObIO4pxTRJNblMFHSiLIjQY+fFJ/LxOWGWZW6m9p3AUEVqdl643bFi6x4r65 sHZBrFoZBRBu7qYKxUCbv41kyldnAuRtD8aDeGtjz1Fwz0n2PZe7bUn2Dac2BzRD UATPYG3zJ++XRuoNWQd/OBUJz5a5zC84Jxx1oZ0fRDwooguCBf3/WoiydWiDFaj9 u3FXpwYGrcZcXuImtljqkt06yRCNAqLqA1np8xjW81vbYmlob143aESwXGJjrL1p nRc0blsmVBg7iQy/fqs9kGmcoGDDhqkcuZ0gB1+b33nv2p1hP9g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:49 2026 by rpki-client