$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144975.roa File: AS144975.roa (raw, json) Hash identifier: QQ8bQOReOqRix2BD/Lq3vyZYNVNleaX3tblwTZ/c+aY= Subject key identifier: 1F:CD:05:AE:20:68:D0:E8:1F:CE:FB:A0:96:79:14:B2:94:7A:E7:40 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 37F75FCBE17C094ECBC86089895EBC11ED1E2D8D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144975.roa Signing time: Wed 04 Mar 2026 06:20:58 +0000 ROA not before: Wed 04 Mar 2026 06:15:58 +0000 ROA not after: Wed 03 Mar 2027 06:20:58 +0000 asID: 144975 IP address blocks: 240a:a915::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f7:5f:cb:e1:7c:09:4e:cb:c8:60:89:89:5e:bc:11:ed:1e:2d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:58 2026 GMT Not After : Mar 3 06:20:58 2027 GMT Subject: CN=1FCD05AE2068D0E81FCEFBA0967914B2947AE740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:e4:5b:cf:da:11:79:b9:6f:ab:a3:d4:e3: 75:e2:df:8d:bc:9c:a6:96:12:ea:c3:ca:2d:6b:bd: 62:dd:3e:cb:c0:81:75:ca:d4:fb:74:19:bd:ff:80: 3a:64:be:2e:5b:0f:33:fd:6e:ea:fd:e0:3f:c5:51: 32:01:e9:95:e3:55:35:a9:c5:49:45:b2:97:6c:22: 9a:b5:37:ee:6c:c6:03:1a:b7:16:52:9f:b4:bc:21: a6:e4:10:4c:8d:b2:1c:c8:94:38:fe:68:92:82:8f: 08:06:9c:b3:1e:3a:5e:02:50:0f:52:82:b0:82:d7: 5b:4e:79:e1:20:60:3a:43:10:e9:c8:8e:91:9e:16: c8:0f:b3:cf:35:5c:96:a1:6d:48:66:dc:6b:45:6b: e3:7b:0e:dd:fd:98:ee:ed:0c:72:7e:cf:b5:cc:67: ff:fd:81:48:9b:3c:6c:2c:10:b3:55:ac:d3:8e:82: bc:40:cc:2b:08:3c:03:7f:6b:f6:d0:47:f8:3e:76: 59:49:5a:11:0f:37:b2:cf:84:1a:84:26:01:ad:8d: 26:31:b5:57:2e:0a:3b:23:6f:80:a1:34:2a:37:1b: b9:a9:aa:3d:29:d1:45:4f:0d:8b:61:48:f3:aa:cb: 7a:34:d0:40:ee:71:d9:5a:bd:bc:96:8f:cf:a8:20: d7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CD:05:AE:20:68:D0:E8:1F:CE:FB:A0:96:79:14:B2:94:7A:E7:40 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144975.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a915::/32 Signature Algorithm: sha256WithRSAEncryption d9:32:b7:26:81:3f:3b:7c:d5:98:bf:dc:d5:25:7e:3b:26:49: 16:0a:b0:60:8c:93:98:df:89:d6:ef:3e:19:72:f9:3d:9b:aa: e0:95:32:6f:ba:33:2f:6f:68:e3:e0:dc:fc:5b:d1:31:55:76: 7e:31:ce:cd:97:c5:d4:f7:a1:4a:3e:1e:13:5d:df:13:8a:a8: d5:76:e4:8a:c2:22:3a:76:1c:4b:4b:7d:ff:d2:63:45:fc:15: 4a:0b:7c:00:55:98:53:87:d6:84:5d:90:85:41:f1:51:74:8c: b9:c9:e4:48:48:15:72:f6:3d:57:d6:d4:a4:95:9d:2e:60:f5: 0f:b4:68:eb:f5:f7:a1:8a:8e:e0:f2:5a:50:8a:e1:f9:68:7e: eb:85:ec:54:3e:6e:67:2e:ed:bf:62:3f:33:f4:00:e5:fc:7b: 6b:56:86:e0:5e:5a:e1:bf:c6:94:cc:10:81:02:a7:7f:50:24: 93:d9:01:35:f2:d4:52:24:92:c8:72:a1:7d:3d:e3:71:e9:86: b9:3e:65:46:7b:4e:b3:bd:15:b4:03:60:46:e3:01:4b:ce:01: fd:b9:e7:7c:30:23:2e:cf:53:6c:70:03:dc:03:7c:55:6e:e6: c8:ec:a2:22:31:1b:81:b2:4b:8f:a5:95:35:0c:7a:29:63:15: 0b:b1:3a:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN/dfy+F8CU7LyGCJiV68Ee0eLY0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1OFoX DTI3MDMwMzA2MjA1OFowMzExMC8GA1UEAxMoMUZDRDA1QUUyMDY4RDBFODFGQ0VG QkEwOTY3OTE0QjI5NDdBRTc0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKG/5FvP2hF5uW+ro9TjdeLfjbycppYS6sPKLWu9Yt0+y8CBdcrU+3QZvf+A OmS+LlsPM/1u6v3gP8VRMgHpleNVNanFSUWyl2wimrU37mzGAxq3FlKftLwhpuQQ TI2yHMiUOP5okoKPCAacsx46XgJQD1KCsILXW0554SBgOkMQ6ciOkZ4WyA+zzzVc lqFtSGbca0Vr43sO3f2Y7u0Mcn7Ptcxn//2BSJs8bCwQs1Ws046CvEDMKwg8A39r 9tBH+D52WUlaEQ83ss+EGoQmAa2NJjG1Vy4KOyNvgKE0KjcbuamqPSnRRU8Ni2FI 86rLejTQQO5x2Vq9vJaPz6gg1zUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQfzQWu IGjQ6B/O+6CWeRSylHrnQDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qRUwDQYJKoZIhvcNAQELBQADggEBANkytyaBPzt81Zi/3NUlfjsmSRYKsGCMk5jf idbvPhly+T2bquCVMm+6My9vaOPg3Pxb0TFVdn4xzs2XxdT3oUo+HhNd3xOKqNV2 5IrCIjp2HEtLff/SY0X8FUoLfABVmFOH1oRdkIVB8VF0jLnJ5EhIFXL2PVfW1KSV nS5g9Q+0aOv196GKjuDyWlCK4flofuuF7FQ+bmcu7b9iPzP0AOX8e2tWhuBeWuG/ xpTMEIECp39QJJPZATXy1FIkkshyoX0943Hphrk+ZUZ7TrO9FbQDYEbjAUvOAf25 53wwIy7PU2xwA9wDfFVu5sjsoiIxG4GyS4+llTUMeiljFQuxOjk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:51 2026 by rpki-client