$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144981.roa File: AS144981.roa (raw, json) Hash identifier: ov04jBcsCp0ARzK73wbVuk7cheWCF9gkgwXcsPE2fUE= Subject key identifier: 0E:A1:CC:1E:FC:61:2C:7C:F9:B1:3F:51:41:9D:A8:99:5D:5A:CB:8D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 791849A760B0A13BC408C0FD80E84815C06DEF2D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144981.roa Signing time: Wed 04 Mar 2026 06:19:31 +0000 ROA not before: Wed 04 Mar 2026 06:14:31 +0000 ROA not after: Wed 03 Mar 2027 06:19:31 +0000 asID: 144981 IP address blocks: 240a:a91b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:18:49:a7:60:b0:a1:3b:c4:08:c0:fd:80:e8:48:15:c0:6d:ef:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:31 2026 GMT Not After : Mar 3 06:19:31 2027 GMT Subject: CN=0EA1CC1EFC612C7CF9B13F51419DA8995D5ACB8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:25:f5:04:57:6a:5c:bf:55:75:69:99:a5: 1d:cb:f6:fd:8e:5c:55:c8:3f:66:4b:da:64:35:92: a7:46:93:d8:f1:eb:b3:83:c5:2c:29:ed:e2:10:31: fb:f8:e3:ab:5b:e6:c5:e7:a5:31:45:20:75:0f:aa: 2c:71:ef:5b:56:b2:19:c0:26:13:7f:ba:b2:18:79: 15:59:6d:5d:5a:a9:5e:a5:6d:e4:8e:4e:16:e4:b0: 48:00:eb:04:aa:af:c7:db:3b:9e:53:97:63:9d:7c: 42:66:4d:42:e4:86:e0:f7:b9:33:d5:eb:4a:4d:44: a1:34:73:03:18:f5:3d:fb:40:b5:23:43:61:db:33: 18:88:81:fd:b7:44:45:71:49:72:0d:51:0f:52:96: 65:9c:bc:82:91:46:1a:ad:98:3a:f3:de:87:17:5c: 6d:05:2f:0b:f5:88:ec:43:12:48:96:23:c5:c6:f9: bc:1f:e0:b7:a0:7d:4b:62:bb:2a:ab:47:86:99:f3: ec:d3:3e:d1:a5:ae:fe:79:e9:79:78:dd:21:1a:bf: d9:3c:a5:e6:38:75:e8:e3:ea:0c:82:22:a3:9e:ad: b0:58:04:af:e8:1a:b3:00:db:0e:6f:a3:75:e1:31: f9:96:ee:f0:1c:77:4e:ce:b9:b9:b4:b4:98:40:47: c2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A1:CC:1E:FC:61:2C:7C:F9:B1:3F:51:41:9D:A8:99:5D:5A:CB:8D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144981.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a91b::/32 Signature Algorithm: sha256WithRSAEncryption bf:f6:b0:8b:88:a1:ec:c8:b8:bb:c1:ac:46:bc:04:8a:09:e3: 40:b8:e4:2a:1f:45:b0:ce:3e:a3:c3:97:42:b4:62:42:39:30: 22:29:ca:e5:58:28:c0:7d:ba:e9:c2:57:7d:d4:81:e2:f3:f0: 1d:b8:95:12:37:8e:c7:93:b9:3d:9e:2b:3d:04:86:47:ee:68: db:42:6d:27:a1:dc:7d:3f:92:0b:9d:80:cb:3e:43:bf:47:ba: dd:6e:ed:af:a3:2b:03:c9:bd:10:0b:52:77:7d:b4:a7:23:a9: 28:a9:b3:f5:e4:f1:1d:0e:81:54:0f:a2:e3:0a:e9:6c:ed:a4: 31:19:26:74:5e:2f:1a:b6:94:95:e0:0d:1e:06:30:e3:3c:bd: fe:98:2d:8b:e2:0c:96:be:a9:57:12:47:94:c7:c1:76:5e:0f: 02:42:00:ca:69:bf:2e:2c:b8:f0:54:77:fc:9a:e2:94:31:34: 2e:33:32:0c:3b:06:b1:36:39:64:79:ea:a3:b3:8d:72:ad:cd: 0e:94:8e:3e:dc:ed:c6:19:49:75:55:f0:70:2f:36:41:ba:f0: 50:08:a3:4c:dd:16:75:1f:22:92:9c:81:6c:52:53:9a:db:c3: a6:f2:e4:e2:2e:b8:35:cb:ce:1d:50:2b:93:98:06:bc:98:36: 51:ec:09:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeRhJp2CwoTvECMD9gOhIFcBt7y0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzMVoX DTI3MDMwMzA2MTkzMVowMzExMC8GA1UEAxMoMEVBMUNDMUVGQzYxMkM3Q0Y5QjEz RjUxNDE5REE4OTk1RDVBQ0I4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWBJfUEV2pcv1V1aZmlHcv2/Y5cVcg/ZkvaZDWSp0aT2PHrs4PFLCnt4hAx +/jjq1vmxeelMUUgdQ+qLHHvW1ayGcAmE3+6shh5FVltXVqpXqVt5I5OFuSwSADr BKqvx9s7nlOXY518QmZNQuSG4Pe5M9XrSk1EoTRzAxj1PftAtSNDYdszGIiB/bdE RXFJcg1RD1KWZZy8gpFGGq2YOvPehxdcbQUvC/WI7EMSSJYjxcb5vB/gt6B9S2K7 KqtHhpnz7NM+0aWu/nnpeXjdIRq/2Tyl5jh16OPqDIIio56tsFgEr+gaswDbDm+j deEx+Zbu8Bx3Ts65ubS0mEBHwgECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQOocwe /GEsfPmxP1FBnaiZXVrLjTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qRswDQYJKoZIhvcNAQELBQADggEBAL/2sIuIoezIuLvBrEa8BIoJ40C45CofRbDO PqPDl0K0YkI5MCIpyuVYKMB9uunCV33UgeLz8B24lRI3jseTuT2eKz0EhkfuaNtC bSeh3H0/kgudgMs+Q79Hut1u7a+jKwPJvRALUnd9tKcjqSips/Xk8R0OgVQPouMK 6WztpDEZJnReLxq2lJXgDR4GMOM8vf6YLYviDJa+qVcSR5THwXZeDwJCAMppvy4s uPBUd/ya4pQxNC4zMgw7BrE2OWR56qOzjXKtzQ6Ujj7c7cYZSXVV8HAvNkG68FAI o0zdFnUfIpKcgWxSU5rbw6by5OIuuDXLzh1QK5OYBryYNlHsCUo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:29 2026 by rpki-client